last executing test programs:

5m17.859076377s ago: executing program 4 (id=976):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet_icmp(0x2, 0x2, 0x1)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f00000002c0)=""/99, 0x63)
socket$inet_udp(0x2, 0x2, 0x0)

5m16.867958069s ago: executing program 4 (id=984):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x14}, 0x1, 0x0, 0x0, 0x2048090}, 0x40)
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0)}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00@', @ANYRES16=r3, @ANYBLOB="595300000000fddbdf256b0000000c009900070000006900000034001d803000008024000d802000028005000700020000001400030008000001bd7d00f2012a09007308e30005000a0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daadb0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x29f, 0xffffffff, 0x0, 'queue1\x00', 0xd9b})
r4 = io_uring_setup(0x3450, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

5m16.757963403s ago: executing program 4 (id=987):
perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x4000, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x8, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x94}}, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000500), 0xa}, 0x106200, 0x1000, 0x6, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0xb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44081}, 0x88c0)
r6 = socket$inet(0x2, 0x3, 0x4)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, 0x0, &(0x7f0000000300))
mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mount$bind(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x3808, 0x0)
msgget$private(0x0, 0x400)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r8=>0x0})
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
syz_open_procfs$pagemap(r9, &(0x7f00000002c0))
sendmmsg$inet(r6, &(0x7f000000b400)=[{{&(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000e00)=[{0x0}, {0x0}], 0x2, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010101, @remote}}}], 0x50}}, {{&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000009480), 0x0, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x30}}, {{0x0, 0x0, &(0x7f00000098c0)}}], 0x3, 0x0)

5m16.675429375s ago: executing program 4 (id=990):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

5m16.574616109s ago: executing program 4 (id=993):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x440, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xe0, &(0x7f0000000240)={0x20, 0x1, 0x0, 0x1ff}, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xca, 0x0, 0x0, 0x0, 0x4000, 0x46020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xd, 0xea}, 0xd00b, 0xc8, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x400000002, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e400002000100000000000000ff0200000000000000000001ffaaaaaa"], 0xfdef)
close(r6)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10)
write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000002000000200000800040001000000", 0x24)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x26)
r9 = dup2(r8, r8)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10})
ioctl$BLKTRACESTOP(r9, 0x1275, 0x0)
recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce81020329"], 0xfdef)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@quota}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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")

5m15.312396159s ago: executing program 4 (id=1001):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80112, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1945}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x10140)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000017000000000a0000010900010073797a3100000000200004801c0001800a00010071756575650000000c000280080004402095dee30900020073797a32"], 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c5}, 0x0)

5m0.257824686s ago: executing program 32 (id=1001):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80112, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1945}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x10140)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000017000000000a0000010900010073797a3100000000200004801c0001800a00010071756575650000000c000280080004402095dee30900020073797a32"], 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c5}, 0x0)

4m53.084696039s ago: executing program 5 (id=1153):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0xb, 0x9, 0x5, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp, 0x0, 0x5, 0x0, 0x5, 0x0, 0x4, 0x7, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x5, r2, 0xb)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m49.305176061s ago: executing program 5 (id=1163):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x440, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xe0, &(0x7f0000000240)={0x20, 0x1, 0x0, 0x1ff}, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xca, 0x0, 0x0, 0x0, 0x4000, 0x46020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xd, 0xea}, 0xd00b, 0xc8, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x400000002, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e400002000100000000000000ff0200000000000000000001ffaaaaaa"], 0xfdef)
close(r6)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10)
write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000002000000200000800040001000000", 0x24)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x26)
r9 = dup2(r8, r8)
ioctl$BLKTRACESTOP(r9, 0x1275, 0x0)
recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@quota}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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")
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4092, 0xffc}], 0x1)

4m49.104390387s ago: executing program 5 (id=1167):
r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/igmp\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000))

4m48.846461616s ago: executing program 5 (id=1172):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks}, {@noblock_validity}, {@noquota}, {@inlinecrypt}, {@discard}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e7, &(0x7f0000000540)="$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")
sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="eedbd31eb365a0de41c4fe700037421a73d6dc29834dbc06d03222b24b8c71d75052b601ddb1bba147a075f3e8d68268777a72e37481edec97ad019d7ce330edda6a155313c57f02661bea831b50e7a8a9b2d674aa7b141dbba340a0aded7d26e946a57b7c4f6f56548172667b37eb94ea", 0x71}, {&(0x7f0000000080)="e0933b5166020a4fce8db97c95a6e5d4865de1", 0x13}, {&(0x7f00000000c0)="e6a474b6dc955f2c95badecf20b94b0d74d60fe7e317ef4df817f25a8d6aef49e1c0fa41fcba63b633fdaa19d8b5bcdad1125b473a6365cd0ee5b39088530491ba183c9f163ed997f320c8258ec77ce52406a251bdac4e596680c423c5bc4eba7ef7f22c8e5a7559ac263e8777d051a243dc3f2ade7f65da5acb63e9ef7ff37ea82708b5cb2b5a998f40b52480f11ca35eceb647eb4c29fb78389c862e485040191d6a9ffcf6534ad821302a9a02ad455ab10fa4d3f5287df9d15a558ddc0e01c4cb5c11ae130b100900c8704312b0ea32bf7d5d85bef8fd8a5e0e7451c72b7df7b1f987924c", 0xe6}, {&(0x7f0000000240)="04e29f90d6708dc6bde8c962a425c8f8f2c1e77f0590f1cae70bc33f7451eac79330b2f583bb617b097f63bbe4ab3844c499938848cdeaeb5e3a591b115a830b4c50e6303fb47c2effd7825429b35108914323b1a676f96380826eef9543b5125e709ece953b89dcd11b5305dfd59cd780853d6a9f5aaa742b228230e270246088bcee136a7cbc95b3fa544ca3aca7e8c5518c36234816d56af70d2c6cd8906f4b10256258fabae56a909d4c2c3d7ff9df9a9dd1b085855e5a9606063bdc61929c4e0876bb", 0xc5}, {&(0x7f0000000340)="069fb6e3cdb14e758c9c849be1a1e97acd8087aa27e24bbc62829ceede2fbd66694e84d7ae5b33f7bf78f994d5270eabca7a22f94d30423e6a5ee39f336810dd407f6faf1a93ee6e486c591a03bae50eb3a97f766342a1ac", 0x58}, {&(0x7f0000000440)="71df2af86d3aaf3bda65ccf765dd90263a06fb855826c1eb83da2ec349395bb58fda8e78d5bbf6e03bd95252940f6a503d855e7881dfc20dd9c9977afc564466dc55d639b76beff3d0ca644f1a58fd8a676179b6e483ba98758a63b64d05029512cb12a26b665d421fa4476727d56e69b62e1db507ee2328b6594509fba65ebefc9fe78414308589e9bd5679c3e074320d837133e0d1b78be9f737314aa92416e5c08533ce8e20f6c36223e11dcecfd7f15927a9f078540c015ef5ac04d2694d7305534fea01878ddd357d1fe5e2e65a6b27367d117ae20ca2f50d0dc395da13ca62136a9be23b61b2", 0xe9}, {&(0x7f0000000540)="983a77432cb40acca292423d94d713d5153a9c90b8803b2e9eb25a3cebac5b952113fa5d995c12e975cbc06d33d7f02a05da2e5752b8fdad7ee0b90e68ea0d594828616a592fe0263dd99e9671124adf1851f733", 0x54}], 0x7}, 0x4896)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4) (async)
ptrace(0x10, r4)
ptrace$setsig(0x4203, r4, 0x10005, &(0x7f00000000c0)={0x8, 0x4, 0x7ff})
tkill(r4, 0x11)

4m48.364902711s ago: executing program 5 (id=1176):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a3200000000340003803000008009"], 0xe4}}, 0x0)

4m47.857845818s ago: executing program 5 (id=1181):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)

4m47.814479239s ago: executing program 33 (id=1181):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)

56.532278872s ago: executing program 1 (id=3276):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$netlink(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0})
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xf0}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x307, &(0x7f0000000580)="$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")

56.298646849s ago: executing program 1 (id=3278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0)

56.239987271s ago: executing program 1 (id=3280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

56.156459484s ago: executing program 1 (id=3281):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0x9, &(0x7f00000000c0)={0x1}, 0x0)
setreuid(0xee01, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8})
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0)

56.036326437s ago: executing program 1 (id=3284):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x40010)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
accept4$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0xc0000)
socket$kcm(0xa, 0x3, 0x87)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0000}]})
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r1, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x1}, 0x103144, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
dup(0xffffffffffffffff)
utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
r4 = epoll_create1(0x80000)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f00000001c0), 0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000039})
ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f00000002c0)={0x8, 0xb, 0x8001, 0xc, 0x3a, 0x0, 0x3})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bba412def75500930000"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)

55.830789784s ago: executing program 1 (id=3290):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3, 0xfffffffc, 0x1, 0x403, 0x0, "00120e0008f500001e35000080c90a008000"})
r1 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[], 0x1, 0x2c3, &(0x7f0000000100)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="3f0729bd7000fbdbdf250100a1ff02d3d7000180080001000100"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x10)
sendto$rxrpc(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1", @ANYRESDEC=r3, @ANYRESHEX=r1], 0x1, 0x3b6, &(0x7f00000006c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)
io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x836e, 0x20, 0x2, 0x23f, 0x0, r7})
write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0)
r8 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x6, 0x58})
r9 = socket$tipc(0x1e, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter(r8, 0x3910, 0xaa76, 0x8, 0x0, 0x0)
accept4(r9, 0x0, 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

55.769378726s ago: executing program 34 (id=3290):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3, 0xfffffffc, 0x1, 0x403, 0x0, "00120e0008f500001e35000080c90a008000"})
r1 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[], 0x1, 0x2c3, &(0x7f0000000100)="$eJzs3EFrE2sUxvFzm94mTWmTC5eCgnrQjd0MbfwAGqQFMaDWpqgLYWonGjImZSZUUsRmI279HMVld4L6BboRN+7dFUF0YRfiiJmknbSTNNUmpvb/gzInec+TvKUknBTybt56/rCQc42cWZaBmMqASFW2RJI/q7p/6teBWj0kQVWZGPny/tTN23eupjOZ6KzqTHruQkpVx868evT4xdk35ZH59bGXUdlI3t38lPqwMb5xYvP73IO8q3lXi6WymrpQKpXNBdvSxbxbMFSv25bpWpovupbTtJ6zS0tLFTWLi6PxJcdyXTWLFS1YFS2XtOxU1Lxv5otqGIaOxuV4G+ygJ7s2O2umWy57kUPdEbpuOOxOx0lXRWRo72J2rRebAgAA/aX9/O/P+q3n/8y8f23M/9OHM/+LMP93SbXp1j7zP/4KjpM24/XXbzPmfwAAAAAAAAAAAAAAAAAAAAAAjoItz0t4npdoXBs/URGJiUjj9p/eJ7pjv7//5/DYxV7vE90R+OJeTMR+tpxdzvpXfz2dk7zYYsmkJORb7f2gzq9nrmSmJ7Xmq+d5q/X86nI2ItFGviEZlj/935SfV3ltB/L/Sjz4/ClJyP/hz58KzQ/dOH8ukDckIW/vSUlsWay9r+3kn0ypXr6W2ZUfrvW1FHrSAgAAAAAA/cnQbcnmz7/+2Y9GrSEme9f9/AH+P7Dr8/WgnOzkiEoAAAAAAPDb3MpKwbRtywkp1kWkxVKtiIpIm/hxLSLSF9vYVVwSkT7YRq+KmIj49+gvxMc/bsc7Snkd9Azu82rqtyL0wGAAAAAAR9jO0H+A0LunXdwRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHT9tjwCZG/KbKSqHR39QTfKA2jxPoivTuNwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6z48AAAD//0vYF3I=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="3f0729bd7000fbdbdf250100a1ff02d3d7000180080001000100"], 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x10)
sendto$rxrpc(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1", @ANYRESDEC=r3, @ANYRESHEX=r1], 0x1, 0x3b6, &(0x7f00000006c0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)
io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x836e, 0x20, 0x2, 0x23f, 0x0, r7})
write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0)
r8 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x6, 0x58})
r9 = socket$tipc(0x1e, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter(r8, 0x3910, 0xaa76, 0x8, 0x0, 0x0)
accept4(r9, 0x0, 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

9.28029356s ago: executing program 0 (id=3714):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x14}, 0x1, 0x0, 0x0, 0x2048090}, 0x40)
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0)}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r1 = socket(0x18, 0x2, 0x0)
setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='T', @ANYBLOB="595300000000fddbdf256b0000000c009900070000006900000034001d803000008024000d802000028005000700020000001400"], 0x54}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daadb0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0xa5, &(0x7f00000005c0)={@local, @random='\x00 \x00\x00\x00\b', @val={@void, {0x8100, 0x6}}, {@ipv4={0x800, @icmp={{0x17, 0x4, 0x2, 0x31, 0x93, 0x64, 0x0, 0x2, 0x1, 0x0, @loopback, @remote, {[@rr={0x7, 0x1f, 0x69, [@dev={0xac, 0x14, 0x14, 0x21}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @rr={0x7, 0xf, 0xc5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x4a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}, @dest_unreach={0x3, 0xc, 0x0, 0x0, 0xdd, 0x47, {0xb, 0x4, 0x3, 0x20, 0x1ff, 0x64, 0x9, 0x23, 0x84, 0x2, @local, @empty, {[@cipso={0x86, 0x17, 0x3, [{0x0, 0xc, "f79b697acd7f9cb4bacc"}, {0x6, 0x5, "1d576b"}]}]}}, "a236b4"}}}}}, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)
r5 = io_uring_setup(0x3450, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
unshare(0x400)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x100000, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x88}, 0x1, 0x7}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
write$rfkill(r7, &(0x7f0000000240)={0x1, 0x8, 0x2, 0x1}, 0x8)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

6.284443417s ago: executing program 7 (id=3715):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4008080)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0)
syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=")
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
sendmsg(0xffffffffffffffff, 0x0, 0x4008080) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) (async)
syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") (async)

5.690835787s ago: executing program 0 (id=3716):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0x5, 0x7})

5.476479773s ago: executing program 0 (id=3718):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, <r0=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
setresuid(r1, r1, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000)
syz_open_procfs(r0, &(0x7f0000000100)='syscall\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r5)
io_setup(0x2278, &(0x7f0000000180)=<r6=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0xf4, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}])
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x2, 0x7fff}, {0x206, 0xba, 0x2, 0xffff}]}, 0x10)
r12 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x9, 0x0, 0x1, 0x200, 0x0, 0x4, 0x7, 0x10001, 0x81, 0x1, 0x80000001, 0x8, 0x2, 0x1ff, 0x7, 0x7, 0xfffffffb, 0x3ff, 0x4, 0x3, 0x7, 0xffffffff, 0x434, 0x6, 0x1, 0x9, 0x9, 0x3, 0xffff, 0xfffffffb, 0x8000, 0x7, 0x7fff, 0x3, 0x101, 0x6, 0x8c, 0xe, 0x4, 0x4, 0x8, 0x40, 0x9, 0x6, 0xa, 0x215, 0x8001, 0x7, 0x1, 0x0, 0x2e6, 0x4, 0xffffff7f, 0x2, 0x8, 0x8000, 0x5, 0x0, 0x9, 0x10, 0x6, 0x200, 0x32, 0x7, 0x7f80000, 0x6, 0x8b, 0x8, 0x3, 0x101, 0xffffffff, 0x7, 0x7, 0x4641ebda, 0x9, 0x2, 0x0, 0xff, 0x0, 0x8319, 0x29e4, 0x200, 0x6, 0x10001, 0xc, 0xa, 0x3, 0x0, 0x2, 0x80000001, 0x7, 0x1, 0x1fe, 0x0, 0xd, 0x5, 0xf, 0x10, 0x0, 0x0, 0x1, 0x80000000, 0xa, 0x8, 0xffff, 0x6, 0x7, 0x9, 0x100, 0x7, 0x2, 0x6, 0x10, 0x0, 0x6, 0x7, 0x240, 0x80008, 0x5, 0x81, 0xaeb, 0xff, 0x0, 0x80000001, 0x8, 0xc17, 0x80, 0xffffff03, 0x5, 0x1, 0x3, 0x400, 0x7ff, 0xffff, 0x1, 0x4, 0x7, 0x7, 0x4, 0x1, 0x40, 0x0, 0xfffffff7, 0x0, 0x8, 0x5587, 0x40, 0x4, 0x3ff, 0x89e48883, 0x8, 0x281, 0x8, 0x8, 0x40, 0xffffffff, 0x4, 0x293d8b13, 0x45, 0xfe, 0x3ff, 0xfb1, 0xfffffffe, 0xc5, 0x9, 0x11d, 0x3, 0x9, 0x81, 0x73c2, 0x80000005, 0x1, 0x3, 0x4, 0x5, 0x81, 0x2, 0x40, 0x400, 0x7, 0x56e2, 0x31, 0xfffffffc, 0x5, 0x3, 0xd, 0xdb51, 0x2, 0x1, 0x8, 0x2, 0x1, 0x8a, 0x9, 0x8cb6, 0xb637, 0x4, 0x9, 0x7, 0x5b03, 0xfff, 0x8, 0x5, 0x81, 0x0, 0x4, 0x5d, 0x80000000, 0x0, 0x2, 0x4, 0xfffe, 0xc7, 0x5, 0x3, 0x6, 0x8, 0xa497, 0x6, 0x6, 0x6, 0x800, 0x5, 0x2, 0x1, 0x1fd8, 0x0, 0x7, 0xc, 0x7, 0x1, 0x82c, 0x84, 0x0, 0x95, 0x8, 0x6, 0x3, 0xd99, 0x94e, 0x0, 0x4, 0x9, 0x6, 0x1, 0x7, 0x4, 0x7000000, 0x7, 0x9, 0x3, 0xffffff5a, 0x20000000, 0x8, 0x8]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

5.406216705s ago: executing program 6 (id=3720):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = epoll_create(0x200)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000008})
epoll_wait(r7, &(0x7f0000000080)=[{}], 0x1, 0xffffff90)
close(r5)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$eJzs3MtvG8UfAPDvbpr219cvoZRHH0CgICIeSZMW6IELCKRekJDgUI4hTavStEFNkGgV0RShckT9C4AjEn8BJ7gg4ATiCneEVKFcCBzQorV3U+PYwU7sOsWfj7TxzO6sd77eHXt2xk4AfWsk/5NE7ImInyJiKCIG6guMVB9Wlhen/1henE4iy177Lcl3i9+XF6fLoknxuLvIjKYR6QdJHGpw3PnLV85Pzc7OXCry4wsX3h6fv3zl6XMXps7OnJ25OHnixPFjE889O/lMR+Lcm9f14Htzhw+cfOPGK9Onbrz57ed5ffcU22vjqBre9DFHYmT1Nan32KaffWvZW5NOtvWwIrQlb+v56RqstP+hGIhbJ28oXn6/p5UDuirLsmzHmrWrPYClDPgPS6LXNQB6o/ygz+9/y+U2dj967uYL1RugPO6VYqlu2RZpUWaw7v62k0Yi4tTSnx/nSzQchwAA6Kwv8/7PU436f2ncW1Pu/8Xc0HBE3BUR+yLi7ojYHxH3RFTK3hcR97d5/JG6/Nr+zw87NxRYi/L+3/PF3NY/+39l7y+GB4rc3kr8g8mZc7MzR4vXZDQGd+T5iXWO8dVLP37UbFtt/y9fVgZjuuwLFvX4dVvdAN3pqYWpzcRc6+a1yhjg1bXxJ6szAUlEHIiIgxt4/vx6OffEZ4ebbV8T//JiXfzr6MA8U/ZpxOPV878UdfGXkvXnJ8f/F7MzR8fLq2Kt776//mqz428q/g7Iz/+uhtf/avzDSe187Xz7x7j+84dN72n+Pf7G1//25PVKenux7t2phYVLExHbk6W16ydv7Vvmy/J5/KNHGrf/fRF/fVLsdygi8ov4gYh4MCIeKur+cEQ8EhFH1on/mxcffWvj8XdXHv/pts5/+4mB819/0ez4rZ3/45XUaLGmlfe/Viu4mdcOAAAA7hRp5TvwSTq2mk7TsbHqd/j3x650dm5+4ckzc+9cPF39rvxwDKblSNdQzXjoRDHWV+Yn6/LHKuPGWZZlOyv5sem52W7NqQOt2d2k/ed+Geh17YCua2serdkv2oA7kt9rQv/S/qF/af/Qv7R/6F+N2v/ViJV1d7rWteoAt5HPf+hf2j/0L+0f+pf2D31pM7/rXy+x72Rrhct/QNilatwBiYGtUY22E5FuiWpsLJFujWpUEzsiotXCV29bS+nxGxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/B0AAP//tNHo8Q==")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FITRIM(0xffffffffffffffff, 0x40e8662e, &(0x7f0000000080)={0xe024, 0xd000007})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7, 0x5}, {0xffff, 0xffff}, {0x7, 0xfff1}}}, 0x24}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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")

5.239797321s ago: executing program 7 (id=3722):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000100", @ANYRES16=<r3=>0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x800)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf", @ANYRES32=r5, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c000000050053000100000008000500060000000500530000000000050053"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895)
sched_setscheduler(0x0, 0x1, 0x0)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1})
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800)
sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x24040884)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r9 = socket(0x400000000010, 0x5, 0x0)
r10 = syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000000))
open$dir(&(0x7f0000000240)='./file0\x00', 0xb41, 0xea5fdbe6eb514085)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0xffffffff, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe480, 0x6, 0xdd7e, 0x4, 0x6, 0x1, 0x7000000, 0x401, 0x6000, 0xffffffff, 0x7, 0x5, 0x15, 0x80, 0x2, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x8, 0x0, 0x1}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r11)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r14, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000)
sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0x67, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="04000000c03bb9901f9bd68278b90fb7e1776cf709ae6c85f43b6149a1e09864f447b7d01fe28505c47feb7610b1b84ef5c6379a95d312d5fb0a9b6a6d1e575eb979a4f1e058056500ba49ec378f1603f648d16c37620408e0d1a96f2faf03268649515068b5ddd7510986f6cdf8196ccc099ac1d693d4d22bc5944fa0a84d8ab7ad3367744feefce10cba48040e356512c2f5bf9cea25962ae37ce41beabd5c616b303cd896a991c518", @ANYRES16=r6, @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x2000c011}, 0x20000814)
io_uring_enter(r10, 0xa3d, 0x0, 0x0, 0x0, 0xff39)

4.765619596s ago: executing program 0 (id=3725):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd7}, 0x94)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x2, 0x2, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000001}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000006c0)={0x7ff, 0x18000000, 0x1, 'queue0\x00', 0x2})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x10, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30]}}}}]})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58)

4.721104778s ago: executing program 7 (id=3727):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
linkat(r0, &(0x7f0000000080)='./file2\x00', 0xffffffffffffffff, 0x0, 0x1000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xc154b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x2, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}]}], {0x14}}, 0x80}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/file0\x00', &(0x7f0000000380)={0x40, 0x182, 0x2}, 0x18)
r6 = open_tree(r5, &(0x7f0000000240)='./cgroup\x00', 0x89100)
move_mount(r4, 0x0, r6, 0x0, 0x46)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e1c, @loopback}, {0x2, 0x4e20, @local}, 0x151, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x9bc, 0xa, 0x7})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080027bd7000ffdbdf256d00000008000300a404fa4c29cf8d4f605ccc1641f21facd308829e36526807dc9eed5817155b92d21ed83ec48ff1e8f997e8a436ab007360556e9a5b39fd96ae9bfbe57ddd7b3c5a46b41f0bad715edc", @ANYRES32=r8, @ANYBLOB="0c009900030000001d000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000884)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1001800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1000, 0x27}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044)
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r9, 0x2284, &(0x7f00000003c0))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x2, 'veth0_to_bridge\x00', {0xf}})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="000028bd7000fedbdf002000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200000c0)

3.987217472s ago: executing program 2 (id=3729):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8)

3.943397623s ago: executing program 2 (id=3730):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) (fail_nth: 1)

3.629912823s ago: executing program 0 (id=3731):
r0 = epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa000000d})
socket(0x840000000002, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000a16000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
setuid(0xee00)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
io_uring_enter(0xffffffffffffffff, 0x12a, 0x14, 0x17, 0x0, 0x0)

3.495978248s ago: executing program 7 (id=3732):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3a15400, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10482c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
futex(0x0, 0x6, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008b0000007f0a000000000000450000000000000095000000000000"], &(0x7f0000001780)='GPL\x00', 0x9, 0x9b, &(0x7f00000016c0)=""/155, 0x41100, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r5}, 0xc)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x7, 0x0, 0x55a})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x4}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20006, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')

3.42447486s ago: executing program 2 (id=3733):
unshare(0x20000400)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x22840)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="7800000018002507b9409b14ffff00000220be040205fe050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460cc1d8f9800b718e5177f6afd93fa4d789b6ec0cff3959547f509058ba86c902000000404a32000400160005000a00000000", 0x78, 0x8004, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x7)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x7)

2.027824435s ago: executing program 2 (id=3734):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = epoll_create1(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
lseek(r3, 0x2000, 0x0)
close(r2)
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
fsetxattr$security_capability(r4, &(0x7f0000000e00), &(0x7f0000000e40)=@v3={0x3000000, [{0x8, 0x9}, {0xff8, 0x3}]}, 0x14, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0x1, 0x548, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=")
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0xffff25d8, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) (fail_nth: 2)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0)
socket$inet6(0xa, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.853345551s ago: executing program 3 (id=3735):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000100", @ANYRES16=<r3=>0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x800)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32=r5, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c00000005005300010000000800050006000000050053000000000005"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895)
sched_setscheduler(0x0, 0x1, 0x0)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1})
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800)
sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x24040884)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r9 = socket(0x400000000010, 0x5, 0x0)
r10 = syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000000))
open$dir(&(0x7f0000000240)='./file0\x00', 0xb41, 0xea5fdbe6eb514085)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0xffffffff, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe480, 0x6, 0xdd7e, 0x4, 0x6, 0x1, 0x7000000, 0x401, 0x6000, 0xffffffff, 0x7, 0x5, 0x15, 0x80, 0x2, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x8, 0x0, 0x1}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r11)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r14, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000)
sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0x67, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="04000000c03bb9901f9bd68278b90fb7e1776cf709ae6c85f43b6149a1e09864f447b7d01fe28505c47feb7610b1b84ef5c6379a95d312d5fb0a9b6a6d1e575eb979a4f1e058056500ba49ec378f1603f648d16c37620408e0d1a96f2faf03268649515068b5ddd7510986f6cdf8196ccc099ac1d693d4d22bc5944fa0a84d8ab7ad3367744feefce10cba48040e356512c2f5bf9cea25962ae37ce41beabd5c616b303cd896a991c518", @ANYRES16=r6, @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x2000c011}, 0x20000814)
io_uring_enter(r10, 0xa3d, 0x0, 0x0, 0x0, 0xff39)

1.851771371s ago: executing program 6 (id=3736):
perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x4000, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x8, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001000000000008000240000000000c00048006000100a83400000c00038006000100d18d00000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000500), 0xa}, 0x106200, 0x1000, 0x6, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0xb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44081}, 0x88c0)
r6 = socket$inet(0x2, 0x3, 0x4)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, 0x0, &(0x7f0000000300))
mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mount$bind(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x3808, 0x0)
msgget$private(0x0, 0x400)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r8=>0x0})
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
syz_open_procfs$pagemap(r9, &(0x7f00000002c0))
sendmmsg$inet(r6, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0}], 0x2, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010101, @remote}}}], 0x50}}, {{&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000009480), 0x0, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x30}}, {{0x0, 0x0, &(0x7f00000098c0)}}], 0x3, 0x0)

1.642174947s ago: executing program 6 (id=3737):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000100", @ANYRES16=<r3=>0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x800)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf", @ANYRES32=r5, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c000000050053000100000008000500060000000500530000000000050053"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895)
sched_setscheduler(0x0, 0x1, 0x0)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1})
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800)
sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x24040884)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r9 = socket(0x400000000010, 0x5, 0x0)
r10 = syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000000))
open$dir(&(0x7f0000000240)='./file0\x00', 0xb41, 0xea5fdbe6eb514085)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0xffffffff, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe480, 0x6, 0xdd7e, 0x4, 0x6, 0x1, 0x7000000, 0x401, 0x6000, 0xffffffff, 0x7, 0x5, 0x15, 0x80, 0x2, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x8, 0x0, 0x1}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r11)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r14, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000)
sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0x67, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="04000000c03bb9901f9bd68278b90fb7e1776cf709ae6c85f43b6149a1e09864f447b7d01fe28505c47feb7610b1b84ef5c6379a95d312d5fb0a9b6a6d1e575eb979a4f1e058056500ba49ec378f1603f648d16c37620408e0d1a96f2faf03268649515068b5ddd7510986f6cdf8196ccc099ac1d693d4d22bc5944fa0a84d8ab7ad3367744feefce10cba48040e356512c2f5bf9cea25962ae37ce41beabd5c616b303cd896a991c518", @ANYRES16=r6, @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x2000c011}, 0x20000814)
io_uring_enter(r10, 0xa3d, 0x0, 0x0, 0x0, 0xff39)

1.566982859s ago: executing program 3 (id=3738):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66")
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x140, 0x178, 0xc, 0x140, 0x178, 0x140, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0xff000000, 0x0, 0x0, 0xff], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0xce4, 0x9004, 0x8, 0x0, 0x5, 0xc0de}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0a85320, &(0x7f0000000900)={{0x80}, {0x7f}, 0x10, 0x0, 0x3})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x81848c, &(0x7f0000000b80)=ANY=[], 0x6, 0x232, &(0x7f0000000880)="$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")
truncate(&(0x7f0000000480)='./file1\x00', 0xf)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r7, 0xfffffffd)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delneigh={0x1c, 0x1a, 0x1, 0x400000, 0xffffffff, {0xa, 0x0, 0x0, 0x0, 0x4, 0xc1}}, 0x1c}}, 0x4800)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
writev(0xffffffffffffffff, &(0x7f0000000f80)=[{&(0x7f0000000180)="2f2deb859dd0fa85f26a88", 0xb}, {&(0x7f0000000880)="bbb8907b7c42559236dfa99b8820b46a5e648b86a891ca7b0b8e7cfec667c4470bb8ef310c628ed58e4dcba957bba30a6c0a061a6f4721543c294a8f23de865ae99d1aa9e870b5fcd6", 0x49}, {&(0x7f0000002040)="76fc19c5bcf960c921dc35528bdd2582f8bde101332027842c3e116d1bc2cc58c2b7de13f1cdf06f80d4cf5db58bd4c4e2ebd3151566c78e79d80eeb70aad4d1a9e4917666d06609d76cc7c5ab47df60630bd874155fcbe9057837b1342098379d68b254938f64925aef353cf8e11f646999208ff3666c0ef54653a1a701978e1c94c5c2558574c7a14208bf48088c727bb88557e5eb8c44c71571afb8041641610830003367356d5df9f7ceaa95436241cb1d2887afbdfe0fd478", 0xbb}, {&(0x7f0000000bc0)="6d1b3235d921ecf748a4ee48b546163505fbf0543457d47454d59743354c9981aa28d41f182d532ddd761dcbeebab60aaa48e799f1a31ac054783c81952a25eae825bb50ac0f188bdb5464be1b6d08aa747d786b3330216a4dfdd47b9a079117aa918e4345d21c5914faa43999976c0b6aaea7ba103e3fc5b8efe3df26719c4b84d152107cf502b8e357de6d4277a67acbb81de7fdbd9eab6b2916cf018f135fbc8b76a7349b", 0xa6}, {&(0x7f00000001c0)}, {&(0x7f0000000cc0)="1b5151e8b9196f3b1ca00cc073ee6567e9dbdb135c7c9a74f038c86206ced85fcdfe6ade8e9a2bb7e3", 0x29}, {&(0x7f0000000d00)="4e00937b0c57b580b45a78b86a4e507852d7b6fa62002b841630779f8cbd9f0045fbf441c0128eef308e552fb7b5483eb217aeed7ff3fcd60246a16ce7ddb649787d595f70a2f56b6ba0648be3a309cb5d33d7f3eeeaad33bc", 0x59}, {&(0x7f0000000d80)="52212feda0e15a5811b1322914999233352f9042f3f0828b2bd82238cdbc93cd482c9f8aed71e3a53eefa01ceb0460dad1f0284cdd6a2a6896684ab32a280c1b08f75a6bd9964aef70cfa39a6fb248893a81eeb09ca0fb75f619a8ea9c6f632b189cb2a3da67456a62b5e5cf5f7c0b56b44ec25651cf245304090f30c1a2f9e3b33424fdb81b667485baf91d571ae73da236d6aca548b4373e27834aaf0aa80f835a0a01aa5c214964e984c8d28cd0b9506d3c1385b5769095d214afe17e7c54eebdda2e9ed5d073db63334cac9b", 0xce}, {&(0x7f0000000e80)="f9d962cd9dbeab1fd4035ce09f0f2afe146ad31276f999c19409639e91c0797bd24e611e4a273ef1e708c6d17578d153a94f50aabe96e2cb63ff0cffa610ba0504564f86d87ec30b6545c286d63fff4e67646a63e0e7cb301921d87ee4f198c83981d4e1c1e6387bd532d66984850b02a50f417a309808deb333386ee032b764ef914c0ff3569e68ac5138c4949d30aff6d19abfb42cd6c95ad7c357a51ad8a99107e5d4fbd2936736307fd7f194b5e8", 0xb0}, {&(0x7f0000000f40)="286e29384ea843", 0x7}], 0xa)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3)

1.277913879s ago: executing program 6 (id=3739):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6tnl0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x8000)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
ftruncate(r7, 0x431)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r9=>r0, {0xe}}, './file0\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x3ff, 0xe1, &(0x7f00000002c0)=""/225, 0x41100, 0x46, '\x00', r5, 0x0, r8, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xc, 0x101, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r9, r10], 0x0, 0x10, 0x6}, 0x94)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6)

1.171777352s ago: executing program 6 (id=3740):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, 0x0, 0x40)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r3 = syz_clone(0x42180, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
socketpair(0x1e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x2, 0x1, 0x5, 0x100000011, r3})
fcntl$lock(r6, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x402})
getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000a80)={0x0, 0x8, 0x2, 0x9, 0x3, 0x1, 0x9, 0x7fffffff, {0x0, @in6={{0xa, 0x4e23, 0x4, @local, 0x3}}, 0x81, 0x5, 0x7, 0x80, 0x5}}, &(0x7f0000000440)=0xb0)
syz_open_procfs(r3, &(0x7f0000000100)='net/vlan/vlan1\x00')
socket(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5})

685.276008ms ago: executing program 7 (id=3741):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r3 = memfd_create(&(0x7f0000000300)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8\xfb\x16\x8e\x8b-W\xd4\xc9\xbc\x94CR[Du8U^\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1\x00\x00\x00\x00\x00\x00\x00\x03\x06\x90\xa9\x00\x00\x00\x00\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96=\x8c\x99\x06', 0x7)
lseek(r3, 0x8000000000000000, 0x3)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r4, 0xc)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x1000000000000000)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000040)={0x4c, 0x9, 0x7, 0x9, 0x87})
fallocate(r2, 0x10, 0x37ec, 0x683)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)

684.686808ms ago: executing program 2 (id=3742):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x100007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x5}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$kcm(0x10, 0x2, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)

683.805548ms ago: executing program 3 (id=3743):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005f"], 0x0}, 0x94)
recvfrom$packet(r0, &(0x7f0000000180)=""/83, 0x53, 0x40000102, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x9}, 0x14)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="bf7c9f8eff2be59ebf33b7461aece4f3e4cf33f69bf13311591f5afa70970ff81df62249531c1486100065f91dccacb6f47bc963fcd0a8d2fd533094fcaa2ae4c3c16a5387fe31495c6465b6b0df55460bc826b0d905f0c4a932a3b6e5d23eb5761757077aa8e9", 0x67)

595.998321ms ago: executing program 3 (id=3744):
getresuid(0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c)
clock_gettime(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000007a920085200000030000005f15294f7b52e4548b7cf979ba21183800000000000000000000d4561000080000001812000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000ffffffff85000000d00000009500000000000000"], &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r1}, 0x18)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1})
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004)
r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$selinux_create(r4, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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")
socket(0x2, 0x3, 0xff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20)
syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)

515.841454ms ago: executing program 7 (id=3745):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, 0x0, 0x40)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r3 = syz_clone(0x42180, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
socketpair(0x1e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x2, 0x1, 0x5, 0x100000011, r3})
fcntl$lock(r6, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x402})
syz_open_procfs(r3, &(0x7f0000000100)='net/vlan/vlan1\x00')
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc))
socket(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5})

251.494222ms ago: executing program 0 (id=3746):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x2, &(0x7f0000000100), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet6(0xa, 0x1, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18040000ff00000000000000feffff001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000094ffffffffffeb00"], &(0x7f0000000140)='GPL\x00', 0xe}, 0x94)
sendfile(r2, r1, 0x0, 0x7ffff000)
socket$nl_route(0x10, 0x3, 0x0)

144.048396ms ago: executing program 2 (id=3747):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f00000000c0)={0x7, 0x944, 0x9, 0x7, 0x4, 0x20, 0x1})
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000200))
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000)
r3 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x20010, r2, 0xfe745000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r4, 0x0, 0x0, 0x8ffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c000180060006"], 0x24}}, 0x8090)
statx(r3, 0x0, 0x1000, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r6, r6, 0x0, 0xe3aa6ea)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @multicast1}, &(0x7f00000004c0)=0xc)
r7 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000005304010000000026a65835c1231300000600000500000a14000000ec03010000"], 0x69}}, 0x40000)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2721, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="01000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="248200de00000000180012800eac7afb765990b0a47561726400000004000280"], 0x38}}, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r9, 0x89f0, 0x0)

137.583906ms ago: executing program 6 (id=3748):
r0 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x4, 0x283, &(0x7f0000000600)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000001840)={{r1}, "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"})
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0xff, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0xffffffff, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x1, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0xa5, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0xe, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x802, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0x3, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800010, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x30, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0xc, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef28, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x200, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffffb, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x2, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe0, 0x2}, {0x2, 0xffe0}, {0x10, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xc5}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x1, 0xff, 0x1, 0x2, 0xffffffff, 0x720, 0x3}}, {0xa, 0x2, [0x1ff, 0x6, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x2, 0x6, 0x5, 0x1, 0x2, 0x401, 0x4}}, {0xc, 0x2, [0xff, 0x7, 0x0, 0x7]}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44031}, 0x0)
ioctl$FITRIM(r1, 0xc0185879, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r9, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1b, 0x7, 0x15e, &(0x7f0000000000)="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"})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

39.327109ms ago: executing program 3 (id=3749):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000019580)=ANY=[@ANYBLOB="b400000000000000691066000000000004000000000000009500000000000000d3495f93a57ab579d83f30d63e7043000e5f863a92f1d35c37e8a7bc0e31f46b354c111fcd2a8658aa42507b93711894a6"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8042, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071107700000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
syz_emit_ethernet(0x464, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, 'y=A', 0x42e, 0x21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@routing={0x4, 0x6, 0x2, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0xf}, @dev={0xfe, 0x80, '\x00', 0x2c}, @local]}, @dstopts={0xc, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0xb, 0x3, [0xe]}}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0xb2}, @pad1, @jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x8, 0xa9, "6b5a4accab7b1f68b3870a98c60cad557344e33f99a54f6e0d36bcd2cca2db2f051bdb8aefa0a12f09c3d97753f73bb7c67d55ea36c748051eb8e16930bab4db0715a5490a7ed1a6f3e361c08e8809dd84777077290bc6a16f96fda321bed7be2160bda6662a9efc726ee4bec2115558d31843eb253b758eb9f3317c46b300fde7dc245b2942612a2c510d55d9303cfba18be45b447941b826fa2da21678a7e8fc4500ae085415aca5"}, @padn, @jumbo={0xc2, 0x4, 0xc044}]}, @hopopts={0x5e, 0x44, '\x00', [@generic={0x2, 0x9a, "def19168fe8184f6ab76a911c2ef50052fbdd04e914f43336b22729e32a43a671e9899740996f1bc512fb0f8eeda07a1cf5efc9814d21c9c2ca943d22c8964a8f22c5252756370eaca16a6edaedcc17c83055297de0fcdc105b61d9178f425f39b7fd7fa58d8e36f5fcda56ab61cbdd6b0bf70209fc9244b72808d2a8a3e332b37b7c3e909c337001854f08ea79e283c203dd3202e0e20f50476"}, @generic={0x3, 0x90, "b976c2bd46378db2093a8d616e197d64a2913510e6857793398a165af22d455bdaa6ecb3f138e3f802472cfda0693fcc1b477933c882cdec42580cde8bf09a21a65c5acae09296044f6e02d41fba05a3b0ea6369937c4f35c37c1e32fa405e9f8a01b24424952f7f8933ab17de93a6bc1d7bcdbb3b89904ac7778507546ba8e7f66fa5165cbad78e6e468ef28184b3a5"}, @generic={0xa8, 0xec, "5023cd91814a5050663a5a267dfe7eb8e638eba367ba114b13fba3785d512ffd4abe026f6cd18847aa5b5e7b430121f6757b56d033074e037ec0f759114e59083c6f7f2d151dac8b1393fea7933acd7a2d1d12a3b450a65c85581e949b2dd01a163813f97309cbb9f289e1952b8dca83d66a04d542122a5fc530ca7cf4607fab16bc678af407534332641aa95feee731c5ce216f832f91a2eff1d1a9194d28bdfb0705b60e88d69a181f26abe38e7bca62ea620261124ab222fc3a778f39250e45c0f67f77ac0adb885fdc01610df8d4d2770612834ac5c57641fd18c6acc63d33a9ffbab802e55fdcf7e78c"}, @ra={0x5, 0x2, 0x40}]}, @srh={0x2c, 0xa, 0x4, 0x5, 0x6, 0x60, 0x3, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x3a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @mcast1]}, @hopopts={0x5e, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x4, 0x4, "19b6be", 0xed, "fe51f7"}, "20fd731a45a0e5b09bd33d7ea0a6b681ba96e1a3f8d1e8c9095fb1d4bec9f3f98f7d795c63970257a29be1ab5bfbca8ff871c2e925b79d143adbc105ea62327a3d3ab47773e2fc88651cdf7c11bb04014ca73bf37aabb329d1c26d3db6659a3041d74c5cf7c9273f1baf5ab7905bf34935931a880c6f"}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="090fc9f0aa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000001007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe0900"/190], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94)
r1 = syz_open_dev$hidraw(&(0x7f00000190c0), 0xff, 0x200ac0)
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000019100))
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00')
pread64(r2, &(0x7f00000000c0)=""/102379, 0x18feb, 0x94d)

0s ago: executing program 3 (id=3750):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x20, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x68}}, 0x20040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)

kernel console output (not intermixed with test programs):

 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.867832][T14861] RSP: 002b:00007f4d7fd16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  412.867901][T14861] RAX: ffffffffffffffda RBX: 00007f4d81556090 RCX: 00007f4d812dce59
[  412.867951][T14861] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 000000000000000d
[  412.867963][T14861] RBP: 00007f4d7fd16090 R08: 0000000000000000 R09: 0000000000000000
[  412.867976][T14861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.867988][T14861] R13: 00007f4d81556128 R14: 00007f4d81556090 R15: 00007fffc313e468
[  412.868015][T14861]  </TASK>
[  413.086446][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6
[  413.108074][T14867] loop0: detected capacity change from 0 to 1024
[  413.126397][T14867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  413.150570][T14867] System zones: 0-1, 3-36
[  413.210793][T14867] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3324: bad orphan inode 134217728
[  413.221530][T14867] loop0: lost filesystem error report for type 5 error -117
[  413.225576][T14867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.260513][   T28] audit: type=1400 audit(1778983642.567:6160): avc:  denied  { read } for  pid=14879 comm="syz.2.3325" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  413.284056][   T28] audit: type=1400 audit(1778983642.567:6161): avc:  denied  { open } for  pid=14879 comm="syz.2.3325" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  413.315193][   T28] audit: type=1400 audit(1778983642.567:6162): avc:  denied  { sqpoll } for  pid=14879 comm="syz.2.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  413.357310][   T28] audit: type=1400 audit(1778983642.627:6163): avc:  denied  { ioctl } for  pid=14879 comm="syz.2.3325" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  413.415316][   T28] audit: type=1400 audit(1778983642.677:6164): avc:  denied  { write } for  pid=14866 comm="syz.0.3324" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  413.454085][   T28] audit: type=1400 audit(1778983642.817:6165): avc:  denied  { write } for  pid=14871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.522482][   T28] audit: type=1400 audit(1778983642.817:6166): avc:  denied  { write } for  pid=14901 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.540397][T14730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.559846][T14889] loop2: detected capacity change from 0 to 8192
[  413.584642][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.594694][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7
[  413.633309][T14889]  loop2: p1 p2 p3 p4
[  413.642190][T14889] loop2: p1 size 32768 extends beyond EOD, truncated
[  413.676334][   T28] audit: type=1400 audit(1778983643.037:6167): avc:  denied  { map } for  pid=14908 comm="syz.6.3330" path="socket:[49507]" dev="sockfs" ino=49507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  413.702652][T14889] loop2: p2 start 917504 is beyond EOD, truncated
[  413.709496][T14889] loop2: p3 start 117440512 is beyond EOD, truncated
[  413.716809][T14889] loop2: p4 start 720896 is beyond EOD, truncated
[  413.799202][T14915] loop6: detected capacity change from 0 to 4096
[  413.815730][T14915] EXT4-fs: Ignoring removed bh option
[  413.875201][T14915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.983843][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  413.994297][T14933] loop0: detected capacity change from 0 to 4096
[  413.999481][T14932] loop2: detected capacity change from 0 to 512
[  414.008955][T14933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.026272][T14730] veth0_vlan: entered promiscuous mode
[  414.029118][T14932] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  414.043194][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.067072][T14933] syz_tun: entered allmulticast mode
[  414.087998][T14933] syz_tun: left allmulticast mode
[  414.125099][T14730] veth1_vlan: entered promiscuous mode
[  414.230796][T14730] veth0_macvtap: entered promiscuous mode
[  414.257045][T14730] veth1_macvtap: entered promiscuous mode
[  414.281029][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8
[  414.297536][T14730] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.325554][T14730] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.347851][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3338'.
[  414.352097][T14956] blktrace: Concurrent blktraces are not allowed on loop6
[  414.376135][T14958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  414.408578][ T7271] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.418898][ T7271] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.428364][ T7271] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.478155][ T7271] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.488256][T14965] EXT4-fs: old and new quota format mixing
[  414.560196][T14972] EXT4-fs: Ignoring removed bh option
[  414.619410][T14972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.651676][T14972] openvswitch: netlink: EtherType 0 is less than min 600
[  414.660294][T14982] EXT4-fs: Ignoring removed bh option
[  414.686657][T14982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.781068][T14730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.795301][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.030696][T14997] FAULT_INJECTION: forcing a failure.
[  415.030696][T14997] name failslab, interval 1, probability 0, space 0, times 0
[  415.044427][T14997] CPU: 0 UID: 0 PID: 14997 Comm: syz.6.3345 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  415.044540][T14997] Tainted: [W]=WARN
[  415.044547][T14997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  415.044559][T14997] Call Trace:
[  415.044565][T14997]  <TASK>
[  415.044655][T14997]  __dump_stack+0x1d/0x30
[  415.044686][T14997]  dump_stack_lvl+0x95/0xd0
[  415.044765][T14997]  dump_stack+0x15/0x1b
[  415.044833][T14997]  should_fail_ex+0x263/0x280
[  415.044957][T14997]  ? alloc_pipe_info+0xad/0x340
[  415.044987][T14997]  should_failslab+0x8c/0xb0
[  415.045083][T14997]  __kmalloc_cache_noprof+0x5f/0x400
[  415.045175][T14997]  alloc_pipe_info+0xad/0x340
[  415.045215][T14997]  splice_direct_to_actor+0x591/0x670
[  415.045265][T14997]  ? kstrtouint_from_user+0xa8/0xf0
[  415.045327][T14997]  ? __pfx_direct_splice_actor+0x10/0x10
[  415.045372][T14997]  ? __rcu_read_unlock+0x4e/0x70
[  415.045399][T14997]  ? get_pid_task+0x96/0xd0
[  415.045442][T14997]  ? avc_policy_seqno+0x15/0x30
[  415.045476][T14997]  ? selinux_file_permission+0x1e1/0x320
[  415.045509][T14997]  do_splice_direct+0x119/0x1a0
[  415.045597][T14997]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  415.045629][T14997]  do_sendfile+0x382/0x650
[  415.045655][T14997]  __x64_sys_sendfile64+0x105/0x150
[  415.045744][T14997]  x64_sys_call+0x2dc4/0x3020
[  415.045829][T14997]  do_syscall_64+0x12c/0x3b0
[  415.045860][T14997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.045886][T14997] RIP: 0033:0x7f4acb52ce59
[  415.045907][T14997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.045930][T14997] RSP: 002b:00007f4ac9f7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  415.045978][T14997] RAX: ffffffffffffffda RBX: 00007f4acb7a5fa0 RCX: 00007f4acb52ce59
[  415.045996][T14997] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  415.046072][T14997] RBP: 00007f4ac9f7f090 R08: 0000000000000000 R09: 0000000000000000
[  415.046085][T14997] R10: 000000000000106f R11: 0000000000000246 R12: 0000000000000001
[  415.046102][T14997] R13: 00007f4acb7a6038 R14: 00007f4acb7a5fa0 R15: 00007fff0e57d4f8
[  415.046129][T14997]  </TASK>
[  415.181549][T14999] EXT4-fs: Ignoring removed bh option
[  415.289214][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.349184][T15006] EXT4-fs: Ignoring removed orlov option
[  415.370483][T14999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.386066][T15011] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  415.412076][T15006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.427510][T15011] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.443109][T14999] openvswitch: netlink: EtherType 0 is less than min 600
[  415.474361][T15006] No such timeout policy "syz0"
[  415.752009][T13230] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  415.773890][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.813066][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.974382][T15054] EXT4-fs: Ignoring removed bh option
[  416.017206][T15062] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  416.027003][T15058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.031963][T15054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.053998][T15058] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  416.068028][T15062] System zones: 0-1, 3-36
[  416.087538][T15062] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3350: bad orphan inode 134217728
[  416.100191][T15058] tmpfs: Unknown parameter '00000000000000000000'
[  416.119669][T15062] loop0: lost filesystem error report for type 5 error -117
[  416.129782][T15062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.170138][T15054] openvswitch: netlink: EtherType 0 is less than min 600
[  416.248370][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.371120][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.428143][T15092] EXT4-fs: Ignoring removed bh option
[  416.455051][T15092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.498623][T15098] rdma_rxe: rxe_newlink: failed to add xfrm0
[  416.507148][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3354'.
[  416.561129][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.806471][T15057] syz.7.3354 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  416.817894][T15057] CPU: 1 UID: 0 PID: 15057 Comm: syz.7.3354 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  416.817935][T15057] Tainted: [W]=WARN
[  416.817945][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  416.817963][T15057] Call Trace:
[  416.817970][T15057]  <TASK>
[  416.818008][T15057]  __dump_stack+0x1d/0x30
[  416.818057][T15057]  dump_stack_lvl+0x95/0xd0
[  416.818083][T15057]  dump_stack+0x15/0x1b
[  416.818108][T15057]  dump_header+0x80/0x240
[  416.818180][T15057]  oom_kill_process+0x295/0x350
[  416.818216][T15057]  out_of_memory+0x97d/0xb80
[  416.818248][T15057]  try_charge_memcg+0x62f/0xa10
[  416.818356][T15057]  charge_memcg+0x6d/0x120
[  416.818382][T15057]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  416.818488][T15057]  __swap_cache_prepare_and_add+0x69/0x4a0
[  416.818525][T15057]  ? alloc_pages_mpol+0x217/0x260
[  416.818600][T15057]  swap_cache_alloc_folio+0xa2/0x120
[  416.818625][T15057]  swap_cluster_readahead+0x25f/0x3c0
[  416.818658][T15057]  swapin_readahead+0xde/0x840
[  416.818723][T15057]  ? _raw_spin_unlock+0x9/0x30
[  416.818790][T15057]  ? swap_put_entries_cluster+0x46c/0x490
[  416.818823][T15057]  ? __rcu_read_unlock+0x4e/0x70
[  416.818892][T15057]  ? swap_cache_get_folio+0x1e0/0x1f0
[  416.818916][T15057]  do_swap_page+0x31e/0x2180
[  416.818978][T15057]  ? css_rstat_updated+0xbb/0x280
[  416.819063][T15057]  ? __rcu_read_lock+0x36/0x50
[  416.819090][T15057]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  416.819181][T15057]  handle_mm_fault+0xb30/0x2e70
[  416.819215][T15057]  ? vma_start_read+0x1c7/0x2c0
[  416.819271][T15057]  do_user_addr_fault+0x62f/0x1050
[  416.819488][T15057]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  416.819554][T15057]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  416.819581][T15057]  ? trace_page_fault_user+0x1f/0xa0
[  416.819673][T15057]  exc_page_fault+0x62/0xa0
[  416.819737][T15057]  asm_exc_page_fault+0x26/0x30
[  416.819759][T15057] RIP: 0033:0x7fcb23d214a0
[  416.819775][T15057] Code: fe c6 44 24 0e 01 45 31 ed 45 31 f6 89 7c 24 08 85 c0 0f 84 10 01 00 00 66 90 48 8b 3c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 ef <80> 3d 01 69 3a 00 00 49 89 d6 48 89 d3 74 28 25 ff 0f 00 00 83 f0
[  416.819872][T15057] RSP: 002b:00007ffd91de0560 EFLAGS: 00010286
[  416.819894][T15057] RAX: ffffffff817c1cdd RBX: ffffffff817c1085 RCX: 0000000000000000
[  416.819912][T15057] RDX: ffffffff81dfee5c RSI: 0000000000003042 RDI: 00007fcb238a7008
[  416.819930][T15057] RBP: 0000000000000000 R08: 00007fcb240b0000 R09: 00007fcb240b2000
[  416.819947][T15057] R10: 00000000817c1089 R11: 0000000000000007 R12: 00007fcb240c6038
[  416.819965][T15057] R13: 0000000000000008 R14: ffffffff817c1cdd R15: 00007fcb24bf5720
[  416.820026][T15057]  ? static_key_count+0xd/0x40
[  416.820061][T15057]  ? padata_cpu_online+0x1b5/0x340
[  416.820151][T15057]  ? static_key_count+0xd/0x40
[  416.820180][T15057]  ? security_task_prctl+0x13c/0x160
[  416.820222][T15057]  </TASK>
[  416.820245][T15057] memory: usage 307200kB, limit 307200kB, failcnt 1092
[  416.860966][T15114] netlink: 'syz.6.3367': attribute type 21 has an invalid length.
[  417.114820][T15057] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0
[  417.123036][T15057] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  417.130791][T15057] Memory cgroup stats for /syz7:
[  417.131145][T15057] cache 8192
[  417.139405][T15057] rss 0
[  417.142407][T15057] shmem 0
[  417.145387][T15057] mapped_file 0
[  417.148910][T15057] dirty 0
[  417.151977][T15057] writeback 4096
[  417.155545][T15057] workingset_refault_anon 154
[  417.160290][T15057] workingset_refault_file 17
[  417.165199][T15057] swap 446464
[  417.168806][T15057] swapcached 1089536
[  417.172785][T15057] pgpgin 4382
[  417.176197][T15057] pgpgout 4377
[  417.179811][T15057] pgfault 4546
[  417.183457][T15057] pgmajfault 53
[  417.187031][T15057] inactive_anon 8192
[  417.191163][T15057] active_anon 4096
[  417.195216][T15057] inactive_file 0
[  417.198898][T15057] active_file 8192
[  417.202698][T15057] unevictable 0
[  417.206277][T15057] hierarchical_memory_limit 314572800
[  417.211843][T15057] hierarchical_memsw_limit 9223372036854771712
[  417.218290][T15057] total_cache 8192
[  417.222251][T15057] total_rss 0
[  417.225563][T15057] total_shmem 0
[  417.229130][T15057] total_mapped_file 0
[  417.233495][T15057] total_dirty 0
[  417.237036][T15057] total_writeback 4096
[  417.241133][T15057] total_workingset_refault_anon 154
[  417.246665][T15057] total_workingset_refault_file 17
[  417.251820][T15057] total_swap 446464
[  417.255664][T15057] total_swapcached 1089536
[  417.260136][T15057] total_pgpgin 4382
[  417.261033][T15116] set_capacity_and_notify: 10 callbacks suppressed
[  417.261084][T15116] loop0: detected capacity change from 0 to 1024
[  417.264037][T15057] total_pgpgout 4377
[  417.264050][T15057] total_pgfault 4546
[  417.264058][T15057] total_pgmajfault 53
[  417.264066][T15057] total_inactive_anon 8192
[  417.264077][T15057] total_active_anon 4096
[  417.272741][T15121] loop3: detected capacity change from 0 to 512
[  417.276975][T15057] total_inactive_file 0
[  417.276985][T15057] total_active_file 8192
[  417.276995][T15057] total_unevictable 0
[  417.277045][T15057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3354,pid=15057,uid=0
[  417.332055][T15057] Memory cgroup out of memory: Killed process 15057 (syz.7.3354) total-vm:96348kB, anon-rss:1236kB, file-rss:22536kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  417.399879][T15116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  417.414048][T15116] System zones: 0-1, 3-36
[  417.422231][T15121] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00)
[  417.462247][T15116] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3365: bad orphan inode 134217728
[  417.506506][T15129] rdma_rxe: rxe_newlink: failed to add xfrm0
[  417.513373][T15121] FAT-fs (loop3): Filesystem has been set read-only
[  417.530962][T14730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.543593][T15116] loop0: lost filesystem error report for type 5 error -117
[  417.545668][T15116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.613247][T15135] loop7: detected capacity change from 0 to 512
[  417.706642][T15135] FAULT_INJECTION: forcing a failure.
[  417.706642][T15135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.719759][T15135] CPU: 0 UID: 0 PID: 15135 Comm: syz.7.3372 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  417.719856][T15135] Tainted: [W]=WARN
[  417.719866][T15135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  417.719916][T15135] Call Trace:
[  417.719926][T15135]  <TASK>
[  417.719936][T15135]  __dump_stack+0x1d/0x30
[  417.719999][T15135]  dump_stack_lvl+0x95/0xd0
[  417.720028][T15135]  dump_stack+0x15/0x1b
[  417.720054][T15135]  should_fail_ex+0x263/0x280
[  417.720155][T15135]  should_fail+0xb/0x20
[  417.720182][T15135]  should_fail_usercopy+0x1a/0x20
[  417.720211][T15135]  strncpy_from_user+0x27/0x250
[  417.720233][T15135]  ? kmem_cache_alloc_noprof+0x18c/0x3f0
[  417.720297][T15135]  do_getname+0x59/0x1c0
[  417.720324][T15135]  __se_sys_rename+0x20/0x1c0
[  417.720375][T15135]  __x64_sys_rename+0x31/0x40
[  417.720400][T15135]  x64_sys_call+0x2b3/0x3020
[  417.720430][T15135]  do_syscall_64+0x12c/0x3b0
[  417.720470][T15135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.720499][T15135] RIP: 0033:0x7fcb23e4ce59
[  417.720542][T15135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.720564][T15135] RSP: 002b:00007fcb2289f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  417.720585][T15135] RAX: ffffffffffffffda RBX: 00007fcb240c5fa0 RCX: 00007fcb23e4ce59
[  417.720604][T15135] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100
[  417.720655][T15135] RBP: 00007fcb2289f090 R08: 0000000000000000 R09: 0000000000000000
[  417.720673][T15135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.720689][T15135] R13: 00007fcb240c6038 R14: 00007fcb240c5fa0 R15: 00007ffd91de04c8
[  417.720747][T15135]  </TASK>
[  417.783959][T15147] loop2: detected capacity change from 0 to 4096
[  417.963316][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  417.963334][   T28] audit: type=1400 audit(1778983647.307:6199): avc:  denied  { write } for  pid=15136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  418.013181][T15147] EXT4-fs: Ignoring removed bh option
[  418.079799][   T28] audit: type=1400 audit(1778983647.427:6200): avc:  denied  { write } for  pid=15160 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  418.088233][T15147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.170268][   T28] audit: type=1400 audit(1778983647.527:6201): avc:  denied  { shutdown } for  pid=15167 comm="syz.3.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  418.182018][T15162] loop7: detected capacity change from 0 to 1024
[  418.191205][   T28] audit: type=1400 audit(1778983647.557:6202): avc:  denied  { read } for  pid=15167 comm="syz.3.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  418.200299][   T28] audit: type=1400 audit(1778983647.557:6203): avc:  denied  { write } for  pid=15146 comm="syz.2.3375" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  418.268057][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.305582][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.337213][T15162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  418.360274][T15162] System zones: 0-1, 3-36
[  418.370381][T15162] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3378: bad orphan inode 134217728
[  418.381552][T15162] loop7: lost filesystem error report for type 5 error -117
[  418.391827][T15162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.428049][T15174] loop2: detected capacity change from 0 to 1024
[  418.435601][T15174] EXT4-fs: Ignoring removed bh option
[  418.445171][   T28] audit: type=1400 audit(1778983647.777:6204): avc:  denied  { write } for  pid=15161 comm="syz.7.3378" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  418.483808][T15174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.527033][   T28] audit: type=1400 audit(1778983647.887:6205): avc:  denied  { write } for  pid=15172 comm="syz.2.3381" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  418.556218][T15174] openvswitch: netlink: EtherType 0 is less than min 600
[  418.564753][T15181] netlink: 'syz.0.3383': attribute type 21 has an invalid length.
[  418.634998][   T28] audit: type=1107 audit(1778983647.997:6206): pid=15172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#'
[  418.700829][T14730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.826328][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.966233][T15195] loop2: detected capacity change from 0 to 1024
[  419.054734][T15195] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  419.073435][T15200] loop0: detected capacity change from 0 to 4096
[  419.088663][T15195] System zones: 0-1, 3-36
[  419.118039][T15200] EXT4-fs: Ignoring removed bh option
[  419.143049][T15195] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3387: bad orphan inode 134217728
[  419.155312][T15195] loop2: lost filesystem error report for type 5 error -117
[  419.156736][T15200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.181083][T15203] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  419.188513][T15203] vhci_hcd vhci_hcd.0: invalid port number 255
[  419.206090][   T28] audit: type=1400 audit(1778983648.567:6207): avc:  denied  { write } for  pid=15199 comm="syz.0.3391" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.207569][T15195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.269925][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.321958][   T28] audit: type=1400 audit(1778983648.657:6208): avc:  denied  { write } for  pid=15192 comm="syz.2.3387" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.349393][T15207] loop7: detected capacity change from 0 to 512
[  419.363265][T15207] EXT4-fs: old and new quota format mixing
[  419.395137][T15208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  419.402537][T15208] IPv6: NLM_F_CREATE should be set when creating new route
[  419.611167][T15212] loop6: detected capacity change from 0 to 1024
[  419.639564][T15212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  419.647906][T15212] System zones: 0-1, 3-36
[  419.719461][T15212] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3395: bad orphan inode 134217728
[  419.730173][T15212] loop6: lost filesystem error report for type 5 error -117
[  419.756677][T15212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.922813][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.934075][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.119698][T15232] EXT4-fs: dax option not supported
[  420.154724][T15231] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  420.177230][T15231] System zones: 0-1, 3-36
[  420.182241][T15231] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3399: bad orphan inode 134217728
[  420.192892][T15231] loop2: lost filesystem error report for type 5 error -117
[  420.193464][T15231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.758179][T15251] FAULT_INJECTION: forcing a failure.
[  420.758179][T15251] name failslab, interval 1, probability 0, space 0, times 0
[  420.825516][T15251] CPU: 1 UID: 0 PID: 15251 Comm: syz.6.3407 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  420.825558][T15251] Tainted: [W]=WARN
[  420.825567][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  420.825584][T15251] Call Trace:
[  420.825593][T15251]  <TASK>
[  420.825624][T15251]  __dump_stack+0x1d/0x30
[  420.825710][T15251]  dump_stack_lvl+0x95/0xd0
[  420.825733][T15251]  dump_stack+0x15/0x1b
[  420.825776][T15251]  should_fail_ex+0x263/0x280
[  420.825811][T15251]  should_failslab+0x8c/0xb0
[  420.825852][T15251]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  420.825894][T15251]  ? __alloc_skb+0x2d6/0x690
[  420.825921][T15251]  __alloc_skb+0x2d6/0x690
[  420.826022][T15251]  ? __alloc_skb+0x200/0x690
[  420.826041][T15251]  netlink_alloc_large_skb+0xbf/0xf0
[  420.826068][T15251]  netlink_sendmsg+0x40c/0x6f0
[  420.826181][T15251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  420.826213][T15251]  ____sys_sendmsg+0x563/0x5b0
[  420.826248][T15251]  ___sys_sendmsg+0x195/0x1e0
[  420.826299][T15251]  __x64_sys_sendmsg+0xd4/0x160
[  420.826417][T15251]  x64_sys_call+0x194c/0x3020
[  420.826441][T15251]  do_syscall_64+0x12c/0x3b0
[  420.826475][T15251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.826611][T15251] RIP: 0033:0x7f4acb52ce59
[  420.826700][T15251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.826777][T15251] RSP: 002b:00007f4ac9f7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  420.826855][T15251] RAX: ffffffffffffffda RBX: 00007f4acb7a5fa0 RCX: 00007f4acb52ce59
[  420.826870][T15251] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000005
[  420.826886][T15251] RBP: 00007f4ac9f7f090 R08: 0000000000000000 R09: 0000000000000000
[  420.826900][T15251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.826912][T15251] R13: 00007f4acb7a6038 R14: 00007f4acb7a5fa0 R15: 00007fff0e57d4f8
[  420.827006][T15251]  </TASK>
[  421.396624][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.443216][T15255] 9pnet_fd: Insufficient options for proto=fd
[  421.533546][T15261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.571151][T15261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.666379][T15263] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  421.698482][T15263] vhci_hcd vhci_hcd.0: invalid port number 255
[  421.721096][T15263] blktrace: Concurrent blktraces are not allowed on loop12
[  421.789833][T15264] EXT4-fs: old and new quota format mixing
[  421.991004][T15266] EXT4-fs: Ignoring removed bh option
[  422.037910][T15266] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.069535][T15266] openvswitch: netlink: EtherType 0 is less than min 600
[  422.144708][T15269] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3413'.
[  422.334708][T15276] set_capacity_and_notify: 5 callbacks suppressed
[  422.334730][T15276] loop3: detected capacity change from 0 to 1024
[  422.424628][T15281] SELinux: failed to load policy
[  422.430338][T15281] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15281 comm=syz.2.3418
[  422.460585][T15276] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  422.475978][T15276] System zones: 0-1, 3-36
[  422.490330][T15276] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3416: bad orphan inode 134217728
[  422.516971][T15276] loop3: lost filesystem error report for type 5 error -117
[  422.582520][T15292] loop2: detected capacity change from 0 to 1024
[  422.607684][T15292] EXT4-fs: Ignoring removed bh option
[  422.688215][T15292] openvswitch: netlink: EtherType 0 is less than min 600
[  422.695673][T15295] wireguard0: entered promiscuous mode
[  422.701524][T15295] wireguard0: entered allmulticast mode
[  422.727014][T15302] loop3: detected capacity change from 0 to 1024
[  422.740353][T15302] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  422.748671][T15302] System zones: 0-1, 3-36
[  422.763402][T15302] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3425: bad orphan inode 134217728
[  422.774069][T15302] loop3: lost filesystem error report for type 5 error -117
[  422.827812][T15309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=15309 comm=syz.6.3423
[  422.850667][T15309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=15309 comm=syz.6.3423
[  423.015090][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  423.015108][   T28] audit: type=1400 audit(1778983653.345:6224): avc:  denied  { write } for  pid=15321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  423.067807][   T28] audit: type=1400 audit(1778983653.385:6225): avc:  denied  { write } for  pid=15332 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  423.336674][T15341] loop7: detected capacity change from 0 to 1024
[  423.346110][T15344] loop3: detected capacity change from 0 to 136
[  423.351992][T15341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  423.364551][T15341] System zones: 0-1, 3-36
[  423.379119][T15344] Attempt to read inode for relocated directory
[  423.386552][T15341] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3429: bad orphan inode 134217728
[  423.388679][   T28] audit: type=1400 audit(1778983653.715:6226): avc:  denied  { mount } for  pid=15343 comm="syz.3.3430" name="/" dev="loop3" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  423.411027][T15341] loop7: lost filesystem error report for type 5 error -117
[  423.421218][T15344] syz.3.3430: attempt to access beyond end of device
[  423.421218][T15344] loop3: rw=524288, sector=335544428, nr_sectors = 4 limit=136
[  423.443448][   T28] audit: type=1400 audit(1778983653.785:6227): avc:  denied  { module_load } for  pid=15343 comm="syz.3.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  423.454253][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  423.469682][    C0] EXT4-fs (loop7): initial error at time 1778983653: ext4_orphan_get:1423
[  423.474776][   T28] audit: type=1400 audit(1778983653.785:6228): avc:  denied  { create } for  pid=15336 comm="syz.2.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  423.478261][    C0] EXT4-fs (loop7): last error at time 1778983653: ext4_orphan_get:1423
[  423.507263][T15344] syz.3.3430: attempt to access beyond end of device
[  423.507263][T15344] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136
[  423.521870][T15344] syz.3.3430: attempt to access beyond end of device
[  423.521870][T15344] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136
[  423.546151][   T28] audit: type=1400 audit(1778983653.875:6229): avc:  denied  { write } for  pid=15340 comm="syz.7.3429" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  423.568818][T15344] syz.3.3430: attempt to access beyond end of device
[  423.568818][T15344] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136
[  423.574799][T15349] loop6: detected capacity change from 0 to 512
[  423.582535][T15344] syz.3.3430: attempt to access beyond end of device
[  423.582535][T15344] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136
[  423.602486][T15344] syz.3.3430: attempt to access beyond end of device
[  423.602486][T15344] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136
[  423.629684][T15349] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  423.641406][T15344] syz.3.3430: attempt to access beyond end of device
[  423.641406][T15344] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136
[  423.682561][T15349] EXT4-fs (loop6): 1 truncate cleaned up
[  423.688547][T15348] syz.3.3430: attempt to access beyond end of device
[  423.688547][T15348] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136
[  423.703096][T15348] syz.3.3430: attempt to access beyond end of device
[  423.703096][T15348] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136
[  423.717645][T15348] syz.3.3430: attempt to access beyond end of device
[  423.717645][T15348] loop3: rw=0, sector=335544428, nr_sectors = 4 limit=136
[  423.758976][   T28] audit: type=1400 audit(1778983654.065:6230): avc:  denied  { unmount } for  pid=13910 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  423.814848][T15354] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  423.822264][T15354] vhci_hcd vhci_hcd.0: invalid port number 255
[  423.835579][T15354] blktrace: Concurrent blktraces are not allowed on loop0
[  423.942703][T15361] loop0: detected capacity change from 0 to 512
[  423.951740][T15361] /dev/loop0: Can't open blockdev
[  424.080944][T15365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3437'.
[  424.090377][T15365] netlink: 'syz.2.3437': attribute type 7 has an invalid length.
[  424.098694][T15365] netlink: 'syz.2.3437': attribute type 8 has an invalid length.
[  424.106855][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3437'.
[  424.169548][T15367] 9pnet_fd: Insufficient options for proto=fd
[  424.463935][T15380] loop7: detected capacity change from 0 to 1764
[  424.512871][T15386] netlink: 'syz.3.3445': attribute type 21 has an invalid length.
[  424.551557][T15388] netlink: 'syz.6.3446': attribute type 21 has an invalid length.
[  424.577935][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3447'.
[  424.668276][T15394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3449'.
[  424.687803][T15396] loop0: detected capacity change from 0 to 512
[  424.694230][T15394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3449'.
[  424.732488][T15396] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  424.957336][T15419] loop0: detected capacity change from 0 to 1024
[  424.972073][T15422] netlink: 'syz.3.3458': attribute type 21 has an invalid length.
[  424.997456][T15419] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  425.019543][T15419] System zones: 0-1, 3-36
[  425.033790][T15419] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3457: bad orphan inode 134217728
[  425.053493][T15426] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  425.061473][T15419] loop0: lost filesystem error report for type 5 error -117
[  425.065004][T15426] vhci_hcd vhci_hcd.0: invalid port number 255
[  425.083076][   T28] audit: type=1400 audit(1778983655.435:6231): avc:  denied  { write } for  pid=15417 comm="syz.0.3457" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  425.105518][T15426] blktrace: Concurrent blktraces are not allowed on loop6
[  425.186717][T15433] EXT4-fs: old and new quota format mixing
[  425.271784][T15429] /dev/loop6: Can't open blockdev
[  425.285500][   T28] audit: type=1400 audit(1778983655.645:6232): avc:  denied  { append } for  pid=15428 comm="syz.6.3461" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  425.342170][   T28] audit: type=1400 audit(1778983655.675:6233): avc:  denied  { map } for  pid=15428 comm="syz.6.3461" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  425.558589][T15445] syz_tun: entered allmulticast mode
[  425.564305][T15445] syz_tun: left allmulticast mode
[  425.834040][T15470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3465'.
[  425.869006][T15466] xfrm0 speed is unknown, defaulting to 1000
[  426.346965][T15501] dvmrp1: tun_chr_ioctl cmd 1074025677
[  426.352827][T15501] dvmrp1: linktype set to 804
[  426.443819][T15503] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  426.459450][T15503] EXT4-fs (loop3): mount failed
[  426.936284][T15511] syz_tun: entered allmulticast mode
[  426.942356][T15511] syz_tun: left allmulticast mode
[  427.315193][T15532] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  427.327369][T15532] vhci_hcd vhci_hcd.0: invalid port number 255
[  427.339055][T15532] blktrace: Concurrent blktraces are not allowed on loop14
[  427.400242][T15534] set_capacity_and_notify: 6 callbacks suppressed
[  427.400259][T15534] loop7: detected capacity change from 0 to 512
[  427.454521][T15534] EXT4-fs: old and new quota format mixing
[  427.505629][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3482'.
[  427.517857][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3482'.
[  428.094038][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  428.094053][   T28] audit: type=1400 audit(1778983658.455:6246): avc:  denied  { write } for  pid=15540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  428.154424][   T28] audit: type=1400 audit(1778983658.505:6247): avc:  denied  { write } for  pid=15551 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  428.306737][   T28] audit: type=1400 audit(1778983658.665:6248): avc:  denied  { setopt } for  pid=15554 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  428.445046][T15559] loop2: detected capacity change from 0 to 512
[  428.492609][T15559] EXT4-fs: Ignoring removed mblk_io_submit option
[  428.556119][T15559] EXT4-fs (loop2): orphan cleanup on readonly fs
[  428.569050][T15559] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  428.591472][T15559] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.3484: attempt to clear invalid blocks 2 len 1
[  428.604414][T15559] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  428.617814][T15559] EXT4-fs (loop2): Remounting filesystem read-only
[  428.639511][T15573] loop3: detected capacity change from 0 to 1024
[  428.646639][T15573] EXT4-fs: Ignoring removed bh option
[  428.656099][T15559] EXT4-fs (loop2): 1 truncate cleaned up
[  428.662031][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  428.662064][    C0] EXT4-fs (loop2): initial error at time 1778983658: ext4_clear_blocks:876: inode 13
[  428.662207][    C0] EXT4-fs (loop2): last error at time 1778983658: ext4_clear_blocks:876: inode 13
[  428.897360][   T28] audit: type=1400 audit(1778983659.255:6249): avc:  denied  { write } for  pid=15572 comm="syz.3.3489" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  428.945548][T15573] openvswitch: netlink: EtherType 0 is less than min 600
[  428.990226][T15591] loop7: detected capacity change from 0 to 1024
[  429.081109][T15591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  429.089440][T15591] System zones: 0-1, 3-36
[  429.095994][T15591] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3493: bad orphan inode 134217728
[  429.106833][T15591] loop7: lost filesystem error report for type 5 error -117
[  429.177858][   T28] audit: type=1107 audit(1778983659.435:6250): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#'
[  429.208802][T15594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3489'.
[  429.416949][   T28] audit: type=1400 audit(1778983659.595:6251): avc:  denied  { write } for  pid=15590 comm="syz.7.3493" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  429.751552][T15598] loop6: detected capacity change from 0 to 1024
[  429.798421][T15598] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  429.813513][T15598] System zones: 0-1, 3-36
[  429.835369][T15598] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3494: bad orphan inode 134217728
[  429.846204][T15598] loop6: lost filesystem error report for type 5 error -117
[  429.855811][   T28] audit: type=1400 audit(1778983660.215:6252): avc:  denied  { write } for  pid=15597 comm="syz.6.3494" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  429.960761][T15604] loop2: detected capacity change from 0 to 1024
[  430.000823][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3497'.
[  430.043346][T15604] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.089356][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3497'.
[  430.323565][   T28] audit: type=1400 audit(1778983660.675:6253): avc:  denied  { write } for  pid=15616 comm="syz.3.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  431.056234][T15629] loop3: detected capacity change from 0 to 1024
[  431.076497][T15629] EXT4-fs: Ignoring removed bh option
[  431.128827][   T28] audit: type=1400 audit(1778983661.485:6254): avc:  denied  { write } for  pid=15628 comm="syz.3.3503" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  431.159352][T15629] openvswitch: netlink: EtherType 0 is less than min 600
[  431.197381][T15649] rdma_rxe: rxe_newlink: failed to add xfrm0
[  431.248776][   T28] audit: type=1107 audit(1778983661.605:6255): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#'
[  431.279030][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3503'.
[  431.296058][T15656] loop6: detected capacity change from 0 to 512
[  431.307164][T15656] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  431.355404][T15659] xt_hashlimit: size too large, truncated to 1048576
[  431.405367][T15661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3512'.
[  431.415104][T15661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3512'.
[  431.425286][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3511'.
[  431.952133][T15675] loop0: detected capacity change from 0 to 1024
[  431.966908][T15675] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  431.975228][T15675] System zones: 0-1, 3-36
[  431.985359][T15675] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3515: bad orphan inode 134217728
[  431.996309][T15675] loop0: lost filesystem error report for type 5 error -117
[  432.426027][T15685] loop6: detected capacity change from 0 to 1024
[  432.444544][T15685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  432.455574][T15685] System zones: 0-1, 3-36
[  432.470382][T15685] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3518: bad orphan inode 134217728
[  432.484558][T15685] loop6: lost filesystem error report for type 5 error -117
[  432.902879][T15692] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  432.918268][T15692] vhci_hcd vhci_hcd.0: invalid port number 255
[  432.929022][T15692] blktrace: Concurrent blktraces are not allowed on loop12
[  432.989850][T15693] loop6: detected capacity change from 0 to 512
[  432.997773][T15693] EXT4-fs: old and new quota format mixing
[  433.766125][T15698] loop6: detected capacity change from 0 to 512
[  433.776692][T15698] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  434.121487][T15642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  434.179771][T15706] loop6: detected capacity change from 0 to 512
[  434.259905][T15706] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  434.268949][T15706] EXT4-fs (loop6): 1 truncate cleaned up
[  434.930889][T15720] loop0: detected capacity change from 0 to 4096
[  435.001414][T15720] syz_tun: entered allmulticast mode
[  435.007017][T15720] syz_tun: left allmulticast mode
[  435.017250][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  435.017276][   T28] audit: type=1400 audit(1778983665.355:6258): avc:  denied  { write } for  pid=15715 comm="syz.0.3527" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  435.068094][T15723] loop2: detected capacity change from 0 to 1024
[  435.084893][T15717] loop3: detected capacity change from 0 to 512
[  435.094321][T15723] EXT4-fs: Ignoring removed bh option
[  435.131662][T15717] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  435.149403][   T28] audit: type=1400 audit(1778983665.505:6259): avc:  denied  { write } for  pid=15714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  435.270803][   T28] audit: type=1400 audit(1778983665.625:6260): avc:  denied  { write } for  pid=15718 comm="syz.2.3528" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  435.298847][T15723] openvswitch: netlink: EtherType 0 is less than min 600
[  435.391000][   T28] audit: type=1107 audit(1778983665.745:6261): pid=15718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#'
[  435.409319][T15723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3528'.
[  435.473729][   T28] audit: type=1400 audit(1778983665.825:6262): avc:  denied  { write } for  pid=15738 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  435.602029][T15747] FAULT_INJECTION: forcing a failure.
[  435.602029][T15747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.629122][T15747] CPU: 1 UID: 0 PID: 15747 Comm: syz.3.3531 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  435.629216][T15747] Tainted: [W]=WARN
[  435.629225][T15747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  435.629237][T15747] Call Trace:
[  435.629246][T15747]  <TASK>
[  435.629256][T15747]  __dump_stack+0x1d/0x30
[  435.629326][T15747]  dump_stack_lvl+0x95/0xd0
[  435.629347][T15747]  dump_stack+0x15/0x1b
[  435.629366][T15747]  should_fail_ex+0x263/0x280
[  435.629402][T15747]  should_fail+0xb/0x20
[  435.629458][T15747]  should_fail_usercopy+0x1a/0x20
[  435.629504][T15747]  _copy_from_user+0x1c/0xb0
[  435.629562][T15747]  sctp_setsockopt+0x164/0xea0
[  435.629625][T15747]  sock_common_setsockopt+0x69/0x80
[  435.629666][T15747]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  435.629720][T15747]  __sys_setsockopt+0x184/0x200
[  435.629751][T15747]  __x64_sys_setsockopt+0x64/0x80
[  435.629778][T15747]  x64_sys_call+0x2327/0x3020
[  435.629823][T15747]  do_syscall_64+0x12c/0x3b0
[  435.629854][T15747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.629906][T15747] RIP: 0033:0x7fed0fdece59
[  435.629923][T15747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.629942][T15747] RSP: 002b:00007fed0e826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  435.629991][T15747] RAX: ffffffffffffffda RBX: 00007fed10066090 RCX: 00007fed0fdece59
[  435.630006][T15747] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003
[  435.630018][T15747] RBP: 00007fed0e826090 R08: 0000000000000008 R09: 0000000000000000
[  435.630045][T15747] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.630062][T15747] R13: 00007fed10066128 R14: 00007fed10066090 R15: 00007fff2eb23528
[  435.630087][T15747]  </TASK>
[  435.837925][   T28] audit: type=1400 audit(1778983666.195:6263): avc:  denied  { write } for  pid=15742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  435.892591][   T28] audit: type=1400 audit(1778983666.235:6264): avc:  denied  { write } for  pid=15754 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  436.135176][T15759] xfrm0 speed is unknown, defaulting to 1000
[  436.234574][T15774] loop0: detected capacity change from 0 to 1024
[  436.277059][T15774] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  436.292824][T15774] System zones: 0-1, 3-36
[  436.304939][T15774] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3538: bad orphan inode 134217728
[  436.330603][T15774] loop0: lost filesystem error report for type 5 error -117
[  436.332193][T15774] EXT4-fs mount: 43 callbacks suppressed
[  436.332213][T15774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.385007][   T28] audit: type=1400 audit(1778983666.745:6265): avc:  denied  { write } for  pid=15773 comm="syz.0.3538" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  436.427865][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3537'.
[  436.455691][T15784] netlink: 'syz.6.3537': attribute type 30 has an invalid length.
[  436.469509][T15785] loop2: detected capacity change from 0 to 4096
[  436.478936][T15785] EXT4-fs: Ignoring removed bh option
[  436.489463][ T3485] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  436.506376][ T3485] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  436.521370][ T3485] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  436.531995][T15785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.552784][ T3485] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.553934][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3537'.
[  436.583456][   T28] audit: type=1400 audit(1778983666.935:6266): avc:  denied  { write } for  pid=15783 comm="syz.2.3541" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  436.603091][T15784] netlink: 'syz.6.3537': attribute type 30 has an invalid length.
[  436.630382][   T28] audit: type=1400 audit(1778983666.935:6267): avc:  denied  { write } for  pid=15783 comm="syz.2.3541" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  436.640102][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.716933][T15790] loop3: detected capacity change from 0 to 512
[  436.762446][T15790] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  436.778873][T15790] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3543: casefold flag without casefold feature
[  436.792272][T15790] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  436.793455][T15790] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3543: couldn't read orphan inode 15 (err -117)
[  436.803346][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  436.803705][    C1] EXT4-fs (loop3): initial error at time 1778983667: ext4_orphan_get:1397: inode 15
[  436.803846][    C1] EXT4-fs (loop3): last error at time 1778983667: ext4_orphan_get:1397: inode 15
[  436.851948][T15790] loop3: lost filesystem error report for type 5 error -117
[  436.853106][T15790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.888266][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.890135][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3543'.
[  436.917536][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3543'.
[  436.967029][T13910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.079428][T15801] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  437.097138][T15801] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.3544: invalid block
[  437.111104][T15801] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  437.112503][T15801] EXT4-fs (loop2): 1 truncate cleaned up
[  437.127511][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  437.127762][    C1] EXT4-fs (loop2): initial error at time 1778983667: ext4_get_branch:178: inode 13: block 1024
[  437.128639][    C1] EXT4-fs (loop2): last error at time 1778983667: ext4_get_branch:178: inode 13: block 1024
[  437.163964][T15801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.293010][T15809] FAULT_INJECTION: forcing a failure.
[  437.293010][T15809] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  437.307203][T15809] CPU: 1 UID: 0 PID: 15809 Comm: syz.6.3550 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  437.307285][T15809] Tainted: [W]=WARN
[  437.307292][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  437.307305][T15809] Call Trace:
[  437.307333][T15809]  <TASK>
[  437.307345][T15809]  __dump_stack+0x1d/0x30
[  437.307375][T15809]  dump_stack_lvl+0x95/0xd0
[  437.307401][T15809]  dump_stack+0x15/0x1b
[  437.307420][T15809]  should_fail_ex+0x263/0x280
[  437.307492][T15809]  should_fail+0xb/0x20
[  437.307517][T15809]  should_fail_usercopy+0x1a/0x20
[  437.307598][T15809]  _copy_from_user+0x1c/0xb0
[  437.307639][T15809]  io_register_resize_rings+0xab/0xbd0
[  437.307720][T15809]  ? plist_del+0x1e8/0x200
[  437.307744][T15809]  ? tracing_record_taskinfo_sched_switch+0x71/0x260
[  437.307825][T15809]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[  437.307859][T15809]  ? hrtimer_start_range_ns+0x58c/0x10a0
[  437.307952][T15809]  __se_sys_io_uring_register+0xd95/0x1330
[  437.308043][T15809]  ? restore_fpregs_from_fpstate+0x61/0x110
[  437.308067][T15809]  ? switch_fpu_return+0xe7/0x1b0
[  437.308139][T15809]  __x64_sys_io_uring_register+0x55/0x70
[  437.308167][T15809]  x64_sys_call+0x2be0/0x3020
[  437.308234][T15809]  do_syscall_64+0x12c/0x3b0
[  437.308272][T15809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.308294][T15809] RIP: 0033:0x7f4acb52ce59
[  437.308389][T15809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.308413][T15809] RSP: 002b:00007f4ac9f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  437.308437][T15809] RAX: ffffffffffffffda RBX: 00007f4acb7a5fa0 RCX: 00007f4acb52ce59
[  437.308453][T15809] RDX: 0000200000000440 RSI: 0000000000000021 RDI: 0000000000000003
[  437.308470][T15809] RBP: 00007f4ac9f7f090 R08: 0000000000000000 R09: 0000000000000000
[  437.308487][T15809] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  437.308572][T15809] R13: 00007f4acb7a6038 R14: 00007f4acb7a5fa0 R15: 00007fff0e57d4f8
[  437.308594][T15809]  </TASK>
[  437.630419][T15815] set_capacity_and_notify: 1 callbacks suppressed
[  437.630441][T15815] loop6: detected capacity change from 0 to 1024
[  437.661125][T15815] EXT4-fs: Ignoring removed nomblk_io_submit option
[  437.712986][T15815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.781863][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.810611][T15827] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3556'.
[  437.820131][T15827] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3556'.
[  438.034499][T15836] loop7: detected capacity change from 0 to 512
[  438.189695][T15830] loop6: detected capacity change from 0 to 1024
[  438.865102][T15839] loop0: detected capacity change from 0 to 512
[  438.886985][T15836] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  438.921959][T15839] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  439.010092][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.032630][T15839] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  439.041230][T15839] EXT4-fs (loop0): orphan cleanup on readonly fs
[  439.048690][T15839] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  439.063786][T15839] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  439.072338][T15839] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3558: bg 0: block 15: invalid block bitmap
[  439.085009][T15839] loop0: lost filesystem error report for type 5 error -117
[  439.085653][T15839] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  439.101682][T15839] loop0: lost filesystem error report for type 5 error -117
[  439.102523][T15839] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.3558: data will be lost
[  439.121285][T15839] EXT4-fs (loop0): 1 truncate cleaned up
[  439.128272][T15839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  439.170509][T15830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  439.178966][T15830] System zones: 0-1, 3-36
[  439.215182][T15830] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3557: bad orphan inode 134217728
[  439.227010][T15830] loop6: lost filesystem error report for type 5 error -117
[  439.229326][T15830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.481303][T15846] loop2: detected capacity change from 0 to 512
[  439.499513][T15846] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  439.610078][T15848] loop7: detected capacity change from 0 to 2048
[  439.666619][T15852] loop2: detected capacity change from 0 to 1024
[  439.683266][T15854] loop3: detected capacity change from 0 to 2048
[  439.691609][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.761192][T15848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.774954][T15852] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  439.788842][T15854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.817246][T15852] System zones: 0-1, 3-36
[  439.834708][T15848] EXT4-fs error (device loop7): ext4_find_extent:904: inode #2: comm syz.7.3561: inode has invalid extent depth: 9
[  439.849233][T15852] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3563: bad orphan inode 134217728
[  439.859880][T15852] loop2: lost filesystem error report for type 5 error -117
[  439.870556][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3564'.
[  439.888578][T15848] EXT4-fs (loop7): Remounting filesystem read-only
[  439.903406][T15852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.938584][T15860] EXT4-fs error (device loop3): ext4_find_extent:904: inode #2: comm syz.3.3564: inode has invalid extent depth: 9
[  439.956733][T14730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.987576][T15860] EXT4-fs (loop3): Remounting filesystem read-only
[  440.452735][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.481143][T15867] loop6: detected capacity change from 0 to 4096
[  440.495436][T15867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.509432][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  440.509448][   T28] audit: type=1400 audit(1778983670.865:6272): avc:  denied  { write } for  pid=15863 comm="syz.6.3565" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  440.539952][T15867] syz_tun: entered allmulticast mode
[  440.545575][T15867] syz_tun: left allmulticast mode
[  440.641809][T13910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.942909][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.030273][T15877] rdma_rxe: rxe_newlink: failed to add xfrm0
[  441.248972][T15889] FAULT_INJECTION: forcing a failure.
[  441.248972][T15889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.269619][T15889] CPU: 0 UID: 0 PID: 15889 Comm: syz.0.3569 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  441.269731][T15889] Tainted: [W]=WARN
[  441.269741][T15889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  441.269757][T15889] Call Trace:
[  441.269767][T15889]  <TASK>
[  441.269779][T15889]  __dump_stack+0x1d/0x30
[  441.269926][T15889]  dump_stack_lvl+0x95/0xd0
[  441.269953][T15889]  dump_stack+0x15/0x1b
[  441.269978][T15889]  should_fail_ex+0x263/0x280
[  441.270020][T15889]  should_fail+0xb/0x20
[  441.270125][T15889]  should_fail_usercopy+0x1a/0x20
[  441.270165][T15889]  _copy_from_iter+0xcf/0xea0
[  441.270204][T15889]  ? __alloc_skb+0x4f6/0x690
[  441.270261][T15889]  ? __alloc_skb+0x200/0x690
[  441.270288][T15889]  netlink_sendmsg+0x4ae/0x6f0
[  441.270391][T15889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  441.270460][T15889]  ____sys_sendmsg+0x563/0x5b0
[  441.270520][T15889]  ___sys_sendmsg+0x195/0x1e0
[  441.270559][T15889]  __x64_sys_sendmsg+0xd4/0x160
[  441.270597][T15889]  x64_sys_call+0x194c/0x3020
[  441.270703][T15889]  do_syscall_64+0x12c/0x3b0
[  441.270745][T15889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.270840][T15889] RIP: 0033:0x7fdf00aace59
[  441.270856][T15889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.270875][T15889] RSP: 002b:00007fdeff4ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  441.270895][T15889] RAX: ffffffffffffffda RBX: 00007fdf00d25fa0 RCX: 00007fdf00aace59
[  441.270964][T15889] RDX: 0000000020004804 RSI: 0000200000000540 RDI: 0000000000000003
[  441.270982][T15889] RBP: 00007fdeff4ff090 R08: 0000000000000000 R09: 0000000000000000
[  441.270995][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.271008][T15889] R13: 00007fdf00d26038 R14: 00007fdf00d25fa0 R15: 00007fff26c6db88
[  441.271034][T15889]  </TASK>
[  441.498244][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.526309][T15890] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3575'.
[  441.560492][T15894] loop2: detected capacity change from 0 to 1024
[  441.573209][T15890] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3575'.
[  441.591729][   T28] audit: type=1400 audit(1778983671.945:6273): avc:  denied  { name_bind } for  pid=15895 comm="syz.3.3579" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  441.683161][T15894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  441.691301][T15894] System zones: 0-1, 3-36
[  441.723091][T15901] rdma_rxe: rxe_newlink: failed to add xfrm0
[  441.731550][T15894] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3578: bad orphan inode 134217728
[  441.742268][T15894] loop2: lost filesystem error report for type 5 error -117
[  441.759829][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  441.773875][    C0] EXT4-fs (loop2): initial error at time 1778983672: ext4_orphan_get:1423
[  441.782405][    C0] EXT4-fs (loop2): last error at time 1778983672: ext4_orphan_get:1423
[  441.846687][T15907] syz0: rxe_newlink: already configured on xfrm0
[  441.871467][T15894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.908234][T15911] rdma_rxe: rxe_newlink: failed to add xfrm0
[  441.975313][T15914] netlink: 'syz.0.3585': attribute type 1 has an invalid length.
[  441.977338][   T28] audit: type=1400 audit(1778983672.325:6274): avc:  denied  { write } for  pid=15893 comm="syz.2.3578" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  442.009524][T15908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  442.023961][T15908] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.084370][T15924] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  442.241676][T15930] FAULT_INJECTION: forcing a failure.
[  442.241676][T15930] name failslab, interval 1, probability 0, space 0, times 0
[  442.254499][T15930] CPU: 1 UID: 0 PID: 15930 Comm: syz.0.3590 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  442.254537][T15930] Tainted: [W]=WARN
[  442.254569][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  442.254584][T15930] Call Trace:
[  442.254592][T15930]  <TASK>
[  442.254600][T15930]  __dump_stack+0x1d/0x30
[  442.254624][T15930]  dump_stack_lvl+0x95/0xd0
[  442.254646][T15930]  dump_stack+0x15/0x1b
[  442.254673][T15930]  should_fail_ex+0x263/0x280
[  442.254702][T15930]  should_failslab+0x8c/0xb0
[  442.254736][T15930]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  442.254866][T15930]  ? __alloc_skb+0x2d6/0x690
[  442.254889][T15930]  __alloc_skb+0x2d6/0x690
[  442.254909][T15930]  ? __alloc_skb+0x200/0x690
[  442.254931][T15930]  xfrm_alloc_compat+0x131/0xdf0
[  442.254994][T15930]  ? skb_put+0xa9/0xf0
[  442.255017][T15930]  ? __pfx_xfrm_alloc_compat+0x10/0x10
[  442.255041][T15930]  xfrm_send_policy_notify+0xf93/0x1060
[  442.255093][T15930]  ? __pfx_xfrm_send_policy_notify+0x10/0x10
[  442.255127][T15930]  km_policy_notify+0x62/0xb0
[  442.255164][T15930]  xfrm_add_policy+0x317/0x470
[  442.255231][T15930]  xfrm_user_rcv_msg+0x576/0x670
[  442.255266][T15930]  ? __kfree_skb+0x109/0x150
[  442.255286][T15930]  ? nlmon_xmit+0x4f/0x60
[  442.255314][T15930]  ? consume_skb+0x4b/0x130
[  442.255351][T15930]  netlink_rcv_skb+0x123/0x220
[  442.255464][T15930]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  442.255507][T15930]  xfrm_netlink_rcv+0x48/0x60
[  442.255564][T15930]  netlink_unicast+0x5a8/0x680
[  442.255595][T15930]  netlink_sendmsg+0x5c8/0x6f0
[  442.255628][T15930]  ? __pfx_netlink_sendmsg+0x10/0x10
[  442.255679][T15930]  ____sys_sendmsg+0x563/0x5b0
[  442.255710][T15930]  ___sys_sendmsg+0x195/0x1e0
[  442.255755][T15930]  __x64_sys_sendmsg+0xd4/0x160
[  442.255837][T15930]  x64_sys_call+0x194c/0x3020
[  442.255870][T15930]  do_syscall_64+0x12c/0x3b0
[  442.255986][T15930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.256054][T15930] RIP: 0033:0x7fdf00aace59
[  442.256072][T15930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.256092][T15930] RSP: 002b:00007fdeff4ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  442.256188][T15930] RAX: ffffffffffffffda RBX: 00007fdf00d25fa0 RCX: 00007fdf00aace59
[  442.256203][T15930] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  442.256217][T15930] RBP: 00007fdeff4ff090 R08: 0000000000000000 R09: 0000000000000000
[  442.256230][T15930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.256242][T15930] R13: 00007fdf00d26038 R14: 00007fdf00d25fa0 R15: 00007fff26c6db88
[  442.256270][T15930]  </TASK>
[  442.548475][T15931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.562107][   T28] audit: type=1400 audit(1778983672.925:6275): avc:  denied  { write } for  pid=15922 comm="syz.7.3586" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  442.592114][T15931] syz_tun: entered allmulticast mode
[  442.597733][T15931] syz_tun: left allmulticast mode
[  442.618147][T15940] EXT4-fs: inline encryption not supported
[  442.655332][T15942] syz0: rxe_newlink: already configured on xfrm0
[  442.679918][T15940] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3591: bad orphan inode 15
[  442.697983][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  442.717649][T15940] loop3: lost filesystem error report for type 5 error -117
[  442.717813][T15940] ext4_test_bit(bit=14, block=5) = 0
[  442.725178][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  442.725200][    C0] EXT4-fs (loop3): initial error at time 1778983673: ext4_orphan_get:1423
[  442.725228][    C0] EXT4-fs (loop3): last error at time 1778983673: ext4_orphan_get:1423
[  442.757933][T15940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.811523][T15945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3595'.
[  442.830454][T15945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3595'.
[  442.841557][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.042682][T14730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.367708][T15959] set_capacity_and_notify: 4 callbacks suppressed
[  443.367725][T15959] loop2: detected capacity change from 0 to 512
[  443.383660][T15959] EXT4-fs: inline encryption not supported
[  443.440271][T15959] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3600: bad orphan inode 15
[  443.453730][T15959] loop2: lost filesystem error report for type 5 error -117
[  443.454059][T15959] ext4_test_bit(bit=14, block=5) = 0
[  443.461581][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  443.461605][    C1] EXT4-fs (loop2): initial error at time 1778983673: ext4_orphan_get:1423
[  443.461628][    C1] EXT4-fs (loop2): last error at time 1778983673: ext4_orphan_get:1423
[  443.492701][T15959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.556273][T15959] FAULT_INJECTION: forcing a failure.
[  443.556273][T15959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  443.571876][T15959] CPU: 1 UID: 0 PID: 15959 Comm: syz.2.3600 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  443.571918][T15959] Tainted: [W]=WARN
[  443.571927][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  443.571944][T15959] Call Trace:
[  443.571953][T15959]  <TASK>
[  443.571963][T15959]  __dump_stack+0x1d/0x30
[  443.572034][T15959]  dump_stack_lvl+0x95/0xd0
[  443.572062][T15959]  dump_stack+0x15/0x1b
[  443.572087][T15959]  should_fail_ex+0x263/0x280
[  443.572154][T15959]  should_fail+0xb/0x20
[  443.572178][T15959]  should_fail_usercopy+0x1a/0x20
[  443.572211][T15959]  _copy_to_user+0x20/0xa0
[  443.572308][T15959]  simple_read_from_buffer+0xb5/0x130
[  443.572351][T15959]  proc_fail_nth_read+0x10e/0x150
[  443.572386][T15959]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  443.572414][T15959]  vfs_read+0x1ab/0x7f0
[  443.572578][T15959]  ? __rcu_read_unlock+0x4e/0x70
[  443.572600][T15959]  ? __fget_files+0x184/0x1c0
[  443.572620][T15959]  ? mutex_lock+0x57/0x90
[  443.572644][T15959]  ksys_read+0xdc/0x1a0
[  443.572710][T15959]  __x64_sys_read+0x40/0x50
[  443.572745][T15959]  x64_sys_call+0x2886/0x3020
[  443.572769][T15959]  do_syscall_64+0x12c/0x3b0
[  443.572880][T15959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.572902][T15959] RIP: 0033:0x7f4d8129d68e
[  443.572983][T15959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  443.573008][T15959] RSP: 002b:00007f4d7fd36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  443.573108][T15959] RAX: ffffffffffffffda RBX: 00007f4d7fd376c0 RCX: 00007f4d8129d68e
[  443.573123][T15959] RDX: 000000000000000f RSI: 00007f4d7fd370a0 RDI: 0000000000000007
[  443.573136][T15959] RBP: 00007f4d7fd37090 R08: 0000000000000000 R09: 0000000000000000
[  443.573149][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.573166][T15959] R13: 00007f4d81556038 R14: 00007f4d81555fa0 R15: 00007fffc313e468
[  443.573193][T15959]  </TASK>
[  443.812964][T15677] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  443.920149][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.047413][T13910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.185398][T15982] FAULT_INJECTION: forcing a failure.
[  444.185398][T15982] name failslab, interval 1, probability 0, space 0, times 0
[  444.207879][T15982] CPU: 1 UID: 0 PID: 15982 Comm: syz.7.3607 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  444.207915][T15982] Tainted: [W]=WARN
[  444.207923][T15982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  444.207940][T15982] Call Trace:
[  444.207947][T15982]  <TASK>
[  444.207957][T15982]  __dump_stack+0x1d/0x30
[  444.207988][T15982]  dump_stack_lvl+0x95/0xd0
[  444.208015][T15982]  dump_stack+0x15/0x1b
[  444.208034][T15982]  should_fail_ex+0x263/0x280
[  444.208065][T15982]  should_failslab+0x8c/0xb0
[  444.208100][T15982]  __kmalloc_noprof+0xb8/0x4d0
[  444.208186][T15982]  ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  444.208282][T15982]  genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  444.208309][T15982]  genl_family_rcv_msg_doit+0x4b/0x1f0
[  444.208394][T15982]  ? genl_get_cmd+0x619/0x650
[  444.208416][T15982]  genl_rcv_msg+0x432/0x470
[  444.208504][T15982]  ? __pfx_tipc_nl_bearer_enable+0x10/0x10
[  444.208534][T15982]  netlink_rcv_skb+0x123/0x220
[  444.208565][T15982]  ? __pfx_genl_rcv_msg+0x10/0x10
[  444.208669][T15982]  genl_rcv+0x28/0x40
[  444.208691][T15982]  netlink_unicast+0x5a8/0x680
[  444.208720][T15982]  netlink_sendmsg+0x5c8/0x6f0
[  444.208759][T15982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  444.208849][T15982]  ____sys_sendmsg+0x563/0x5b0
[  444.208882][T15982]  ___sys_sendmsg+0x195/0x1e0
[  444.208921][T15982]  __x64_sys_sendmsg+0xd4/0x160
[  444.209022][T15982]  x64_sys_call+0x194c/0x3020
[  444.209045][T15982]  do_syscall_64+0x12c/0x3b0
[  444.209083][T15982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.209152][T15982] RIP: 0033:0x7fcb23e4ce59
[  444.209171][T15982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.209194][T15982] RSP: 002b:00007fcb2289f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  444.209214][T15982] RAX: ffffffffffffffda RBX: 00007fcb240c5fa0 RCX: 00007fcb23e4ce59
[  444.209228][T15982] RDX: 0000000020040084 RSI: 0000200000000580 RDI: 0000000000000003
[  444.209242][T15982] RBP: 00007fcb2289f090 R08: 0000000000000000 R09: 0000000000000000
[  444.209320][T15982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.209337][T15982] R13: 00007fcb240c6038 R14: 00007fcb240c5fa0 R15: 00007ffd91de04c8
[  444.209360][T15982]  </TASK>
[  444.437250][   T28] audit: type=1326 audit(1778983674.565:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15975 comm="syz.3.3603" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0fdece59 code=0x0
[  444.620911][T15992] netlink: 'syz.2.3611': attribute type 5 has an invalid length.
[  444.695578][T15993] xt_CT: You must specify a L4 protocol and not use inversions on it
[  444.742589][T15993] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3611'.
[  444.758108][T15993] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3611'.
[  444.778032][T15993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3611'.
[  444.853624][T15993] pimreg: entered allmulticast mode
[  444.860817][T15996] rdma_rxe: rxe_newlink: failed to add xfrm0
[  444.903764][T16000] FAULT_INJECTION: forcing a failure.
[  444.903764][T16000] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  444.970125][T16000] CPU: 1 UID: 0 PID: 16000 Comm: syz.7.3613 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  444.970174][T16000] Tainted: [W]=WARN
[  444.970211][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  444.970224][T16000] Call Trace:
[  444.970233][T16000]  <TASK>
[  444.970244][T16000]  __dump_stack+0x1d/0x30
[  444.970273][T16000]  dump_stack_lvl+0x95/0xd0
[  444.970301][T16000]  dump_stack+0x15/0x1b
[  444.970326][T16000]  should_fail_ex+0x263/0x280
[  444.970424][T16000]  should_fail_alloc_page+0xf2/0x100
[  444.970468][T16000]  __alloc_frozen_pages_noprof+0x108/0x350
[  444.970531][T16000]  alloc_pages_mpol+0xb3/0x260
[  444.970562][T16000]  alloc_pages_noprof+0x8f/0x140
[  444.970595][T16000]  get_zeroed_page_noprof+0x1a/0x40
[  444.970622][T16000]  simple_transaction_get+0x4c/0x120
[  444.970720][T16000]  selinux_transaction_write+0x9d/0x110
[  444.970786][T16000]  ? __pfx_selinux_transaction_write+0x10/0x10
[  444.970824][T16000]  vfs_write+0x269/0x9f0
[  444.970861][T16000]  ? __rcu_read_unlock+0x4e/0x70
[  444.970890][T16000]  ? __fget_files+0x184/0x1c0
[  444.970986][T16000]  ? mutex_lock+0x57/0x90
[  444.971017][T16000]  ksys_write+0xdc/0x1a0
[  444.971055][T16000]  __x64_sys_write+0x40/0x50
[  444.971086][T16000]  x64_sys_call+0x27e1/0x3020
[  444.971167][T16000]  do_syscall_64+0x12c/0x3b0
[  444.971207][T16000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.971237][T16000] RIP: 0033:0x7fcb23e4ce59
[  444.971273][T16000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.971297][T16000] RSP: 002b:00007fcb2289f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  444.971425][T16000] RAX: ffffffffffffffda RBX: 00007fcb240c5fa0 RCX: 00007fcb23e4ce59
[  444.971444][T16000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  444.971457][T16000] RBP: 00007fcb2289f090 R08: 0000000000000000 R09: 0000000000000000
[  444.971471][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.971487][T16000] R13: 00007fcb240c6038 R14: 00007fcb240c5fa0 R15: 00007ffd91de04c8
[  444.971514][T16000]  </TASK>
[  445.076989][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'.
[  445.155619][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'.
[  445.165578][T16002] 9p: Bad value for 'rfdno'
[  445.401913][   T28] audit: type=1400 audit(1778983675.765:6277): avc:  denied  { ioctl } for  pid=16022 comm="syz.0.3620" path="socket:[52350]" dev="sockfs" ino=52350 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  445.496867][   T28] audit: type=1400 audit(1778983675.795:6278): avc:  denied  { bind } for  pid=16022 comm="syz.0.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  445.540516][T16030] netlink: 'syz.2.3622': attribute type 21 has an invalid length.
[  445.611871][T16037] program syz.0.3625 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  445.622089][T16032] bridge_slave_0: left allmulticast mode
[  445.631057][T16032] bridge_slave_0: left promiscuous mode
[  445.637477][T16032] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.649821][T16032] bridge_slave_1: left allmulticast mode
[  445.657923][T16032] bridge_slave_1: left promiscuous mode
[  445.663929][T16032] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.688662][T16032] bond0: (slave bond_slave_0): Releasing backup interface
[  445.703627][T16032] bond0: (slave bond_slave_1): Releasing backup interface
[  445.730276][T16032] team0: Port device team_slave_0 removed
[  445.739899][T16032] team0: Port device team_slave_1 removed
[  445.746924][T16032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.754342][T16032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.764989][T16040] rdma_rxe: rxe_newlink: failed to add xfrm0
[  445.778143][T16032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.787747][T16032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.804449][T16032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  445.821898][T16036] batman_adv: batadv0: Adding interface: dummy0
[  445.828766][T16036] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.854119][T16036] batman_adv: batadv0: Interface activated: dummy0
[  445.876930][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3625'.
[  445.958269][T16047] loop3: detected capacity change from 0 to 512
[  445.979012][T16047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.992103][T16047] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.004836][T16047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.134902][   T28] audit: type=1400 audit(1778983676.495:6279): avc:  denied  { map } for  pid=16066 comm="syz.2.3635" path="socket:[52433]" dev="sockfs" ino=52433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  446.158481][   T28] audit: type=1400 audit(1778983676.495:6280): avc:  denied  { read } for  pid=16066 comm="syz.2.3635" path="socket:[52433]" dev="sockfs" ino=52433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  446.214192][T16071] loop7: detected capacity change from 0 to 512
[  446.220933][T16071] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  446.343835][T16071] loop7: detected capacity change from 0 to 512
[  446.359518][T16071] EXT4-fs: Ignoring removed bh option
[  446.365702][T16071] EXT4-fs: Mount option(s) incompatible with ext2
[  446.490598][T16076] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.497888][T16076] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.645448][T16080] syz0: rxe_newlink: already configured on xfrm0
[  446.697918][T16082] netlink: 'syz.0.3639': attribute type 21 has an invalid length.
[  446.861696][T16087] __nla_validate_parse: 2 callbacks suppressed
[  446.861715][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3641'.
[  446.877378][T16087] FAULT_INJECTION: forcing a failure.
[  446.877378][T16087] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.891041][T16087] CPU: 0 UID: 0 PID: 16087 Comm: syz.6.3641 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  446.891081][T16087] Tainted: [W]=WARN
[  446.891155][T16087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  446.891168][T16087] Call Trace:
[  446.891176][T16087]  <TASK>
[  446.891254][T16087]  __dump_stack+0x1d/0x30
[  446.891284][T16087]  dump_stack_lvl+0x95/0xd0
[  446.891312][T16087]  dump_stack+0x15/0x1b
[  446.891336][T16087]  should_fail_ex+0x263/0x280
[  446.891373][T16087]  should_fail+0xb/0x20
[  446.891476][T16087]  should_fail_usercopy+0x1a/0x20
[  446.891548][T16087]  _copy_from_user+0x1c/0xb0
[  446.891585][T16087]  kstrtouint_from_user+0x69/0xf0
[  446.891666][T16087]  ? 0xffffffff81000000
[  446.891680][T16087]  ? selinux_file_permission+0x1e1/0x320
[  446.891752][T16087]  proc_fail_nth_write+0x50/0x160
[  446.891791][T16087]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  446.891853][T16087]  vfs_write+0x269/0x9f0
[  446.891881][T16087]  ? __rcu_read_unlock+0x4e/0x70
[  446.891917][T16087]  ? __fget_files+0x184/0x1c0
[  446.891944][T16087]  ? mutex_lock+0x57/0x90
[  446.891975][T16087]  ksys_write+0xdc/0x1a0
[  446.892014][T16087]  __x64_sys_write+0x40/0x50
[  446.892088][T16087]  x64_sys_call+0x27e1/0x3020
[  446.892159][T16087]  do_syscall_64+0x12c/0x3b0
[  446.892199][T16087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.892235][T16087] RIP: 0033:0x7f4acb4ed68e
[  446.892256][T16087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  446.892283][T16087] RSP: 002b:00007f4ac9f7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  446.892308][T16087] RAX: ffffffffffffffda RBX: 00007f4ac9f7f6c0 RCX: 00007f4acb4ed68e
[  446.892358][T16087] RDX: 0000000000000001 RSI: 00007f4ac9f7f0a0 RDI: 0000000000000006
[  446.892375][T16087] RBP: 00007f4ac9f7f090 R08: 0000000000000000 R09: 0000000000000000
[  446.892392][T16087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.892408][T16087] R13: 00007f4acb7a6038 R14: 00007f4acb7a5fa0 R15: 00007fff0e57d4f8
[  446.892468][T16087]  </TASK>
[  447.099351][T16088] loop0: detected capacity change from 0 to 512
[  447.147702][T16092] loop6: detected capacity change from 0 to 1024
[  447.171546][T16088] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  447.181321][T16088] EXT4-fs (loop0): 1 truncate cleaned up
[  447.188063][T16088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.230527][T16092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  447.252349][T16092] System zones: 0-1, 3-36
[  447.273781][T16092] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3642: bad orphan inode 134217728
[  447.285630][T16096] FAULT_INJECTION: forcing a failure.
[  447.285630][T16096] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  447.299023][T16092] loop6: lost filesystem error report for type 5 error -117
[  447.301012][T16092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.341344][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.7.3644 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  447.341402][T16096] Tainted: [W]=WARN
[  447.341447][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  447.341471][T16096] Call Trace:
[  447.341481][T16096]  <TASK>
[  447.341494][T16096]  __dump_stack+0x1d/0x30
[  447.341519][T16096]  dump_stack_lvl+0x95/0xd0
[  447.341608][T16096]  dump_stack+0x15/0x1b
[  447.341674][T16096]  should_fail_ex+0x263/0x280
[  447.341708][T16096]  should_fail_alloc_page+0xf2/0x100
[  447.341742][T16096]  __alloc_frozen_pages_noprof+0x108/0x350
[  447.341804][T16096]  alloc_pages_mpol+0xb3/0x260
[  447.341835][T16096]  ? __pfx_anon_pipe_write+0x1/0x10
[  447.341881][T16096]  alloc_pages_noprof+0x8f/0x140
[  447.341966][T16096]  anon_pipe_write+0x69c/0xb20
[  447.342009][T16096]  ? __pfx_anon_pipe_write+0x1/0x10
[  447.342068][T16096]  ? __pfx_anon_pipe_write+0x10/0x10
[  447.342141][T16096]  vfs_write+0x5a6/0x9f0
[  447.342186][T16096]  ksys_write+0xdc/0x1a0
[  447.342232][T16096]  __x64_sys_write+0x40/0x50
[  447.342269][T16096]  x64_sys_call+0x27e1/0x3020
[  447.342345][T16096]  do_syscall_64+0x12c/0x3b0
[  447.342384][T16096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.342414][T16096] RIP: 0033:0x7fcb23e0d68e
[  447.342435][T16096] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  447.342453][T16096] RSP: 002b:00007fcb2289ece8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  447.342479][T16096] RAX: ffffffffffffffda RBX: 00007fcb2289f6c0 RCX: 00007fcb23e0d68e
[  447.342493][T16096] RDX: 0000000000000029 RSI: 00007fcb2289ee90 RDI: 0000000000000002
[  447.342506][T16096] RBP: 00007fcb2289ee90 R08: 0000000000000000 R09: 0000000000000000
[  447.342600][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029
[  447.342627][T16096] R13: 00007fcb2409d7a0 R14: 00007fcb240944a0 R15: 0000000000000001
[  447.342652][T16096]  </TASK>
[  447.550572][   T28] audit: type=1400 audit(1778983677.815:6281): avc:  denied  { write } for  pid=16091 comm="syz.6.3642" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  447.639698][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.668414][T16099] ipt_rpfilter: unknown options
[  447.698058][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.807918][T16116] rdma_rxe: rxe_newlink: failed to add xfrm0
[  447.945447][   T28] audit: type=1400 audit(1778983678.295:6282): avc:  denied  { map } for  pid=16119 comm="syz.0.3652" path="socket:[52165]" dev="sockfs" ino=52165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  447.997186][T16126] loop2: detected capacity change from 0 to 4096
[  448.026339][T16126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.047871][T16126] syz_tun: entered allmulticast mode
[  448.054595][   T28] audit: type=1400 audit(1778983678.395:6283): avc:  denied  { write } for  pid=16118 comm="syz.2.3651" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  448.076910][T16126] syz_tun: left allmulticast mode
[  448.154114][   T28] audit: type=1400 audit(1778983678.495:6284): avc:  denied  { connect } for  pid=16136 comm="syz.0.3655" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  448.209483][T16140] loop6: detected capacity change from 0 to 1024
[  448.225007][T16141] ieee802154 phy1 wpan1: encryption failed: -22
[  448.225505][   T28] audit: type=1400 audit(1778983678.585:6285): avc:  denied  { connect } for  pid=16136 comm="syz.0.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  448.275509][T16140] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  448.283767][   T28] audit: type=1400 audit(1778983678.585:6286): avc:  denied  { getopt } for  pid=16136 comm="syz.0.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  448.304122][T16140] System zones: 0-1, 3-36
[  448.323122][T16140] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3656: bad orphan inode 134217728
[  448.344180][T16140] loop6: lost filesystem error report for type 5 error -117
[  448.344893][T16140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.468958][   T28] audit: type=1400 audit(1778983678.825:6287): avc:  denied  { write } for  pid=16139 comm="syz.6.3656" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  448.618574][T16146] loop7: detected capacity change from 0 to 512
[  448.637850][T16146] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  448.646615][T16146] EXT4-fs (loop7): 1 truncate cleaned up
[  448.653977][T16146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.720541][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.779981][T16149] loop2: detected capacity change from 0 to 1024
[  448.817136][T16149] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  448.859612][T16149] System zones: 0-1, 3-36
[  448.881558][T16149] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3658: bad orphan inode 134217728
[  448.917009][T16149] loop2: lost filesystem error report for type 5 error -117
[  448.917836][T16149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.998669][   T28] audit: type=1400 audit(1778983679.355:6288): avc:  denied  { write } for  pid=16148 comm="syz.2.3658" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  449.073553][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'.
[  449.089025][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.132127][T16152] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  449.138785][T16152] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  449.156615][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16152 comm=syz.0.3659
[  449.179580][T16153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16153 comm=syz.0.3659
[  449.206912][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.278685][T14730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.291660][T16160] loop6: detected capacity change from 0 to 256
[  449.360802][T16166] syz0: rxe_newlink: already configured on xfrm0
[  449.483824][T16174] loop6: detected capacity change from 0 to 1024
[  449.505864][T16174] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  449.520994][T16174] System zones: 0-1, 3-36
[  449.529010][T16174] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3666: bad orphan inode 134217728
[  449.541680][T16174] loop6: lost filesystem error report for type 5 error -117
[  449.562078][T16174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.954751][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.013989][T16181] loop6: detected capacity change from 0 to 1024
[  450.032267][T16181] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  450.041546][T16181] System zones: 0-1, 3-36
[  450.153056][T16181] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3667: bad orphan inode 134217728
[  450.170881][T16181] loop6: lost filesystem error report for type 5 error -117
[  450.171424][T16181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.219841][T16185] loop2: detected capacity change from 0 to 4096
[  450.235355][T16185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.250909][T16185] syz_tun: entered allmulticast mode
[  450.256780][T16185] syz_tun: left allmulticast mode
[  450.329711][T16189] loop7: detected capacity change from 0 to 1024
[  450.371023][T16189] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  450.399477][T16189] System zones: 0-1, 3-36
[  450.421212][T16189] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3669: bad orphan inode 134217728
[  450.450836][T16189] loop7: lost filesystem error report for type 5 error -117
[  450.451651][T16189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.601090][T16198] loop3: detected capacity change from 0 to 1024
[  450.629598][T16198] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  450.642925][T16198] System zones: 0-1, 3-36
[  450.653585][T16198] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3671: bad orphan inode 134217728
[  450.666110][T16198] loop3: lost filesystem error report for type 5 error -117
[  450.667870][T16198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.717278][T13910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.747800][T16202] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3672'.
[  450.925775][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.970895][T16207] loop2: detected capacity change from 0 to 1024
[  451.127047][T16208] loop3: detected capacity change from 0 to 512
[  451.209677][T16207] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  451.254708][T16208] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  451.270860][T16208] EXT4-fs (loop3): 1 truncate cleaned up
[  451.278073][T16208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.955949][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.994839][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  451.994856][   T28] audit: type=1400 audit(1778983682.355:6294): avc:  denied  { wake_alarm } for  pid=16206 comm="syz.2.3674" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  452.045744][T16215] PM: Enabling pm_trace changes system date and time during resume.
[  452.045744][T16215] PM: Correct system time has to be restored manually after resume.
[  452.065263][T16214] xfrm0 speed is unknown, defaulting to 1000
[  452.091284][T16213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16213 comm=syz.0.3676
[  452.145820][T14730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.186563][T16217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42088 sclass=netlink_route_socket pid=16217 comm=syz.0.3676
[  452.482659][T16093] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  452.536391][T16093] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  453.079102][T13910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.147700][T16231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3682'.
[  453.165619][T16231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3682'.
[  453.179228][T16229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  453.209849][T16229] System zones: 0-1, 3-36
[  453.241945][T16235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.256482][T16229] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3677: bad orphan inode 134217728
[  453.268906][T16229] loop7: lost filesystem error report for type 5 error -117
[  453.272723][T16235] 9p: Bad value for 'wfdno'
[  453.287244][T16229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.328490][   T28] audit: type=1400 audit(1778983683.615:6295): avc:  denied  { write } for  pid=16234 comm="syz.6.3681" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  453.350767][   T28] audit: type=1400 audit(1778983683.615:6296): avc:  denied  { mounton } for  pid=16234 comm="syz.6.3681" path="/488/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  453.374693][   T28] audit: type=1400 audit(1778983683.615:6297): avc:  denied  { write } for  pid=16228 comm="syz.7.3677" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  453.432498][T16244] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  453.441956][T16244] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  453.451231][T16244] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  453.462032][T16244] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  453.474660][T16244] System zones: 0-2, 18-18, 34-35
[  453.482541][T16244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.781123][ T7356] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.823973][T16248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.840138][T16248] syz_tun: entered allmulticast mode
[  453.846398][T16248] syz_tun: left allmulticast mode
[  454.175206][T13910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.239474][T16253] rdma_rxe: rxe_newlink: failed to add xfrm0
[  454.251556][T16256] PM: Enabling pm_trace changes system date and time during resume.
[  454.251556][T16256] PM: Correct system time has to be restored manually after resume.
[  454.297211][T16259] set_capacity_and_notify: 5 callbacks suppressed
[  454.297285][T16259] loop0: detected capacity change from 0 to 1024
[  454.336760][T16263] loop7: detected capacity change from 0 to 512
[  454.343819][T16258] loop3: detected capacity change from 0 to 1024
[  454.355192][T16263] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  454.365845][T16259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  454.387889][T16259] System zones: 0-1, 3-36
[  454.412038][T16259] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3688: bad orphan inode 134217728
[  454.426530][T16258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  454.435137][T16258] System zones: 0-1, 3-36
[  454.446834][T16258] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3687: bad orphan inode 134217728
[  454.461293][T16258] loop3: lost filesystem error report for type 5 error -117
[  454.461609][T16259] loop0: lost filesystem error report for type 5 error -117
[  454.493985][   T28] audit: type=1400 audit(1778983684.825:6298): avc:  denied  { write } for  pid=16257 comm="syz.3.3687" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  454.587484][   T28] audit: type=1400 audit(1778983684.925:6299): avc:  denied  { write } for  pid=16254 comm="syz.0.3688" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  454.876588][T16284] loop2: detected capacity change from 0 to 512
[  454.914745][T16289] FAULT_INJECTION: forcing a failure.
[  454.914745][T16289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.083121][T16284] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  455.103269][T16284] EXT4-fs (loop2): 1 truncate cleaned up
[  455.126355][T16289] CPU: 1 UID: 0 PID: 16289 Comm: syz.3.3699 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  455.126426][T16289] Tainted: [W]=WARN
[  455.126435][T16289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  455.126452][T16289] Call Trace:
[  455.126460][T16289]  <TASK>
[  455.126470][T16289]  __dump_stack+0x1d/0x30
[  455.126507][T16289]  dump_stack_lvl+0x95/0xd0
[  455.126544][T16289]  dump_stack+0x15/0x1b
[  455.126615][T16289]  should_fail_ex+0x263/0x280
[  455.126700][T16289]  should_fail+0xb/0x20
[  455.126805][T16289]  should_fail_usercopy+0x1a/0x20
[  455.126863][T16289]  _copy_to_user+0x20/0xa0
[  455.126929][T16289]  simple_read_from_buffer+0xb5/0x130
[  455.126973][T16289]  proc_fail_nth_read+0x10e/0x150
[  455.127058][T16289]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  455.127094][T16289]  vfs_read+0x1ab/0x7f0
[  455.127200][T16289]  ? __rcu_read_unlock+0x4e/0x70
[  455.127225][T16289]  ? __fget_files+0x184/0x1c0
[  455.127251][T16289]  ? mutex_lock+0x57/0x90
[  455.127281][T16289]  ksys_read+0xdc/0x1a0
[  455.127335][T16289]  __x64_sys_read+0x40/0x50
[  455.127393][T16289]  x64_sys_call+0x2886/0x3020
[  455.127487][T16289]  do_syscall_64+0x12c/0x3b0
[  455.127552][T16289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.127622][T16289] RIP: 0033:0x7fed0fdad68e
[  455.127641][T16289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  455.127662][T16289] RSP: 002b:00007fed0e825fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  455.127687][T16289] RAX: ffffffffffffffda RBX: 00007fed0e8266c0 RCX: 00007fed0fdad68e
[  455.127730][T16289] RDX: 000000000000000f RSI: 00007fed0e8260a0 RDI: 0000000000000005
[  455.127747][T16289] RBP: 00007fed0e826090 R08: 0000000000000000 R09: 0000000000000000
[  455.127764][T16289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.127781][T16289] R13: 00007fed10066128 R14: 00007fed10066090 R15: 00007fff2eb23528
[  455.127806][T16289]  </TASK>
[  455.432596][T16293] loop7: detected capacity change from 0 to 4096
[  455.593172][T16292] syz_tun: entered allmulticast mode
[  455.598773][T16292] syz_tun: left allmulticast mode
[  455.767228][T16306] loop3: detected capacity change from 0 to 512
[  455.781430][T16279] SELinux: failed to load policy
[  455.797169][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3703'.
[  455.824736][   T28] audit: type=1107 audit(1778983686.185:6300): pid=16304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='�B�鵟��Z���^%P��q����Q@#�8��|�@}7[�)ѻ�x]��l���H��6�Rh�ڜ�>��@���˯o���3
�����]�Kca&Ƙ�91nv�:f��}�I&7򁷧�ex
h�߰�J�&����Z��_S��`�	M�A*ѰS���}��
[  455.824736][   T28] Sb������XP�d�]��ho�o���P��qX�QI'
[  455.914854][T16306] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #11: block 327694: comm syz.3.3704: lblock 0 mapped to illegal pblock 327694 (length 1)
[  455.930585][T16306] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  455.931054][T16306] EXT4-fs (loop3): 1 orphan inode deleted
[  455.940425][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  455.940449][    C1] EXT4-fs (loop3): initial error at time 1778983686: ext4_map_blocks:791: inode 11: block 327694
[  455.940512][    C1] EXT4-fs (loop3): last error at time 1778983686: ext4_map_blocks:791: inode 11: block 327694
[  456.764024][T16312] FAULT_INJECTION: forcing a failure.
[  456.764024][T16312] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  456.831559][T16306] support for cryptoloop has been removed.  Use dm-crypt instead.
[  456.845072][T16312] CPU: 1 UID: 0 PID: 16312 Comm: syz.6.3706 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  456.845116][T16312] Tainted: [W]=WARN
[  456.845125][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  456.845142][T16312] Call Trace:
[  456.845154][T16312]  <TASK>
[  456.845162][T16312]  __dump_stack+0x1d/0x30
[  456.845188][T16312]  dump_stack_lvl+0x95/0xd0
[  456.845215][T16312]  dump_stack+0x15/0x1b
[  456.845235][T16312]  should_fail_ex+0x263/0x280
[  456.845288][T16312]  should_fail+0xb/0x20
[  456.845317][T16312]  should_fail_usercopy+0x1a/0x20
[  456.845437][T16312]  _copy_to_user+0x20/0xa0
[  456.845476][T16312]  simple_read_from_buffer+0xb5/0x130
[  456.845521][T16312]  proc_fail_nth_read+0x10e/0x150
[  456.845614][T16312]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  456.845652][T16312]  vfs_read+0x1ab/0x7f0
[  456.845769][T16312]  ? __rcu_read_unlock+0x4e/0x70
[  456.845798][T16312]  ? __fget_files+0x184/0x1c0
[  456.845823][T16312]  ? fput+0x8f/0xc0
[  456.845849][T16312]  ? mutex_lock+0x57/0x90
[  456.845881][T16312]  ksys_read+0xdc/0x1a0
[  456.845986][T16312]  __x64_sys_read+0x40/0x50
[  456.846017][T16312]  x64_sys_call+0x2886/0x3020
[  456.846042][T16312]  do_syscall_64+0x12c/0x3b0
[  456.846076][T16312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.846140][T16312] RIP: 0033:0x7f4acb4ed68e
[  456.846161][T16312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  456.846183][T16312] RSP: 002b:00007f4ac9f7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  456.846203][T16312] RAX: ffffffffffffffda RBX: 00007f4ac9f7f6c0 RCX: 00007f4acb4ed68e
[  456.846325][T16312] RDX: 000000000000000f RSI: 00007f4ac9f7f0a0 RDI: 0000000000000005
[  456.846341][T16312] RBP: 00007f4ac9f7f090 R08: 0000000000000000 R09: 0000000000000000
[  456.846358][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  456.846370][T16312] R13: 00007f4acb7a6038 R14: 00007f4acb7a5fa0 R15: 00007fff0e57d4f8
[  456.846391][T16312]  </TASK>
[  457.071477][   T28] audit: type=1400 audit(1778983687.425:6301): avc:  denied  { unmount } for  pid=13910 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  460.503547][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3715'.
[  460.512463][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3715'.
[  460.904970][   T28] audit: type=1400 audit(1778983691.265:6302): avc:  denied  { write } for  pid=16345 comm="syz.0.3716" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  460.928367][T16348] random: crng reseeded on system resumption
[  460.955828][   T28] audit: type=1400 audit(1778983691.285:6303): avc:  denied  { open } for  pid=16345 comm="syz.0.3716" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  461.058341][   T28] audit: type=1400 audit(1778983691.305:6304): avc:  denied  { ioctl } for  pid=16345 comm="syz.0.3716" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  461.313647][T16362] loop2: detected capacity change from 0 to 1024
[  461.328027][T16362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  461.336349][T16362] System zones: 0-1, 3-36
[  461.548032][T16369] loop6: detected capacity change from 0 to 512
[  461.577751][T16369] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  461.587124][T16369] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.3720: invalid block
[  461.598588][T16369] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  461.599312][T16369] EXT4-fs (loop6): 1 truncate cleaned up
[  461.628787][T16362] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3721: bad orphan inode 134217728
[  461.645535][T16362] loop2: lost filesystem error report for type 5 error -117
[  461.720718][   T28] audit: type=1400 audit(1778983692.075:6305): avc:  denied  { write } for  pid=16361 comm="syz.2.3721" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  461.968137][T16383] loop7: detected capacity change from 0 to 512
[  462.057612][T16383] EXT4-fs: Ignoring removed nobh option
[  462.092050][T16383] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  462.104195][   T28] audit: type=1400 audit(1778983692.465:6306): avc:  denied  { mounton } for  pid=16380 comm="syz.0.3725" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  462.200410][T16383] EXT4-fs (loop7): 1 truncate cleaned up
[  462.226208][T16388] loop3: detected capacity change from 0 to 1024
[  462.245125][T16388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  462.268626][T16388] System zones: 0-1, 3-36
[  462.287923][T16388] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3728: bad orphan inode 134217728
[  462.309365][T16388] loop3: lost filesystem error report for type 5 error -117
[  462.313444][   T28] audit: type=1400 audit(1778983692.675:6307): avc:  denied  { write } for  pid=16385 comm="syz.3.3728" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  462.422633][   T28] audit: type=1400 audit(1778983692.735:6308): avc:  denied  { write } for  pid=16381 comm="syz.7.3727" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  462.596098][T16395] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  462.639157][T16397] FAULT_INJECTION: forcing a failure.
[  462.639157][T16397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.653674][T16397] CPU: 0 UID: 0 PID: 16397 Comm: syz.2.3730 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  462.653706][T16397] Tainted: [W]=WARN
[  462.653713][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  462.653726][T16397] Call Trace:
[  462.653732][T16397]  <TASK>
[  462.653743][T16397]  __dump_stack+0x1d/0x30
[  462.653801][T16397]  dump_stack_lvl+0x95/0xd0
[  462.653822][T16397]  dump_stack+0x15/0x1b
[  462.653848][T16397]  should_fail_ex+0x263/0x280
[  462.653938][T16397]  should_fail+0xb/0x20
[  462.653962][T16397]  should_fail_usercopy+0x1a/0x20
[  462.654044][T16397]  _copy_from_user+0x1c/0xb0
[  462.654080][T16397]  do_ipv6_setsockopt+0x124/0x2130
[  462.654167][T16397]  ? kstrtoull+0x111/0x140
[  462.654194][T16397]  ? __rcu_read_unlock+0x4e/0x70
[  462.654245][T16397]  ? avc_has_perm_noaudit+0xab/0x130
[  462.654276][T16397]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  462.654312][T16397]  ipv6_setsockopt+0x59/0x130
[  462.654341][T16397]  tcp_setsockopt+0x98/0xb0
[  462.654422][T16397]  sock_common_setsockopt+0x69/0x80
[  462.654482][T16397]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  462.654565][T16397]  __sys_setsockopt+0x184/0x200
[  462.654590][T16397]  __x64_sys_setsockopt+0x64/0x80
[  462.654650][T16397]  x64_sys_call+0x2327/0x3020
[  462.654674][T16397]  do_syscall_64+0x12c/0x3b0
[  462.654807][T16397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.654829][T16397] RIP: 0033:0x7f4d812dce59
[  462.654849][T16397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.654873][T16397] RSP: 002b:00007f4d7fd37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  462.654900][T16397] RAX: ffffffffffffffda RBX: 00007f4d81555fa0 RCX: 00007f4d812dce59
[  462.654914][T16397] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  462.654944][T16397] RBP: 00007f4d7fd37090 R08: 00000000000004e8 R09: 0000000000000000
[  462.654958][T16397] R10: 0000200000002400 R11: 0000000000000246 R12: 0000000000000001
[  462.654976][T16397] R13: 00007f4d81556038 R14: 00007f4d81555fa0 R15: 00007fffc313e468
[  462.655004][T16397]  </TASK>
[  463.406398][T16404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3733'.
[  464.760450][T16412] rdma_rxe: rxe_newlink: failed to add xfrm0
[  465.022840][T16421] loop3: detected capacity change from 0 to 1024
[  465.034585][T16420] loop2: detected capacity change from 0 to 512
[  465.074691][T16420] EXT4-fs: Ignoring removed bh option
[  465.105079][T16420] EXT4-fs: inline encryption not supported
[  465.115894][T16421] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.135789][T16420] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  465.164227][T16420] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  465.205033][T16420] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3734: bg 0: block 248: padding at end of block bitmap is not set
[  465.241169][T16420] loop2: lost filesystem error report for type 5 error -117
[  465.241549][T16420] Quota error (device loop2): write_blk: dquota write failed
[  465.256469][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  465.256498][    C1] EXT4-fs (loop2): last error at time 1778983695: ext4_validate_block_bitmap:441
[  465.289512][T16431] netlink: 'syz.6.3739': attribute type 1 has an invalid length.
[  465.307581][T16431] 8021q: adding VLAN 0 to HW filter on device bond2
[  465.314450][T16420] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  465.331462][T16420] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3734: Failed to acquire dquot type 1
[  465.351275][   T28] audit: type=1326 audit(1778983695.705:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16429 comm="syz.6.3739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acb52ce59 code=0x7ffc0000
[  465.382169][T16420] loop2: lost filesystem error report for type 5 error -28
[  465.387565][T16420] EXT4-fs (loop2): 1 truncate cleaned up
[  465.424816][   T28] audit: type=1326 audit(1778983695.705:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16429 comm="syz.6.3739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acb52ce59 code=0x7ffc0000
[  465.461197][T16411] FAULT_INJECTION: forcing a failure.
[  465.461197][T16411] name failslab, interval 1, probability 0, space 0, times 0
[  465.486138][T16411] CPU: 1 UID: 0 PID: 16411 Comm: syz.2.3734 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  465.486176][T16411] Tainted: [W]=WARN
[  465.486186][T16411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  465.486203][T16411] Call Trace:
[  465.486212][T16411]  <TASK>
[  465.486223][T16411]  __dump_stack+0x1d/0x30
[  465.486250][T16411]  dump_stack_lvl+0x95/0xd0
[  465.486272][T16411]  dump_stack+0x15/0x1b
[  465.486297][T16411]  should_fail_ex+0x263/0x280
[  465.486387][T16411]  should_failslab+0x8c/0xb0
[  465.486451][T16411]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  465.486541][T16411]  ? __alloc_skb+0x2d6/0x690
[  465.486566][T16411]  __alloc_skb+0x2d6/0x690
[  465.486585][T16411]  ? __alloc_skb+0x200/0x690
[  465.486611][T16411]  netlink_alloc_large_skb+0xbf/0xf0
[  465.486667][T16411]  netlink_sendmsg+0x40c/0x6f0
[  465.486710][T16411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.486807][T16411]  ____sys_sendmsg+0x563/0x5b0
[  465.486853][T16411]  ___sys_sendmsg+0x195/0x1e0
[  465.486883][T16411]  ? _raw_spin_unlock+0x9/0x30
[  465.487010][T16411]  __x64_sys_sendmsg+0xd4/0x160
[  465.487049][T16411]  x64_sys_call+0x194c/0x3020
[  465.487081][T16411]  do_syscall_64+0x12c/0x3b0
[  465.487119][T16411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.487171][T16411] RIP: 0033:0x7f4d812dce59
[  465.487192][T16411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.487292][T16411] RSP: 002b:00007f4d7fd37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  465.487312][T16411] RAX: ffffffffffffffda RBX: 00007f4d81555fa0 RCX: 00007f4d812dce59
[  465.487330][T16411] RDX: 0000000000000880 RSI: 0000200000000300 RDI: 000000000000000a
[  465.487348][T16411] RBP: 00007f4d7fd37090 R08: 0000000000000000 R09: 0000000000000000
[  465.487364][T16411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.487376][T16411] R13: 00007f4d81556038 R14: 00007f4d81555fa0 R15: 00007fffc313e468
[  465.487476][T16411]  </TASK>
[  465.691523][   T28] audit: type=1326 audit(1778983695.705:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16429 comm="syz.6.3739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acb52ce59 code=0x7ffc0000
[  465.717037][   T28] audit: type=1326 audit(1778983695.705:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16429 comm="syz.6.3739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f4acb52ce59 code=0x7ffc0000
[  465.750724][   T28] audit: type=1326 audit(1778983695.705:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16429 comm="syz.6.3739" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4acb52ce59 code=0x7ffc0000
[  465.897313][T16441] loop7: detected capacity change from 0 to 1024
[  465.926501][T16441] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.949667][T16441] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.3741: lblock 3 mapped to illegal pblock 3 (length 3)
[  465.972953][T16441] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  465.985727][T16441] EXT4-fs (loop7): This should not happen!! Data will be lost
[  465.985727][T16441] 
[  466.015089][T16441] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3741: bg 0: block 112: padding at end of block bitmap is not set
[  466.043503][ T3485] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 4)
[  466.058380][ T3485] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117
[  466.071451][ T3485] EXT4-fs (loop7): This should not happen!! Data will be lost
[  466.071451][ T3485] 
[  466.081967][ T3485] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  466.094561][ T3485] EXT4-fs (loop7): This should not happen!! Data will be lost
[  466.094561][ T3485] 
[  466.107110][ T3485] EXT4-fs (loop7): Total free blocks count 0
[  466.113457][ T3485] EXT4-fs (loop7): Free/Dirty block details
[  466.119480][ T3485] EXT4-fs (loop7): free_blocks=0
[  466.124789][ T3485] EXT4-fs (loop7): dirty_blocks=64
[  466.130396][T14730] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  466.334054][T16453] loop0: detected capacity change from 0 to 1024
[  466.383991][T16458] loop2: detected capacity change from 0 to 1024
[  466.390954][T16458] EXT4-fs: Ignoring removed bh option
[  466.397045][T16453] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  466.418975][T16453] System zones: 0-1, 3-36
[  466.426445][T16460] loop6: detected capacity change from 0 to 128
[  466.434151][T16453] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3746: bad orphan inode 134217728
[  466.458870][T16453] loop0: lost filesystem error report for type 5 error -117
[  466.461630][T16453] EXT4-fs mount: 26 callbacks suppressed
[  466.461650][T16453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.473405][T16458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.520458][T16458] openvswitch: netlink: EtherType 0 is less than min 600
[  466.594568][T16471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3750'.
[  466.605244][T16458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3747'.
[  466.614904][T16471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3750'.
[  466.659431][T16453] ==================================================================
[  466.667851][T16453] BUG: KCSAN: data-race in filemap_read / filemap_read
[  466.674849][T16453] 
[  466.677207][T16453] read to 0xffff88810cd05ee0 of 8 bytes by task 16468 on cpu 0:
[  466.684875][T16453]  filemap_read+0x6f/0xa10
[  466.689440][T16453]  generic_file_read_iter+0x79/0x330
[  466.694780][T16453]  ext4_file_read_iter+0x1cc/0x290
[  466.699939][T16453]  copy_splice_read+0x471/0x6c0
[  466.704844][T16453]  splice_direct_to_actor+0x28f/0x670
[  466.710269][T16453]  do_splice_direct+0x119/0x1a0
[  466.715176][T16453]  do_sendfile+0x382/0x650
[  466.719654][T16453]  __x64_sys_sendfile64+0x105/0x150
[  466.724900][T16453]  x64_sys_call+0x2dc4/0x3020
[  466.729625][T16453]  do_syscall_64+0x12c/0x3b0
[  466.734260][T16453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.740185][T16453] 
[  466.742541][T16453] write to 0xffff88810cd05ee0 of 8 bytes by task 16453 on cpu 1:
[  466.750308][T16453]  filemap_read+0x98d/0xa10
[  466.754965][T16453]  generic_file_read_iter+0x79/0x330
[  466.760304][T16453]  ext4_file_read_iter+0x1cc/0x290
[  466.765495][T16453]  copy_splice_read+0x471/0x6c0
[  466.770404][T16453]  splice_direct_to_actor+0x28f/0x670
[  466.775824][T16453]  do_splice_direct+0x119/0x1a0
[  466.780729][T16453]  do_sendfile+0x382/0x650
[  466.785193][T16453]  __x64_sys_sendfile64+0x105/0x150
[  466.790453][T16453]  x64_sys_call+0x2dc4/0x3020
[  466.795179][T16453]  do_syscall_64+0x12c/0x3b0
[  466.799826][T16453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.805757][T16453] 
[  466.808110][T16453] value changed: 0x0000000000000112 -> 0x0000000000000113
[  466.815330][T16453] 
[  466.817675][T16453] Reported by Kernel Concurrency Sanitizer on:
[  466.823855][T16453] CPU: 1 UID: 0 PID: 16453 Comm: syz.0.3746 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  466.834839][T16453] Tainted: [W]=WARN
[  466.838682][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  466.848770][T16453] ==================================================================
[  466.881931][T12988] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.052786][T13230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.803022][   T36] bridge_slave_1: left allmulticast mode
[  474.808817][   T36] bridge_slave_1: left promiscuous mode
[  474.814585][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.843613][   T36] bond1 (unregistering): (slave geneve3): Releasing active interface
[  474.943481][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.953084][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.962359][   T36] bond0 (unregistering): Released all slaves
[  474.970581][   T36] bond1 (unregistering): Released all slaves
[  475.005110][   T36] tipc: Disabling bearer <udp:syz2>
[  475.010470][   T36] tipc: Left network mode
[  475.038770][   T36] hsr_slave_0: left promiscuous mode
[  475.044832][   T36] hsr_slave_1: left promiscuous mode
[  475.050506][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.058456][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.103379][   T36] team0 (unregistering): Port device team_slave_1 removed
[  475.113713][   T36] team0 (unregistering): Port device team_slave_0 removed
[  475.314762][   T36] IPVS: stop unused estimator thread 0...