last executing test programs:

1m26.351664928s ago: executing program 32 (id=99):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$setperm(0x5, r1, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain={'key_or_keyring:', r1})
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) (fail_nth: 3)

1m16.328338452s ago: executing program 33 (id=243):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) (async)
setxattr$security_evm(&(0x7f0000000280)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', &(0x7f0000000300), &(0x7f0000000340)=@md5={0x1, "19ea4267f692355bf56cffd9ed6d5159"}, 0x11, 0x2) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
ioctl(r1, 0xc138fd03, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003a00290200800000fadbdf2502000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000140)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x20000011)
r5 = dup(r3)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, 0xff8, 0xfffb}, 0x90) (async)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r7}) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0)
read(r8, &(0x7f0000000000)=""/256, 0x100) (async)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="040000005894abe5528d4d46c6534b3a1b48f5d8b4719258cf27b0d8a43a93caa58d2ca9a290e3aaa629881d4faf7e5e2423ac2fc9da4b5154298cf06b9470e30c8ef9b9021f5f6f3973e43ddc4104185856966591c0414f0b98a86dcb172d4e2c09cbdd3ddafb47a280b71c0295cc325dd0ad6f4c5f182ffeeed0f78aab1426100af3a3e947e350275d1e7e03db0b98956430e26ee1a32d4cc1e979f46caee10887585b2a21c3b83c", @ANYRES16=r10, @ANYBLOB="000229bd7000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000b0000005f0000000800a000b209000008009f0005000000080026006c090000"], 0x40}}, 0x0) (async)
syz_clone(0x60092000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m16.200785139s ago: executing program 34 (id=245):
setns(0xc9, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r0, 0x1f)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
read$usbfs(r0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x240}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file\x00', 0x42, 0x1ff)
pwrite64(r4, &(0x7f0000000040)="fc4e2ba901000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba900"/240, 0x100, 0x0)
pwrite64(r4, &(0x7f0000000140)='\x00', 0x1, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='7:1\x00', 0x4)

1m3.166845143s ago: executing program 4 (id=453):
socket(0x10, 0x803, 0x0)
r0 = socket(0xa, 0x3, 0x87)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x3, 0xadea})
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00'})
r2 = syz_open_dev$video4linux(&(0x7f0000000300), 0x3, 0x8002)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000380)={0x1, 0x0, {0x2, 0x3, 0x3001, 0x3, 0x4, 0x1}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r7, 0x29, 0x2, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
dup(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
write(r4, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8})

1m2.266918061s ago: executing program 4 (id=464):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000580)={{&(0x7f0000000380)=[{0x9, 0x8000000000000001, 0x1, {0x1, 0x5}, 0x6, 0x2, 0x9}, {0x9, 0xe0, 0x6a628062, {0x0, 0x223}, 0x0, 0x6, 0xc84d}, {0x9, 0x7fff, 0x1, {0x7, 0xb3}, 0x6, 0xfffffffffffffffb, 0xe97}, {0xb7f, 0xb5, 0x8, {0x9, 0x9}, 0x7fffffffffffffff, 0xe, 0x7}], 0x4, 0x40, 0x6, 0x6ea}, {&(0x7f0000000480)=[{0x5, 0x6a12}, {0x34, 0x9}, {0x7ff, 0x6}], 0x3, 0x10, 0xb, 0x3}, {&(0x7f00000004c0)=[0x49, 0x2, 0x25, 0x9, 0x4], 0x5, 0x8, 0x1, 0x7}, {&(0x7f0000000500)=[{0x8, 0x9, 0x9, 0x1, 0x72}], 0x1, 0x28, 0x9, 0x5}, {&(0x7f0000000540)=[0x3, 0x1594f36c, 0xff, 0x5], 0x4, 0x8, 0x2, 0x7}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = epoll_create1(0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
dup3(r3, r2, 0x80000)
r4 = fcntl$dupfd(r2, 0x406, r1) (async, rerun: 64)
r5 = epoll_create1(0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000022c0)={0x4002}) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000002280)={0x20000008}) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000002c0)={0xa0000013})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0xc, 0x48, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@nested={0x4, 0xb1}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084085}, 0x4008094)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000000)={{{@in6, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0x141) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)

1m1.910445838s ago: executing program 4 (id=474):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xc, 0x10000, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00', 0x7800, 0x20, 0x7f, 0x3}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x8, 0xc, 0x10000, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00', 0x7800, 0x20, 0x7f, 0x3}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x5, 0x16, 0x0, 0x0, 0x4, '\x00', r1, 0x8}, 0x94)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64)
pselect6(0x54, 0x0, &(0x7f0000000080)={0xb}, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x80000) (async)
r4 = epoll_create1(0x80000)
r5 = fcntl$dupfd(r3, 0x0, r3)
clock_gettime(0x4, &(0x7f0000000300))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014})
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x8})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000cc0)=[@in6={0xa, 0x4e20, 0x4c0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x1c, &(0x7f0000000cc0)=[@in6={0xa, 0x4e20, 0x4c0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)

1m1.844100886s ago: executing program 35 (id=474):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xc, 0x10000, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00', 0x7800, 0x20, 0x7f, 0x3}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x8, 0xc, 0x10000, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00', 0x7800, 0x20, 0x7f, 0x3}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x5, 0x16, 0x0, 0x0, 0x4, '\x00', r1, 0x8}, 0x94)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64)
pselect6(0x54, 0x0, &(0x7f0000000080)={0xb}, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x80000) (async)
r4 = epoll_create1(0x80000)
r5 = fcntl$dupfd(r3, 0x0, r3)
clock_gettime(0x4, &(0x7f0000000300))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014})
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x8})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000cc0)=[@in6={0xa, 0x4e20, 0x4c0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x1c, &(0x7f0000000cc0)=[@in6={0xa, 0x4e20, 0x4c0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)

59.066382186s ago: executing program 3 (id=515):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x703928, 0x25dfdbdd, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000030}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0)

58.876739092s ago: executing program 3 (id=524):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (fail_nth: 18)

58.782739368s ago: executing program 3 (id=526):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x109341)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0xe0ff, 0xb, 0x0})

58.718900632s ago: executing program 3 (id=529):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r0=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000040)={0x9, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

57.375061034s ago: executing program 3 (id=540):
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async, rerun: 64)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async, rerun: 64)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async, rerun: 64)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async, rerun: 64)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access2\x00', 0x2, 0x0)
write$smackfs_access(r0, &(0x7f0000000040)={'\\]', 0x20, '', 0x20, 'atbl'}, 0x9) (async, rerun: 64)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async, rerun: 64)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)

56.741603168s ago: executing program 3 (id=551):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x6, 0xf58, 0x7})
munmap$binder(0x0, 0xffffffff)
listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x8000000, 0x0, 0x8001}, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000)
pipe2$9p(&(0x7f0000001900), 0x0)

56.690671659s ago: executing program 36 (id=551):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x6, 0xf58, 0x7})
munmap$binder(0x0, 0xffffffff)
listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x8000000, 0x0, 0x8001}, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000)
pipe2$9p(&(0x7f0000001900), 0x0)

41.118793979s ago: executing program 7 (id=807):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2c2, &(0x7f0000000a00)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000000c0)='j', 0x1, 0x1ff)
getrusage(0x1, &(0x7f0000000180))
ioctl$BTRFS_IOC_ENCODED_WRITE(r4, 0x40809440, &(0x7f0000001ec0)={&(0x7f0000001e80)=[{&(0x7f0000000380)="77256a7ebc43087e03d67f9892c653443b42b69f54ace0f5028f9b437c39846d6fd197db4d01683f2c2200dd78d5beb4e27795636c293ce7bbc067c231c65114f83f627396b426c3cebf265fe09e7ccaaaa0c401b7799526ecd932d6cf06e2c18d6828a62f37ee9525df780585", 0x6d}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="bbdeda082e695fd051ff11e5b22536b6bd75fcfc22081d487b5c9d7d24ffc7ca08256f79199c04ef517fc187701c9197fb204159046ccc4db2397d05cedad9e37c49560d69fcd18b899a319dd699b173c4d696435d9d6181591c562ede14cb5fecae2b70d754471c90e361f9dca03830c5962a7e3c16a53c1ef6e0cf5666514cf35687038057a0e94baad999c069a5533b", 0x91}, {&(0x7f0000001dc0)="c521948b9f4d3d1897730ddc019a46539d17746a46999407b620ff6113a65f35c49aa814563efad60aab96dbe0c5bbc754f90fef73f4bffc563eb46cdfe2d4153223f62540a5c747566810a20c8d6fa32c2205f930b63301a2545d16b1dc85b3c5e8271c20df081b7e0e8de28839cf5963a0cd3d3ec9006b17547bf57daf8670f0c5e0aa05a392524dbbe9fad08e1516c828beda1df5f9dfd01c6ace6f5dfda3", 0xa0}], 0x4, 0xfffffffffffffff5, 0x0, 0x80, 0x7, 0x6, 0x3, 0xff})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read(r6, &(0x7f0000000500)=""/100, 0x7ffe)
read(r6, &(0x7f0000000040)=""/58, 0x3a)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000440)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x9, 0xd, 0x7, {0xfe, 0xdc94485f72181720, 0x3, 0xc56, 0x8001, 0x52b55f00}, {0x7, 0x0, 0x1, 0x20, 0xc017, 0x1}, 0x0, 0x3, 0xd}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x5}}}}]}]}, 0x488}}, 0x80)
r10 = openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x806, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r10, 0xc018620c, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x700})
write$6lowpan_control(r8, &(0x7f0000000340)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
r11 = socket$inet(0x2, 0x801, 0x0)
listen(r11, 0x540)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
splice(r11, 0x0, r12, 0x0, 0x7ffff000, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='tL\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd7000fbdbdf250a0000000c009900810000007f0000000c006e8004000100040002000b000a006810816ce407b10008000a00b313bf9108003700000000000a000600ffffffffffff000009000700534a138b7c0000001100070010ce33f178db925b38a7a16845000000"], 0x74}, 0x1, 0x0, 0x0, 0x24008080}, 0x890)

40.95462741s ago: executing program 7 (id=814):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7000000}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x80c4)

40.927597714s ago: executing program 7 (id=815):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000240)={0x9c, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x9c}, 0x1, 0x400000002000000, 0x0, 0x4040df5}, 0x4040084)

40.235449518s ago: executing program 7 (id=820):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x109341)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000080900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d400012803c0001800a0001006c696d69740000002c0002800c000240530000000000000208000540000000000c00014000000000000007ff080004400000000108000340000001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a0104000000009ae700810000000048000480440001800c0001007061796c6f006400340002800800044000000000080005400000000008000340000000570800024000000075664b02080006400000000208000740000000080900010073797a30000000000900020073797a3200000000146839001100010000000000000000000300000a"], 0x9c}}, 0x4)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0})

40.054662325s ago: executing program 7 (id=828):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r2 = syz_ublk_setup_io_uring(0x74bb, &(0x7f0000000640)={0x0, 0x7b12, 0x0, 0x0, 0x32d}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740))
syz_io_uring_setup(0x5c27, &(0x7f0000000780)={0x0, 0xcdc, 0x8000, 0x1, 0x82, 0x0, r2}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file1\x00'})
r5 = fcntl$dupfd(r1, 0x0, r1)
write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[], 0xfc24)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="30030002", @ANYRES16=r6, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x8080}, 0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32=r7, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a00", @ANYRES64], 0x84}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8)
move_mount(r8, &(0x7f0000000080)='./dev\x00', r8, &(0x7f00000000c0)='./dev\x00', 0x110)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
pwrite64(r8, 0x0, 0x2d, 0x10c6b)

39.98517936s ago: executing program 7 (id=830):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800)
sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)

38.078939177s ago: executing program 8 (id=873):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x20004000)
setns(0xc9, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(0x0, r1)
r2 = socket(0x8, 0x5, 0x5)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x42000004, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x62, 0x0, 0x7, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, {{0x6e22, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0)

37.997132946s ago: executing program 8 (id=875):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b)

37.896397628s ago: executing program 8 (id=877):
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={<r0=>0x0, 0x1}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r0, 0x21, "cdef82d06c81a2b4417e56cc4884adfe3d26744be1900fd5e8b30bfbbed504d051"}, &(0x7f00000000c0)=0x29)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.rpcsec.context/channel/file0\x00', &(0x7f0000000200), 0x6000)
write(r1, &(0x7f0000000400)='\\0x0000 2', 0x9)

37.79074239s ago: executing program 8 (id=879):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4)
getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/159, 0x9f)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x101042, 0x40)
chdir(&(0x7f0000000300)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/resource0\x00', 0xa0002, 0x2)
read$ublk_bdev(r1, 0x0, 0x0)

37.569886507s ago: executing program 8 (id=885):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
fallocate(r2, 0x10, 0x6, 0x10001)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x2e4ca021, @private2, 0x1}}, 0x0, 0x0, 0x14, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

37.297704072s ago: executing program 8 (id=889):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x311a028, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a"], 0x24}}, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2810000, &(0x7f0000000500)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000400)='./file0\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000140)=""/53, 0x35)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff0000000271101df2000000009500009759582bd94c0c005bcb04b20000000000f91976192d3ce080123145a0f85df032856d9df7451835e1a1e80fe69d60ed0354705aaee578ad1a8604e4881c9e248dd48228083db62dc7ef94e885a53d90d21c6868fa0600000085f70e3abfd927595fc01eec02a49e"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

37.125836894s ago: executing program 37 (id=889):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x311a028, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a"], 0x24}}, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2810000, &(0x7f0000000500)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000400)='./file0\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000140)=""/53, 0x35)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff0000000271101df2000000009500009759582bd94c0c005bcb04b20000000000f91976192d3ce080123145a0f85df032856d9df7451835e1a1e80fe69d60ed0354705aaee578ad1a8604e4881c9e248dd48228083db62dc7ef94e885a53d90d21c6868fa0600000085f70e3abfd927595fc01eec02a49e"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

29.738222773s ago: executing program 6 (id=961):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000240)={0x9c, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x9c}, 0x1, 0x400000000000000, 0x2400, 0x4040df5}, 0x4040084)

29.598942233s ago: executing program 6 (id=965):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0)
writev(r0, &(0x7f0000001400), 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

28.494685862s ago: executing program 6 (id=980):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x109341)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0xda3, 0xb, 0x0})

28.310999787s ago: executing program 6 (id=983):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffbff, 0x8000009, 0x105, 0x845c, 0xf, "f9fae05a0dd2878b00000000001f0000000900"})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000085be6effff003030302e"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10)
r2 = memfd_secret(0x80000)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01864c1, &(0x7f00000000c0)={r3})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETSHIFTSTATE(r4, 0x4b2f, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xd)

28.16675835s ago: executing program 6 (id=987):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x42, 0x1, 0x539e09df839dfe94, "d3fa5b89042b7205fe7bafe9e6415dbf6b34944d164ce8cd4e0d4c7b546787a7", 0x3631564e})
syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x109341)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_setup(0xc8c, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x4, 0xb4})
r4 = io_uring_setup(0x7cb5, &(0x7f0000000140)={0x0, 0x6c83, 0x402, 0xff7fffff, 0x26})
io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2)
io_uring_enter(r4, 0x4, 0x0, 0xf7, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1b8, 0xc8, 0x8, 0x0, 0x5803, 0x318, 0x2e8, 0x2e8, 0x318, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xffffff00], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0xfd, 0x3}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x81}}}, {{@ipv6={@remote, @loopback, [], [], 'pim6reg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x6, 0xfffffffe, 0x2, 'pptp\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000003"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0}, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
ptrace$setregset(0x4205, r10, 0x403, &(0x7f0000000000)={0x0})
write$cgroup_int(r9, &(0x7f0000000000)=0x8cf9, 0x12)

27.986051551s ago: executing program 6 (id=989):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (fail_nth: 33)

24.802739095s ago: executing program 5 (id=1012):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b)

24.59949044s ago: executing program 5 (id=1013):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xf, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast1}, 0x1c)
syz_read_part_table(0x40a2, &(0x7f0000000000)="$eJzsz7tNA0EYBODx+Z7C1rkMQkJHdOFuEKIWQge0g0QHRBCSINCesQ8K4CV9XzD773i9pw2/qj4OfRZZzv3wsS6+Hi8nntZlajL0n8r5qqZEN41VkrexrKskF7dVssl4/ORZstt/z6sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/pimxKNGWeLnKodikO3RjkpvS1SXO75L7ZPoxyev1ZbartGX/sD1dVawzJKnaueuT5+l/j1km1W7/w08FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6hesrutH9nf45NEAiCMIz+d3LiIoa2Y2QBtmAnC9uJkS0arbAsigWYvZd8wTAMs8zeZp/JlrIm2SW9nZL0YUlq8jikXT7L1+PI9nNhna25n5P9d/Aq/3kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3O3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgpQAAAP//wMEbTw==")

24.55273887s ago: executing program 38 (id=830):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800)
sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)

23.260245004s ago: executing program 5 (id=1022):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='bfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f000000a200)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)=""/59, 0x3b}], 0x6, &(0x7f0000000580)=""/98, 0x62}, 0xab4}, {{&(0x7f0000000600)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/234, 0xea}, {&(0x7f0000000800)=""/4, 0x4}, {&(0x7f0000000840)=""/123, 0x7b}], 0x4, &(0x7f0000000900)=""/74, 0x4a}}, {{&(0x7f0000000980)=@l2, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000b00)=""/54, 0x36}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/49, 0x31}, {&(0x7f0000002780)=""/180, 0xb4}, {&(0x7f0000002840)=""/81, 0x51}], 0x7, &(0x7f0000002940)=""/246, 0xf6}, 0x2}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/74, 0x4a}, {&(0x7f0000003ac0)=""/125, 0x7d}, {&(0x7f0000003b40)=""/15, 0xf}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/253, 0xfd}, {&(0x7f0000004c80)=""/190, 0xbe}, {&(0x7f0000004d40)=""/164, 0xa4}], 0x8, &(0x7f0000004e80)=""/182, 0xb6}, 0x8000}, {{&(0x7f0000004f40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000007480)=[{&(0x7f0000004fc0)=""/237, 0xed}, {&(0x7f00000050c0)=""/175, 0xaf}, {&(0x7f0000005180)=""/113, 0x71}, {&(0x7f0000005200)=""/53, 0x35}, {&(0x7f0000005240)=""/150, 0x96}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/181, 0xb5}, {&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/186, 0xba}], 0x9, &(0x7f0000007540)=""/74, 0x4a}, 0x3}, {{&(0x7f00000075c0)=@nfc_llcp, 0x80, &(0x7f0000009c40)=[{&(0x7f0000007640)=""/178, 0xb2}, {&(0x7f0000007700)=""/89, 0x59}, {&(0x7f0000007780)=""/4096, 0x1000}, {&(0x7f0000008780)=""/209, 0xd1}, {&(0x7f0000008880)=""/249, 0xf9}, {&(0x7f0000008980)=""/123, 0x7b}, {&(0x7f0000008a00)=""/52, 0x34}, {&(0x7f0000008a40)=""/241, 0xf1}, {&(0x7f0000008b40)=""/4096, 0x1000}, {&(0x7f0000009b40)=""/207, 0xcf}], 0xa}, 0x800}, {{&(0x7f0000009d00)=@can, 0x80, &(0x7f000000a080)=[{&(0x7f0000009d80)=""/135, 0x87}, {&(0x7f0000009e40)=""/220, 0xdc}, {&(0x7f0000009f40)=""/25, 0x19}, {&(0x7f0000009f80)=""/115, 0x73}, {&(0x7f000000a000)=""/74, 0x4a}], 0x5, &(0x7f000000a100)=""/251, 0xfb}, 0xa}], 0x7, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)

23.001199896s ago: executing program 5 (id=1025):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = syz_io_uring_setup(0x3711, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x2, 0x55}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000840)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20048084}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21bcc9, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00')
read$FUSE(r11, &(0x7f0000001300)={0x2020}, 0x2020)
syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r5, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1}, 0x0, 0x40000102, 0x1})
io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r13, 0x0, 0xd, 0x0, 0x0)

22.602888437s ago: executing program 5 (id=1028):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x4000, 0x2, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x28, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0, 0x10100, 0x0, {0x3}})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c)
write$P9_RLCREATE(r5, 0x0, 0x0)
r6 = dup(r4)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
write$P9_RSETATTR(r6, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7)
socket$netlink(0x10, 0x3, 0x14)

22.400982753s ago: executing program 5 (id=1030):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x703928, 0x25dfdbdd, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000030}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

22.119388428s ago: executing program 39 (id=1030):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x703928, 0x25dfdbdd, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000030}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

11.776114665s ago: executing program 40 (id=989):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (fail_nth: 33)

5.237581523s ago: executing program 2 (id=1139):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]})
socket(0x10, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, <r1=>0xffffffffffffffff}, 0x4)
ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000280)={0x80})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x12701, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000007c0000001cd7a94710b93fe4df06824d9caf758ba6a5cb57f3891a81631e9197d3eac15279d7aef7f213256866bdaec0bc188015cbdc521569bbec5e9c0fc2908ebae2906b6ec3d4049bbcade1883c2f1076479007533e62823f7b1b70e46a606531db9203e58513acdfa08f5a8c7965da4a01cb86037f1dd088ad653c62971364"], &(0x7f0000000400)=0xa0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xa}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000)
capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x80000001, 0x6})
r6 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.183035218s ago: executing program 2 (id=1143):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x4040080, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/cpu_dma_latency\x00', 0x101042, 0x8)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b)

4.110681015s ago: executing program 2 (id=1146):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f00000008c0)="$eJzs3c9vFFUcAPDvTH/w21bFHyBoFY3EH4WWnwcvGE08aGKiB4yn2haCLFRpTYQQrR7waEi8G48m/gWe9GLUk4lXvRsSYriAGs2YmZ0py7JbWLp00f18klnem3nLvO/MvN037+1uA+hbY/lDErExIn6JiJF69toCY/V/rlw6O/3HpbPTSWTZa78nRbnLl85OV0Wr522oZ7KszK9psd9zb0ZM1Wqzp8r8roUT7+yaP33m2WMnpo7OHp09OXnw4N4924f3T+7rSpx5XJe3fjC3bctLb5x/Zfrw+bd++Cqv78Zye2McXbJurH50W3qiyzvrtU0N6WSwhxWhIwMRkZ+uoaL9j8RArFvaNhIvftzTygG3VZZlWav359JiBvyPJdHrGgC9Ub3R5/e/1bJKXY87wsVDEe8eqMd/pVzqWwYjLcsMNd3fdtNYRBxe/PPzfInbMw4BAHCNbw5FxDOt+n9p3N9Q7q5yDmU0Iu6OiHsi4t6I2BwR90UUZR+IiAc73H/zDMn1/Z/0wi0FdpPy/t9z5dzWUv/v76yIvzQ6UOY2FfEPJUeO1WZ3l8dkZwytyfMTy+zj2xd+/rTdtsb+X77k+6/6gnXphcGmAbqZqYWpFYa95OJHEVsHm+IvJFFN4yQRsSUitnb0P2dZWjxGHHvqy23tSt04/mV0YZ4p+yLiyfr5X4ym+CtJ2/nJiQP7J/ftWhu12d1/ZVlWXBXX+/Gnc6+22/+K4u+C/Pyvb77+C0vxjyZrI+ZPnzlezNfOR/MM8Q2d+/WTtvc0t3r9DyevF+nhct37UwsLpyYihpOXG9b/03SXW5abvHrl5PHv3NEq/rR4jauifSgi8ot4e0Q8HBGPlHV/NCIei4gdy8T//fOPv915/MuMyndRHv/Mjc5/NJ7/zhMDx7/7uvP4K/n531ukdpZrbub172YruJJjBwAAAP8VafEZ+CQdX0qn6fh4/TP8m2N9WpubX3j6yNx7J2fqn5UfjaG0Gv8caRgPnSjHhqv85NWhmSK/pxw3/mxgXZEfn56rzfQ4duh3G9q0/9xvA72uHXDb+b4W9C/tH/qX9g/9S/uH/qX9Q/9q1f4/7EE9gNXn/R/6l/YP/Uv7h/6l/UNfavvd+HRFX/mXWIVE+QsNix08q/pRiS7sPdLOnzUYPT1iSQc/DHHnJAa7XufyT3REuWZNy8K9e00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopn8DAAD//7kl5Go=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0)
pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001)
chdir(&(0x7f0000000140)='./file0/file1\x00')
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff})
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x1000002, 0x0, 0xd33, 0xd26d})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCFLSH(r3, 0x5608, 0x1200)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2)
sendmsg$FOU_CMD_ADD(r2, 0x0, 0x4000000)
openat$cgroup_ro(r2, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/current_tracer\x00', 0x1, 0x0)
writev(r4, &(0x7f00000023c0)=[{&(0x7f0000000180)='D', 0x1}, {0x0}], 0x2)
openat$cgroup_procs(r4, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)

3.612603937s ago: executing program 2 (id=1150):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r5, 0x311}, 0x14}}, 0x0) (async)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r5, 0x311}, 0x14}}, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x14, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2}) (async)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x14, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2})
io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0)

3.414938623s ago: executing program 2 (id=1153):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESOCT], 0x4, 0x2cc, &(0x7f0000000440)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x40)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c)

2.426550486s ago: executing program 2 (id=1160):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3808c4e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf5, 0x331, &(0x7f0000000080)="$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") (async)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3808c4e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf5, 0x331, &(0x7f0000000080)="$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")
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080), 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x40c4)
umount2(0x0, 0xe)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
syz_open_dev$dri(&(0x7f00000003c0), 0x10, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x10, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, <r7=>0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[r9, r9], 0x2, r7, r8, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) (async)
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[r9, r9], 0x2, r7, r8, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000980)={&(0x7f0000000400), &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x7, 0x5, 0x0, 0x0, r9})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.315668364s ago: executing program 9 (id=1163):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000080000000c00000001"], 0x50) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="e78a9bb3e976162f5a6886a4beeed2c2", 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$netlink(0x10, 0x3, 0x8000000004)
r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000100))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"})

2.090717464s ago: executing program 9 (id=1164):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x101}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, 0x0)

1.794681286s ago: executing program 9 (id=1167):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000024e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x48080)
r1 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000002dc0), 0x2, 0x0)
writev(r3, &(0x7f00000033c0)=[{&(0x7f0000003300)="5a330ae89d6b439b4e57", 0xa}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)

1.742094839s ago: executing program 1 (id=1169):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7566646e6f3fbc63e4a537540c8d033d85c28470a8889808416c9171fec58df5edd0abc84474fcbf3036edde24b189b7aa93be3166eeaa21340306c3f9b261c6281523856f9c0cca8742b8b49e1bc95e1b3dbd5459", @ANYRES64=r1, @ANYBLOB=',\x00'])
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r3, 0x7c65, 0xa334, 0x1, 0x0, 0x0) (async)
io_uring_enter(r3, 0x7c65, 0xa334, 0x1, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/resume', 0x40402, 0x81)
r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
getpid() (async)
r11 = getpid()
sched_setscheduler(r11, 0x1, &(0x7f00000000c0)=0x7)
syz_ublk_add_dev(r3, r8, r5, r6, &(0x7f0000000300)={0x2e, 0x6, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0xd6b, 0x0, 0x0, 0x1000, 0xffffffff, r11, 0x0, 0x81}}}, &(0x7f0000000380))

1.350223295s ago: executing program 1 (id=1171):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x7000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0)

1.340239155s ago: executing program 9 (id=1172):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
r1 = socket(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
recvfrom$l2tp6(r1, &(0x7f0000000540)=""/155, 0x9b, 0xfa70d0fc93519a37, &(0x7f0000000600)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003904000000140000000000000010", @ANYRES32=r5, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac1414"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r2, &(0x7f00000001c0)="11eb", 0x2, 0x24044801, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)=@delqdisc={0x298, 0x25, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x8, 0xa}, {0xf, 0xfff3}}, [@TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x4, 0x7, 0x0, 0x4, 0x81, 0x4}}, {0xc, 0x2, [0x0, 0x8001, 0x5, 0x8]}}, {{0x1c, 0x1, {0xf, 0x3, 0x800, 0x4, 0x1, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0x3, 0x3ff]}}, {{0x1c, 0x1, {0x1, 0x3, 0x8, 0x1, 0x2, 0x10000, 0x1, 0x9}}, {0x16, 0x2, [0xc4b, 0x401, 0x3, 0x8, 0x0, 0x54, 0x4, 0x200, 0x3]}}, {{0x1c, 0x1, {0xee, 0xe, 0x2, 0x9, 0x0, 0xc1b, 0x6, 0x6}}, {0x10, 0x2, [0x710, 0x1, 0x2, 0x6, 0x1, 0x4237]}}, {{0x1c, 0x1, {0x3, 0x81, 0x7, 0x7, 0x2, 0x6897cd39, 0x8, 0x4}}, {0xc, 0x2, [0x7, 0x9, 0x5, 0x6]}}, {{0x1c, 0x1, {0xb, 0x4, 0x6, 0x4, 0x2, 0x1, 0x1, 0x9}}, {0x16, 0x2, [0x200, 0x27, 0x80, 0x1ff, 0x0, 0xfffa, 0xdbb, 0x3, 0x9]}}, {{0x1c, 0x1, {0xb, 0x7f, 0x5, 0x8, 0x0, 0x1d9, 0x9, 0x5}}, {0xe, 0x2, [0x8, 0x7f, 0x9, 0xcb8, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa6}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x81, 0xb, 0x21, 0x2, 0xfffffff3, 0x7, 0x3}}, {0xa, 0x2, [0x8, 0x3, 0x9]}}, {{0x1c, 0x1, {0x2, 0x82, 0x2, 0x4, 0x2, 0x5, 0x7ff, 0x7}}, {0x12, 0x2, [0x8, 0x6, 0x661d, 0x6, 0xc, 0x8, 0x4]}}, {{0x1c, 0x1, {0xab, 0x6, 0x5, 0x8001, 0x1, 0x1ff, 0x1, 0x2}}, {0x8, 0x2, [0xf9, 0xdf9c]}}, {{0x1c, 0x1, {0x6, 0x17, 0x3, 0x6, 0x0, 0x10001, 0x6, 0x1}}, {0x6, 0x2, [0xf]}}, {{0x1c, 0x1, {0x3, 0x6, 0x8, 0x5, 0x0, 0x5, 0x5, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x9, 0x81, 0x3, 0xaae, 0x1, 0x7, 0x0, 0x3}}, {0xa, 0x2, [0x5, 0x7, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}]}, 0x298}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1})

946.89541ms ago: executing program 0 (id=1174):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)

850.576307ms ago: executing program 0 (id=1175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1100}, 0x80c4)

839.649591ms ago: executing program 1 (id=1176):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x7e55, &(0x7f0000000000)={0x0, 0x893e, 0x6800, 0x3, 0x15a}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = mmap$IORING_OFF_PBUF_RING(0x0, 0x8, 0x5, 0x1010, r0, 0x836b535a)
r6 = syz_ublk_setup_io_uring(0x136c, &(0x7f0000000140)={0x0, 0xd124, 0x1, 0x3, 0x362}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=<r7=>0x0)
syz_io_uring_submit(r2, r5, r7, &(0x7f0000000a80)=@IORING_OP_READV_FIXED={0x3c, 0x2, 0x2007, @fd_index=0xa, 0x1ff, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000480)=""/182, 0xb6}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000005c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/78, 0x4e}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000800)=""/160, 0xa0}], 0x9, 0x10, 0x0, {0x3, 0x0, 0x6, '\x00', &(0x7f0000000a40)={0x5, 0x0, 0x98, &(0x7f0000000980)="798664030e8e473ad1fe478d5959fe3864cac74740003a8f7776dea1258fb9c85639366401382848ee28d17505d11ce31fbafc3f4a2b498e4a2aca27e1bcc57f830d2d0c9bbad169a13e26d36bbce9ff22a0e5a9b2804939391858a24bc439105b54eb521cca2881d29bf323a50cc28f71abf24f2d1accd5dee3b835b07435074687334bfc08674e14e15306f2b1cd182e50f4daa1004545", 0x5}, 0x4}})
io_uring_enter(r1, 0x5bba, 0x3671, 0x10, &(0x7f0000000b00)={[0x8]}, 0x8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xf4, r9, 0x228, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x682}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20048090}, 0x20000800)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000d40)=<r11=>0x0)
syz_ublk_add_dev(r1, r2, r5, r4, &(0x7f0000000dc0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000d80)=@new_dev={0x1, 0x5af, 0x0, 0x0, 0x1000, 0xffffffff, r11, 0x0, 0x180}}}, &(0x7f0000000e40))
r12 = syz_open_dev$vcsu(&(0x7f0000000e80), 0x3, 0x400800)
syz_io_uring_submit(r2, r3, r7, &(0x7f0000001000)=@IORING_OP_STATX={0x15, 0x2, 0x0, r12, &(0x7f0000000ec0), &(0x7f0000000fc0)='./file0\x00', 0x80, 0x100, 0x0, {0x0, r10}})
getsockopt$nfc_llcp(r12, 0x118, 0x4, &(0x7f0000001080)=""/160, 0xa0)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r8)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000001440)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f00000011c0)={0x218, r13, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1f4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xab, 0x5, "fdb1822d884ff0cf3ffc481e2455e9e044716dc0b0672c1047858dcd42b728c0794a938925c756eaa25cb74aace90b32f6f8b23b9cd4d8ed6044bd1476e9e067c4b5f2f659155cf9ffb6bc1cbf6719617e5b1c9e760db78d01cfece24bc896110eb61262f2735b9932067027ea9ea470eb5a94d60dd32dadacd6a17a1f3e0c125c541d1be9ce12eb7c42ccf630c0dda622eda524df823957e98cd91524bf2d0c35f5111c654011"}, @ETHTOOL_A_BITSET_VALUE={0xfa, 0x4, "5e27e47e7893dc7fa037136d2c0a8e724435e6644ad50659a2edaf831023d119d799f605132ff28678f7f9ee57915068564c050d182b6d99e7e904f57c6e850527e94c11d4322d374492ea0c9f81023ec73b0e889d60a044e64945f17475993e8e5b8b4218f25b8359fcca268e21e322f5e24228cbe139bc88899f0cf31caa40d54a049b63dd40812f2adc805aa22659dac8c9f6b4481af0879fd7bb87cb0a2086dadf58d73e93545f5f8da4526f4e739f651b3dd2aad8362cce34b825d649659558861fe9c1a003bd6243fd52a33571982076050057c77b54eda7e235c0a78ba28cf4365f49266c0be6cbfe4043d5f25f9d6b5162e5"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(Z%#$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xb}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}]}, 0x218}}, 0x20064004)
r14 = syz_genetlink_get_family_id$batadv(&(0x7f00000014c0), r12)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001500)={'batadv_slave_1\x00', <r15=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r12, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, r14, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}]}, 0x60}}, 0x30000800)
io_uring_register$IORING_REGISTER_PBUF_STATUS(r12, 0x1a, &(0x7f0000001640)={0x7}, 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0xc, 0x23, 0x7, 0x7aa}, {0xb37c, 0xa, 0x7a, 0x7fff}, {0x5, 0xc9, 0x5a, 0x400}, {0x2, 0x7, 0x0, 0x5}]})
getsockopt$PNPIPE_HANDLE(r12, 0x113, 0x3, &(0x7f0000001700), &(0x7f0000001740)=0x4)
ioctl$EVIOCGBITSW(r12, 0x80404525, &(0x7f0000001780)=""/10)
r16 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000001840)={0xfd, 0x0, &(0x7f0000001800)=[r1, r16]}, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r12, 0x11, 0x2, &(0x7f0000001880)=""/4096, &(0x7f0000002880)=0x1000)
sendmsg$NL80211_CMD_RADAR_DETECT(r12, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x26}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc0)

642.725988ms ago: executing program 1 (id=1177):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x101}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 1)

623.964436ms ago: executing program 0 (id=1178):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write(r2, &(0x7f0000000840)="d6ed11", 0x3)
close(r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56441, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0x8, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x101}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c4}, 0x4040840)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = epoll_create1(0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x4648}], 0x18, 0x8000}], 0x1, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010028bd700002d4df24ffe30000", @ANYRES32=r10, @ANYBLOB="984e0600c12a01002c001280110001006272696467655f736c61766500000000140005800500060004000000050008"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, r7, &(0x7f0000000340)=0x8000000000000000, 0x3e1)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000000c0)={0x4})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r11)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r12, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x2006, 0x7}, @window={0x3, 0x4f, 0x2002}, @mss={0x2, 0xfff}, @sack_perm, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r12, @ANYRES32=r0, @ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)

526.859365ms ago: executing program 4 (id=1096):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x109341)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r1, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0xa100, 0xb, 0x0})

413.025121ms ago: executing program 1 (id=1179):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x2, 0x0, "3eccd8f9d20000000000001000000200000500"})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000740)='bridge0\x00')
ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000240)={'bridge0\x00', @ifru_ivalue=0x5})
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xee01, &(0x7f0000000200))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x3, 0x58c, &(0x7f0000000480)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000005000000000000000d000000850000006300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_pts(r0, 0x80000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
socket(0x2b, 0x1, 0x8)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001400090500000800fddbdf25020852fe", @ANYRES32=0x0, @ANYBLOB="08000200ffffffff08000100000000732865118665ffaf1d87e3f60e756a001400060006000000dd00006be3309cb8e1000500000000000000"], 0x3c}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendto$inet(r4, 0x0, 0x0, 0x371daf00999c2bb4, &(0x7f0000000840)={0x2, 0x4e22, @empty}, 0x10)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x18000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfffffffc, 0x2}, {0x6, 0xfffffff7}]}, 0x14, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0xb1)

335.004207ms ago: executing program 4 (id=1180):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x2, 0x7fff7efc}]})
get_mempolicy(0xffffffffffffffff, 0x0, 0xffff, &(0x7f0000ffc000/0x4000)=nil, 0x2)

331.114092ms ago: executing program 0 (id=1181):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/vkms/mydev/planes/plane0/type\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='1\x00', 0x2)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})

252.289766ms ago: executing program 4 (id=1182):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000580)={0x10, 0xd7, 0x5, 0x0, <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x48080)
unshare(0x22020600)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x24, 0x80000000, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x3, 0xc})
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r8 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000040)=0x1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r9 = getpid()
sched_setscheduler(r9, 0x1, &(0x7f00000000c0)=0x7)
openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0)

248.488421ms ago: executing program 0 (id=1183):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffe14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0x20c01, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)

90.889371ms ago: executing program 0 (id=1184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0)
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0x6fa}], 0x5)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

829.053µs ago: executing program 9 (id=1185):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0)

260.582µs ago: executing program 1 (id=1186):
r0 = syz_io_uring_setup(0x7458, &(0x7f0000000280)={0x0, 0x73d4, 0x40, 0x2, 0x859}, &(0x7f0000000100), &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000), &(0x7f0000000080))
syz_io_uring_submit(r3, r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x1, 0x20}) (async)
syz_io_uring_submit(r3, r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x1, 0x20})
syz_clone(0x8241311, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nogrpid}, {@bh}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@discard}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4ef, &(0x7f0000000a40)="$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")
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
close(r5)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080))
landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x9, 0x2, 0x9000, 0x12, 0x2}, 0x30, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000240)=0x7) (async)
sched_setscheduler(r6, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000340)={0xa, 0x4e21, 0xaf, @empty, 0x4}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000540)="d051e48ef2924536256662fe49af6a72a8710634dd1428e0fbb6e37ad8a58c575e89020c74c261b730b15bd72e222cd615c26506de4aef556c75af4fcf4fa775d10e050909ec0fdc945e44ffabc6cd88feb4e2bd00fd2028869db470153f80999970f63d9e0da6b4775867ed75bf957ed9431aed44d5e9116bb183b9d75135df2f23a1e3dd354383a01aa7123689699b477e5ac144b440b5f247bc8539f5c877d645b1e0463b343be4ac903a1161505c77fb336b58e5b63b255ec82c958f6b9712dcff8f", 0xc4}, {&(0x7f0000000640)="2415bd126134e505a713212f165a0f32435cd17902cabf959715c2a49029b9c2086460ba29b26510fff721105ab611db0f3bf2193284b69853a06947151ec9f2bd8c10478fed17acd1ce4250de6fcc6c2b35faabce4cf621b37c5f1907f3851bfe51aeb8c997b974e98c0d778666bf394c1a957fb1", 0x75}, {&(0x7f00000006c0)="6a4026dec35e90940763edfd96c4bdce7412cc774b38fe35f8041f9b14259e5057a5b6631c28bc25590fcfef8e86429b5a526a8a0bba05f4dc2eed4c971714558f4cd36430678d212dfd63c2c8428a1e1c69b4ded9a6ae3a3ab2ebae60e1", 0x5e}, {&(0x7f00000007c0)="7ac8545d9b8fe8d2dff95e9c90851827d4b33a66b0c8ad6c2fd04d9561dcce210760f1c03418e5bac48a02884cf49bac18350032d1b84385c7c3", 0x3a}, {&(0x7f00000008c0)="6636536f66e3313781e85eb491fd539073498a5c94ea40f22346f19a77ba8184c1f82d2636512fd22f1b2056837b07db50c8ce085973538e7dcc44907349f3ddb3dfad248e4e4b64d56b40a9f9920f3b1319ce3417de7f15e35acb4ccc518d595a0eadcab5bc267f03e7765b96a028fd877e43b907cf984c7bcce6224abecc6c19819ec5f75b69de7d345a5e671ee4c39010f8c9abea4130509d2010f24ac734139af9e35477ffcd1bbc248e89c47bb943ea6b52b1d9437b56e38ea2adb29217e9ffef2a6fbee7c6b58ace99f7ea5927af2f35ef5c", 0xd5}, {&(0x7f00000009c0)="bbb76e70946a74db111eb298cbf0d973577d24c597bdc354f65aa764224e35951d2a516b4843dad982d4cbcfb919dd67153be3a06ed6d5523f017ed1c92727e67736daa57116374959ea1fcf0d74307b265e2b9d2bb2cce2d41d", 0x5a}], 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="240000000092f36e7ae3ba8000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000500000000000000029000000370000003306000000000000072000000002060301800900000000000000020000000000000002000000000000000502006b00010001060000000000000401050000000020010000000000002900000037000000892100000000000004010dc910fe8000000000000000000000000000aa00e419ea4fe115d5ca364aa9695509356bdae5438d58e3b3ddc64c4feecfc8bce181a8fc26075bdadebe0667d7ba0e3b01d218ae2b91307437d3105e467ba043774fe55e12bca1bbf7e5fbad8fee340b0ff87707d5ec5378ae127f15c73e5f23f0b6766b701d23d6abde6733ab12112ed5d8aa86a67bc953b5c3b64b28b52e108664f79e3e80ad93bf8ca24feece4ecfb87c897a7b472626c2b6ce4a16d3040ea6bc6180bfd2097325f929938dfcebc013a8b0f525d01919d6c2fb432fca81a7fd0633f3000fab3abbc5288969a5a06baae30f36ca58b185dc2b42f5ce5910768cd0175b07c3010400000000000100050200ad24000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c0}, 0x20004000)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='user.Mdev/fuse\x00'], 0x0, 0x0, 0x1) (async)
fsetxattr(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB='user.Mdev/fuse\x00'], 0x0, 0x0, 0x1)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0xff, 0x539, &(0x7f00000015c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
listen(r9, 0x0)

0s ago: executing program 9 (id=1187):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}, 0x1, 0x0, 0x0, 0x7000000}, 0x80c4)

kernel console output (not intermixed with test programs):

obability 0, space 0, times 0
[   75.514604][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz.9.733 Tainted: G             L      syzkaller #0 PREEMPT 
[   75.514619][ T7549] Tainted: [L]=SOFTLOCKUP
[   75.514624][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   75.514631][ T7549] Call trace:
[   75.514635][ T7549]  show_stack+0x2c/0x3c (C)
[   75.514656][ T7549]  __dump_stack+0x30/0x40
[   75.514670][ T7549]  dump_stack_lvl+0xd8/0x12c
[   75.514680][ T7549]  dump_stack+0x1c/0x28
[   75.514690][ T7549]  should_fail_ex+0x41c/0x590
[   75.514703][ T7549]  should_fail_alloc_page+0xec/0x10c
[   75.514713][ T7549]  prepare_alloc_pages+0x194/0x4a4
[   75.514723][ T7549]  __alloc_frozen_pages_noprof+0x134/0x320
[   75.514732][ T7549]  __alloc_pages_noprof+0x18/0x100
[   75.514740][ T7549]  alloc_pages_bulk_noprof+0x564/0x730
[   75.514748][ T7549]  __kasan_populate_vmalloc+0xc0/0x1d0
[   75.514759][ T7549]  alloc_vmap_area+0xdf4/0x13e8
[   75.514768][ T7549]  __get_vm_area_node+0x210/0x32c
[   75.514777][ T7549]  __vmalloc_node_range_noprof+0x2c8/0x105c
[   75.514786][ T7549]  __vmalloc_node_noprof+0xec/0x14c
[   75.514795][ T7549]  vmalloc_noprof+0x3c/0x4c
[   75.514804][ T7549]  bpf_prog_calc_tag+0x60/0x30c
[   75.514812][ T7549]  check_and_resolve_insns+0xc0/0x1c44
[   75.514822][ T7549]  bpf_check+0xde0/0x40dc
[   75.514830][ T7549]  bpf_prog_load+0x1050/0x15f8
[   75.514837][ T7549]  __sys_bpf+0x870/0x8c8
[   75.514844][ T7549]  __arm64_sys_bpf+0xd0/0xec
[   75.514851][ T7549]  invoke_syscall+0x98/0x244
[   75.514861][ T7549]  el0_svc_common+0xec/0x23c
[   75.514870][ T7549]  do_el0_svc+0x4c/0x5c
[   75.514880][ T7549]  el0_svc+0x64/0x260
[   75.514891][ T7549]  el0t_64_sync_handler+0x48/0x148
[   75.514901][ T7549]  el0t_64_sync+0x198/0x19c
[   75.514937][ T7549] warn_alloc: 3 callbacks suppressed
[   75.514947][ T7549] syz.9.733: vmalloc error: size 32, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0
[   75.514996][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz.9.733 Tainted: G             L      syzkaller #0 PREEMPT 
[   75.515007][ T7549] Tainted: [L]=SOFTLOCKUP
[   75.515009][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   75.515013][ T7549] Call trace:
[   75.515016][ T7549]  show_stack+0x2c/0x3c (C)
[   75.515026][ T7549]  __dump_stack+0x30/0x40
[   75.515035][ T7549]  dump_stack_lvl+0xd8/0x12c
[   75.515045][ T7549]  dump_stack+0x1c/0x28
[   75.515054][ T7549]  warn_alloc+0x1bc/0x1d0
[   75.515061][ T7549]  __vmalloc_node_range_noprof+0x2e8/0x105c
[   75.515071][ T7549]  __vmalloc_node_noprof+0xec/0x14c
[   75.515080][ T7549]  vmalloc_noprof+0x3c/0x4c
[   75.515088][ T7549]  bpf_prog_calc_tag+0x60/0x30c
[   75.515096][ T7549]  check_and_resolve_insns+0xc0/0x1c44
[   75.515105][ T7549]  bpf_check+0xde0/0x40dc
[   75.515113][ T7549]  bpf_prog_load+0x1050/0x15f8
[   75.515120][ T7549]  __sys_bpf+0x870/0x8c8
[   75.515127][ T7549]  __arm64_sys_bpf+0xd0/0xec
[   75.515134][ T7549]  invoke_syscall+0x98/0x244
[   75.515143][ T7549]  el0_svc_common+0xec/0x23c
[   75.515153][ T7549]  do_el0_svc+0x4c/0x5c
[   75.515162][ T7549]  el0_svc+0x64/0x260
[   75.515172][ T7549]  el0t_64_sync_handler+0x48/0x148
[   75.515181][ T7549]  el0t_64_sync+0x198/0x19c
[   75.515192][ T7549] Mem-Info:
[   75.515200][ T7549] active_anon:146 inactive_anon:19148 isolated_anon:0
[   75.515200][ T7549]  active_file:3556 inactive_file:13565 isolated_file:0
[   75.515200][ T7549]  unevictable:768 dirty:398 writeback:0
[   75.515200][ T7549]  slab_reclaimable:9583 slab_unreclaimable:95440
[   75.515200][ T7549]  mapped:33102 shmem:13875 pagetables:1502
[   75.515200][ T7549]  sec_pagetables:0 bounce:0
[   75.515200][ T7549]  kernel_misc_reclaimable:0
[   75.515200][ T7549]  free:1457217 free_pcp:9308 free_cma:7616
[   75.515224][ T7549] Node 0 active_anon:584kB inactive_anon:76592kB active_file:14224kB inactive_file:54260kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:132408kB dirty:1592kB writeback:0kB shmem:55500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10184kB pagetables:6008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   75.515248][ T7549] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB
[   75.515277][ T7549] lowmem_reserve[]: 0 0 3651 3651 3651
[   75.515320][ T7549] Node 0 Normal free:2750980kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:584kB inactive_anon:76592kB active_file:14224kB inactive_file:54260kB unevictable:3072kB writepending:1592kB zspages:0kB present:5242880kB managed:3739156kB mlocked:0kB bounce:0kB free_pcp:37232kB local_pcp:15880kB free_cma:0kB
[   75.515349][ T7549] lowmem_reserve[]: 0 0 0 0 0
[   75.515388][ T7549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB
[   75.515500][ T7549] Node 0 Normal: 996*4kB (UME) 614*8kB (UME) 135*16kB (UM) 123*32kB (UM) 86*64kB (UME) 37*128kB (UME) 23*256kB (UME) 36*512kB (UM) 14*1024kB (UME) 6*2048kB (UM) 653*4096kB (UM) = 2750864kB
[   75.515652][ T7549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   75.515662][ T7549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[   75.515672][ T7549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   75.515681][ T7549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[   75.515691][ T7549] 30999 total pagecache pages
[   75.515697][ T7549] 0 pages in swap cache
[   75.515704][ T7549] Free swap  = 124996kB
[   75.515710][ T7549] Total swap = 124996kB
[   75.515717][ T7549] 2097152 pages RAM
[   75.515723][ T7549] 0 pages HighMem/MovableOnly
[   75.515730][ T7549] 392315 pages reserved
[   75.515736][ T7549] 8192 pages cma reserved
[   75.515742][ T7549] 3 pages hwpoisoned
[   75.737463][ T7562] netlink: 32 bytes leftover after parsing attributes in process `syz.8.739'.
[   75.741237][ T7560] loop5: detected capacity change from 0 to 4096
[   75.743015][ T7560] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.745203][ T7560] EXT4-fs: inline encryption not supported
[   75.746404][ T7560] ext4: Bad value for 'sb'
[   75.752015][ T7559] capability: warning: `syz.9.738' uses deprecated v2 capabilities in a way that may be insecure
[   75.778493][ T7560] kernel read not supported for file /set_event (pid: 7560 comm: syz.5.737)
[   75.798409][ T7559] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0
[   75.857656][ T7569] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   75.859404][ T7569] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   75.867450][ T7568] EXT4-fs: Ignoring removed bh option
[   75.871721][ T7568] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled
[   75.888777][ T7571] EXT4-fs: Ignoring removed orlov option
[   75.888835][ T7571] EXT4-fs: Ignoring removed nobh option
[   75.891320][ T6823] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   75.900632][ T7571] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.742: corrupted in-inode xattr: e_value size too large
[   75.900683][ T7571] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   75.903491][    C0] EXT4-fs (loop9): error count since last fsck: 1
[   75.903505][    C0] EXT4-fs (loop9): initial error at time 332: ext4_iget_extra_inode:5180: inode 15
[   75.903520][    C0] EXT4-fs (loop9): last error at time 332: ext4_iget_extra_inode:5180: inode 15
[   75.913697][ T7571] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.742: couldn't read orphan inode 15 (err -117)
[   75.913736][ T7571] loop9: lost filesystem error report for type 5 error -117
[   75.921074][ T7568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.921714][ T7571] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.982967][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.997496][ T7568] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.740: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   76.002397][ T7568] EXT4-fs (loop5): Remounting filesystem read-only
[   76.007683][ T7568] evm: overlay not supported
[   76.014729][ T7568] team0: No ports can be present during mode change
[   76.040241][ T7585] FAULT_INJECTION: forcing a failure.
[   76.040241][ T7585] name failslab, interval 1, probability 0, space 0, times 0
[   76.040295][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.7.745 Tainted: G             L      syzkaller #0 PREEMPT 
[   76.040310][ T7585] Tainted: [L]=SOFTLOCKUP
[   76.040313][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   76.040319][ T7585] Call trace:
[   76.040322][ T7585]  show_stack+0x2c/0x3c (C)
[   76.040341][ T7585]  __dump_stack+0x30/0x40
[   76.040352][ T7585]  dump_stack_lvl+0xd8/0x12c
[   76.040362][ T7585]  dump_stack+0x1c/0x28
[   76.040371][ T7585]  should_fail_ex+0x41c/0x590
[   76.040383][ T7585]  should_failslab+0xc4/0x120
[   76.040391][ T7585]  __kmalloc_node_track_caller_noprof+0x108/0x6d4
[   76.040401][ T7585]  kstrdup+0x50/0x104
[   76.040409][ T7585]  kstrdup_const+0x54/0x6c
[   76.040417][ T7585]  __kernfs_new_node+0xb0/0x7d8
[   76.040426][ T7585]  kernfs_new_node+0xe8/0x130
[   76.040433][ T7585]  kernfs_create_link+0x98/0x1e4
[   76.040442][ T7585]  sysfs_do_create_link_sd+0x8c/0x120
[   76.040451][ T7585]  sysfs_create_link+0x74/0x94
[   76.040460][ T7585]  device_add_class_symlinks+0x1e0/0x254
[   76.040469][ T7585]  device_add+0x3fc/0x9e0
[   76.040475][ T7585]  wakeup_source_sysfs_add+0x1b4/0x2a4
[   76.040484][ T7585]  wakeup_source_register+0x158/0x2fc
[   76.040492][ T7585]  device_wakeup_enable+0xd4/0x230
[   76.040500][ T7585]  device_set_wakeup_enable+0x2c/0x50
[   76.040508][ T7585]  usb_hcd_submit_urb+0xd54/0x169c
[   76.040519][ T7585]  usb_submit_urb+0xd44/0x1458
[   76.040528][ T7585]  usbfs_start_wait_urb+0x128/0x374
[   76.040538][ T7585]  do_proc_control+0x638/0xc44
[   76.040548][ T7585]  proc_control_compat+0x17c/0x20c
[   76.040557][ T7585]  usbdev_ioctl+0xe84/0x1990
[   76.040566][ T7585]  __arm64_sys_ioctl+0x154/0x1cc
[   76.040577][ T7585]  invoke_syscall+0x98/0x244
[   76.040586][ T7585]  el0_svc_common+0xec/0x23c
[   76.040596][ T7585]  do_el0_svc+0x4c/0x5c
[   76.040605][ T7585]  el0_svc+0x64/0x260
[   76.040616][ T7585]  el0t_64_sync_handler+0x48/0x148
[   76.040626][ T7585]  el0t_64_sync+0x198/0x19c
[   76.046428][ T4718] Bluetooth: hci2: command 0x0c1a tx timeout
[   76.046453][ T4718] Bluetooth: hci0: command 0x0c1a tx timeout
[   76.046469][ T4718] Bluetooth: hci4: command 0x0c1a tx timeout
[   76.046485][ T4718] Bluetooth: hci3: command 0x040f tx timeout
[   76.089418][   T30] kauditd_printk_skb: 124 callbacks suppressed
[   76.089460][   T30] audit: type=1800 audit(332.439:596): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[   76.100797][   T30] audit: type=1800 audit(332.449:597): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0
[   76.102554][ T7593] syzkaller0: entered promiscuous mode
[   76.102568][ T7593] syzkaller0: entered allmulticast mode
[   76.121092][ T5141] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.151257][   T30] audit: type=1800 audit(332.499:598): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0
[   76.165860][   T30] audit: type=1800 audit(332.519:599): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[   76.207825][   T30] audit: type=1800 audit(332.559:600): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0
[   76.209776][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.751'.
[   76.250837][   T30] audit: type=1800 audit(332.599:601): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   76.273955][   T30] audit: type=1800 audit(332.619:602): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.752" name="power" dev="configfs" ino=20534 res=0 errno=0
[   76.290718][   T30] audit: type=1800 audit(332.639:603): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141576 res=0 errno=0
[   76.290981][ T7611] null_blk: disk nullb1 created
[   76.317420][   T30] audit: type=1800 audit(332.669:604): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[   76.332729][   T30] audit: type=1800 audit(332.679:605): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141472 res=0 errno=0
[   77.257545][ T7660] syzkaller0: entered promiscuous mode
[   77.258669][ T7660] syzkaller0: entered allmulticast mode
[   78.123447][ T4717] Bluetooth: hci3: command 0x040f tx timeout
[   79.826265][ T7747] FAULT_INJECTION: forcing a failure.
[   79.826265][ T7747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   79.826304][ T7747] CPU: 0 UID: 0 PID: 7747 Comm: syz.5.779 Tainted: G             L      syzkaller #0 PREEMPT 
[   79.826318][ T7747] Tainted: [L]=SOFTLOCKUP
[   79.826322][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   79.826327][ T7747] Call trace:
[   79.826331][ T7747]  show_stack+0x2c/0x3c (C)
[   79.826351][ T7747]  __dump_stack+0x30/0x40
[   79.826361][ T7747]  dump_stack_lvl+0xd8/0x12c
[   79.826371][ T7747]  dump_stack+0x1c/0x28
[   79.826381][ T7747]  should_fail_ex+0x41c/0x590
[   79.826392][ T7747]  should_fail+0x14/0x24
[   79.826402][ T7747]  should_fail_usercopy+0x20/0x30
[   79.826409][ T7747]  simple_read_from_buffer+0xc4/0x238
[   79.826419][ T7747]  proc_fail_nth_read+0x1a8/0x248
[   79.826427][ T7747]  vfs_read+0x230/0x8c8
[   79.826435][ T7747]  ksys_read+0x12c/0x228
[   79.826441][ T7747]  __arm64_sys_read+0x84/0x98
[   79.826448][ T7747]  invoke_syscall+0x98/0x244
[   79.826458][ T7747]  el0_svc_common+0xec/0x23c
[   79.826467][ T7747]  do_el0_svc+0x4c/0x5c
[   79.826477][ T7747]  el0_svc+0x64/0x260
[   79.826488][ T7747]  el0t_64_sync_handler+0x48/0x148
[   79.826498][ T7747]  el0t_64_sync+0x198/0x19c
[   79.866828][ T7749] VFS: file-max limit 0 reached
[   80.203461][ T4717] Bluetooth: hci3: command 0x040f tx timeout
[   80.309604][ T7663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.365952][ T7760] netlink: 'syz.6.785': attribute type 11 has an invalid length.
[   80.412986][ T7760] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.448578][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.448641][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.503865][ T7768] syzkaller0: entered promiscuous mode
[   80.505049][ T7768] syzkaller0: entered allmulticast mode
[   80.721108][ T7786] FAULT_INJECTION: forcing a failure.
[   80.721108][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   80.723491][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.6.792 Tainted: G             L      syzkaller #0 PREEMPT 
[   80.723512][ T7786] Tainted: [L]=SOFTLOCKUP
[   80.723516][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   80.723521][ T7786] Call trace:
[   80.723524][ T7786]  show_stack+0x2c/0x3c (C)
[   80.723544][ T7786]  __dump_stack+0x30/0x40
[   80.723555][ T7786]  dump_stack_lvl+0xd8/0x12c
[   80.723565][ T7786]  dump_stack+0x1c/0x28
[   80.723574][ T7786]  should_fail_ex+0x41c/0x590
[   80.723585][ T7786]  should_fail+0x14/0x24
[   80.723595][ T7786]  should_fail_usercopy+0x20/0x30
[   80.723602][ T7786]  simple_read_from_buffer+0xc4/0x238
[   80.723612][ T7786]  proc_fail_nth_read+0x1a8/0x248
[   80.723620][ T7786]  vfs_read+0x230/0x8c8
[   80.723627][ T7786]  ksys_read+0x12c/0x228
[   80.723634][ T7786]  __arm64_sys_read+0x84/0x98
[   80.723641][ T7786]  invoke_syscall+0x98/0x244
[   80.723651][ T7786]  el0_svc_common+0xec/0x23c
[   80.723660][ T7786]  do_el0_svc+0x4c/0x5c
[   80.723670][ T7786]  el0_svc+0x64/0x260
[   80.723681][ T7786]  el0t_64_sync_handler+0x48/0x148
[   80.723691][ T7786]  el0t_64_sync+0x198/0x19c
[   80.876053][ T7794] kernel read not supported for file /set_event (pid: 7794 comm: syz.6.796)
[   81.168514][   T30] kauditd_printk_skb: 54 callbacks suppressed
[   81.168548][   T30] audit: type=1800 audit(337.519:660): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0
[   81.391649][   T30] audit: type=1800 audit(337.739:661): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   81.432277][   T30] audit: type=1800 audit(337.779:662): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[   81.454850][   T30] audit: type=1800 audit(337.809:663): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[   81.464254][   T30] audit: type=1800 audit(337.819:664): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0
[   81.477385][ T7816] binder: 7814:7816 ioctl 4018620d 0 returned -22
[   81.479325][ T7816] binder: 7814:7816 IncRefs 0 refcount change on invalid ref 0 ret -22
[   81.481659][ T7816] binder: 7814:7816 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[   81.483116][ T7816] binder: 7814:7816 ioctl c0306201 20000040 returned -22
[   81.498563][   T30] audit: type=1800 audit(337.849:665): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[   81.510972][   T30] audit: type=1800 audit(337.859:666): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0
[   81.530666][   T30] audit: type=1800 audit(337.879:667): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0
[   81.541127][   T30] audit: type=1800 audit(337.889:668): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0
[   81.548296][ T7824] set_capacity_and_notify: 4 callbacks suppressed
[   81.549646][ T7824] loop7: detected capacity change from 0 to 256
[   81.565681][   T30] audit: type=1800 audit(337.919:669): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   81.571696][ T7824] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   81.571737][ T7824] FAT-fs (loop7): Filesystem has been set read-only
[   81.571769][ T7824] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   81.571785][ T7824] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   81.578558][ T7824] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   81.585477][ T7824] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   81.589693][ T7824] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   81.591098][ T7828] binder: 7827:7828 ioctl 400c620e 0 returned -14
[   81.591518][ T7829] binder: 7827:7829 ioctl 400c620e 0 returned -14
[   81.599209][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.8.808'.
[   81.599249][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.8.808'.
[   81.604688][ T7826] netlink: 32 bytes leftover after parsing attributes in process `syz.8.808'.
[   81.658199][ T7836] FAULT_INJECTION: forcing a failure.
[   81.658199][ T7836] name failslab, interval 1, probability 0, space 0, times 0
[   81.658247][ T7836] CPU: 0 UID: 0 PID: 7836 Comm: syz.8.812 Tainted: G             L      syzkaller #0 PREEMPT 
[   81.658264][ T7836] Tainted: [L]=SOFTLOCKUP
[   81.658268][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   81.658279][ T7836] Call trace:
[   81.658282][ T7836]  show_stack+0x2c/0x3c (C)
[   81.658302][ T7836]  __dump_stack+0x30/0x40
[   81.658314][ T7836]  dump_stack_lvl+0xd8/0x12c
[   81.658324][ T7836]  dump_stack+0x1c/0x28
[   81.658333][ T7836]  should_fail_ex+0x41c/0x590
[   81.658345][ T7836]  should_failslab+0xc4/0x120
[   81.658353][ T7836]  __kvmalloc_node_noprof+0x160/0x7d8
[   81.658363][ T7836]  bpf_check_cfg+0x104/0x1f58
[   81.658373][ T7836]  bpf_check+0x1028/0x40dc
[   81.658382][ T7836]  bpf_prog_load+0x1050/0x15f8
[   81.658389][ T7836]  __sys_bpf+0x870/0x8c8
[   81.658396][ T7836]  __arm64_sys_bpf+0xd0/0xec
[   81.658402][ T7836]  invoke_syscall+0x98/0x244
[   81.658412][ T7836]  el0_svc_common+0xec/0x23c
[   81.658422][ T7836]  do_el0_svc+0x4c/0x5c
[   81.658431][ T7836]  el0_svc+0x64/0x260
[   81.658442][ T7836]  el0t_64_sync_handler+0x48/0x148
[   81.658452][ T7836]  el0t_64_sync+0x198/0x19c
[   81.698665][ T7834] syzkaller0: entered promiscuous mode
[   81.698709][ T7834] syzkaller0: entered allmulticast mode
[   82.391560][ T7845] team0: No ports can be present during mode change
[   82.399456][ T7852] kernel read not supported for file /set_event (pid: 7852 comm: syz.9.817)
[   82.442184][ T7856] loop8: detected capacity change from 0 to 1024
[   82.447245][ T7856] EXT4-fs: Ignoring removed orlov option
[   82.467484][ T7861] FAULT_INJECTION: forcing a failure.
[   82.467484][ T7861] name failslab, interval 1, probability 0, space 0, times 0
[   82.467531][ T7861] CPU: 0 UID: 0 PID: 7861 Comm: syz.5.823 Tainted: G             L      syzkaller #0 PREEMPT 
[   82.467545][ T7861] Tainted: [L]=SOFTLOCKUP
[   82.467548][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   82.467553][ T7861] Call trace:
[   82.467556][ T7861]  show_stack+0x2c/0x3c (C)
[   82.467573][ T7861]  __dump_stack+0x30/0x40
[   82.467584][ T7861]  dump_stack_lvl+0xd8/0x12c
[   82.467594][ T7861]  dump_stack+0x1c/0x28
[   82.467603][ T7861]  should_fail_ex+0x41c/0x590
[   82.467615][ T7861]  should_failslab+0xc4/0x120
[   82.467624][ T7861]  __kmalloc_node_noprof+0x10c/0x6d8
[   82.467633][ T7861]  __vmalloc_node_range_noprof+0x45c/0x105c
[   82.467644][ T7861]  __vmalloc_node_noprof+0xec/0x14c
[   82.467653][ T7861]  vmalloc_noprof+0x3c/0x4c
[   82.467661][ T7861]  bpf_prog_calc_tag+0x60/0x30c
[   82.467669][ T7861]  check_and_resolve_insns+0xc0/0x1c44
[   82.467679][ T7861]  bpf_check+0xde0/0x40dc
[   82.467688][ T7861]  bpf_prog_load+0x1050/0x15f8
[   82.467695][ T7861]  __sys_bpf+0x870/0x8c8
[   82.467702][ T7861]  __arm64_sys_bpf+0xd0/0xec
[   82.467708][ T7861]  invoke_syscall+0x98/0x244
[   82.467718][ T7861]  el0_svc_common+0xec/0x23c
[   82.467728][ T7861]  do_el0_svc+0x4c/0x5c
[   82.467737][ T7861]  el0_svc+0x64/0x260
[   82.467749][ T7861]  el0t_64_sync_handler+0x48/0x148
[   82.467759][ T7861]  el0t_64_sync+0x198/0x19c
[   82.496989][ T7856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.533585][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.7.820'.
[   82.595750][ T7876] netlink: 'syz.8.821': attribute type 11 has an invalid length.
[   82.596100][ T7876] netlink: 116 bytes leftover after parsing attributes in process `syz.8.821'.
[   82.673045][ T6551] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.681032][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.7.828'.
[   82.839719][ T7890] loop8: detected capacity change from 0 to 512
[   82.866513][ T7893] loop5: detected capacity change from 0 to 1024
[   82.867538][ T7890] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.868643][ T7893] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   82.869182][ T7893] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[   82.880580][ T7890] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 3: comm syz.8.831: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=8, size=2048 fake=1
[   82.880620][ T7893] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.834: lblock 1 mapped to illegal pblock 1 (length 1)
[   82.880649][ T7893] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   82.881126][ T7893] EXT4-fs (loop5): Remounting filesystem read-only
[   82.881248][ T7893] EXT4-fs (loop5): 1 orphan inode deleted
[   82.881695][ T7893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.882615][ T7893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.914527][ T7891] tap0: tun_chr_ioctl cmd 1074025698
[   82.954104][ T6551] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.984539][ T4717] Bluetooth: hci2: unexpected event for opcode 0x203b
[   83.005577][ T7902] binder: 7901:7902 ioctl 4018620d 0 returned -22
[   83.006551][ T7902] binder: 7901:7902 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   83.006574][ T7902] binder: 7902 RLIMIT_NICE not set
[   83.006836][ T7902] binder: 7901:7902 ioctl c0306201 20000240 returned -11
[   83.051464][ T7902] null_blk: disk nullb1 created
[   83.171408][ T7917] loop8: detected capacity change from 0 to 128
[   83.174942][ T7915] FAULT_INJECTION: forcing a failure.
[   83.174942][ T7915] name failslab, interval 1, probability 0, space 0, times 0
[   83.174983][ T7915] CPU: 0 UID: 0 PID: 7915 Comm: syz.6.841 Tainted: G             L      syzkaller #0 PREEMPT 
[   83.174998][ T7915] Tainted: [L]=SOFTLOCKUP
[   83.175002][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   83.175009][ T7915] Call trace:
[   83.175012][ T7915]  show_stack+0x2c/0x3c (C)
[   83.175030][ T7915]  __dump_stack+0x30/0x40
[   83.175041][ T7915]  dump_stack_lvl+0xd8/0x12c
[   83.175050][ T7915]  dump_stack+0x1c/0x28
[   83.175060][ T7915]  should_fail_ex+0x41c/0x590
[   83.175071][ T7915]  should_failslab+0xc4/0x120
[   83.175079][ T7915]  kmem_cache_alloc_noprof+0x94/0x5d8
[   83.175088][ T7915]  __kernfs_new_node+0xf0/0x7d8
[   83.175096][ T7915]  kernfs_new_node+0xe8/0x130
[   83.175104][ T7915]  __kernfs_create_file+0x60/0x2e0
[   83.175112][ T7915]  sysfs_add_file_mode_ns+0x1e8/0x2a4
[   83.175121][ T7915]  internal_create_group+0x550/0xb30
[   83.175131][ T7915]  internal_create_groups+0x64/0x138
[   83.175140][ T7915]  sysfs_create_groups+0x2c/0x3c
[   83.175149][ T7915]  device_add_attrs+0x17c/0x4e4
[   83.175157][ T7915]  device_add+0x420/0x9e0
[   83.175163][ T7915]  wakeup_source_sysfs_add+0x1b4/0x2a4
[   83.175172][ T7915]  wakeup_source_register+0x158/0x2fc
[   83.175180][ T7915]  device_wakeup_enable+0xd4/0x230
[   83.175187][ T7915]  device_set_wakeup_enable+0x2c/0x50
[   83.175195][ T7915]  usb_hcd_submit_urb+0xd54/0x169c
[   83.175206][ T7915]  usb_submit_urb+0xd44/0x1458
[   83.175215][ T7915]  usbfs_start_wait_urb+0x128/0x374
[   83.175225][ T7915]  do_proc_control+0x638/0xc44
[   83.175235][ T7915]  proc_control_compat+0x17c/0x20c
[   83.175244][ T7915]  usbdev_ioctl+0xe84/0x1990
[   83.175253][ T7915]  __arm64_sys_ioctl+0x154/0x1cc
[   83.175263][ T7915]  invoke_syscall+0x98/0x244
[   83.175279][ T7915]  el0_svc_common+0xec/0x23c
[   83.175289][ T7915]  do_el0_svc+0x4c/0x5c
[   83.175299][ T7915]  el0_svc+0x64/0x260
[   83.175310][ T7915]  el0t_64_sync_handler+0x48/0x148
[   83.175320][ T7915]  el0t_64_sync+0x198/0x19c
[   83.189208][ T7917] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   83.225710][ T7920] netlink: 100 bytes leftover after parsing attributes in process `syz.6.844'.
[   83.225909][ T7920] netlink: 40 bytes leftover after parsing attributes in process `syz.6.844'.
[   83.256878][ T7924] loop5: detected capacity change from 0 to 512
[   83.261568][ T7924] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   83.261695][ T7924] EXT4-fs (loop5): orphan cleanup on readonly fs
[   83.262142][ T7924] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.845: Failed to acquire dquot type 1
[   83.262156][ T7924] loop5: lost filesystem error report for type 5 error -5
[   83.262651][ T7924] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.845: bg 0: block 40: padding at end of block bitmap is not set
[   83.262666][ T7924] loop5: lost filesystem error report for type 5 error -117
[   83.262780][ T7924] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   83.262790][ T7924] loop5: lost filesystem error report for type 5 error -117
[   83.264010][    C0] EXT4-fs (loop5): error count since last fsck: 3
[   83.264021][    C0] EXT4-fs (loop5): initial error at time 339: ext4_acquire_dquot:7041
[   83.264034][    C0] EXT4-fs (loop5): last error at time 339: ext4_mb_clear_bb:6679
[   83.272863][ T7924] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.845: data will be lost
[   83.272981][ T7924] EXT4-fs (loop5): 1 truncate cleaned up
[   83.288786][ T7924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   83.301048][ T7920] netlink: 32 bytes leftover after parsing attributes in process `syz.6.844'.
[   83.363128][ T4718] Bluetooth: hci1: ACL packet for unknown connection handle 200
[   83.407702][ T7936] kernel read not supported for file /set_event (pid: 7936 comm: syz.9.849)
[   83.419802][ T7917] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   83.449700][ T7929] binder: 7928:7929 got transaction to invalid handle, 2
[   83.452024][ T7929] binder: 7928:7929 cannot find target node
[   83.453160][ T7929] binder: 7928:7929 transaction async to 0:0 failed 15/29201/-22, code 0 size 104-24 line 3252
[   83.464299][ T7929] loop6: detected capacity change from 0 to 512
[   83.466734][ T7929] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal
[   83.527839][ T7947] loop9: detected capacity change from 0 to 8
[   83.602221][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.722476][ T7966] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   83.777984][ T7966] bridge0: port 3(syz_tun) entered blocking state
[   83.780441][ T7966] bridge0: port 3(syz_tun) entered disabled state
[   83.781951][ T7966] syz_tun: entered allmulticast mode
[   83.784548][ T7966] syz_tun: entered promiscuous mode
[   83.786095][ T7966] bridge0: port 3(syz_tun) entered blocking state
[   83.786159][ T7966] bridge0: port 3(syz_tun) entered forwarding state
[   83.795935][ T7969] loop6: detected capacity change from 0 to 256
[   83.796341][ T7969] vfat: Unexpected value for 'rodir'
[   83.986951][ T7972] psci: CPU1 killed (polled 0 ms)
[   84.092189][ T7977] loop6: detected capacity change from 0 to 512
[   84.107268][ T7977] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   84.115798][ T7977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[   84.115866][ T7977] System zones: 1-12
[   84.138441][ T7977] EXT4-fs (loop6): 1 truncate cleaned up
[   84.138954][ T7977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.146841][ T7980] FAULT_INJECTION: forcing a failure.
[   84.146841][ T7980] name failslab, interval 1, probability 0, space 0, times 0
[   84.149388][ T7980] CPU: 0 UID: 0 PID: 7980 Comm: syz.9.865 Tainted: G             L      syzkaller #0 PREEMPT 
[   84.149417][ T7980] Tainted: [L]=SOFTLOCKUP
[   84.149423][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   84.149431][ T7980] Call trace:
[   84.149436][ T7980]  show_stack+0x2c/0x3c (C)
[   84.149459][ T7980]  __dump_stack+0x30/0x40
[   84.149470][ T7980]  dump_stack_lvl+0xd8/0x12c
[   84.149480][ T7980]  dump_stack+0x1c/0x28
[   84.149490][ T7980]  should_fail_ex+0x41c/0x590
[   84.149502][ T7980]  should_failslab+0xc4/0x120
[   84.149510][ T7980]  kmem_cache_alloc_node_noprof+0x98/0x5f8
[   84.149519][ T7980]  __alloc_skb+0x1f0/0x610
[   84.149529][ T7980]  sock_wmalloc+0xac/0x130
[   84.149536][ T7980]  pppol2tp_sendmsg+0x170/0x528
[   84.149546][ T7980]  __sock_sendmsg+0xc8/0x17c
[   84.149554][ T7980]  ____sys_sendmsg+0x3f8/0x6c8
[   84.149563][ T7980]  ___sys_sendmsg+0x198/0x224
[   84.149572][ T7980]  __sys_sendmmsg+0x204/0x580
[   84.149581][ T7980]  __arm64_sys_sendmmsg+0xac/0xc8
[   84.149590][ T7980]  invoke_syscall+0x98/0x244
[   84.149599][ T7980]  el0_svc_common+0xec/0x23c
[   84.149609][ T7980]  do_el0_svc+0x4c/0x5c
[   84.149618][ T7980]  el0_svc+0x64/0x260
[   84.149630][ T7980]  el0t_64_sync_handler+0x48/0x148
[   84.149640][ T7980]  el0t_64_sync+0x198/0x19c
[   84.188115][ T5141] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.259056][ T5633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.283258][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.866'.
[   84.494624][ T7991] EXT4-fs: Ignoring removed nomblk_io_submit option
[   84.499144][ T7994] Cannot find del_set index 0 as target
[   84.506878][ T7991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.621665][ T7988] hsr_slave_1 (unregistering): left promiscuous mode
[   84.700883][ T5141] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.907116][ T8015] kernel read not supported for file /set_event (pid: 8015 comm: syz.9.878)
[   85.016539][ T8021] FAULT_INJECTION: forcing a failure.
[   85.016539][ T8021] name failslab, interval 1, probability 0, space 0, times 0
[   85.018994][ T8021] CPU: 0 UID: 0 PID: 8021 Comm: syz.9.881 Tainted: G             L      syzkaller #0 PREEMPT 
[   85.019017][ T8021] Tainted: [L]=SOFTLOCKUP
[   85.019021][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   85.019027][ T8021] Call trace:
[   85.019031][ T8021]  show_stack+0x2c/0x3c (C)
[   85.019053][ T8021]  __dump_stack+0x30/0x40
[   85.019065][ T8021]  dump_stack_lvl+0xd8/0x12c
[   85.019074][ T8021]  dump_stack+0x1c/0x28
[   85.019084][ T8021]  should_fail_ex+0x41c/0x590
[   85.019095][ T8021]  should_failslab+0xc4/0x120
[   85.019103][ T8021]  __kvmalloc_node_noprof+0x160/0x7d8
[   85.019113][ T8021]  bpf_compute_postorder+0xd0/0x768
[   85.019123][ T8021]  bpf_check+0x1048/0x40dc
[   85.019133][ T8021]  bpf_prog_load+0x1050/0x15f8
[   85.019140][ T8021]  __sys_bpf+0x870/0x8c8
[   85.019146][ T8021]  __arm64_sys_bpf+0xd0/0xec
[   85.019153][ T8021]  invoke_syscall+0x98/0x244
[   85.019163][ T8021]  el0_svc_common+0xec/0x23c
[   85.019173][ T8021]  do_el0_svc+0x4c/0x5c
[   85.019182][ T8021]  el0_svc+0x64/0x260
[   85.019194][ T8021]  el0t_64_sync_handler+0x48/0x148
[   85.019204][ T8021]  el0t_64_sync+0x198/0x19c
[   85.104724][ T6551] overlayfs: failed lookup in lower (newroot/72, name='bus', err=-40): overlapping layers
[   85.107660][ T6551] overlayfs: failed lookup in lower (newroot/72, name='bus', err=-40): overlapping layers
[   85.202753][ T8027] syzkaller0: entered promiscuous mode
[   85.202796][ T8027] syzkaller0: entered allmulticast mode
[   85.210620][ T8027] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[   85.422644][ T1216] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.443670][ T8032] team0: No ports can be present during mode change
[   85.449401][ T8034] tipc: Failed to obtain node identity
[   85.449445][ T8034] tipc: Enabling of bearer <ib:wg2> rejected, failed to enable media
[   85.547535][ T1216] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.624870][ T1216] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.696628][ T8042] binder: 8041:8042 ioctl 4018620d 0 returned -22
[   85.700662][ T8042] binder: 8041:8042 BC_DEAD_BINDER_DONE 0000000000000000 not found
[   85.702455][ T8042] binder: 8041:8042 DecRefs 0 refcount change on invalid ref 2 ret -22
[   85.705042][ T8042] binder: 8041:8042 DecRefs 0 refcount change on invalid ref 2 ret -22
[   85.706779][ T8042] binder: 8041:8042 BC_INCREFS_DONE u0000000000000002 no match
[   85.708383][ T8042] binder: 8041:8042 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   85.715207][ T8039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   85.715239][ T8039] EXT4-fs (loop6): Test dummy encryption mode enabled
[   85.718775][ T8042] binder: 8041:8042 ioctl c0306201 20000040 returned -22
[   85.721205][ T1216] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.735428][ T8039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.773099][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.775656][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.777848][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.781054][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.782868][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.938705][ T5633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.954297][ T1216] bridge_slave_1: left allmulticast mode
[   85.954341][ T1216] bridge_slave_1: left promiscuous mode
[   85.954439][ T1216] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.015712][ T1216] bridge_slave_0: left allmulticast mode
[   86.015752][ T1216] bridge_slave_0: left promiscuous mode
[   86.015865][ T1216] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.324908][   T30] kauditd_printk_skb: 121 callbacks suppressed
[   86.324949][   T30] audit: type=1800 audit(342.679:787): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[   86.345256][ T1216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.349974][ T1216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.359815][ T1216] bond0 (unregistering): Released all slaves
[   86.378374][ T8061] syzkaller0: entered promiscuous mode
[   86.386178][ T8061] syzkaller0: entered allmulticast mode
[   86.412597][   T30] audit: type=1800 audit(342.759:788): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0
[   86.467698][   T30] audit: type=1800 audit(342.819:789): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[   86.542300][ T8076] EXT4-fs: Ignoring removed nomblk_io_submit option
[   86.560193][   T30] audit: type=1800 audit(342.909:790): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0
[   86.565893][ T8076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.610709][   T30] audit: type=1800 audit(342.959:791): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   86.662801][ T8088] set_capacity_and_notify: 3 callbacks suppressed
[   86.666938][ T8088] loop5: detected capacity change from 0 to 128
[   86.673091][ T8088] EXT4-fs (loop5): Test dummy encryption mode enabled
[   86.682112][ T8088] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.739927][ T5141] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.771429][ T5633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.811287][ T1216] hsr_slave_0: left promiscuous mode
[   86.813047][   T30] audit: type=1800 audit(343.159:792): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0
[   86.882995][ T1216] hsr_slave_1: left promiscuous mode
[   86.886977][ T1216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.887010][ T1216] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.912588][   T30] audit: type=1800 audit(343.259:793): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0
[   86.944974][ T1216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.945018][ T1216] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.998660][ T1216] veth1_macvtap: left promiscuous mode
[   86.999833][ T1216] veth0_macvtap: left promiscuous mode
[   87.001155][ T1216] veth1_vlan: left promiscuous mode
[   87.002266][ T1216] veth0_vlan: left promiscuous mode
[   87.045225][   T30] audit: type=1800 audit(343.399:794): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0
[   87.128874][   T30] audit: type=1800 audit(343.479:795): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0
[   87.387062][   T30] audit: type=1800 audit(343.729:796): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   87.420493][ T1216] team0 (unregistering): Port device team_slave_1 removed
[   87.444924][ T1216] team0 (unregistering): Port device team_slave_0 removed
[   87.619453][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16
[   87.621605][ T8117] syzkaller0: entered promiscuous mode
[   87.621642][ T8117] syzkaller0: entered allmulticast mode
[   87.766439][ T8131] loop9: detected capacity change from 0 to 1024
[   87.896209][ T4717] Bluetooth: hci2: command tx timeout
[   87.964963][ T8137] __nla_validate_parse: 3 callbacks suppressed
[   87.967131][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.910'.
[   88.093592][ T8148] team0: No ports can be present during mode change
[   88.186886][ T8157] loop6: detected capacity change from 0 to 1024
[   88.191930][ T8157] EXT4-fs: Ignoring removed nomblk_io_submit option
[   88.194679][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.194752][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.194942][ T8044] bridge_slave_0: entered allmulticast mode
[   88.195449][ T8044] bridge_slave_0: entered promiscuous mode
[   88.207723][ T8157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.215121][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.215178][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.215380][ T8044] bridge_slave_1: entered allmulticast mode
[   88.215921][ T8044] bridge_slave_1: entered promiscuous mode
[   88.284179][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.285549][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.346768][ T8044] team0: Port device team_slave_0 added
[   88.356713][ T8044] team0: Port device team_slave_1 added
[   88.399811][ T5633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.409851][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.419609][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.419668][ T8044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.429420][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.433181][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.440506][ T8044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.508681][ T8169] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   88.543183][ T8044] hsr_slave_0: entered promiscuous mode
[   88.543585][ T8044] hsr_slave_1: entered promiscuous mode
[   88.591958][ T8172] tipc: Failed to obtain node identity
[   88.593190][ T8172] tipc: Enabling of bearer <ib:wg2> rejected, failed to enable media
[   88.724162][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17
[   88.792538][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.917'.
[   88.876873][ T8169] mmap: syz.6.914 (8169) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   88.969093][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.918'.
[   89.028849][ T8188] syzkaller0: entered promiscuous mode
[   89.028890][ T8188] syzkaller0: entered allmulticast mode
[   89.109348][ T8195] loop5: detected capacity change from 0 to 128
[   89.121716][ T8195] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   89.213766][ T5141] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   89.233281][ T8201] null_blk: disk nullb1 created
[   89.341377][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.9.922'.
[   89.537582][ T8219] loop6: detected capacity change from 0 to 1024
[   89.550057][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18
[   89.553016][ T8219] EXT4-fs: Ignoring removed nomblk_io_submit option
[   89.555975][ T8044] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.574136][ T8044] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.576002][ T8044] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.586581][ T8219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.596584][ T8044] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.612909][ T8044] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.643337][ T8044] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.643776][ T8044] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.656517][ T8044] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.829334][ T5633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.859084][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.882700][ T8044] 8021q: adding VLAN 0 to HW filter on device team0
[   89.912090][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.912146][ T6823] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.916082][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.916129][ T6823] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.992388][ T4717] Bluetooth: hci2: command tx timeout
[   90.369233][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19
[   90.475538][ T8044] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.507470][ T8274] syzkaller0: entered promiscuous mode
[   90.510279][ T8274] syzkaller0: entered allmulticast mode
[   90.584206][ T8044] veth0_vlan: entered promiscuous mode
[   90.602610][ T8044] veth1_vlan: entered promiscuous mode
[   90.669113][ T8044] veth0_macvtap: entered promiscuous mode
[   90.689713][ T8044] veth1_macvtap: entered promiscuous mode
[   90.701184][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.731740][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.783208][ T1459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.795203][ T8288] loop9: detected capacity change from 0 to 512
[   90.819545][ T1459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.819607][ T1459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.819632][ T1459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.830042][ T8288] EXT4-fs: Ignoring removed nobh option
[   90.863498][ T8288] EXT4-fs warning (device loop9): ext4_xattr_inode_get:546: inode #11: comm syz.9.934: ea_inode file size=0 entry size=6
[   90.881375][ T8288] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.934: iget: bad extra_isize 90 (inode size 256)
[   90.885667][ T8288] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   90.887818][    C0] EXT4-fs (loop9): error count since last fsck: 1
[   90.887855][    C0] EXT4-fs (loop9): initial error at time 347: ext4_xattr_inode_iget:441: inode 11
[   90.887889][    C0] EXT4-fs (loop9): last error at time 347: ext4_xattr_inode_iget:441: inode 11
[   90.909642][ T8288] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.934: error while reading EA inode 11 err=-117
[   90.909690][ T8288] loop9: lost filesystem error report for type 5 error -117
[   90.934128][ T1459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.934170][ T1459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.942184][ T8288] EXT4-fs (loop9): 1 orphan inode deleted
[   90.942654][ T8288] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.087365][ T6823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.087405][ T6823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.146555][ T8302] syzkaller0: entered promiscuous mode
[   91.147698][ T8302] syzkaller0: entered allmulticast mode
[   91.159023][ T8303] loop6: detected capacity change from 0 to 1024
[   91.159418][ T8303] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.171841][ T8303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.301084][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'.
[   91.301114][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'.
[   91.305056][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'.
[   91.306753][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'.
[   91.358889][   T30] kauditd_printk_skb: 67 callbacks suppressed
[   91.358937][   T30] audit: type=1800 audit(347.681:864): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   91.374715][ T5633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.496279][ T8319] syzkaller0: entered promiscuous mode
[   91.497373][ T8319] syzkaller0: entered allmulticast mode
[   91.506215][   T30] audit: type=1800 audit(347.830:865): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   91.591932][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.942'.
[   91.627703][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.703753][   T30] audit: type=1800 audit(348.029:866): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[   91.743985][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.943'.
[   91.756102][   T30] audit: type=1800 audit(348.077:867): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.944" name="usbip_sockfd" dev="sysfs" ino=35092 res=0 errno=0
[   91.800247][   T30] audit: type=1800 audit(348.107:868): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   91.800303][   T30] audit: type=1800 audit(348.126:869): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0
[   91.888447][   T30] audit: type=1800 audit(348.204:870): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0
[   91.906556][   T30] audit: type=1800 audit(348.224:871): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   91.948948][ T8340] loop9: detected capacity change from 0 to 1024
[   91.949336][ T8340] EXT4-fs: Ignoring removed mblk_io_submit option
[   91.975949][ T8340] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c018, mo2=0002]
[   91.978243][ T8340] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   92.004885][   T30] audit: type=1800 audit(348.321:872): pid=8347 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.948" name="power" dev="configfs" ino=23476 res=0 errno=0
[   92.010091][ T8339] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm syz.9.946: lblock 0 mapped to illegal pblock 0 (length 1)
[   92.014872][   T30] audit: type=1800 audit(348.341:873): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0
[   92.038604][ T8340] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #15: comm syz.9.946: lblock 0 mapped to illegal pblock 0 (length 1)
[   92.043856][ T8340] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.946: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[   92.052257][ T8351] syzkaller0: entered promiscuous mode
[   92.054415][ T8351] syzkaller0: entered allmulticast mode
[   92.060803][ T8340] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.946: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[   92.070504][ T8347] null_blk: disk nullb1 created
[   92.071776][ T8340] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.946: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[   92.076485][ T4717] Bluetooth: hci2: command tx timeout
[   92.087656][ T8340] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.946: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[   92.091811][ T8340] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.946: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[   92.098433][ T8340] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.946: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[   92.178702][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   92.356694][ T8365] tipc: Failed to obtain node identity
[   92.356730][ T8365] tipc: Enabling of bearer <ib:wg2> rejected, failed to enable media
[   92.554232][ T8376] loop9: detected capacity change from 0 to 1024
[   92.560955][ T8376] EXT4-fs: Ignoring removed nomblk_io_submit option
[   92.589587][ T8376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.675469][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.815232][ T8363] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0
[   92.927554][   T11] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   93.131630][ T8418] syzkaller0: entered promiscuous mode
[   93.132785][ T8418] syzkaller0: entered allmulticast mode
[   93.263943][ T8427] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0
[   93.430241][ T8433] __nla_validate_parse: 1 callbacks suppressed
[   93.430297][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'.
[   93.479074][    C0] Unknown status report in ack skb
[   93.599471][ T8439] loop0: detected capacity change from 0 to 512
[   93.618842][ T8439] journal_path: Non-blockdev passed as './file1'
[   93.620346][ T8439] EXT4-fs: error: could not find journal device path
[   93.641356][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'.
[   93.808629][ T8454] syzkaller0: entered promiscuous mode
[   93.809920][ T8454] syzkaller0: entered allmulticast mode
[   93.896838][   T11] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   93.975573][ T8467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.976'.
[   94.133775][ T8472] syzkaller0: entered promiscuous mode
[   94.133819][ T8472] syzkaller0: entered allmulticast mode
[   94.151019][ T8475] FAULT_INJECTION: forcing a failure.
[   94.151019][ T8475] name failslab, interval 1, probability 0, space 0, times 0
[   94.155595][ T8475] CPU: 0 UID: 0 PID: 8475 Comm: syz.9.979 Tainted: G             L      syzkaller #0 PREEMPT 
[   94.155622][ T8475] Tainted: [L]=SOFTLOCKUP
[   94.155626][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   94.155632][ T8475] Call trace:
[   94.155636][ T8475]  show_stack+0x2c/0x3c (C)
[   94.155654][ T8475]  __dump_stack+0x30/0x40
[   94.155665][ T8475]  dump_stack_lvl+0xd8/0x12c
[   94.155675][ T8475]  dump_stack+0x1c/0x28
[   94.155685][ T8475]  should_fail_ex+0x41c/0x590
[   94.155696][ T8475]  should_failslab+0xc4/0x120
[   94.155704][ T8475]  __kvmalloc_node_noprof+0x160/0x7d8
[   94.155713][ T8475]  bpf_compute_scc+0xb0/0x94c
[   94.155723][ T8475]  bpf_check+0x37d4/0x40dc
[   94.155733][ T8475]  bpf_prog_load+0x1050/0x15f8
[   94.155740][ T8475]  __sys_bpf+0x870/0x8c8
[   94.155746][ T8475]  __arm64_sys_bpf+0xd0/0xec
[   94.155753][ T8475]  invoke_syscall+0x98/0x244
[   94.155763][ T8475]  el0_svc_common+0xec/0x23c
[   94.155772][ T8475]  do_el0_svc+0x4c/0x5c
[   94.155782][ T8475]  el0_svc+0x64/0x260
[   94.155792][ T8475]  el0t_64_sync_handler+0x48/0x148
[   94.155802][ T8475]  el0t_64_sync+0x198/0x19c
[   94.232299][ T4717] Bluetooth: hci2: command tx timeout
[   94.285827][ T8478] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0
[   94.384830][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'.
[   94.554453][ T8497] syzkaller0: entered promiscuous mode
[   94.562502][ T8497] syzkaller0: entered allmulticast mode
[   95.053262][ T8518] syzkaller0: entered promiscuous mode
[   95.053306][ T8518] syzkaller0: entered allmulticast mode
[   95.096805][ T8521] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0
[   95.267909][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.996'.
[   95.278401][ T8530] netlink: 48 bytes leftover after parsing attributes in process `syz.5.996'.
[   95.287238][ T8530] geneve2: entered promiscuous mode
[   95.288481][ T8530] geneve2: entered allmulticast mode
[   95.507259][ T8546] syzkaller0: entered promiscuous mode
[   95.510791][ T8546] syzkaller0: entered allmulticast mode
[   96.011183][ T8573] netlink: 'syz.9.1002': attribute type 21 has an invalid length.
[   96.011222][ T8573] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1002'.
[   96.011299][ T8573] netlink: 'syz.9.1002': attribute type 4 has an invalid length.
[   96.011313][ T8573] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1002'.
[   96.022584][ T8573] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0
[   96.135647][ T8577] loop9: detected capacity change from 0 to 128
[   96.195411][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[   96.201052][ T8584] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1004'.
[   96.307587][ T8587] syzkaller0: entered promiscuous mode
[   96.307625][ T8587] syzkaller0: entered allmulticast mode
[   96.396250][ T8590] loop0: detected capacity change from 0 to 256
[   96.402686][ T8590] vfat: Unknown parameter 'i�harset'
[   96.792638][ T8609] loop5: detected capacity change from 0 to 1024
[   96.799765][ T8609] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   96.799844][ T8609] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   96.839350][ T8609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   96.848093][ T8609] EXT4-fs (loop5): shut down requested (1)
[   97.147815][   T30] kauditd_printk_skb: 58 callbacks suppressed
[   97.147855][   T30] audit: type=1800 audit(353.227:932): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[   97.479342][ T8619] syz.5.1009 (8619): drop_caches: 2
[   97.748050][ T8622] hsr_slave_0: left promiscuous mode
[   97.844852][   T30] audit: type=1800 audit(353.863:933): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[   97.898527][   T30] audit: type=1800 audit(353.891:934): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[   97.906659][ T5141] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.922063][   T30] audit: type=1800 audit(353.947:935): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   97.922110][   T30] audit: type=1800 audit(353.947:936): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   97.950361][   T30] audit: type=1800 audit(353.975:937): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0
[   97.973278][   T30] audit: type=1800 audit(353.984:938): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0
[   97.976819][   T30] audit: type=1800 audit(353.984:939): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0
[   98.139578][   T30] audit: type=1800 audit(354.143:940): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0
[   98.214025][   T30] audit: type=1800 audit(354.217:941): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0
[   98.301049][ T8640] syzkaller0: entered promiscuous mode
[   98.301089][ T8640] syzkaller0: entered allmulticast mode
[   98.333088][ T8640] tipc: Started in network mode
[   98.333132][ T8640] tipc: Node identity 6acf599ce21a, cluster identity 4711
[   98.333376][ T8640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.356577][ T8638] tipc: Resetting bearer <eth:syzkaller0>
[   98.390063][ T4718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   98.397394][ T8638] tipc: Disabling bearer <eth:syzkaller0>
[   98.406914][ T4718] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   98.409572][ T4718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   98.411837][ T4718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   98.413860][ T4718] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   98.884024][ T1459] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.044044][ T1459] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.085390][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[   99.117785][ T8666] syzkaller0: entered promiscuous mode
[   99.117824][ T8666] syzkaller0: entered allmulticast mode
[   99.288944][ T8680] FAULT_INJECTION: forcing a failure.
[   99.288944][ T8680] name failslab, interval 1, probability 0, space 0, times 0
[   99.291715][ T8680] CPU: 0 UID: 0 PID: 8680 Comm: syz.9.1019 Tainted: G             L      syzkaller #0 PREEMPT 
[   99.291732][ T8680] Tainted: [L]=SOFTLOCKUP
[   99.291735][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   99.291741][ T8680] Call trace:
[   99.291744][ T8680]  show_stack+0x2c/0x3c (C)
[   99.291764][ T8680]  __dump_stack+0x30/0x40
[   99.291774][ T8680]  dump_stack_lvl+0xd8/0x12c
[   99.291784][ T8680]  dump_stack+0x1c/0x28
[   99.291793][ T8680]  should_fail_ex+0x41c/0x590
[   99.291804][ T8680]  should_failslab+0xc4/0x120
[   99.291813][ T8680]  __kvmalloc_node_noprof+0x160/0x7d8
[   99.291822][ T8680]  bpf_compute_scc+0x104/0x94c
[   99.291832][ T8680]  bpf_check+0x37d4/0x40dc
[   99.291842][ T8680]  bpf_prog_load+0x1050/0x15f8
[   99.291849][ T8680]  __sys_bpf+0x870/0x8c8
[   99.291856][ T8680]  __arm64_sys_bpf+0xd0/0xec
[   99.291863][ T8680]  invoke_syscall+0x98/0x244
[   99.291873][ T8680]  el0_svc_common+0xec/0x23c
[   99.291882][ T8680]  do_el0_svc+0x4c/0x5c
[   99.291892][ T8680]  el0_svc+0x64/0x260
[   99.291903][ T8680]  el0t_64_sync_handler+0x48/0x148
[   99.291913][ T8680]  el0t_64_sync+0x198/0x19c
[   99.411540][ T1459] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.715132][ T1459] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.767888][ T8697] loop9: detected capacity change from 0 to 512
[   99.785083][ T8697] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[   99.811856][ T8697] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1023: bad orphan inode 13
[   99.813822][ T8697] loop9: lost filesystem error report for type 5 error -117
[   99.816315][    C0] EXT4-fs (loop9): error count since last fsck: 1
[   99.816347][    C0] EXT4-fs (loop9): last error at time 355: ext4_orphan_get:1425
[   99.822665][ T8697] ext4_test_bit(bit=12, block=18) = 1
[   99.822697][ T8697] is_bad_inode(inode)=0
[   99.822716][ T8697] NEXT_ORPHAN(inode)=0
[   99.822728][ T8697] max_ino=32
[   99.822740][ T8697] i_nlink=1
[   99.823257][ T8697] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   99.856223][ T8697] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   99.897128][ T8697] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1023: bg 0: block 248: padding at end of block bitmap is not set
[   99.901788][ T8697] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.1023: Failed to acquire dquot type 1
[  100.112423][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  100.222235][ T8718] vim2m vim2m.0: vidioc_s_fmt queue busy
[  100.267783][ T1459] bridge_slave_1: left promiscuous mode
[  100.267919][ T1459] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.278170][ T1459] bridge_slave_0: left allmulticast mode
[  100.278209][ T1459] bridge_slave_0: left promiscuous mode
[  100.278314][ T1459] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.379215][ T8726] FAULT_INJECTION: forcing a failure.
[  100.379215][ T8726] name failslab, interval 1, probability 0, space 0, times 0
[  100.379255][ T8726] CPU: 0 UID: 0 PID: 8726 Comm: syz.9.1031 Tainted: G             L      syzkaller #0 PREEMPT 
[  100.379280][ T8726] Tainted: [L]=SOFTLOCKUP
[  100.379285][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  100.379291][ T8726] Call trace:
[  100.379294][ T8726]  show_stack+0x2c/0x3c (C)
[  100.379313][ T8726]  __dump_stack+0x30/0x40
[  100.379324][ T8726]  dump_stack_lvl+0xd8/0x12c
[  100.379334][ T8726]  dump_stack+0x1c/0x28
[  100.379343][ T8726]  should_fail_ex+0x41c/0x590
[  100.379354][ T8726]  should_failslab+0xc4/0x120
[  100.379363][ T8726]  __kvmalloc_node_noprof+0x160/0x7d8
[  100.379372][ T8726]  bpf_compute_scc+0xb0/0x94c
[  100.379382][ T8726]  bpf_check+0x37d4/0x40dc
[  100.379391][ T8726]  bpf_prog_load+0x1050/0x15f8
[  100.379398][ T8726]  __sys_bpf+0x870/0x8c8
[  100.379405][ T8726]  __arm64_sys_bpf+0xd0/0xec
[  100.379411][ T8726]  invoke_syscall+0x98/0x244
[  100.379421][ T8726]  el0_svc_common+0xec/0x23c
[  100.379430][ T8726]  do_el0_svc+0x4c/0x5c
[  100.379440][ T8726]  el0_svc+0x64/0x260
[  100.379451][ T8726]  el0t_64_sync_handler+0x48/0x148
[  100.379461][ T8726]  el0t_64_sync+0x198/0x19c
[  100.641695][ T4718] Bluetooth: hci5: command tx timeout
[  100.692574][ T1459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.709979][ T1459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.716039][ T1459] bond0 (unregistering): Released all slaves
[  100.755079][ T8738] syzkaller1: entered promiscuous mode
[  100.756318][ T8738] syzkaller1: entered allmulticast mode
[  100.837774][ T4717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  100.858928][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  100.880517][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.880565][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.880644][ T8644] bridge_slave_0: entered allmulticast mode
[  100.885588][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  100.887964][ T8644] bridge_slave_0: entered promiscuous mode
[  100.888948][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.888994][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.889070][ T8644] bridge_slave_1: entered allmulticast mode
[  100.889538][ T8644] bridge_slave_1: entered promiscuous mode
[  100.920244][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  100.922807][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  101.093918][ T8644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.095040][ T8644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.102961][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0
[  101.143417][ T8748] kernel read not supported for file /set_event (pid: 8748 comm: syz.0.1035)
[  101.257600][ T1459] hsr_slave_0: left promiscuous mode
[  101.262549][ T1459] hsr_slave_1: left promiscuous mode
[  101.264181][ T1459] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.265999][ T1459] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.267971][ T1459] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.271604][ T1459] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.301755][ T1459] veth1_macvtap: left allmulticast mode
[  101.304147][ T1459] veth1_macvtap: left promiscuous mode
[  101.305547][ T1459] veth0_macvtap: left promiscuous mode
[  101.306743][ T1459] veth1_vlan: left promiscuous mode
[  101.308701][ T1459] veth0_vlan: left promiscuous mode
[  101.350399][ T8758] input: syz0 as /devices/virtual/input/input7
[  101.352815][ T8760] loop9: detected capacity change from 0 to 512
[  101.356163][ T8760] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  101.370469][ T8760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002]
[  101.370623][ T8760] EXT4-fs (loop9): orphan cleanup on readonly fs
[  101.374391][ T8760] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1037: bg 0: block 361: padding at end of block bitmap is not set
[  101.374414][ T8760] loop9: lost filesystem error report for type 5 error -117
[  101.377496][ T8760] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  101.377520][ T8760] loop9: lost filesystem error report for type 5 error -117
[  101.379012][    C0] EXT4-fs (loop9): error count since last fsck: 2
[  101.379026][    C0] EXT4-fs (loop9): initial error at time 357: ext4_validate_block_bitmap:441
[  101.379038][    C0] EXT4-fs (loop9): last error at time 357: ext4_mb_clear_bb:6679
[  101.387790][ T8760] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #11: comm syz.9.1037: attempt to clear invalid blocks 33619980 len 1
[  101.387834][ T8760] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  101.391423][ T8760] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1037: invalid indirect mapped block 1811939328 (level 0)
[  101.391452][ T8760] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  101.396220][ T8760] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1037: invalid indirect mapped block 2185560079 (level 1)
[  101.396252][ T8760] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  101.402989][ T8760] EXT4-fs (loop9): 1 truncate cleaned up
[  101.403470][ T8760] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  101.860774][ T1459] team0 (unregistering): Port device team_slave_1 removed
[  101.884922][ T1459] team0 (unregistering): Port device team_slave_0 removed
[  102.048660][ T8644] team0: Port device team_slave_0 added
[  102.061645][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  102.146224][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1
[  102.147995][ T8644] team0: Port device team_slave_1 added
[  102.174172][ T8780] loop9: detected capacity change from 0 to 1024
[  102.174640][ T8780] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.196470][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.207195][ T8780] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.211097][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.211119][ T8644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.233835][ T8644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.233868][ T8644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.233896][ T8644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.297641][ T8644] hsr_slave_0: entered promiscuous mode
[  102.300332][ T8644] hsr_slave_1: entered promiscuous mode
[  102.310367][ T8644] debugfs: 'hsr0' already exists in 'hsr'
[  102.311688][ T8644] Cannot create hsr debugfs directory
[  102.459990][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.469223][ T1459] IPVS: stop unused estimator thread 0...
[  102.617351][ T8795] syzkaller1: entered promiscuous mode
[  102.618662][ T8795] syzkaller1: entered allmulticast mode
[  102.635520][ T8795] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  102.703807][ T1459] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.709947][ T1459] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.897122][ T4719] Bluetooth: hci5: command tx timeout
[  102.916118][   T30] kauditd_printk_skb: 55 callbacks suppressed
[  102.916157][   T30] audit: type=1800 audit(358.582:995): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[  102.942686][ T1459] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.942729][ T1459] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.031384][ T1459] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.033641][ T1459] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.090238][   T30] audit: type=1800 audit(358.748:996): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24311 res=0 errno=0
[  103.107638][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2
[  103.140922][ T4719] Bluetooth: hci1: command tx timeout
[  103.145141][ T1459] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.145194][ T1459] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.354285][   T30] audit: type=1800 audit(358.989:997): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160849 res=0 errno=0
[  103.354336][   T30] audit: type=1800 audit(358.989:998): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=160854 res=0 errno=0
[  103.366422][   T30] audit: type=1800 audit(358.989:999): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=160858 res=0 errno=0
[  103.366481][   T30] audit: type=1800 audit(358.989:1000): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=160857 res=0 errno=0
[  103.366513][   T30] audit: type=1800 audit(358.989:1001): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=160860 res=0 errno=0
[  103.385733][ T8818] FAULT_INJECTION: forcing a failure.
[  103.385733][ T8818] name failslab, interval 1, probability 0, space 0, times 0
[  103.388555][ T8818] CPU: 0 UID: 0 PID: 8818 Comm: syz.0.1044 Tainted: G             L      syzkaller #0 PREEMPT 
[  103.388582][ T8818] Tainted: [L]=SOFTLOCKUP
[  103.388586][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  103.388593][ T8818] Call trace:
[  103.388597][ T8818]  show_stack+0x2c/0x3c (C)
[  103.388622][ T8818]  __dump_stack+0x30/0x40
[  103.388633][ T8818]  dump_stack_lvl+0xd8/0x12c
[  103.388644][ T8818]  dump_stack+0x1c/0x28
[  103.388654][ T8818]  should_fail_ex+0x41c/0x590
[  103.388666][ T8818]  should_failslab+0xc4/0x120
[  103.388674][ T8818]  __kvmalloc_node_noprof+0x160/0x7d8
[  103.388683][ T8818]  bpf_compute_subprog_arg_access+0x114/0xddc
[  103.388694][ T8818]  bpf_compute_live_registers+0x5d0/0xfe0
[  103.388704][ T8818]  bpf_check+0x37f4/0x40dc
[  103.388714][ T8818]  bpf_prog_load+0x1050/0x15f8
[  103.388721][ T8818]  __sys_bpf+0x870/0x8c8
[  103.388728][ T8818]  __arm64_sys_bpf+0xd0/0xec
[  103.388735][ T8818]  invoke_syscall+0x98/0x244
[  103.388745][ T8818]  el0_svc_common+0xec/0x23c
[  103.388755][ T8818]  do_el0_svc+0x4c/0x5c
[  103.388764][ T8818]  el0_svc+0x64/0x260
[  103.388775][ T8818]  el0t_64_sync_handler+0x48/0x148
[  103.388785][ T8818]  el0t_64_sync+0x198/0x19c
[  103.502152][   T30] audit: type=1800 audit(359.128:1002): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161018 res=0 errno=0
[  103.509221][   T30] audit: type=1800 audit(359.137:1003): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=161023 res=0 errno=0
[  103.529607][   T30] audit: type=1800 audit(359.146:1004): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=161027 res=0 errno=0
[  103.688643][ T1459] bridge_slave_1: left allmulticast mode
[  103.691498][ T1459] bridge_slave_1: left promiscuous mode
[  103.693067][ T1459] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.705696][ T1459] bridge_slave_0: left allmulticast mode
[  103.710574][ T1459] bridge_slave_0: left promiscuous mode
[  103.710715][ T1459] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.767104][ T8834] loop0: detected capacity change from 0 to 128
[  103.813954][ T8834] kernel read not supported for file /set_event (pid: 8834 comm: syz.0.1047)
[  103.943039][ T8839] __nla_validate_parse: 2 callbacks suppressed
[  103.943084][ T8839] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1048'.
[  104.203212][ T8845] null_blk: disk nullb1 created
[  104.208087][ T8846] loop9: detected capacity change from 0 to 1024
[  104.231834][ T8846] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  104.260899][ T8846] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.1051: lblock 3 mapped to illegal pblock 3 (length 3)
[  104.278485][ T8846] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  104.280921][ T8846] EXT4-fs (loop9): This should not happen!! Data will be lost
[  104.280921][ T8846] 
[  104.369178][ T1459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.377087][ T1459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.381212][ T1459] bond0 (unregistering): Released all slaves
[  104.395842][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3
[  104.401649][ T8846] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.1051: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  104.412863][ T8846] EXT4-fs error (device loop9) in ext4_setattr:6172: Corrupt filesystem
[  104.416111][ T8846] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm syz.9.1051: lblock 0 mapped to illegal pblock 0 (length 1)
[  104.431666][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.438227][ T8846] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  104.438268][ T8846] EXT4-fs (loop9): This should not happen!! Data will be lost
[  104.438268][ T8846] 
[  104.473971][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.474171][ T8740] bridge_slave_0: entered allmulticast mode
[  104.474673][ T8740] bridge_slave_0: entered promiscuous mode
[  104.475582][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.475611][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.475678][ T8740] bridge_slave_1: entered allmulticast mode
[  104.476130][ T8740] bridge_slave_1: entered promiscuous mode
[  104.559344][ T8857] loop0: detected capacity change from 0 to 1024
[  104.562754][ T6915] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  104.563521][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  104.574403][ T8740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.582899][ T8857] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.628858][ T8857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.800038][ T8044] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.818246][ T6673] kernel read not supported for file /vga_arbiter (pid: 6673 comm: kworker/0:6)
[  104.864084][ T8740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.904302][ T8867] 9p: Could not find request transport: xen
[  105.015405][ T8740] team0: Port device team_slave_0 added
[  105.048843][ T8880] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  105.057358][ T8880] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  105.111968][ T8740] team0: Port device team_slave_1 added
[  105.128147][ T4719] Bluetooth: hci5: command tx timeout
[  105.190864][ T1459] hsr_slave_0: left promiscuous mode
[  105.192340][ T1459] hsr_slave_1: left promiscuous mode
[  105.199680][ T1459] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.201306][ T1459] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.203251][ T1459] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.205894][ T1459] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.231803][ T8888] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0
[  105.244255][ T1459] veth1_macvtap: left promiscuous mode
[  105.244315][ T1459] veth0_macvtap: left promiscuous mode
[  105.244463][ T1459] veth1_vlan: left promiscuous mode
[  105.244504][ T1459] veth0_vlan: left promiscuous mode
[  105.391469][ T4719] Bluetooth: hci1: command tx timeout
[  105.632774][ T1459] team0 (unregistering): Port device team_slave_1 removed
[  105.646932][ T1459] team0 (unregistering): Port device team_slave_0 removed
[  105.814402][ T8894] syzkaller0: entered promiscuous mode
[  105.816767][ T8894] syzkaller0: entered allmulticast mode
[  105.819120][ T8901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.832221][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.833861][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.839209][ T8740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.848055][ T8740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.849541][ T8740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.854962][ T8740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.859612][ T8891] tipc: Resetting bearer <eth:syzkaller0>
[  105.902508][ T8891] tipc: Disabling bearer <eth:syzkaller0>
[  106.063548][ T8740] hsr_slave_0: entered promiscuous mode
[  106.067629][ T8740] hsr_slave_1: entered promiscuous mode
[  106.072037][ T8740] debugfs: 'hsr0' already exists in 'hsr'
[  106.073388][ T8740] Cannot create hsr debugfs directory
[  106.365139][ T8916] loop0: detected capacity change from 0 to 4096
[  106.389864][ T8920] loop9: detected capacity change from 0 to 512
[  106.393634][ T8644] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  106.399640][ T8916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.420803][ T8920] /dev/loop9: Can't open blockdev
[  106.422836][ T8644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.423335][ T8644] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  106.435234][ T8644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  106.473673][ T8644] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  106.498258][ T8644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.518888][ T8916] bridge_slave_0: left allmulticast mode
[  106.521682][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.550573][ T8926] loop9: detected capacity change from 0 to 1024
[  106.552196][ T8916] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  106.628933][ T8044] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.657671][ T8926] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.704480][ T8644] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  106.736603][ T8644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.755171][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.898664][ T8943] loop0: detected capacity change from 0 to 4096
[  106.919400][ T8943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.955137][ T8943] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  107.001799][ T8044] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.076727][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1067'.
[  107.078106][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1067'.
[  107.252935][ T8644] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.277363][ T8644] 8021q: adding VLAN 0 to HW filter on device team0
[  107.301302][ T8644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.332793][ T8644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.341536][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.341587][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.342126][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.342152][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.381082][ T4719] Bluetooth: hci5: command tx timeout
[  107.639392][ T4719] Bluetooth: hci1: command tx timeout
[  107.760329][ T8740] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  107.763262][ T8740] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  107.773588][ T8740] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  107.776284][ T8740] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  107.781263][ T8740] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  107.792798][ T8740] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  107.793236][ T8740] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  107.809345][ T8740] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  107.982293][ T8740] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.000733][ T9006] syzkaller0: entered promiscuous mode
[  108.001943][ T9006] syzkaller0: entered allmulticast mode
[  108.028184][ T8740] 8021q: adding VLAN 0 to HW filter on device team0
[  108.089194][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.089243][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.111577][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.111630][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.184702][ T8644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.294451][ T8644] veth0_vlan: entered promiscuous mode
[  108.365918][ T8644] veth1_vlan: entered promiscuous mode
[  108.372115][ T8644] veth0_macvtap: entered promiscuous mode
[  108.392489][   T30] kauditd_printk_skb: 99 callbacks suppressed
[  108.392535][   T30] audit: type=1800 audit(363.646:1104): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0
[  108.432973][ T8644] veth1_macvtap: entered promiscuous mode
[  108.456958][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.479369][ T8644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.571248][ T1459] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.582111][ T1216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.582392][ T1216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.582425][ T1216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.603855][   T30] audit: type=1800 audit(363.831:1105): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166628 res=0 errno=0
[  108.640868][   T30] audit: type=1800 audit(363.877:1106): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[  108.671731][ T1459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.671755][ T1459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.685003][   T30] audit: type=1800 audit(363.914:1107): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166754 res=0 errno=0
[  108.746494][ T6823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.746534][ T6823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.779752][   T30] audit: type=1800 audit(364.006:1108): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0
[  108.819810][   T30] audit: type=1800 audit(364.034:1109): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[  108.891548][   T30] audit: type=1800 audit(364.108:1110): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0
[  108.983073][ T9041] netlink: 'syz.0.1082': attribute type 1 has an invalid length.
[  108.983107][ T9041] netlink: 'syz.0.1082': attribute type 1 has an invalid length.
[  109.004028][   T30] audit: type=1326 audit(364.200:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.2.1014" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa45781a8 code=0x0
[  109.090668][   T30] audit: type=1800 audit(364.274:1112): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[  109.162562][ T8740] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.268393][ T8740] veth0_vlan: entered promiscuous mode
[  109.287800][   T30] audit: type=1800 audit(364.477:1113): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[  109.295910][ T8740] veth1_vlan: entered promiscuous mode
[  109.312663][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11
[  109.369253][ T8740] veth0_macvtap: entered promiscuous mode
[  109.382377][ T9064] syzkaller0: entered promiscuous mode
[  109.382416][ T9064] syzkaller0: entered allmulticast mode
[  109.398510][ T8740] veth1_macvtap: entered promiscuous mode
[  109.474983][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.490092][ T8740] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.567497][ T1459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.567638][ T1459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.567909][ T1459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.568028][ T1459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.582741][ T9069] loop9: detected capacity change from 0 to 1024
[  109.641748][ T9069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.682919][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.682935][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.773502][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.773536][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.833935][ T6915] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.891986][ T4719] Bluetooth: hci1: command tx timeout
[  110.135493][ T9091] loop9: detected capacity change from 0 to 128
[  110.136755][ T4719] Bluetooth: hci3: unexpected event for opcode 0x202d
[  110.402896][ T9105] loop0: detected capacity change from 0 to 512
[  110.406831][ T9096] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.427721][ T9105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.467672][ T4401] 8021q: adding VLAN 0 to HW filter on device eth20
[  110.554724][ T8044] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.622868][ T9096] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.683034][ T9115] syzkaller0: entered promiscuous mode
[  110.689316][ T9115] syzkaller0: entered allmulticast mode
[  110.696248][ T9119] syzkaller0: entered promiscuous mode
[  110.697467][ T9119] syzkaller0: entered allmulticast mode
[  110.723703][ T9096] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.740453][ T9115] tipc: Started in network mode
[  110.740502][ T9115] tipc: Node identity ca740255d047, cluster identity 4711
[  110.740648][ T9115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.745943][ T9114] tipc: Resetting bearer <eth:syzkaller0>
[  110.768473][ T9114] tipc: Disabling bearer <eth:syzkaller0>
[  110.917462][ T9096] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.935870][ T9127] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1095'.
[  110.937833][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1095'.
[  110.999211][ T9127] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1095'.
[  110.999252][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1095'.
[  111.023704][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'.
[  111.026885][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'.
[  111.188472][ T4718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.190639][ T4718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.194174][ T4718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.195959][ T4718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.198407][ T4718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.286730][ T1216] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.289638][ T5661] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.290912][ T5661] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.300316][ T1216] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.580058][ T9169] syzkaller0: entered promiscuous mode
[  111.580097][ T9169] syzkaller0: entered allmulticast mode
[  111.605817][ T9169] tipc: Started in network mode
[  111.606923][ T9169] tipc: Node identity 061c749131e7, cluster identity 4711
[  111.608429][ T9169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.640395][ T9167] tipc: Resetting bearer <eth:syzkaller0>
[  111.678321][ T9177] loop9: detected capacity change from 0 to 4096
[  111.710923][ T9177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  111.715417][ T9177] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  111.715447][ T9177] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237)
[  111.715506][ T9177] EXT4-fs (loop9): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  111.721696][ T9177] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz.9.1104: Invalid inode table block 0 in block_group 0
[  111.721739][ T9177] loop9: lost filesystem error report for type 5 error -117
[  111.724376][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  111.724401][    C0] EXT4-fs (loop9): initial error at time 366: __ext4_get_inode_loc:4886
[  111.724413][    C0] EXT4-fs (loop9): last error at time 366: __ext4_get_inode_loc:4886
[  111.731105][ T9177] EXT4-fs (loop9): Remounting filesystem read-only
[  111.731194][ T9177] EXT4-fs (loop9): get root inode failed
[  111.731214][ T9177] EXT4-fs (loop9): mount failed
[  111.774930][ T9167] tipc: Disabling bearer <eth:syzkaller0>
[  111.917084][ T9184] loop9: detected capacity change from 0 to 256
[  111.950746][ T1321] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.149882][ T1321] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.626484][ T9220] FAULT_INJECTION: forcing a failure.
[  112.626484][ T9220] name failslab, interval 1, probability 0, space 0, times 0
[  112.629452][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.0.1111 Tainted: G             L      syzkaller #0 PREEMPT 
[  112.629477][ T9220] Tainted: [L]=SOFTLOCKUP
[  112.629481][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  112.629487][ T9220] Call trace:
[  112.629491][ T9220]  show_stack+0x2c/0x3c (C)
[  112.629514][ T9220]  __dump_stack+0x30/0x40
[  112.629526][ T9220]  dump_stack_lvl+0xd8/0x12c
[  112.629536][ T9220]  dump_stack+0x1c/0x28
[  112.629545][ T9220]  should_fail_ex+0x41c/0x590
[  112.629557][ T9220]  should_failslab+0xc4/0x120
[  112.629565][ T9220]  __kmalloc_cache_noprof+0x94/0x5ec
[  112.629574][ T9220]  do_check_common+0x190/0x32b8
[  112.629585][ T9220]  do_check_main+0x6c/0x1c8
[  112.629594][ T9220]  bpf_check+0x381c/0x40dc
[  112.629602][ T9220]  bpf_prog_load+0x1050/0x15f8
[  112.629609][ T9220]  __sys_bpf+0x870/0x8c8
[  112.629616][ T9220]  __arm64_sys_bpf+0xd0/0xec
[  112.629622][ T9220]  invoke_syscall+0x98/0x244
[  112.629633][ T9220]  el0_svc_common+0xec/0x23c
[  112.629642][ T9220]  do_el0_svc+0x4c/0x5c
[  112.629651][ T9220]  el0_svc+0x64/0x260
[  112.629663][ T9220]  el0t_64_sync_handler+0x48/0x148
[  112.629673][ T9220]  el0t_64_sync+0x198/0x19c
[  112.992319][ T9227] loop0: detected capacity change from 0 to 1024
[  112.999800][ T9227] ext4: Unknown parameter '�|f�����[�x������8&�+6W��'�u�ݪ/V�i��O�e\�JXJ�$N�Z
[  112.999800][ T9227] ���|A_���K3��-�xɦ�LR�|�����\��k���P�^I��'
[  113.377116][ T1321] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.437156][ T9246] syzkaller0: entered promiscuous mode
[  113.437266][ T9246] syzkaller0: entered allmulticast mode
[  113.446010][ T4718] Bluetooth: hci4: command tx timeout
[  113.465096][ T9249] fuse: Unknown parameter 'roode'
[  113.500516][ T9246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.538179][ T1216] Bluetooth: hci0: Frame reassembly failed (-84)
[  113.545855][ T9251] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  115.703400][ T4719] Bluetooth: hci4: command tx timeout
[  115.725588][ T9244] tipc: Resetting bearer <eth:syzkaller0>
[  115.736227][ T9244] tipc: Disabling bearer <eth:syzkaller0>
[  115.741255][   T30] kauditd_printk_skb: 44 callbacks suppressed
[  115.741291][   T30] audit: type=1800 audit(370.421:1158): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0
[  115.783531][ T4854] tipc: Node number set to 439550549
[  115.797123][ T4719] Bluetooth: hci0: command 0x1003 tx timeout
[  115.798346][ T4718] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  115.828160][   T30] audit: type=1800 audit(370.504:1159): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0
[  115.872261][   T30] audit: type=1800 audit(370.541:1160): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0
[  115.880128][ T1321] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.891611][   T30] audit: type=1800 audit(370.569:1161): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0
[  115.930331][ T9265] loop9: detected capacity change from 0 to 512
[  115.984830][   T30] audit: type=1800 audit(370.652:1162): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0
[  116.027969][   T30] audit: type=1800 audit(370.698:1163): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169546 res=0 errno=0
[  116.028018][   T30] audit: type=1800 audit(370.698:1164): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169655 res=0 errno=0
[  116.051582][   T30] audit: type=1800 audit(370.716:1165): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169675 res=0 errno=0
[  116.056670][   T30] audit: type=1800 audit(370.716:1166): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169761 res=0 errno=0
[  116.100892][   T30] audit: type=1800 audit(370.753:1167): pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=169680 res=0 errno=0
[  116.108022][ T1321] bridge_slave_1: left allmulticast mode
[  116.108065][ T1321] bridge_slave_1: left promiscuous mode
[  116.108164][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.136764][ T1321] bridge_slave_0: left allmulticast mode
[  116.136803][ T1321] bridge_slave_0: left promiscuous mode
[  116.136902][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.202107][ T9284] ip6t_srh: unknown srh invflags 4000
[  116.547687][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.559765][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.563585][ T1321] bond0 (unregistering): Released all slaves
[  116.580705][ T1321] bond1 (unregistering): Released all slaves
[  116.640134][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10
[  116.671510][ T9309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.674313][ T9299] syzkaller0: entered promiscuous mode
[  116.689040][ T9299] syzkaller0: entered allmulticast mode
[  116.732424][ T9292] tipc: Resetting bearer <eth:syzkaller0>
[  116.754879][ T1321] IPVS: stopping backup sync thread 6171 ...
[  116.764317][ T9292] tipc: Disabling bearer <eth:syzkaller0>
[  116.997387][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.998221][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.998340][ T9143] bridge_slave_0: entered allmulticast mode
[  116.998819][ T9143] bridge_slave_0: entered promiscuous mode
[  117.076686][ T9324] netlink: 'syz.1.1131': attribute type 34 has an invalid length.
[  117.095843][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.095896][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.096004][ T9143] bridge_slave_1: entered allmulticast mode
[  117.112867][ T9143] bridge_slave_1: entered promiscuous mode
[  117.205983][ T9326] syzkaller0: entered promiscuous mode
[  117.206021][ T9326] syzkaller0: entered allmulticast mode
[  117.214688][ T9326] tipc: Started in network mode
[  117.214731][ T9326] tipc: Node identity 8a7cba1b34f3, cluster identity 4711
[  117.214943][ T9326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.244585][ T9325] tipc: Resetting bearer <eth:syzkaller0>
[  117.267688][ T9341] loop1: detected capacity change from 0 to 1024
[  117.323847][ T9325] tipc: Disabling bearer <eth:syzkaller0>
[  117.462404][ T1321] hsr_slave_0: left promiscuous mode
[  117.464835][ T1321] hsr_slave_1: left promiscuous mode
[  117.468949][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.470604][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.484676][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.484715][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.509961][ T1321] veth1_macvtap: left promiscuous mode
[  117.510021][ T1321] veth0_macvtap: left promiscuous mode
[  117.510109][ T1321] veth1_vlan: left promiscuous mode
[  117.510151][ T1321] veth0_vlan: left promiscuous mode
[  117.940563][ T1321] team0 (unregistering): Port device team_slave_1 removed
[  117.954414][ T4718] Bluetooth: hci4: command tx timeout
[  117.958346][ T1321] team0 (unregistering): Port device team_slave_0 removed
[  118.096063][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.101324][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.142532][ T9374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.142871][ T9362] syzkaller0: entered promiscuous mode
[  118.142899][ T9362] syzkaller0: entered allmulticast mode
[  118.157229][ T4401] 8021q: adding VLAN 0 to HW filter on device eth21
[  118.174503][ T9353] tipc: Resetting bearer <eth:syzkaller0>
[  118.195340][ T9353] tipc: Disabling bearer <eth:syzkaller0>
[  118.248522][ T9143] team0: Port device team_slave_0 added
[  118.254971][ T9143] team0: Port device team_slave_1 added
[  118.320822][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.322919][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  118.328593][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.341014][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.345795][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  118.345860][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.397392][ T9388] netlink: 'syz.1.1142': attribute type 4 has an invalid length.
[  118.488945][ T9143] hsr_slave_0: entered promiscuous mode
[  118.489446][ T9143] hsr_slave_1: entered promiscuous mode
[  118.489685][ T9143] debugfs: 'hsr0' already exists in 'hsr'
[  118.489701][ T9143] Cannot create hsr debugfs directory
[  118.595357][ T9399] netlink: 'syz.9.1144': attribute type 9 has an invalid length.
[  118.613120][ T9401] loop1: detected capacity change from 0 to 256
[  118.645205][ T9401] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  118.650989][ T9401] FAT-fs (loop1): Filesystem has been set read-only
[  118.662259][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'.
[  118.697478][ T9406] loop2: detected capacity change from 0 to 512
[  118.706396][ T9406] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  118.720901][ T9406] EXT4-fs (loop2): 1 truncate cleaned up
[  118.738052][ T9406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.780816][ T9411] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1147'.
[  118.813096][ T9406] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1146: invalid indirect mapped block 4294901760 (level 0)
[  118.825300][ T9406] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1146: invalid indirect mapped block 2185560079 (level 0)
[  118.829951][ T9406] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1146: invalid indirect mapped block 65535 (level 2)
[  118.833670][ T9415] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.1146: invalid fast symlink length 39
[  118.874417][ T9406] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1146: Invalid inode table block 0 in block_group 0
[  118.916970][ T9406] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  118.924732][ T9406] EXT4-fs error (device loop2): ext4_splice_branch:479: inode #13: comm syz.2.1146: mark_inode_dirty error
[  118.939476][ T9406] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1146: bg 0: block 53: invalid block bitmap
[  118.947195][ T9406] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  118.949647][ T9406] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1146: Invalid inode table block 0 in block_group 0
[  119.009078][ T9421] input: syz1 as /devices/virtual/input/input8
[  119.029892][ T9421] nfs: Unknown parameter 'mask'
[  119.076323][ T8644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.176206][ T9423] syzkaller0: entered promiscuous mode
[  119.176253][ T9423] syzkaller0: entered allmulticast mode
[  119.180989][ T9424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.206073][ T9416] tipc: Resetting bearer <eth:syzkaller0>
[  119.251580][ T9416] tipc: Disabling bearer <eth:syzkaller0>
[  119.268137][ T9437] loop2: detected capacity change from 0 to 128
[  119.276313][ T9437] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  119.295390][ T9427] syzkaller0: entered promiscuous mode
[  119.295424][ T9427] syzkaller0: entered allmulticast mode
[  119.309820][ T9437] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.374980][ T9427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.389911][ T9426] tipc: Resetting bearer <eth:syzkaller0>
[  119.413546][ T9426] tipc: Disabling bearer <eth:syzkaller0>
[  119.535470][ T9451] netlink: 'syz.0.1155': attribute type 4 has an invalid length.
[  119.718731][ T9143] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  119.729961][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  119.732574][ T9143] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  119.738034][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  119.740366][ T9143] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  119.748563][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  119.752858][ T9143] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  119.761130][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  119.903234][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.934188][ T9143] 8021q: adding VLAN 0 to HW filter on device team0
[  119.943021][ T1459] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.943070][ T1459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.957557][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.957609][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.156196][ T9485] loop9: detected capacity change from 0 to 3
[  120.207781][ T4718] Bluetooth: hci4: command tx timeout
[  120.342655][ T9497] loop2: detected capacity change from 0 to 128
[  120.347738][ T9489] bond1 (unregistering): Released all slaves
[  120.358132][ T9497] /dev/loop2: Can't open blockdev
[  120.371960][ T9498] netlink: 'syz.1.1162': attribute type 40 has an invalid length.
[  120.394373][ T9499] tmpfs: Unknown parameter 'nr_ilodes'
[  120.408938][ T9499] loop0: detected capacity change from 0 to 256
[  120.427149][ T9498] netlink: 'syz.1.1162': attribute type 32 has an invalid length.
[  120.427182][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'.
[  120.434762][ T9499] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152)
[  120.438446][ T9499] FAT-fs (loop0): Filesystem has been set read-only
[  120.466441][ T9498] bond1: option coupled_control: invalid value (115)
[  120.473996][ T9498] bond1 (unregistering): Released all slaves
[  120.642045][ T9507] syzkaller0: entered promiscuous mode
[  120.643388][ T9507] syzkaller0: entered allmulticast mode
[  120.658638][ T9507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.702633][ T9505] tipc: Resetting bearer <eth:syzkaller0>
[  120.735793][ T9505] tipc: Disabling bearer <eth:syzkaller0>
[  120.737233][ T9510] loop1: detected capacity change from 0 to 512
[  120.764635][ T9510] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  120.771213][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  120.771246][    C0] EXT4-fs (loop1): initial error at time 375: ext4_mb_generate_buddy:1317
[  120.771281][    C0] EXT4-fs (loop1): last error at time 375: ext4_mb_generate_buddy:1317
[  120.776781][ T9510] EXT4-fs (loop1): Remounting filesystem read-only
[  120.788750][ T9510] EXT4-fs (loop1): 1 truncate cleaned up
[  120.794366][ T9510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.808061][   T39] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  120.808103][   T39] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  120.808150][   T39] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  120.830163][ T9516] netlink: 'syz.0.1166': attribute type 4 has an invalid length.
[  120.875131][ T4718] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1
[  120.963870][ T8740] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.060014][ T9143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.068355][ T9523] loop0: detected capacity change from 0 to 512
[  121.083552][ T9531] 9pnet_fd: Insufficient options for proto=fd
[  121.101105][ T9523] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  121.101257][ T9523] EXT4-fs (loop0): orphan cleanup on readonly fs
[  121.107760][ T9523] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  121.116176][ T9523] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  121.117318][ T9523] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.1168: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  121.117354][ T9523] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  121.119021][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  121.119038][    C0] EXT4-fs (loop0): last error at time 375: ext4_ext_check_inode:521: inode 13
[  121.123185][ T9523] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1168: couldn't read orphan inode 13 (err -117)
[  121.123211][ T9523] loop0: lost filesystem error report for type 5 error -117
[  121.131870][ T9523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  121.209302][ T9523] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.1168: inode #15: comm syz.0.1168: iget: illegal inode #
[  121.222552][   T30] kauditd_printk_skb: 99 callbacks suppressed
[  121.222590][   T30] audit: type=1800 audit(375.487:1259): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=41869 res=0 errno=0
[  121.239663][   T30] audit: type=1800 audit(375.506:1260): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=61990 res=0 errno=0
[  121.298113][   T30] audit: type=1800 audit(375.552:1261): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0
[  121.308709][   T30] audit: type=1800 audit(375.561:1262): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=62064 res=0 errno=0
[  121.345068][   T30] audit: type=1800 audit(375.598:1263): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=62138 res=0 errno=0
[  121.350867][ T8044] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.383716][   T30] audit: type=1800 audit(375.635:1264): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=62212 res=0 errno=0
[  121.397278][   T30] audit: type=1800 audit(375.644:1265): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=62286 res=0 errno=0
[  121.416073][   T30] audit: type=1800 audit(375.662:1266): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=62360 res=0 errno=0
[  121.437861][   T30] audit: type=1800 audit(375.681:1267): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=143615 res=0 errno=0
[  121.453681][   T30] audit: type=1800 audit(375.699:1268): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=143723 res=0 errno=0
[  121.631943][ T9143] veth0_vlan: entered promiscuous mode
[  121.634075][ T9143] veth1_vlan: entered promiscuous mode
[  121.650834][ T9551] tipc: Enabled bearer <ib:wg2>, priority 10
[  121.716156][ T9143] veth0_macvtap: entered promiscuous mode
[  121.733752][ T9143] veth1_macvtap: entered promiscuous mode
[  121.778238][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.796294][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.798415][ T1459] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.798457][ T1459] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.798491][ T1459] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.798518][ T1459] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.991994][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.992034][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.053384][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.055195][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.085316][ T9566] syzkaller0: entered promiscuous mode
[  122.087897][ T9566] syzkaller0: entered allmulticast mode
[  122.102151][ T9566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.107662][ T9567] syzkaller0: entered promiscuous mode
[  122.107695][ T9567] syzkaller0: entered allmulticast mode
[  122.111644][ T9566] FAULT_INJECTION: forcing a failure.
[  122.111644][ T9566] name failslab, interval 1, probability 0, space 0, times 0
[  122.111674][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.1.1177 Tainted: G             L      syzkaller #0 PREEMPT 
[  122.111687][ T9566] Tainted: [L]=SOFTLOCKUP
[  122.111691][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  122.111697][ T9566] Call trace:
[  122.111700][ T9566]  show_stack+0x2c/0x3c (C)
[  122.111722][ T9566]  __dump_stack+0x30/0x40
[  122.111733][ T9566]  dump_stack_lvl+0xd8/0x12c
[  122.111742][ T9566]  dump_stack+0x1c/0x28
[  122.111751][ T9566]  should_fail_ex+0x41c/0x590
[  122.111763][ T9566]  should_failslab+0xc4/0x120
[  122.111771][ T9566]  __kmalloc_noprof+0x108/0x6b8
[  122.111781][ T9566]  tomoyo_realpath_from_path+0xbc/0x4dc
[  122.111790][ T9566]  tomoyo_path_number_perm+0x1f0/0x500
[  122.111798][ T9566]  tomoyo_file_ioctl+0x2c/0x3c
[  122.111806][ T9566]  security_file_ioctl+0xdc/0x2b0
[  122.111814][ T9566]  __arm64_sys_ioctl+0xb0/0x1cc
[  122.111825][ T9566]  invoke_syscall+0x98/0x244
[  122.111835][ T9566]  el0_svc_common+0xec/0x23c
[  122.111844][ T9566]  do_el0_svc+0x4c/0x5c
[  122.111853][ T9566]  el0_svc+0x64/0x260
[  122.111865][ T9566]  el0t_64_sync_handler+0x48/0x148
[  122.111875][ T9566]  el0t_64_sync+0x198/0x19c
[  122.111894][ T9566] ERROR: Out of memory at tomoyo_realpath_from_path.
[  122.163291][ T9564] tipc: Resetting bearer <eth:syzkaller0>
[  122.194994][ T9564] tipc: Disabling bearer <eth:syzkaller0>
[  122.273339][ T9574] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0
[  122.377018][ T9578] bridge0: port 3(erspan0) entered blocking state
[  122.378404][ T9578] bridge0: port 3(erspan0) entered disabled state
[  122.380058][ T9578] erspan0: entered allmulticast mode
[  122.387649][ T9578] erspan0: entered promiscuous mode
[  122.389114][ T9578] bridge0: port 3(erspan0) entered blocking state
[  122.389161][ T9578] bridge0: port 3(erspan0) entered forwarding state
[  122.412454][ T9578] loop1: detected capacity change from 0 to 1024
[  122.466048][ T9578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.489248][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1179'.
[  122.521864][ T9578] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers
[  122.620812][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1185'.
[  122.647565][ T8740] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.722240][ T4893] ------------[ cut here ]------------
[  122.722304][ T4893] faux_driver vkms: [drm] vblank wait timed out on crtc 0
[  122.722441][ T4893] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#0: kworker/0:5/4893
[  122.726855][ T4893] Modules linked in:
[  122.727579][ T4893] CPU: 0 UID: 0 PID: 4893 Comm: kworker/0:5 Tainted: G             L      syzkaller #0 PREEMPT 
[  122.729390][ T4893] Tainted: [L]=SOFTLOCKUP
[  122.730132][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  122.731928][ T4893] Workqueue: events drm_fb_helper_damage_work
[  122.732991][ T4893] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[  122.734367][ T4893] pc : drm_crtc_wait_one_vblank+0x410/0x440
[  122.735349][ T4893] lr : drm_crtc_wait_one_vblank+0x408/0x440
[  122.736389][ T4893] sp : ffff800092c87820
[  122.737140][ T4893] x29: ffff800092c878d0 x28: dfff800000000000 x27: ffff0000c2a98080
[  122.738574][ T4893] x26: ffff800092c87820 x25: dfff800000000000 x24: ffff700012590f04
[  122.739961][ T4893] x23: ffff800086f48260 x22: ffff0000c6c41000 x21: ffff800086fcda40
[  122.741407][ T4893] x20: ffff0000c6fa8000 x19: 0000000000000000 x18: 1fffe00034bb7428
[  122.742861][ T4893] x17: 0000000000000003 x16: ffff800088b27000 x15: 0000000000000000
[  122.744262][ T4893] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000
[  122.745696][ T4893] x11: 0000000000000000 x10: 0000000000000002 x9 : a58bb73eb7f36f00
[  122.747140][ T4893] x8 : a58bb73eb7f36f00 x7 : ffff80008048e8f8 x6 : 0000000000000000
[  122.748563][ T4893] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f8870
[  122.749897][ T4893] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6fa8000
[  122.751325][ T4893] Call trace:
[  122.751891][ T4893]  drm_crtc_wait_one_vblank+0x410/0x440 (P)
[  122.752900][ T4893]  drm_client_modeset_wait_for_vblank+0xc4/0xec
[  122.754022][ T4893]  drm_fb_helper_damage_work+0x520/0xbc0
[  122.755043][ T4893]  process_scheduled_works+0x788/0x10b8
[  122.756000][ T4893]  worker_thread+0x798/0xbd0
[  122.756832][ T4893]  kthread+0x304/0x3d4
[  122.757534][ T4893]  ret_from_fork+0x10/0x20
[  122.758310][ T4893] irq event stamp: 166982
[  122.759008][ T4893] hardirqs last  enabled at (166981): [<ffff8000868f4e64>] arm64_exit_to_kernel_mode+0x80/0x94
[  122.760839][ T4893] hardirqs last disabled at (166982): [<ffff8000868f0d88>] el1_brk64+0x20/0x54
[  122.762336][ T4893] softirqs last  enabled at (166976): [<ffff800080310744>] handle_softirqs+0xc28/0xd98
[  122.764004][ T4893] softirqs last disabled at (166955): [<ffff8000800204c0>] __do_softirq+0x14/0x20
[  122.765599][ T4893] ---[ end trace 0000000000000000 ]---
[  122.857461][ T9604] loop1: detected capacity change from 0 to 512
[  122.863224][ T6721] tipc: Node number set to 2295683484
[  122.869805][ T9604] EXT4-fs: Ignoring removed bh option
[  122.912581][ T9604] EXT4-fs: Mount option(s) incompatible with ext2
[  127.634714][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4
[  127.787001][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5
[  127.944660][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6
[  128.101525][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7
[  128.191543][ T1599] ieee802154 phy0 wpan0: encryption failed: -22
[  128.192875][ T1599] ieee802154 phy1 wpan1: encryption failed: -22