last executing test programs:

28.53241335s ago: executing program 2 (id=112):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000100))

28.341367706s ago: executing program 2 (id=115):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000cc0)={0x2, {{0x2, 0x4e20, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e23, @local}}]}, 0x110)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0xffffffffffffffff)

28.24331954s ago: executing program 2 (id=116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
setitimer(0x0, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14ffffff0f00010000000000000000000300000a20000000000a05000000000000000000030000020900010088797a300000000028000000000a010400000000000000000300008a0900010073797a300000000008e9014000000003140000001000010000000000000000000100000e"], 0x70}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xfd, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x2, <r6=>r4})
ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f00000000c0)='fdmnfo/4\x00')
ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r7, <r8=>0xffffffffffffffff}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r11=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="0203000320020000ff0e00000000000002000900100000009d09000000000000030006000000000002000000e0000002000000000000000002000100000004d300000903010000c0030005003c00000002000000ac141400000000000000000005001a0020010000000000000000000000000000ff0200000000000000000000000000011d0000000102080000800000ee3fbec9e0cba133f73ad299ee34924bb6b5c04db2a97c180d06c141adabeaa25c5ee4137122f693be294184847f7d563c13823746e4251def213156c092a66441d2697b70d242dd373ce5466db1e3233022b28735c1f63b6f94cd9a3dc02ed595ab0f4920ba149f9e2b776a673cba6fd1b1a0b7afc324c7415f9f10bc0e1b9be3ecdd4ee2dafc8920be27da28fd485d760193bfd14753cfeda8980e9d7b5d309e7135f18873dec0e1aac30a5e0fb3e76837c966d2beb0a6ca532718688b10d1522993460d48e51400a4db815306c563cd51273f67fc2b5f354bd2f9b5399f98d22e303c2d7a73be0710637c0ba3ab300cff9eaaf1308e0993b337ca704b62a06332c76baf4146cc34343f935bdde85add31c6f41057628282e78bff38e1afe16c2de8da167421a725c57c3018248b7ddef4538a0486aaac0fac9a0d6f1128da0c93736f1f690a226c4576c07d139e011e88769db1963d7006505155656da5f0001f15cf7f98a3f19ac5dfa9a9f46abec62127968c754599bfb172a7c232f4036a42dd16b4e8be8269f62df816406b3168c4e731d572422201f89d4508222bb22a35326a3cc5249d2f0c30c949678a10c9a89e496fdde1b9d0d435806e9e7b87e1867922c6fa0edb4a1354039d6d24ee6208c43d657ef8c4037ac83d97b40e35514ad749bd7532becf06a9cb74e5fcca8eaf30563a3dffb41a9972a373f27c30184e1b0b2aec02af308904cebfa1f0e10a293353707fd5712dfd5eb6f71cea4603a2e7285c11dc4810897a1fff4698fb7c411a5655271a80e1d56fd43ee43cdd49ae6b4382a4e074f6f2f2054e42b865ae13f819a2be2c58cf0acb03c9e3988d41dc51566953ca34abd8ea4089f7b95ba5c06cc879fcb1b0f75c068c549397c61dab3599b9830903c20135f7263f893116ec7a24fada06ada39a4ded8abca5ac03d2405804184f7a5fe73f0af7ec465bd5dcbc682c33009331fca66e8a783c20bbd9f1be03847d80e5473e9cbd280d4d38813e29e5eac24f3be9241011b908076d6419af18620819822a55f03adf118437e50aa89111441f6768154747d1169a3cc3a1b8ca19fee05fdda3d1b226dae467e2b5eecada92cc0257a26c5ad073420a9d6f409b5694d616087eb2bcbd80b7982be14f2487711294e38330599fde6b29ad7e47d0c8e5219145517a78e91448dde7585d7310ad74282dbd6350b1e21c97757ea85be98a618d0f9d27e0b23e76be07d062aeccd54c1c36d8222139d925898e9b833c9ba3d676738c1fb0df1175ba70353a20633019af5c0ea4084f1a95c5895c998d04fd72f31a5aca0128bdc4357970f2ef428956cab03ca4789cdc467beaac3c00cf249b5910a55062f4370341e3707e34481d3c3157ee01cfb22c778f1697f311a46c2c4568e13a517ceb71ccc1722c195b850a111f705d1365913cb9694f476eb6ae732b97325faed2e2df43db0d1096abd3ceb5955e126f2eaebc6ae1057be9d8b6dddf575a40d97ebed64bcfdbd5bf941a9750de451566cbf3d1026f749fc4574641183daff715556a6d1a5a04b885cf7d00ba04e8c56df4192d97f8f3834975bfdd7d2cfc7d054192ed45cac9ef27305ab75eebc59543caf84218a62f2d748b14e5d69756d869ba345567a4e4f0aa561c85ace548ca03ecbd5a2325b3b8df00d8260ba2625ce7c0b4c8a9bea3ff57ba5dcc7cbe1d24ae9ab5ffa186d0d945b976342eb4f0c69c31f88207e7b22638b27f1cf75f9cfae3fabb54af777d29023d4cdf3d674f154158e34264093b92cd185210c792566bf7f729ee440d1a764569d5e4f1512a674959c1671876d27c7a6e4adf6fd205bdd7ebf29db8349a1195132cb816f3311b3a7d7be73da80aea65ab27f1c603676bf9e2869817a276f437c8ad9cc2a5ce80f578502bb70d1806b00877ada92e84f7c82bf0a731bc13ced283b0dddd5ed59bec47d881104ce6be5edc42c2359f99564d79839c8ab50b6445bb0670c0dd9d8253c482906df9f554b4e59da8c959c7af7748255e03e5ebb5b98f78adcafd60c1b418359a427c8227c88c740053c906b20ecadc4b3e2766fee8e21cebdc1ae6fdd6ec10730671e97fa51b06936a07d712ff75578210a36aeec1dc89f690847e4cdaf56f75c5e4b29d8d3256fc3c4c0c58645beea9ccc1a3c897cb8a452a215d5894b5bb5e68b4ff09b8cebfa0952ef5a20426a03c51c4b3d34b9f0aa3ef152268b10eee348129b3ce59b24f5e1005f501cd67f50bfdd59c1c8ed2d86d5aa83eb9e7e454525a89cf8f4fbdd2bfbc3303e1e686b40a94075486bc5e7ca345dc8d32c9aa0b34823ecca97aa65265723b7044c99a04436315c7d09614b9211990df72d50c4fce6b668acbf95f53574f06f3044e47958500e299baacfb27b5e67850dc05e1b540b8089e7085378f33b2b3c2ceb5cd45cd933600cc9c886a722d50470bf3a0b7221607168d2f439a7bd7a1b02ac8cf2f2819369e5d0aba01dc2ac0df41cc33cbbf26f5931445dd6135dcd94e8239974f939b789d919d6558629e9ea9f3181824976770c0fb83f598070447460bf249b45ce5388d45c32f03ee5585f492d4fda9a72404eaec85cbbb02038c0f06636c639dabfe52b50ca6918dc5601a365ab0aa591439686934e1e39fffb01435b010d3985f74ff14f925a1c310e69a4d3ba7edcc816783cff5063eec754b99651ebb48c3681c4f61bca75f6859a456abc2458142ec6e002d7cbe06802581fcd9555ba46671e25ac293a6fc16fc1d87e87c9e724c9218e849c223a9d1e36b6f1908f588e7fcccd671f435146d92874eae168d4f561a7af45ea8de4aa011c6a79484773c42d7226c5b4936b45b59752404ee4a609c220f8b5343a763ca36f2705689f191cfa511aa4da4be8b2b333c9a029a6f3292101e9f651e1266ab2ca551b7bdf56462bfcd6fa9dd9fe07421ea451df802bdbbceceb83360c9c36df52c97f3072b7fb94a8ef3acc80ec14b8682d9eafbd2e228825e9cdfe762a2cedad1b87f92485a771bb701ff35bf260dc15d08a8ea6c6f3b4d5f7eb8e3b8c536f106899f73dbe43f91343ace6fffaa2e0197b44b730cefcaed1ceba9140c05706e4fa52313b7507f18888b8f00542b6029633ae3bea9aeffef4072a97f6566b84900ff6d6f30a80754e79fa5a83fc6efad719e38c413290b26c9755117469b87a903cc18491ad1b26ce14a8a7362006430f1387ca0d446a8a861ed65bb9d8d03614c79724b84cf607ebbc9374f6a5d494286ce75383f314ad743822f8534f23ddef60b4fd0e03dc6c810ea3ced898493fc73b0455774187b6ad55b9fec781bb715d2140ded272bd7f16d2cc2ed61a6ed2ed46d6327d3eaa5afdea3388a2a449d25d40413824b667da120ef3a453fc5416c83c5d197b6e0c2e7dbb385f4cdc62a550768fbf29fc85474daa441e8e6a61abce6985d9c1d8308437c21c09a2a02aeba119e17b8d7aa9bc93fd1f750a69acbd08885ffd4bd1165b880f2c070e3f32b113d99ebf491420e74ef556bcf2129769ee44d3a155dfd2a6ed7b794ace72b3b3a46d6bcf30dd79228752a32f876aff52bffaf8e5dcb5cbd206c0fc64979e326e52ccb8ed8453ab88a0224800cb7b48a21e935f510bdd1627967058c5af93b41b5b1a0d76bc1262d16aeb5776599a184c52da521dd1f365740bc6e931b38299659a30835bc94b7ef9dd631a5d5a1d3742c39d603584dc44de77dc16f6a502bdcdf9e2af755b8a28fb7592c48f7155677dabfd79e82b4dd769b40850d4cabebf2e6be3a82c7fc19a09056849125d541e8159a2561feb05a97222c0e040bab549c4754d9a0881bd7cd973628eacf5b76883094fb9aea9aff2df9651fb95af274749d880817482f342c1dba80277f96f0b4881ae6845763cd8f6df2a8392494581b7c2783c115f99c8f5fa9a6269457152dd3ee914ac9e3d7c4af131f3f3efee61e44d123c245ae4a7445acfb0f1a74d90c8a2010893786442af9fcaca3e67270fd8b2056a426b9c52549180daecb20e8e8b253ea64ea94cc4cf68c00ccbe00214b889145ee3caed1a2388a47e1f51c9c5a88921fa909033d5f518a3bed4263a435c1a6ac218728ae4309b0b411dac79a6e63ae14633786037ad33a88b17ce953356de60ea77fc07ba686867d7396d13ee765970392f7df778376ebf67109408d57ba29a7128829874c044eeefb66b2998370b5b8007373c186ac3a6fb31413f99b5d35a77ee65017a04de89f64f91f34e1f7625a9fce29f11c07d04075f445c145bcf115d82320b8416a11349020cbaf140115851fde9802df0b806940519605d03f72064921747ea004810a70e5d9c9b7a6c9d0f880571303f5376c6bf20ea0eb4a230b051b7a94b81a4f687bc50fe90fe2d85b6c0224e333fc00adb995f75c222f890fde71c127f5c221bef8436df64d4b3720a3b9986bf20f4851905bd94282865320f7ef44bbc861750b48a4f7eec51ef69cbddf588a28aa0e3d0e0a16084f2004857f245db41a2888b1ed4b1e6e18621307ebc6b517bb62f51999abc067988a6eccc027aecf155aa791cb12dcb5ba91902dff604d766fc9c6be584c928f79229bac0db9160379dfd88266c86b8bd45b34d42a33c3c7b3e1d3f6eb10e4121a9f32e5219ce8c981738c61654a362ed6e0e25213897eb7da6d78163f3c7467f668dbb50e3bb5669916346a389cc81e35643b0cf0e321a17805233a64635a4d6740afe11927b48330be755eeb02e3c3280530a86369e80902abc2888c0f1d2a6637669a71659eb442dda2274210ab252f11c0d3d9c14986d708e260fdf7298c3a1e6efa6551040db09e0a576c0535e5cda297dd577e336fb4c50e19f1ba15f579e6749bc276a57dd341b7bd092ff2ffbba30a687014f1aaaaa6285570ee6c69f6a9a801449998585046a9d70fb5481aef2aaa17d6c4640e20a09594d42fb71176603db2b4270e90801f7dd79820e601f22836fee393bd90d7b4688aff4f1ca0f9ba69dc53eaae694e3a5f468dbc4fcc77b2a3c5dc01146c3f6d69fe6aa6d88ee80087f4db3c11cabc295c747df1d6f8d7ab20db2982fd3b13d485e87f4c95647b6a0bb9f241fbc1ef60a5883384973b45c99a4fb04219d08b01feea5331c4287f1a1a09cc83212a7414df53a858a35e015abc85780a687ec0c346e378d9157b64a2180af54d40e98a58125246d6c1e03204ef777abc650702e80a76497ba5202ff1ad9cf8d113ec89032d89de01a324d75242e09de75ad97ad4ee7152008c152e44b3e8da323be66dcc642198dee5b9b42eca4cbbdc048a6798983a32e8f8caa1424aa2061b7f2c6f96abdd39cb1d7d2f6cfcfa920cb2373b8e5d8ce1ae283621f6aeb5234147d7b9606655d51ebd34020cc155a3090169cc4453f8f24e24e756e67f63ec8bd029c6e6ff3411475b921f792d875428b3809382e7b5c00f814f1a72582d954086761bec57ebb0ead769bfb03e35ecb609afa3c35791991896b2db78aebceb980b9b44176263358a5f9a09626c2e924a3afc98ed2b1f901dbfb59a0731cac12e710195f52d7f7f41f84bdf9fae08ee16efb8efad9276b5a0242821e2e6088f2f4096c67747f6792c3ecd2560991106e1db16984c8cba99fc2c0a5b3decb4463b9b9db61cfc3182fd25bc26ef178caa23b812ee4f2c6219c26a1fd823282f9ebfeab52972ef043f67cec56c3820a1213a8a34f17eb09d984fc09664a407bf71378a8578f24b66bcd4ade3d92c5f1ec915ecf27de1b5d6444287b4deab0e05ee3b6151b001001400030000000d001800"], 0x1100}, 0x1, 0x7}, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[@ANYRES8=r10, @ANYRES8=r11], 0x12)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fe0000000000000000010000850000002e000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r14, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r15, 0x1, 0xa, &(0x7f00000005c0)=0x100, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r15, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40)
r16 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r16, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r16, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)

27.978436876s ago: executing program 2 (id=122):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$eJzs3c9vVF0ZAOD3Tju0X7+BFmWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMX8+XeubSl7dAB2g50nie53HvOvfQ9Z4Zzzr2HzpwAetaZiFiLiGMRcTcihvP8JN/iemtLr3v54tH0+otH00k0m7f/lWTn07zY8ndSn+Y/czAifvT9iJ8mO+M2Vlbnp6rVymKeHl2qLYw2VlYvzhXynInJ8cmxq5euTHRYk/49rzhd+93z783d/PEffv+VZ39e+/bP02KVfnE8O7e1HvupVfVilLaV9OZBBOuS/vzfzzso7ndZeDtpa/tcRJzN2v9w9HXQjgCAj1uzORzN4a1pAOCoS5//S5EUyvlcQCkKhXK5NYd3KoYK1Xpj6cJwffn+TGRzWCNRLNybq1bG8rnCkSgmaXo8O95MT2xLX4qIkxHxy4FPsnR5ul6d6eaNDwD0sE+3jf//HWiN/wDAETfY7QIAAIfO+A8Avcf4DwC95y3Gf58OBIAjwvM/APQe4z8A9J49x//Hh1MOAOBQ/PDWrXRrrufffz3zYGX5O6UHF2cqjflybXm6PF1fXCjP1uuz1Up5utnc6+dV6/WF8csbycbK6p1affn+0p252tRs5U7FFz4DQPedPP30r0lErF37JNtiy1oOxmo42grdLgDQNX3dLgDQNT7PA72rg2d80wBwxO2yRO9r2v6K0JN3X/wV6K7zXzT/D73K/D/0rneb///uvpcDOHzm/6F3NZuJNf8BoMeY4wfe6///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEeVsi0plLO1wNfSPwvlcsTxiBiJYnJvrloZi4gTEfGXgeJAmh7vdqEBgPdU+EeSr/91fvhcafvZY8n/BrJ9RPzs17d/9XBqaWlxPM3/90b+0pM8f+JYNyoAAGx1fWdWa5zO91se5F++eDT9ajvMIj6/0VpcNI27nm+tM/3Rn+0HoxgRQ/9J8nRLer/Stw/x1x5HxBc26/9wS4TSYMRIvvLp9vhp7OMHEH/z9U+yuZnN+IXX4heyc+m+mL0Wn9+HskCveXqj1U/mbS9tYnn7K8SZbL97+x/Meqj396r/W9/R/xU2+r++HfGTrM2f2Ui/uSTPL//xBzsym8Otc48jvtS/W/xkI37Spv8912Ed//blr55td675m4jzsXv8llrWzY4u1RZGGyurF+dqU7OV2cr9iYnJ8cmxq5euTIwORLUyNprNVP9ptxj/vHbhRLv4af2H2sQf3KP+3+iw/r/9/92ffO0N8b/19d3f/1NviJ+Oid/sMP7U0PU2y3e3Vv+faVP/vd7/Cx3Gf/b31ZkOLwUADkFjZXV+qlqtLO5xkN5r7nWNg4/zINYiPoBi9OhBeg/+ARRjx0G3eybgoG02+m6XBAAAAAAAAAAAAAAAaKexsjo/EAf7caJu1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj67MAAAD//y2oyxU=")
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xc}, {0x6, 0x8}]})
r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffead)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r4, &(0x7f0000000000)='7', 0x1)
pwrite64(r3, &(0x7f0000000280)='\"', 0x1, 0xe7c)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x349b82, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180), 0xfe, 0x484, &(0x7f0000000940)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r5, &(0x7f0000000000)='3', 0x4e)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

27.033341721s ago: executing program 2 (id=128):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @local, 0x5}, 0x1c)
listen(r0, 0x0)
setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa})
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x2000)=nil)
syz_emit_ethernet(0x6f, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x39, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"4ece00216b018e3864a5a98c5ab9c9099444645d655c453c09cd7e8c4652843dc8b3a03846"}}}}}}}, 0x0)

26.139975754s ago: executing program 2 (id=140):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x20000000000000a6, &(0x7f0000000100)=[{0x2008, 0x0, 0x7, 0x7fff0000}]})
ftruncate(0xffffffffffffffff, 0xfffffffffffff4a4)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0)
mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x0, 0x13, r2, 0x8000000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00')
ioctl$KDSKBLED(r3, 0xc0686611, 0x20000081)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
r5 = socket(0x1d, 0x2, 0x6)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x2, 0x0, 0x8, 0x0, 0x1, 0x4000})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, <r9=>0x0})
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448de, 0xfffffffffffffffe)
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r9, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r9, 0x0, &(0x7f0000345000/0x4000)=nil, 0x4000, 0x404000000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r9, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004})
ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r9, r9, 0xfffe, 0x7ffffffe, 0x3ffb})
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0xffffffffffffffc8, r7, 0x1, 0xffffffff, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0, @ANYBLOB="e9aeb5dbfe1c645952c32132972f8d283bf66e2dd94c7db97c2f18fb11311ff517e10db1e245c78f5c7e92073873de85f0fd81ba1da538bc247021e384c21b6122c83af0d3cbd673ab9354cad74337fd5b59808adc9e78cf9bcc339648324789240167f0f60d238e98bcd318e521dd1156809b72b281f27ec45de63c2117e6ae484367192e25ae0d8364046b4d00f06014d991201b9f7301d2c0b7922120e8e10127783da69ab442f6c505302d8e6d841bc25b4fc1920cc6aceac9ff9e3cd91dd5d1cb099de790fb8950a43e0ce73918d9cd1a29c415f16eb2090a", @ANYRES64=r1])

25.960309132s ago: executing program 32 (id=140):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x20000000000000a6, &(0x7f0000000100)=[{0x2008, 0x0, 0x7, 0x7fff0000}]})
ftruncate(0xffffffffffffffff, 0xfffffffffffff4a4)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_require}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0)
mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x0, 0x13, r2, 0x8000000)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00')
ioctl$KDSKBLED(r3, 0xc0686611, 0x20000081)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
r5 = socket(0x1d, 0x2, 0x6)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x2, 0x0, 0x8, 0x0, 0x1, 0x4000})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, <r9=>0x0})
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448de, 0xfffffffffffffffe)
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r9, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r9, 0x0, &(0x7f0000345000/0x4000)=nil, 0x4000, 0x404000000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r9, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004})
ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r9, r9, 0xfffe, 0x7ffffffe, 0x3ffb})
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0xffffffffffffffc8, r7, 0x1, 0xffffffff, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0, @ANYBLOB="e9aeb5dbfe1c645952c32132972f8d283bf66e2dd94c7db97c2f18fb11311ff517e10db1e245c78f5c7e92073873de85f0fd81ba1da538bc247021e384c21b6122c83af0d3cbd673ab9354cad74337fd5b59808adc9e78cf9bcc339648324789240167f0f60d238e98bcd318e521dd1156809b72b281f27ec45de63c2117e6ae484367192e25ae0d8364046b4d00f06014d991201b9f7301d2c0b7922120e8e10127783da69ab442f6c505302d8e6d841bc25b4fc1920cc6aceac9ff9e3cd91dd5d1cb099de790fb8950a43e0ce73918d9cd1a29c415f16eb2090a", @ANYRES64=r1])

21.137647485s ago: executing program 5 (id=204):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800)
accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x88}}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@shortname_win95}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@rodir}, {@fat=@discard}, {@shortname_winnt}]}, 0xfc, 0x259, &(0x7f0000000540)="$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") (async)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003a00290200800000fadbdf2502000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000)

20.835045588s ago: executing program 5 (id=206):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000100feffffff1373000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000000756aba07010000f8ffffffb702000008000000b70300000000000085000000b000ef009500000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94)

20.724735878s ago: executing program 5 (id=208):
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100, 0x4}, 0x10) (async)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x8)
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000080)={0x2, 0x1, [0x8, 0x5, 0x1, 0x8, 0x5321ac57, 0x1, 0x3, 0xff]})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000140)={0x1454, 0xf, 0x5, 0x201, 0x70bd27, 0x25dfdbfc, {0xb98bc26c730cc790, 0x0, 0xa}, [@generic="4866676656d1e9d208de5513a5eba29c0531478a2a999e418a1d8c78a39287d085d516a266add0409af6f3084675ae5bb1046fd38c6d3c6dbb2e9766f33d548f5dd3c452b986d213d8795a6a463b01f95134172af5acbab689f72a673a84affc24f33a4e4e3b", @generic="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", @nested={0xb1, 0xc8, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @fd=r0}, @typed={0x6, 0x5f, 0x0, 0x0, @str=']\x00'}, @nested={0x4, 0x98}, @generic="c38c4fdc2b02532baab72a73eea521cc4a4890008ea698e75bb5378ae138d0e114a81d27dc8afcba71a61514ee04718266cfa91cb80d409e18c1e9e866f703325f0260834df025ff6433dfc53f36d793da625a8c830b9d8d17fd32b777e09d2906812da63092c663b6b80304b4b87d362bce249b6b", @typed={0x14, 0xde, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x92, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xb8}, @nested={0x4, 0xe2}]}, @generic="1de4c53fb98f15f2a7d8470de94dfc9b32886a3ae69720a9453da083acf74a46c7a0cfd0c6f3c5627037264c99db858a2d21f922c1d77b8c066a8d07041a42c33bb1ba6928bb8e74a42073ab08397fec759b995093402e4080755ad9bbf59e110b959c1f239ba588850cb885a23f8d2d0c7b72b142ad7b4012e8f2f4d71a46223fb5d7f5ee4917c60202d0c6c79f5052a8a2fdf155ef36faeb6228b80dd1b26b94f3360b876eb70918523fe6675aa119975d79424fe3132ab3c05f2377f0d93f387b372747c0bb02a2706da09027d96dc20eefb3f4f9f8b01e9319debc193e290a1a4ca5", @generic="76c667618998bf", @generic="a4bfe19f4492981ab40ebfa0fafcca7a17d80d316463f757e97a063485c35aeab4196b22d7dbc53d27f07eaf654ab0f1a3fc64cf496a75c73067cf8c147213cc7010b5a8f58e7c0f0b09d1c62eac6740b8d16dc8399b8565db0ef8c9534f55739d804e0e9aedba3d6e8fa746528f2a946f1ab60e38b642fc07d052b8df89593285ff3f01a0657de87c95d898b5f223b4e186cc7a3e00bbd4cd743de39a85ba9444282ee111c94e9c8419f167005249c89056e6a8c0feabbd77b205e40f25de164c1ea9fa2c90835361e23f740ef389744d95042488b3f53e5bde86ff01ed93b0df904b164c", @generic="711a89589e68778584f8d71aecfd2a1021f49d2cad3f3d8d3dfa12e483b99b5129c2ed0ca45d85dee2d776587fe2bb9f9ce2b5ef32c16080321addc2e9e19a23250e16726b431465021b89c9db4525ff938dfa860f0df9f94f1689d4de5c8a58bb96ac1415bf3af74b", @generic="a068484372988f1e8052a1540a127d9b8b725f305ae847d22c386c3938dc39dd238c9593857b79f443edc1b3ffa9014d2fe2fb809c8a7c4a032550fa0156c533c602d6b50fc92eb31e3f1f44ae0447a3f6ca062562d47957265ec06b4fae50ea6f866e6f0f30222ae7edc7e461e1ea26d7007e2117516dfa82213073b26c42449fb5168f0be6857f023b0004e7ffd8b19fc8c6de3050b5a146242c4988d47f952d1335403a37e129a8f0101a83754ec751e6e88d39d9016fde19d431c34981809b8cd1ed900f2947aebdf5e3582526596caa957cfebf59a5c971f9db", @nested={0x4, 0x6f}, @typed={0xc, 0x84, 0x0, 0x0, @u64=0x6}]}, 0x1454}, 0x1, 0x0, 0x0, 0x8040}, 0x81)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000001740)={<r3=>r1, &(0x7f0000001640)=']\x00', 0x0, &(0x7f0000001680)={@align=0x3, {0x9, 0x8c61, 0x9, 0x2}}, 0x6, &(0x7f00000016c0), &(0x7f0000001700)}) (async, rerun: 32)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001780), 0x401000, 0x0) (rerun: 32)
cachestat(r3, &(0x7f00000017c0)={0x100000000, 0xffffffffffffffff}, &(0x7f0000001800), 0x0) (async)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001840)='./file0\x00', 0x104001, 0x40)
ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000001880)={0x1, @vbi={0x7fff, 0x200, 0x0, 0x42303159, [0x7, 0x7ff], [0x73], 0x108}}) (async)
syz_open_dev$video(&(0x7f0000001980), 0x40, 0x42800) (async)
close_range(r5, r1, 0x2) (async, rerun: 64)
ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000001a40)={0x9, 0x4, 0xf, 0x0, 0xec8, 0x7, 0x0, &(0x7f00000019c0)=[{0xaf416976a8fef251, 0x101, 0x5}, {0x5, 0xfe, 0x8}, {0x1a, 0x1ff, 0x5}, {0x3, 0xfe, 0xe}, {0x6, 0x101, 0xffffffff}, {0xa, 0x101, 0x1}, {0x6, 0xfe, 0x800}]}) (async, rerun: 64)
io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001b80)={0x2, 0x1, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a80)=""/19, 0x13}, {&(0x7f0000001ac0)=""/58, 0x3a}], &(0x7f0000001b40)=[0x4, 0x2, 0x2, 0xfffffffffffffff9, 0x6, 0x3, 0x6, 0x6050]}, 0x20)
openat$cgroup_int(r1, &(0x7f0000001bc0)='cgroup.max.descendants\x00', 0x2, 0x0) (async)
r6 = syz_open_dev$video(&(0x7f0000001c00), 0x3, 0x220000)
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000001c40)=@overlay={0x8, 0x1dced5f5bae1a406, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x5, 0xc, 0x8, 0x3, 0x6, 0x5, "bfa6abad"}, 0x401, 0x3, {}, 0x4, 0x0, r5}) (async)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000001cc0)) (async, rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)=@delnexthop={0x48, 0x69, 0x101, 0x70bd27, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x44840) (rerun: 32)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000001f40), 0x10)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001f80)={0x0, ""/256, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002180)={0x0, ""/256, 0x0, <r10=>0x0}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002380)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}], 0x0, "e7bd88c128d257"}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000003380)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}], 0x8, "974fad4000483a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000117e00)={0x55, [{r9, r10}, {r11, r12}], 0x3, "14149adce2e057"})

20.678940968s ago: executing program 5 (id=211):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d)
r1 = fsopen(&(0x7f00000001c0)='msdos\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x3)
fchdir(r2)
r3 = fanotify_init(0x1a, 0x1)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fanotify_mark(r3, 0x541, 0x1023, r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000003"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)

20.509262375s ago: executing program 5 (id=214):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0004}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = socket$inet(0x2, 0x1, 0x3ffff)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x27, &(0x7f00000000c0)=0xe182, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10)
r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
finit_module(r6, &(0x7f0000000080)='/.-{\'&}!\x00', 0x0)

17.829192066s ago: executing program 3 (id=251):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r1 = getuid() (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) (async)
statx(r0, &(0x7f0000000140)='./cgroup\x00', 0x6000, 0x200, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
mount$cgroup(0x0, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000080), 0x200802, &(0x7f0000000540)={[{@clone_children}], [{@dont_hash}, {@appraise_type}, {@pcr}, {@euid_eq={'euid', 0x3d, r2}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '#+'}}, {@dont_appraise}]}) (async)
r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r4, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x3ff, 0x5}) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40002}, 0x0)
r6 = msgget$private(0x0, 0x201)
msgsnd(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0)
msgrcv(r6, &(0x7f0000000600)={0x0, ""/265}, 0x10d, 0xffffffffffffffff, 0x2000)
msgsnd(r6, &(0x7f0000000340)={0x2}, 0x8, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setgroups(0x1, &(0x7f0000000080)=[r8]) (async)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)=<r9=>0x0)
r10 = getpid()
msgctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x3, r2, r3, r1, r8, 0x140}, 0x0, 0x0, 0x7, 0x1, 0x10000, 0x26a1, 0x1, 0x8, 0xff78, 0x9, r9, r10}) (async)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}, {@uuid_off}]})

17.827541179s ago: executing program 3 (id=252):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000180), 0x61)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x301080, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x51}, 0x94)
io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
io_setup(0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/316], 0x13c}, 0x1, 0x0, 0x0, 0x2004c815}, 0xc000)

17.826620156s ago: executing program 3 (id=253):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000))
recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/252, 0xfc}], 0x2, &(0x7f0000000440)=""/174, 0xae}, 0x1}, {{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000700)=""/189, 0xbd}], 0x4, &(0x7f0000000800)=""/163, 0xa3}, 0x80000000}], 0x2, 0x10000, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0xfb, 0x2}]})
close(r1)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000080)={0x2, 0x3})

17.817617682s ago: executing program 5 (id=255):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf252800000008000300", @ANYRES32=r2, @ANYBLOB="0a0006009b5fe37041d80000604107851d6aa80000094f973adf1db8b032888b8f7e2a651f88a715b6ec5a74c3e07c65841ac7756ddb6a3f20ac5b42abc8bae2c5f9b262dc26b7c2b28236ff978ad033b1dc5387428325f761286335611fb2fd4bde52b922f06941d385812f2940c0667bedba0a79699e8da238b40ca5b9c3a09d95f09e8123f5010dac8af86331640a7f7f83d1eab96fed3aca5841c78798e94b1b2429c9cf4f34a8f576a27d2a00"], 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pimreg\x00'}) (async)
sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000003}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x7ef1c125e280a598}, 0x34048890) (async)
r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000340)={0x100000000, 0x9, 0x0, 0x1, 0x1, 0x0, [{0x6, 0x7fffffff, 0x2}]})
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) (async)
ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x2)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12)
r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000040)=0xd0) (async)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1211, &(0x7f0000002280)="$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") (async)
chdir(&(0x7f0000000240)='./file0\x00') (async)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824441, 0x0, 0x1, 0x0, &(0x7f0000000d40)) (async)
ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x7) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) (async)
close(r8) (async)
setsockopt$inet_tcp_int(r7, 0x106, 0x22, 0x0, 0x0) (async)
ioctl$UI_DEV_CREATE(r3, 0x5501) (async)
r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSFF(r9, 0x40304580, 0xffffffffffffffff)

17.811870709s ago: executing program 33 (id=255):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf252800000008000300", @ANYRES32=r2, @ANYBLOB="0a0006009b5fe37041d80000604107851d6aa80000094f973adf1db8b032888b8f7e2a651f88a715b6ec5a74c3e07c65841ac7756ddb6a3f20ac5b42abc8bae2c5f9b262dc26b7c2b28236ff978ad033b1dc5387428325f761286335611fb2fd4bde52b922f06941d385812f2940c0667bedba0a79699e8da238b40ca5b9c3a09d95f09e8123f5010dac8af86331640a7f7f83d1eab96fed3aca5841c78798e94b1b2429c9cf4f34a8f576a27d2a00"], 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pimreg\x00'}) (async)
sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000003}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x7ef1c125e280a598}, 0x34048890) (async)
r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000340)={0x100000000, 0x9, 0x0, 0x1, 0x1, 0x0, [{0x6, 0x7fffffff, 0x2}]})
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) (async)
ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x2)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12)
r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000040)=0xd0) (async)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x16552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1211, &(0x7f0000002280)="$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") (async)
chdir(&(0x7f0000000240)='./file0\x00') (async)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824441, 0x0, 0x1, 0x0, &(0x7f0000000d40)) (async)
ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x7) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) (async)
close(r8) (async)
setsockopt$inet_tcp_int(r7, 0x106, 0x22, 0x0, 0x0) (async)
ioctl$UI_DEV_CREATE(r3, 0x5501) (async)
r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSFF(r9, 0x40304580, 0xffffffffffffffff)

17.81162167s ago: executing program 3 (id=257):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x10000, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b4, &(0x7f0000000280)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x109053, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x84, 0x0, 0x9, 0xfffffd}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00d3dd4043394c91c88f277aa2"], 0x2c}}, 0x0)
syz_clone(0x400, &(0x7f0000000480)="6b05dad3adb6ccb72285e2eed5e070a513b8b59df823f8409eaac567ea1e3de002ec925dd79f210287f09e3ba7450559af3b8f516b0868193f3b9c471a3f0dfe60bcff06d4a8e3d0d6aa6da095e9975e80b908b2091603154bbfbe9d912d06c1d9ef6a7e3984804ec5e2e01e61286123c5ed372d0d3c7fbfc430b1be87f9e5315b2fd6d0a4454871124e237e59e95b1d", 0x90, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="782ff1ef90a9404353dc9ab4fcfda0c2a9e4805b5aa1c6eb5834daf27f1e853005dc83055ebc2218f0c8ad9c5b84524a0533bae9585ab7cba4bfc61c3f9c0470f4402f6fd026df3a685bb5b25eca1997c58c9f7e87946364eacd55286b8624bde23c8f84bb3db4b10e9ebfe600a7dc5cb024a7b3a96d1d733ce30a773ccac9a6b0bace459db58243a8eeb4917798c32051ec944d3f9a1183406ec2365570316cc5d89c85e682fd371696e1753b9c3423b038a51604f6b5517c0212fd7b855ceb1e1aa84697be3f078b6fb788ac8f")
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020)

17.780583566s ago: executing program 3 (id=258):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000037c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000000)="47c64c", 0x3}], 0x1}}], 0x1, 0x40088d5)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendmmsg$inet6(r0, &(0x7f00000037c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000000)="47c64c", 0x3}], 0x1}}], 0x1, 0x40088d5) (async)
shutdown(r0, 0x1) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)

16.53917696s ago: executing program 3 (id=266):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==")
ioctl$TIOCCBRK(r1, 0x5428)
fchdir(r1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000004200)='ns/mnt\x00')
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0)

16.538775756s ago: executing program 34 (id=266):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==")
ioctl$TIOCCBRK(r1, 0x5428)
fchdir(r1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000004200)='ns/mnt\x00')
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0)

14.054248214s ago: executing program 0 (id=291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000b7100039042abd09000000000000000000be809610000000000000003e12fdec675fc46d0700dbad3cf631e58c5fb96123c474afa440af0b73b84efe5b02985790e75605df09726cc6b7fe49d5fc7dc51b", @ANYRES32=0x0, @ANYBLOB="4218020003110000180012800b00010065727370616e00000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000b7100039042abd09000000000000000000be809610000000000000003e12fdec675fc46d0700dbad3cf631e58c5fb96123c474afa440af0b73b84efe5b02985790e75605df09726cc6b7fe49d5fc7dc51b", @ANYRES32=0x0, @ANYBLOB="4218020003110000180012800b00010065727370616e00000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) (async)

13.918790347s ago: executing program 0 (id=294):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f90600ff0000000000000000850000002c00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff1, 0x1}, {0xb, 0xd}, {0xffe0, 0xfff1}}, ["", "", "", ""]}, 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a0a00ff000000007110710000000000950000000000000074db3a4dfa0d0b30637760f152fafd3ed00d1563079b63a2aad81ad20b86e42a1c4f3c653a063285254283a66395b2db62d564723e949e8e67744e61a278ad26204b17b88d82b7c5963f7ba501da936064c9809382a747740707cd312601b8ee1e08f48152130704d8ee1c9437f5e3025d971d521b0e96b9a08c27192611b2d864fb740b9daeb2f2f8edaaa59ba01baa3e359f7e"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

13.219698233s ago: executing program 0 (id=301):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)

12.157029344s ago: executing program 0 (id=312):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000300)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/trace_pipe\x00', 0x800, 0x0)
read(r1, &(0x7f0000000300), 0x1000)

11.981129343s ago: executing program 0 (id=314):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x6)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r5, 0xfffffffe)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r6, 0x0, 0x0)
r7 = accept4$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000003300)=""/107, 0x6b}], 0x2}}], 0x1, 0x2, 0x0)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r8, &(0x7f0000000080), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000208)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000214)={0x2, 0xfa}, 0x2)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0xb, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x5, 0x3}, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94)

11.453289757s ago: executing program 0 (id=322):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
socket(0x10, 0x803, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
munlockall()
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000b00))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r4=>0x0})
syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r4})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

11.367821292s ago: executing program 35 (id=322):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
socket(0x10, 0x803, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
munlockall()
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000b00))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r4=>0x0})
syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0x2, 0x100, 0x4, 0x86020086, r4})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

3.658417438s ago: executing program 8 (id=402):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="25b6c403727541f6fc4cd1285cef", @ANYRES8, @ANYRES16, @ANYRES32], 0x1, 0x2ca, &(0x7f0000001140)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r2, 0x0)
futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
listen(r1, 0x5)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xf)
r5 = fcntl$dupfd(r4, 0x0, r4)
read$alg(r5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd})

2.792913044s ago: executing program 1 (id=417):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno', 0x4)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x33}, &(0x7f0000000540)=<r2=>0x0, &(0x7f00000006c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xfffffe03, &(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x1, "b736a29b8492d729c1e5bd49b8b995d015030f4b22e9f9f6143ff77cad6646186653e035d932e5daaed114f6f22e133cb4ba959f204a222277510415530f90", 0xb}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000010000008018"], 0x50)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
timer_create(0x3, &(0x7f0000000200)={0x0, 0x38, 0x1, @thr={&(0x7f0000000100)="af7fbc228e877515e96d48c531be786715a64c3273ee160256e5be36abbd1ae6f1b9e37b23810239507830cdbe875a654eed5f47ed5eee917f9036b034f7040a0e2d0b10539507e7edb36e77ecb33cbbe8199009a30330e83e8b3f788f5a32e564a98a4b980d64c19e308e568c97faa352cfcabce849b847059025dc0275169b", &(0x7f0000000180)="259c412bcc7afad3857376e72e7bee07b9f38d9b3cc36e679c0549911a4f2f8f4d9d5e61c23a3452909152fa7427e1f020bfd59a420785442a00fbac2bfde47e0814fd90f4303a41e6f8e63aa6efa06a3169"}}, &(0x7f0000000240)=<r5=>0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r6=>0x0, <r7=>0x0})
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a", 0x1)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
write$tun(r9, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "cc00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x284, 0x30, 0x1, 0x0, 0x0, {}, [{0x270, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x1}, {0x4}, {0xc}, {0xc}}}, @m_csum={0xe4, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xe3d5, 0x20000000, 0x81c0, 0x9}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfcfd, 0x1, 0x5, 0xe1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8000, 0x7, 0xffff5825, 0x7e2}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffffc, 0x20000000, 0x5, 0x1}, 0x7}}]}, {0x46, 0x6, "b1cef20e62b9cad33fce0ee5208e98b46c083a3b87733948b05dcc0a80d0b93c35aca86d986ce9314249c4ce7abf2f02965216a176b0e0b55f3e19e67920c2c2f442"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x158, 0x8, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80, 0x6, 0x2, 0x7, 0x4}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x55, 0x8b, 0xd, 0x3}]}]}, {0xef, 0x6, "7f467fe8fcd7f04d76c8f95c2332748ca86656f590c7329b952883e11d8fed0588c1f8873fc8382930860353e16642e4250b66542ef0a4e6e50794d26357c3331f0b378897060af0960060b7ec3624523019597cef35a0e55414fbfc1f610ba1b62f0d2978581554e2fa1f522d76e657951d9c86308d6fc7b55429868e250dbeedd81effc0e915de10e77a770a89ffb61bef02f343e63729d4ec48ff0e9ba4797489370be60c1b5ca291e69663894623bf353f60c69541897cbe0f7d8925c725fde0c9acf32213fc288388e9d2bdeed298506d911815ad9c0dd6310dddadd5e3030dd5a7d6bfc78e760e9b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x284}}, 0x44004)
timer_settime(r5, 0x0, &(0x7f00000002c0)={{r6, r7+60000000}, {0x0, 0x3938700}}, &(0x7f0000000300))

2.615484431s ago: executing program 1 (id=419):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f000000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000df0000000000f4ff0000000000000000fcffffffffffffffffffffffffffffff1f00000000000000ff010000000000000a"], 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4)

2.529305377s ago: executing program 6 (id=420):
futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, 0xffffffffffffffff, 0x2000000)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r2 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff})
io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f0000003000)={&(0x7f0000002000)={0x0, 0x1000}}, 0x1)
io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f0000000240)={0x0, 0x1}, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)
sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)

2.499712748s ago: executing program 1 (id=422):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
listen(r4, 0x5) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) (async)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00302bfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES8=r1, @ANYRES64=r2], 0xfdef)

2.320292689s ago: executing program 6 (id=424):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1}, 0x40040)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="a80000001000010010000000fedbdf2500000000d217db14f4de4c7870d1d0b77a1cba13963873fd722ca2c9500940c9758e6227826815d7d734", @ANYRES32=0x0, @ANYBLOB="595b00002a8900006c001a8068000a801400070020010000000000000000000000000002050008000200000005000800f9000000050008007d000000050008000a00000011000700fe8000000000000000000000000000441400070000000000000000000000000000000000050008003c00000014003500677265300000000000000000000000000800040061000000"], 0xa8}}, 0x8800)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x5450, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003540)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xee, 0xfe}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)

2.31254375s ago: executing program 4 (id=425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b0000000000011907800000000c7d3953a74a7d9d40000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbc375461caaa2f19936996c7096ffeeb0300000000000064000000009a3bfbc1d19cb307b3472ab9cdb042d2643f38b6fa7e380ffeffffff0000fe09"], 0x0)
recvmsg(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
recvfrom(r3, 0x0, 0x9400, 0x10132, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

2.236617279s ago: executing program 7 (id=427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)

2.177664049s ago: executing program 7 (id=428):
r0 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0xc040)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x74, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40448c5}, 0x4000000)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0xfffffffffffffc89, "abb9bfe0c34c72d50c66fa8369f6e787"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0)
write(r7, &(0x7f0000000000)='3', 0x4e)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000000)=""/5, 0x210000, 0x1000, 0x0, 0x1}, 0x20)
set_mempolicy(0x8006, &(0x7f0000000040)=0xab5, 0x5)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r8, &(0x7f0000002340)=""/4110, 0x100e, 0x8)

2.13302183s ago: executing program 6 (id=429):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0xe2, 0x4)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r1=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_delete(r1)
timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x61, 0x30, 0x34, 0xd, 0x38, 0x62, 0x30, 0x30, 0x30, 0x62, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233444866778899aabbccddeeff0011223344556677889989bbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aa903348b80ceb880aeeff00112233445566778899aabbccddeeff000000e1ffff00", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabb1869eeff00112233445566778899db2a4e9feeff00112233445504000000aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x36, 0x30, 0x64, 0x30, 0x35, 0x30, 0x30, 0x30, 0x62, 0x38, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x37, 0x39, 0x30, 0x30, 0x30, 0x34, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x62, 0x61]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r2)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2)
timer_delete(0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x81400a, &(0x7f00000003c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5195de23}}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@nojournal_checksum}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x4)

2.097085764s ago: executing program 6 (id=430):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="68ee4d00020605000000001700000000020000000e0003216269746d61703a697000000005000400000000000900020073797a3200000000200007800c00018008000140e00000010800080000000000080006400000000105000500020000000500010006000000"], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async)
sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x208080, &(0x7f0000000680)=ANY=[@ANYBLOB="66642c7206646e6f3d3c01def475c23f0ec08a09ca5c4cdd84d4003814cd2635e596e05807c5ec5c80c846163fc2e950d94490d9e4663ecdaba6abd4108d8924e4b494bedb26f36f1be11718b6547d41b0d77acfd7d22cd790b8dad44328cb760cb41790e458b51f54b6e9a0c47fa0418c29c884415cb18808538300efc6c6c8f746112c98e5ece72e87e8cdffbcda3329b3e52b4e79545065610c6b3fce2154f9db2c28a995d39f9d0ae279846a1181a919ad52f10cad3a87f418cb7924d3674830901b80185ce8de613cbb4123ee810ecdc2eeecb1aa57c46be84c5ce03f02cb02cc884b40fdbed24b4d94d56f40256f3beab627fe85999b314a23b0fc9cac542ec21922b34cce81ff3b2f272c16a50cc6a00880d0", @ANYRESHEX=r0, @ANYRES64=r2, @ANYRESHEX=r0])

2.067199619s ago: executing program 7 (id=431):
ioctl(0xffffffffffffffff, 0x3b8f, &(0x7f00000000c0)="280000000600")

1.993468515s ago: executing program 7 (id=432):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
fchdir(r1)
write$cgroup_int(r1, &(0x7f0000000000)=0x8fc, 0x12)
syz_emit_ethernet(0x43, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @broadcast, @loopback}, "03a50857de"}}}}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702230008200000b703000000000000850000fa7d43c800"], 0x0}, 0x94)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5fe4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0)

1.607581432s ago: executing program 1 (id=433):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
munmap$binder(0x0, 0xffffffff)
r4 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="8aeb0100180000f0000c0000000400001c0204b6a616ef91c78542d02625c502c400000000000000"], 0x0, 0x28}, 0x20)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000e603006d80103c31560c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000002000000b70500000800000085000000a900000095", @ANYRES32=r6, @ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=r1, @ANYBLOB="3e7bcd66bed02eaa6e3103bc88315385ce9910f22addf0f919a93dd68bb49e3559c2e67988fef63c1500981283ed69b5734bef357c0ccbeea89c67e55af864ea1a0c237d7953cbe431811164b8321fd61e868c5fdcc06302c1e77140b68ec187cba818c90ccba1a6be91abe9279e91aef9e862ccf668b9531a3294a05059", @ANYRES64=r5], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94)
landlock_create_ruleset(&(0x7f00000002c0)={0x2111, 0x1, 0x2, 0x411, 0x1}, 0x30, 0x1)
socket$kcm(0x29, 0x2, 0x0)
r7 = getpid()
process_vm_writev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f0000001b80)=[{&(0x7f0000001640)=""/164, 0xa4}, {&(0x7f0000001700)=""/135, 0x87}, {&(0x7f00000017c0)=""/171, 0xab}, {&(0x7f0000001880)=""/16, 0x10}, {&(0x7f0000001cc0)=""/243, 0xf3}, {&(0x7f0000001c00)=""/149, 0x95}, {&(0x7f0000001a80)=""/246, 0xf6}], 0x7, 0x0)
mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x110, r1, 0xd7950000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff)
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)

1.388718638s ago: executing program 4 (id=434):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x43705000)
madvise(&(0x7f0000945000/0x4000)=nil, 0x4000, 0x3)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x40042, 0x13)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00'], 0x9, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095", @ANYBLOB="542ed25f19a8afc77053f27e115599134f81e4a49e3f4fb98091c674f2f0ee32cda25ef2744d506d956a2a62a907aefa6e73622c1256efdfa26fe758050a0c64f899bcca7b721f44ad92f7b90451624b852c3f5503a69210a83b65499612d6f8774e2f0b8ea22fcff54370d474648e42f43dac2ad7a36d72ce880b3c48b452304932b8992aec948099f1c66dfea56d345e9919352e91d8502fc31f41f8b6965581e297988efb7c", @ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x60, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2, 0x0, 0x0, 0xffffffffffffff72, 0x30, 0x0, 0x53, 0x59})

1.217068058s ago: executing program 4 (id=435):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x8084)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/161, 0x270}, {0x0, 0x4000}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.215611886s ago: executing program 6 (id=436):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810000000800450000400000000000069078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc0000009078000002040000130fc77d923d956143e3fb261e1de2909d5f976b"], 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)={0x67}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140010009d3b1f7484d94ba2dd3a55dd8257caf55370e3c42346da4e511df9e09d901daf7da52b2f693ac43bc5ba72f8fd09e02727c063b4c7ed1d09a69e0ac30e01264376ff97f10d48f486c1a3038c445ae7b29c99c1dab1585a0c53c9f62dfad0f21ee9a1d15634a62c4ff2e762d57dfc163fc2d868dd69716296ef21512400177050506f734eb49233e33c05dd04d7a1292eba96096babd76a912d81", @ANYRES16=r4, @ANYBLOB="ffff2abd7000f8dbdf2503001400"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
faccessat(r5, &(0x7f00000000c0)='./file0\x00', 0xa2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x12d)
write(r6, &(0x7f0000000000)='3', 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20002000, 0x4000, 0xfffffffe, 0x1dd}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0, &(0x7f00000004c0)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}})
io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r7, 0x19, &(0x7f0000000080)={0x3, 0x7}, 0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240))

1.21309709s ago: executing program 4 (id=437):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'nicvf0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8015}, 0x20008000)
lseek(r0, 0x9, 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>r0}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x17}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x0, 'veth1_to_hsr\x00'})
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x60000, 0x0)
listen(r2, 0x0)
r5 = accept4$llc(r2, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x10, 0x180000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380))
syz_clone(0x40000000, &(0x7f00000003c0)="1679fcc589c08802e34ad3d11025edbaf10cf1b432150381d37b26f00656a6cedd2d5551f590b6d25c8e49be05f1043423fb24bba15911b1deadf196cef231af0df1633bb4c2c73d46e396d319a3b2d815b4059e356041d2f5a5b64fda233dafee4e8e24922d4c89e00fbff49262fd5328f60d20eafe770711e193d8bfe4fa0c152500e594a2c328c08b8383726332a951dfa3c8", 0x94, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="3995906f5318ecf4f0f9241f4a666ecebe350935effbcec8bef01c8d8b34abc02ca1a0fbe1464af8e1e1e7a7a22f555554d297677574ae94e5dd20427ca1c22bf935cb8aa1752773669e25c64eddc5cc2ae4467d4dea3717b34d8612bbaafeb15e32b3be4cbf93533ecbae8e91f124473227d418d1f7767bf0a36f")
readv(r0, &(0x7f0000001880)=[{&(0x7f0000000580)=""/228, 0xe4}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/216, 0xd8}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/123, 0x7b}], 0x5)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000001900)={@none, 0x8, 0x7f, 0x200, 0x0, 0x3, "ad6b9d0d32758e30c71ec718429da59d9d08b986b711c7ddfa9a8c00eff7f7580117ea01f2dd23d7afbe42d9cfd36d37a99f12101fcf361f10c4f1e6a2bb43af4534e5ec2ab016a346b11c84c8977918b5583ce397598d0b5960bd8d8222193757207d4205a1b9d763653189b110084c0f5135fa83fb5308a01ecddd316318cb"})
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000019c0)=0x2, 0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000001a00)={0x2, 'pim6reg\x00', {0xcb9}, 0x8e81})
ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000001a40)={0xe42d, 0x4})
landlock_create_ruleset(&(0x7f0000001a80)={0x8002, 0x2, 0x2, 0xa20, 0x2}, 0x30, 0x1)
syz_open_dev$usbfs(&(0x7f0000001ac0), 0xffffffffffffb3f8, 0x313600)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000001b00)=@gcm_128={{0x303}, "faaae2fd7b29e41f", "a8de1101e62c02272c9b658381f629cb", "62efb8fb", "28d94b0d5a0f8bbd"}, 0x28)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001b40))
r6 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x2, 0x11, r1, 0x20000000)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000001b80)={0x0, 0x776c, 0x1000, 0x2, 0x23f}, &(0x7f0000001c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed45, 0x800, 0x0, 0x2ca, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9aeb, 0x800, 0x1, 0x27, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd827, 0x20, 0x2, 0x17b}, 0xffffffffffffffff, 0x0, 0x0, <r7=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc762, 0x8000, 0x1, 0x1fe}}], 0x4, &(0x7f0000002e80)={0x2e, 0x1, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x2, 0x402, 0x0, &(0x7f0000001e80)=@buf_4k="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"}}, &(0x7f0000002f00))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
ioctl$UBLK_U_CMD_DEL_DEV(r4, 0xc0207505, &(0x7f0000002f40)={<r9=>0x0})
syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000003040)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_get_params_sqe={0x2e, 0x68, 0x0, r1, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0x679a, 0x0, r8, '\x00', {r9, 0xffff, 0x70, &(0x7f0000002fc0)={0x70}}})
r10 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r10, 0x891c, &(0x7f00000030c0)={'macsec0\x00', {0x2, 0x4e21, @rand_addr=0x64010100}})
syz_emit_ethernet(0x25, &(0x7f0000003100)={@local, @broadcast, @void, {@x25={0x805, {0x3, 0x0, 0xf7, "11859ef8eaa9c2cd5c9af3404729f38d6ae7fb79"}}}}, &(0x7f0000003140)={0x1, 0x1, [0x329, 0x406, 0xad5, 0x753]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003180))

1.14071549s ago: executing program 7 (id=438):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1c)
openat$dir(0xffffffffffffff9c, 0x0, 0x100, 0x20)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @private2, @local, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) (async)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r1=>0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r5, 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x4024, 0x0) (async, rerun: 32)
syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x98b7}}]}}, 0x1, 0x0, &(0x7f0000000640)="9b5a185dec") (async, rerun: 32)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
writev(r8, &(0x7f00000009c0)=[{&(0x7f0000000080)="4aedabc6f0bf88c2bbb41d80bfc12ee4d8da210fdede81b79ac3", 0x1a}, {&(0x7f00000000c0)="8b4378e9a7b987cae21df2e87ccaf102f3b6425ca2544543a3dff2f1cee2f5960e0524990d82dbbb73d63bd7", 0x2c}, {&(0x7f0000000240)="50eba1924c171d03c900331d5b313fc722b1507b0d200789fd4743", 0x1b}], 0x3)

755.421297ms ago: executing program 1 (id=439):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500ed00000000000000000009af"], 0x14}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000540)={0x288, 0x1, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CT={0x1dc, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x890}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xb3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x60}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x92}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffa6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x427}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xd, 0x5, 0x2]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}]}, @CTA_NAT_SRC={0xb4, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_CT={0x8c, 0xb, 0x0, 0x1, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x90}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x180}]}, @CTA_NAT_SRC={0x44, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xbd9}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b405000000000000611034000000000063012000000000009500000000000000f4c32bf3df05a034da1b7fdcf645f3580fe49be316bdb665f1b42ff7ef474df46c0f44ef6fb5e031f7cfef720e05af49fad256a74dbc05ae220102a88002814a88e2fac93f6bba2d4d44db49d45e449d31fa52c326486bc1c908dd9b372f7a455c9566ed5ee0a65f3909cfe1219a0a38b416dc55927f32ab452e0ccaf193c27af10a12c42ef8a3199d0fad0a9521094cc7acdcdff80231586f968fab531515e8aaaa1d4a225592ebf062bba60775d0b7daa8ba68c0cd0642ce3efca015362a7b63f629629efb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x800001c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x0, {0x7, 0x0, 0x0, r5, 0x8, 0x92, 0x3}, [@NDA_LLADDR={0xa, 0x2, @random="f8c38604ca73"}]}, 0x28}}, 0x4004000)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1407, 0x300, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4)

673.016419ms ago: executing program 4 (id=440):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x22102, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00'})
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x803, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x26, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

669.924933ms ago: executing program 1 (id=441):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x1, 0x2, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r4 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/180, 0xb4}], 0x1, &(0x7f0000000000)=""/2, 0x2}, 0xe}], 0x1, 0x40002080, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0)
close(r2)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
bind$packet(r1, &(0x7f00000004c0)={0x11, 0x2, 0x0, 0x1, 0x2d, 0x6, @broadcast}, 0x14)
openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

643.370285ms ago: executing program 4 (id=442):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x3, 0xa)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)={0x67}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r4)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140010009d3b1f7484d94ba2dd3a55dd8257caf55370e3c42346da4e511df9e09d901daf7da52b2f693ac43bc5ba72f8fd09e02727c063b4c7ed1d09a69e0ac30e01264376ff97f10d48f486c1a3038c445ae7b29c99c1dab1585a0c53c9f62dfad0f21ee9a1d15634a62c4ff2e762d57dfc163fc2d868dd69716296ef21512400177050506f734eb49233e33c05dd04d7a1292eba96096babd76a912d81", @ANYRES16=r5, @ANYBLOB="ffff2abd7000f8dbdf2503001400"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
faccessat(r6, &(0x7f00000000c0)='./file0\x00', 0xa2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x12d)
write(r7, &(0x7f0000000000)='3', 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20002000, 0x4000, 0xfffffffe, 0x1dd}, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000300)=<r10=>0x0, &(0x7f00000004c0)=<r11=>0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}})
io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r8, 0x19, &(0x7f0000000080)={0x3, 0x7}, 0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240))

603.292514ms ago: executing program 8 (id=443):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000001c0)='./file1\x00', 0x4814, &(0x7f0000000bc0)=ANY=[], 0x1, 0x27e, &(0x7f00000026c0)="$eJzs3c9LbFUcAPDvOOOvNiNtgigaiKDVoEJ7I4okqUiGMEIacxRxREgYqIXaKmjVpmVLd0ZQi3b1PwRt2sTbPN5Sd4/Hw/tw7rz58Zx5T0Xnin4+m/P1nvM953uv3HuZxZz56rWtzdXtnbXj4/sxMZGLwtz6SZLkYipGIh+p/QAAbpOHSRJHSZL+cZRkXQ4AMASt939T1rUAAMMx6P3/4UjajqbNp1nUBgBcj8t//v956a//q7W5d84xNBlvh/8tX7xGAOBqLS598dHJ329NzscfP0Vs/dCoNCppm/a/uxYbUY9aTEcxHkckbWn8wfzC+9OlU5MRla29Vv5eo5LvzZ+JYkxFfP7x2fyZUirXruo0fzRe6s6fjWIj+q8/28rvXX8s3n6zK78cxfjn69iOeqw25+nk786USu99svBM/nhzXBzkM/rPAAAAAAAAAAAAAAAAAAAAAABwm5VLbVP99u8plwf1p/nn3x+osz/Pj838QrxaiO+zPXsAAAAAAAAAAAAAAAAAAAC4GXa+/W6zWq/XvmkHK59tvNx75EVBrk9XvjX/ReY5Ezyd5JLpNzY4PadrXOKNiLiiCR+tD+j6/bD278Hyl4vZX8whBv2v6m+ZF7bynDEjEdEMXvllrvrn7r0HZ8fEfte9XEhvuWo9bce6HxalIT6YAAAAAAAAAAAAAAAAAADgDup8DXjQiGS4BQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABABjq//3/hYKx95HAynazd9fpE9+C089eedXP7GZwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB31pMAAAD//wxMoIg=")
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000340)="af", 0x1}], 0x1, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x40) (async)
sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000340)="af", 0x1}], 0x1, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x40)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c)

517.985791ms ago: executing program 8 (id=444):
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) (async, rerun: 32)
r0 = shmget(0x2, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) (rerun: 32)
r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000)
shmdt(r1)
r2 = shmget(0x1, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000) (async, rerun: 32)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r3=>0x0}) (rerun: 32)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xbd40}) (async)
r4 = socket$netlink(0x10, 0x3, 0xb)
ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000000c0)=""/13, &(0x7f0000000100)=0xd) (async, rerun: 32)
r6 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x80000) (rerun: 32)
ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil})
r7 = memfd_secret(0x0)
getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f00000001c0)=0x4, &(0x7f0000000200)=0x4) (async)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000240)) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000340)="7186c3655bface1ff07083630d8e8d62baf96b5528008e6ea0e691e6849ae18e80a010064305e7b448b1310d35a5e23631b2755d299fc0093ace49c87961896f91c355df5e750c826173bae1aee7a7dad28e40db79a923ff1679da6a41de16583f1e550aa30d13ab69b282ff80f7c92cb714e025140836f3b7b4e4691cfb72a3b40f964940a5830bce114fcc8679c357e69e7bf79ce070798678af9b0dfcb2302588c8bc5e22883bb1502e4b", 0xac, <r9=>0x0}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0xa, 0x0, 0xfbfbfbfb}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000500)={0x0, 0x0, <r11=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[r8, r9, r10, r11, 0x0], 0x5, 0x80000, 0x0, <r12=>0xffffffffffffffff}) (async, rerun: 32)
bind$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e21, 0x1ff, @mcast1, 0xfffff14b}, 0x1c) (rerun: 32)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r12, 0xc01064c7, &(0x7f0000000640)={0x1, 0x0, &(0x7f0000000600)=[0x0]}) (async)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', <r14=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x7, 0x81, 0x4, 0x590b4, 0x1, 0x0, '\x00', r14, r12, 0x5, 0x5, 0x5, 0x8, @value=r7, @void, @value=r7}, 0x50) (async)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r15, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20048004) (async, rerun: 64)
mknodat$null(r13, &(0x7f0000000880)='./file0\x00', 0x80, 0x103) (rerun: 64)

185.671974ms ago: executing program 6 (id=445):
socket(0x10, 0x803, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x243, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0) (async)
sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x243, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0x2f, [0x6, 0x2, 0x9, 0x14, 0xd921, 0x2, 0x2, 0xfffffffc, 0x7, 0xfffffffb, 0x7, 0x38, 0xe45, 0x6, 0xa, 0x2, 0xac, 0xd, 0x8, 0x2, 0x1, 0xfffffffc, 0x6, 0x7, 0x5, 0x1, 0x5, 0x5, 0x400, 0x2, 0x3, 0x5, 0x2, 0x80000000, 0x80000040, 0x773, 0xfffffff8, 0x8, 0xffff, 0x0, 0x7, 0x40, 0x80, 0x0, 0x41, 0x8, 0x8, 0xfffffffc, 0x3, 0xc0a, 0x4, 0x0, 0x1a, 0xd3d9, 0x24, 0x9, 0x69a8be59, 0x9, 0x2, 0x7, 0x9, 0xf50, 0xfffff57f, 0x4, 0xd0, 0x1, 0x8, 0xebfe, 0x10001, 0x8, 0x4, 0x6, 0x3, 0x8, 0x4, 0x1, 0x7, 0x1, 0x2, 0x7, 0x7, 0xc, 0x5, 0xbf, 0x0, 0x28d, 0x6, 0x3, 0x38, 0x4, 0xfffffff8, 0x8000, 0x11a, 0x7, 0x800, 0x7cf2, 0x7fffffff, 0x3, 0x0, 0x6, 0x0, 0x7, 0x7, 0x1, 0x396bd1bf, 0x10000, 0x2, 0x5, 0x8, 0xe15, 0xf3, 0x7f, 0x800, 0x7, 0x0, 0x9, 0xcf, 0x7d7, 0x2, 0x2, 0x0, 0x1, 0xd1, 0x1, 0x10, 0x4, 0x3, 0x8]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0xfffff001}, 0x10)
mount$binderfs(0x0, 0x0, 0x0, 0xc843, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r5])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
memfd_secret(0x0) (async)
memfd_secret(0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="08000800070303000200140007004518002800000000082f907800000000ffffffff8100655c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0400000000000000610f2030478a553256ffdca6112310753192f3433a4dd21e4830e1214c2b47f807af1321f6651b7375a79b8f814d472dac6a708a7bb2e5217c44f029ae44bb2e7de031eb2dde98276979ed593dc77cf008982f9c2afd915768c95b5c095020bb516f7a5d80ba01d35f5f506a866b2fb8991e61287e546113fcaf1296798997fd03302ce5d8d928cf0188cf574dcc82850b860a1b7a435a0d9192ef52b5696f901863a500fd3ca493e506d05de6280524b4e9ed35917dae62c5ba821d15b39e"], 0x36) (async)
write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="08000800070303000200140007004518002800000000082f907800000000ffffffff8100655c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0400000000000000610f2030478a553256ffdca6112310753192f3433a4dd21e4830e1214c2b47f807af1321f6651b7375a79b8f814d472dac6a708a7bb2e5217c44f029ae44bb2e7de031eb2dde98276979ed593dc77cf008982f9c2afd915768c95b5c095020bb516f7a5d80ba01d35f5f506a866b2fb8991e61287e546113fcaf1296798997fd03302ce5d8d928cf0188cf574dcc82850b860a1b7a435a0d9192ef52b5696f901863a500fd3ca493e506d05de6280524b4e9ed35917dae62c5ba821d15b39e"], 0x36)
chroot(&(0x7f0000000300)='./file0\x00') (async)
chroot(&(0x7f0000000300)='./file0\x00')
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x35, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40)

129.007159ms ago: executing program 8 (id=446):
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
shmget(0x1, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil)
r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0xfffffffffffffffa, 0x2000c2)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5428bc9bb2892202, 0x2010, r2, 0xf9e77000)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x583, 0x3a, '', 0x3a, '/dev/hidraw#\x00', 0x3a, './file0', 0x3a, [0x43, 0x46, 0x43, 0x46]}, 0x38)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0))
r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80400, 0x1)
r5 = openat(r4, &(0x7f0000000140)='./file0\x00', 0x400400, 0x23)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
shmdt(r1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x401}, &(0x7f00000001c0)=0x8)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x40}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20040001)
fremovexattr(r4, &(0x7f0000000380)=@random={'osx.', '}])++\x00'})
shmdt(r1)
syz_clone3(&(0x7f0000000600)={0x10800, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=<r6=>0x0, {0x20}, &(0x7f0000000480)=""/83, 0x53, &(0x7f0000000500)=""/186, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0xa, {r5}}, 0x58)
move_pages(r6, 0x1, &(0x7f0000000680)=[&(0x7f0000c00000/0x400000)=nil], &(0x7f00000006c0)=[0x200, 0x4], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7)
shmdt(r1)
openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0)
getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000780)={@initdev, @local, <r7=>0x0}, &(0x7f00000007c0)=0xc)
setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000800)={@local, @local, r7}, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3a}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010)
accept4$inet6(r2, &(0x7f00000009c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000a00)=0x1c, 0x800)
shmdt(r1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

109.654466ms ago: executing program 7 (id=447):
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x40003, 0x32)
write(r0, &(0x7f0000000100)="306663353a313232373a62646b587084500dd2c9e02465306a1658d474ffcc123729d2afb38f6a5cb2f01722cacc4a1615a771f6", 0x34) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080006000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0}) (async)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, &(0x7f0000000080)={0x2c, 0x3, r5, 0x32, r7}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r8 = getpid()
sched_setscheduler(r8, 0x0, &(0x7f0000000040)=0x3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @empty}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xc0}}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)

43.562172ms ago: executing program 8 (id=448):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0xc, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe9c}, 0x36)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x2f, 0xa, 0x200011, 0x3, 0x7, 0x9, 0x0, 0x111, 0x1})
sendto$packet(r0, &(0x7f0000000240)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000002060500000000000000000000000000050004000000000005000100070000000900020073797a320000000005000500000000000c00078005001500060000000d000600000000000000616300000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

0s ago: executing program 8 (id=449):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20000}, [@generic={0x91, 0x1, 0x1, 0x15}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="cf042c9d7000fbdb06251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000500c200820000000800a400030000003400ac00135ec1fefc4f5ba6be6c1af4ea7e19da007981ee1bce56c1bd23c1d1ae6eb6a5682a7927bc133d5be7d045b94f1146c608001400", @ANYRES8=r1], 0xa0}, 0x1, 0x0, 0x0, 0x24008091}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)

kernel console output (not intermixed with test programs):

ry action for clean LRU page: Recovered
[   40.779557][ T5269] Injecting memory failure for pfn 0x1331ac at process virtual address 0x2095f000
[   40.779583][ T5269] Memory failure: 0x1331ac: recovery action for clean LRU page: Recovered
[   40.779591][ T5269] Injecting memory failure for pfn 0x1331ad at process virtual address 0x20960000
[   40.779616][ T5269] Memory failure: 0x1331ad: recovery action for clean LRU page: Recovered
[   40.779623][ T5269] Injecting memory failure for pfn 0x1331ae at process virtual address 0x20961000
[   40.779648][ T5269] Memory failure: 0x1331ae: recovery action for clean LRU page: Recovered
[   40.779655][ T5269] Injecting memory failure for pfn 0x1331af at process virtual address 0x20962000
[   40.779680][ T5269] Memory failure: 0x1331af: recovery action for clean LRU page: Recovered
[   40.779687][ T5269] Injecting memory failure for pfn 0x1331b0 at process virtual address 0x20963000
[   40.779713][ T5269] Memory failure: 0x1331b0: recovery action for clean LRU page: Recovered
[   40.779720][ T5269] Injecting memory failure for pfn 0x1331b1 at process virtual address 0x20964000
[   40.779745][ T5269] Memory failure: 0x1331b1: recovery action for clean LRU page: Recovered
[   40.779752][ T5269] Injecting memory failure for pfn 0x1331b2 at process virtual address 0x20965000
[   40.779777][ T5269] Memory failure: 0x1331b2: recovery action for clean LRU page: Recovered
[   40.779784][ T5269] Injecting memory failure for pfn 0x1331b3 at process virtual address 0x20966000
[   40.779809][ T5269] Memory failure: 0x1331b3: recovery action for clean LRU page: Recovered
[   40.779816][ T5269] Injecting memory failure for pfn 0x1331b4 at process virtual address 0x20967000
[   40.779840][ T5269] Memory failure: 0x1331b4: recovery action for clean LRU page: Recovered
[   40.779848][ T5269] Injecting memory failure for pfn 0x1331b5 at process virtual address 0x20968000
[   40.779873][ T5269] Memory failure: 0x1331b5: recovery action for clean LRU page: Recovered
[   40.779880][ T5269] Injecting memory failure for pfn 0x1331b6 at process virtual address 0x20969000
[   40.779905][ T5269] Memory failure: 0x1331b6: recovery action for clean LRU page: Recovered
[   40.779912][ T5269] Injecting memory failure for pfn 0x1331b7 at process virtual address 0x2096a000
[   40.779937][ T5269] Memory failure: 0x1331b7: recovery action for clean LRU page: Recovered
[   40.779944][ T5269] Injecting memory failure for pfn 0x1331b8 at process virtual address 0x2096b000
[   40.779969][ T5269] Memory failure: 0x1331b8: recovery action for clean LRU page: Recovered
[   40.779976][ T5269] Injecting memory failure for pfn 0x1331b9 at process virtual address 0x2096c000
[   40.780001][ T5269] Memory failure: 0x1331b9: recovery action for clean LRU page: Recovered
[   40.780008][ T5269] Injecting memory failure for pfn 0x1331ba at process virtual address 0x2096d000
[   40.780033][ T5269] Memory failure: 0x1331ba: recovery action for clean LRU page: Recovered
[   40.780040][ T5269] Injecting memory failure for pfn 0x1331bb at process virtual address 0x2096e000
[   40.780065][ T5269] Memory failure: 0x1331bb: recovery action for clean LRU page: Recovered
[   40.780072][ T5269] Injecting memory failure for pfn 0x1331bc at process virtual address 0x2096f000
[   40.780097][ T5269] Memory failure: 0x1331bc: recovery action for clean LRU page: Recovered
[   40.780104][ T5269] Injecting memory failure for pfn 0x1331bd at process virtual address 0x20970000
[   40.780129][ T5269] Memory failure: 0x1331bd: recovery action for clean LRU page: Recovered
[   40.780136][ T5269] Injecting memory failure for pfn 0x1331be at process virtual address 0x20971000
[   40.780162][ T5269] Memory failure: 0x1331be: recovery action for clean LRU page: Recovered
[   40.780169][ T5269] Injecting memory failure for pfn 0x1331bf at process virtual address 0x20972000
[   40.780194][ T5269] Memory failure: 0x1331bf: recovery action for clean LRU page: Recovered
[   40.780201][ T5269] Injecting memory failure for pfn 0x120ba0 at process virtual address 0x20973000
[   40.780226][ T5269] Memory failure: 0x120ba0: recovery action for clean LRU page: Recovered
[   40.780233][ T5269] Injecting memory failure for pfn 0x120ba1 at process virtual address 0x20974000
[   40.780258][ T5269] Memory failure: 0x120ba1: recovery action for clean LRU page: Recovered
[   40.780265][ T5269] Injecting memory failure for pfn 0x120ba2 at process virtual address 0x20975000
[   40.780290][ T5269] Memory failure: 0x120ba2: recovery action for clean LRU page: Recovered
[   40.780297][ T5269] Injecting memory failure for pfn 0x120ba3 at process virtual address 0x20976000
[   40.780322][ T5269] Memory failure: 0x120ba3: recovery action for clean LRU page: Recovered
[   40.780329][ T5269] Injecting memory failure for pfn 0x120ba4 at process virtual address 0x20977000
[   40.780354][ T5269] Memory failure: 0x120ba4: recovery action for clean LRU page: Recovered
[   40.780361][ T5269] Injecting memory failure for pfn 0x120ba5 at process virtual address 0x20978000
[   40.780387][ T5269] Memory failure: 0x120ba5: recovery action for clean LRU page: Recovered
[   40.780394][ T5269] Injecting memory failure for pfn 0x120ba6 at process virtual address 0x20979000
[   40.780419][ T5269] Memory failure: 0x120ba6: recovery action for clean LRU page: Recovered
[   40.780426][ T5269] Injecting memory failure for pfn 0x120ba7 at process virtual address 0x2097a000
[   40.780485][ T5269] Memory failure: 0x120ba7: recovery action for clean LRU page: Recovered
[   40.780495][ T5269] Injecting memory failure for pfn 0x120ba8 at process virtual address 0x2097b000
[   40.780557][ T5269] Memory failure: 0x120ba8: recovery action for clean LRU page: Recovered
[   40.780564][ T5269] Injecting memory failure for pfn 0x120ba9 at process virtual address 0x2097c000
[   40.780589][ T5269] Memory failure: 0x120ba9: recovery action for clean LRU page: Recovered
[   40.780596][ T5269] Injecting memory failure for pfn 0x120baa at process virtual address 0x2097d000
[   40.780621][ T5269] Memory failure: 0x120baa: recovery action for clean LRU page: Recovered
[   40.780628][ T5269] Injecting memory failure for pfn 0x120bab at process virtual address 0x2097e000
[   40.780654][ T5269] Memory failure: 0x120bab: recovery action for clean LRU page: Recovered
[   40.780660][ T5269] Injecting memory failure for pfn 0x120bac at process virtual address 0x2097f000
[   40.780686][ T5269] Memory failure: 0x120bac: recovery action for clean LRU page: Recovered
[   40.780693][ T5269] Injecting memory failure for pfn 0x120bad at process virtual address 0x20980000
[   40.780718][ T5269] Memory failure: 0x120bad: recovery action for clean LRU page: Recovered
[   40.780725][ T5269] Injecting memory failure for pfn 0x120bae at process virtual address 0x20981000
[   40.780750][ T5269] Memory failure: 0x120bae: recovery action for clean LRU page: Recovered
[   40.780757][ T5269] Injecting memory failure for pfn 0x120baf at process virtual address 0x20982000
[   40.780782][ T5269] Memory failure: 0x120baf: recovery action for clean LRU page: Recovered
[   40.780789][ T5269] Injecting memory failure for pfn 0x120bb0 at process virtual address 0x20983000
[   40.780814][ T5269] Memory failure: 0x120bb0: recovery action for clean LRU page: Recovered
[   40.780821][ T5269] Injecting memory failure for pfn 0x120bb1 at process virtual address 0x20984000
[   40.780846][ T5269] Memory failure: 0x120bb1: recovery action for clean LRU page: Recovered
[   40.780853][ T5269] Injecting memory failure for pfn 0x120bb2 at process virtual address 0x20985000
[   40.780878][ T5269] Memory failure: 0x120bb2: recovery action for clean LRU page: Recovered
[   40.780885][ T5269] Injecting memory failure for pfn 0x120bb3 at process virtual address 0x20986000
[   40.780910][ T5269] Memory failure: 0x120bb3: recovery action for clean LRU page: Recovered
[   40.780917][ T5269] Injecting memory failure for pfn 0x120bb4 at process virtual address 0x20987000
[   40.780942][ T5269] Memory failure: 0x120bb4: recovery action for clean LRU page: Recovered
[   40.780949][ T5269] Injecting memory failure for pfn 0x120bb5 at process virtual address 0x20988000
[   40.780974][ T5269] Memory failure: 0x120bb5: recovery action for clean LRU page: Recovered
[   40.780981][ T5269] Injecting memory failure for pfn 0x120bb6 at process virtual address 0x20989000
[   40.781005][ T5269] Memory failure: 0x120bb6: recovery action for clean LRU page: Recovered
[   40.781012][ T5269] Injecting memory failure for pfn 0x120bb7 at process virtual address 0x2098a000
[   40.781037][ T5269] Memory failure: 0x120bb7: recovery action for clean LRU page: Recovered
[   40.781044][ T5269] Injecting memory failure for pfn 0x120bb8 at process virtual address 0x2098b000
[   40.781068][ T5269] Memory failure: 0x120bb8: recovery action for clean LRU page: Recovered
[   40.781075][ T5269] Injecting memory failure for pfn 0x120bb9 at process virtual address 0x2098c000
[   40.781099][ T5269] Memory failure: 0x120bb9: recovery action for clean LRU page: Recovered
[   40.781106][ T5269] Injecting memory failure for pfn 0x120bba at process virtual address 0x2098d000
[   40.781131][ T5269] Memory failure: 0x120bba: recovery action for clean LRU page: Recovered
[   40.781138][ T5269] Injecting memory failure for pfn 0x120bbb at process virtual address 0x2098e000
[   40.781163][ T5269] Memory failure: 0x120bbb: recovery action for clean LRU page: Recovered
[   40.781170][ T5269] Injecting memory failure for pfn 0x120bbc at process virtual address 0x2098f000
[   40.781195][ T5269] Memory failure: 0x120bbc: recovery action for clean LRU page: Recovered
[   40.781202][ T5269] Injecting memory failure for pfn 0x120bbd at process virtual address 0x20990000
[   40.781226][ T5269] Memory failure: 0x120bbd: recovery action for clean LRU page: Recovered
[   40.781234][ T5269] Injecting memory failure for pfn 0x120bbe at process virtual address 0x20991000
[   40.781258][ T5269] Memory failure: 0x120bbe: recovery action for clean LRU page: Recovered
[   40.781265][ T5269] Injecting memory failure for pfn 0x120bbf at process virtual address 0x20992000
[   40.781290][ T5269] Memory failure: 0x120bbf: recovery action for clean LRU page: Recovered
[   40.781297][ T5269] Injecting memory failure for pfn 0x11fa20 at process virtual address 0x20993000
[   40.781322][ T5269] Memory failure: 0x11fa20: recovery action for clean LRU page: Recovered
[   40.781329][ T5269] Injecting memory failure for pfn 0x11fa21 at process virtual address 0x20994000
[   40.781354][ T5269] Memory failure: 0x11fa21: recovery action for clean LRU page: Recovered
[   40.781361][ T5269] Injecting memory failure for pfn 0x11fa22 at process virtual address 0x20995000
[   40.781386][ T5269] Memory failure: 0x11fa22: recovery action for clean LRU page: Recovered
[   40.781393][ T5269] Injecting memory failure for pfn 0x11fa23 at process virtual address 0x20996000
[   40.781417][ T5269] Memory failure: 0x11fa23: recovery action for clean LRU page: Recovered
[   40.781424][ T5269] Injecting memory failure for pfn 0x11fa24 at process virtual address 0x20997000
[   40.781449][ T5269] Memory failure: 0x11fa24: recovery action for clean LRU page: Recovered
[   40.781456][ T5269] Injecting memory failure for pfn 0x11fa25 at process virtual address 0x20998000
[   40.781481][ T5269] Memory failure: 0x11fa25: recovery action for clean LRU page: Recovered
[   40.781488][ T5269] Injecting memory failure for pfn 0x11fa26 at process virtual address 0x20999000
[   40.781516][ T5269] Memory failure: 0x11fa26: recovery action for clean LRU page: Recovered
[   40.781523][ T5269] Injecting memory failure for pfn 0x11fa27 at process virtual address 0x2099a000
[   40.781548][ T5269] Memory failure: 0x11fa27: recovery action for clean LRU page: Recovered
[   40.781555][ T5269] Injecting memory failure for pfn 0x11fa28 at process virtual address 0x2099b000
[   40.781579][ T5269] Memory failure: 0x11fa28: recovery action for clean LRU page: Recovered
[   40.781586][ T5269] Injecting memory failure for pfn 0x11fa29 at process virtual address 0x2099c000
[   40.781611][ T5269] Memory failure: 0x11fa29: recovery action for clean LRU page: Recovered
[   40.781618][ T5269] Injecting memory failure for pfn 0x11fa2a at process virtual address 0x2099d000
[   40.781642][ T5269] Memory failure: 0x11fa2a: recovery action for clean LRU page: Recovered
[   40.781649][ T5269] Injecting memory failure for pfn 0x11fa2b at process virtual address 0x2099e000
[   40.781674][ T5269] Memory failure: 0x11fa2b: recovery action for clean LRU page: Recovered
[   40.781681][ T5269] Injecting memory failure for pfn 0x11fa2c at process virtual address 0x2099f000
[   40.781706][ T5269] Memory failure: 0x11fa2c: recovery action for clean LRU page: Recovered
[   40.781714][ T5269] Injecting memory failure for pfn 0x11fa2d at process virtual address 0x209a0000
[   40.781738][ T5269] Memory failure: 0x11fa2d: recovery action for clean LRU page: Recovered
[   40.781745][ T5269] Injecting memory failure for pfn 0x11fa2e at process virtual address 0x209a1000
[   40.781770][ T5269] Memory failure: 0x11fa2e: recovery action for clean LRU page: Recovered
[   40.781777][ T5269] Injecting memory failure for pfn 0x11fa2f at process virtual address 0x209a2000
[   40.781801][ T5269] Memory failure: 0x11fa2f: recovery action for clean LRU page: Recovered
[   40.781808][ T5269] Injecting memory failure for pfn 0x11fa30 at process virtual address 0x209a3000
[   40.781833][ T5269] Memory failure: 0x11fa30: recovery action for clean LRU page: Recovered
[   40.781840][ T5269] Injecting memory failure for pfn 0x11fa31 at process virtual address 0x209a4000
[   40.781865][ T5269] Memory failure: 0x11fa31: recovery action for clean LRU page: Recovered
[   40.781872][ T5269] Injecting memory failure for pfn 0x11fa32 at process virtual address 0x209a5000
[   40.781896][ T5269] Memory failure: 0x11fa32: recovery action for clean LRU page: Recovered
[   40.781903][ T5269] Injecting memory failure for pfn 0x11fa33 at process virtual address 0x209a6000
[   40.781927][ T5269] Memory failure: 0x11fa33: recovery action for clean LRU page: Recovered
[   40.781934][ T5269] Injecting memory failure for pfn 0x11fa34 at process virtual address 0x209a7000
[   40.781959][ T5269] Memory failure: 0x11fa34: recovery action for clean LRU page: Recovered
[   40.781967][ T5269] Injecting memory failure for pfn 0x11fa35 at process virtual address 0x209a8000
[   40.781991][ T5269] Memory failure: 0x11fa35: recovery action for clean LRU page: Recovered
[   40.781998][ T5269] Injecting memory failure for pfn 0x11fa36 at process virtual address 0x209a9000
[   40.782022][ T5269] Memory failure: 0x11fa36: recovery action for clean LRU page: Recovered
[   40.782029][ T5269] Injecting memory failure for pfn 0x11fa37 at process virtual address 0x209aa000
[   40.782053][ T5269] Memory failure: 0x11fa37: recovery action for clean LRU page: Recovered
[   40.782060][ T5269] Injecting memory failure for pfn 0x11fa38 at process virtual address 0x209ab000
[   40.782085][ T5269] Memory failure: 0x11fa38: recovery action for clean LRU page: Recovered
[   40.782092][ T5269] Injecting memory failure for pfn 0x11fa39 at process virtual address 0x209ac000
[   40.782117][ T5269] Memory failure: 0x11fa39: recovery action for clean LRU page: Recovered
[   40.782124][ T5269] Injecting memory failure for pfn 0x11fa3a at process virtual address 0x209ad000
[   40.782148][ T5269] Memory failure: 0x11fa3a: recovery action for clean LRU page: Recovered
[   40.782155][ T5269] Injecting memory failure for pfn 0x11fa3b at process virtual address 0x209ae000
[   40.782180][ T5269] Memory failure: 0x11fa3b: recovery action for clean LRU page: Recovered
[   40.782187][ T5269] Injecting memory failure for pfn 0x11fa3c at process virtual address 0x209af000
[   40.782211][ T5269] Memory failure: 0x11fa3c: recovery action for clean LRU page: Recovered
[   40.782219][ T5269] Injecting memory failure for pfn 0x11fa3d at process virtual address 0x209b0000
[   40.782243][ T5269] Memory failure: 0x11fa3d: recovery action for clean LRU page: Recovered
[   40.782250][ T5269] Injecting memory failure for pfn 0x11fa3e at process virtual address 0x209b1000
[   40.782275][ T5269] Memory failure: 0x11fa3e: recovery action for clean LRU page: Recovered
[   40.782282][ T5269] Injecting memory failure for pfn 0x11fa3f at process virtual address 0x209b2000
[   40.782306][ T5269] Memory failure: 0x11fa3f: recovery action for clean LRU page: Recovered
[   40.782313][ T5269] Injecting memory failure for pfn 0x132440 at process virtual address 0x209b3000
[   40.782338][ T5269] Memory failure: 0x132440: recovery action for clean LRU page: Recovered
[   40.782345][ T5269] Injecting memory failure for pfn 0x132441 at process virtual address 0x209b4000
[   40.782370][ T5269] Memory failure: 0x132441: recovery action for clean LRU page: Recovered
[   40.782377][ T5269] Injecting memory failure for pfn 0x132442 at process virtual address 0x209b5000
[   40.782402][ T5269] Memory failure: 0x132442: recovery action for clean LRU page: Recovered
[   40.782409][ T5269] Injecting memory failure for pfn 0x132443 at process virtual address 0x209b6000
[   40.782481][ T5269] Memory failure: 0x132443: recovery action for clean LRU page: Recovered
[   40.782488][ T5269] Injecting memory failure for pfn 0x132444 at process virtual address 0x209b7000
[   40.782581][ T5269] Memory failure: 0x132444: recovery action for clean LRU page: Recovered
[   40.782589][ T5269] Injecting memory failure for pfn 0x132445 at process virtual address 0x209b8000
[   40.782613][ T5269] Memory failure: 0x132445: recovery action for clean LRU page: Recovered
[   40.782620][ T5269] Injecting memory failure for pfn 0x132446 at process virtual address 0x209b9000
[   40.782645][ T5269] Memory failure: 0x132446: recovery action for clean LRU page: Recovered
[   40.782652][ T5269] Injecting memory failure for pfn 0x132447 at process virtual address 0x209ba000
[   40.782677][ T5269] Memory failure: 0x132447: recovery action for clean LRU page: Recovered
[   40.782684][ T5269] Injecting memory failure for pfn 0x132448 at process virtual address 0x209bb000
[   40.782709][ T5269] Memory failure: 0x132448: recovery action for clean LRU page: Recovered
[   40.782716][ T5269] Injecting memory failure for pfn 0x132449 at process virtual address 0x209bc000
[   40.782741][ T5269] Memory failure: 0x132449: recovery action for clean LRU page: Recovered
[   40.782748][ T5269] Injecting memory failure for pfn 0x13244a at process virtual address 0x209bd000
[   40.782772][ T5269] Memory failure: 0x13244a: recovery action for clean LRU page: Recovered
[   40.782779][ T5269] Injecting memory failure for pfn 0x13244b at process virtual address 0x209be000
[   40.782804][ T5269] Memory failure: 0x13244b: recovery action for clean LRU page: Recovered
[   40.782811][ T5269] Injecting memory failure for pfn 0x13244c at process virtual address 0x209bf000
[   40.782836][ T5269] Memory failure: 0x13244c: recovery action for clean LRU page: Recovered
[   40.782844][ T5269] Injecting memory failure for pfn 0x13244d at process virtual address 0x209c0000
[   40.782868][ T5269] Memory failure: 0x13244d: recovery action for clean LRU page: Recovered
[   40.782875][ T5269] Injecting memory failure for pfn 0x13244e at process virtual address 0x209c1000
[   40.782899][ T5269] Memory failure: 0x13244e: recovery action for clean LRU page: Recovered
[   40.782906][ T5269] Injecting memory failure for pfn 0x13244f at process virtual address 0x209c2000
[   40.782931][ T5269] Memory failure: 0x13244f: recovery action for clean LRU page: Recovered
[   40.782938][ T5269] Injecting memory failure for pfn 0x132450 at process virtual address 0x209c3000
[   40.782962][ T5269] Memory failure: 0x132450: recovery action for clean LRU page: Recovered
[   40.782969][ T5269] Injecting memory failure for pfn 0x132451 at process virtual address 0x209c4000
[   40.782994][ T5269] Memory failure: 0x132451: recovery action for clean LRU page: Recovered
[   40.783002][ T5269] Injecting memory failure for pfn 0x132452 at process virtual address 0x209c5000
[   40.783026][ T5269] Memory failure: 0x132452: recovery action for clean LRU page: Recovered
[   40.783033][ T5269] Injecting memory failure for pfn 0x132453 at process virtual address 0x209c6000
[   40.783057][ T5269] Memory failure: 0x132453: recovery action for clean LRU page: Recovered
[   40.783064][ T5269] Injecting memory failure for pfn 0x132454 at process virtual address 0x209c7000
[   40.783089][ T5269] Memory failure: 0x132454: recovery action for clean LRU page: Recovered
[   40.783096][ T5269] Injecting memory failure for pfn 0x132455 at process virtual address 0x209c8000
[   40.783120][ T5269] Memory failure: 0x132455: recovery action for clean LRU page: Recovered
[   40.783127][ T5269] Injecting memory failure for pfn 0x132456 at process virtual address 0x209c9000
[   40.783152][ T5269] Memory failure: 0x132456: recovery action for clean LRU page: Recovered
[   40.783159][ T5269] Injecting memory failure for pfn 0x132457 at process virtual address 0x209ca000
[   40.783184][ T5269] Memory failure: 0x132457: recovery action for clean LRU page: Recovered
[   40.783191][ T5269] Injecting memory failure for pfn 0x132458 at process virtual address 0x209cb000
[   40.783215][ T5269] Memory failure: 0x132458: recovery action for clean LRU page: Recovered
[   40.783222][ T5269] Injecting memory failure for pfn 0x132459 at process virtual address 0x209cc000
[   40.783247][ T5269] Memory failure: 0x132459: recovery action for clean LRU page: Recovered
[   40.783254][ T5269] Injecting memory failure for pfn 0x13245a at process virtual address 0x209cd000
[   40.783278][ T5269] Memory failure: 0x13245a: recovery action for clean LRU page: Recovered
[   40.783285][ T5269] Injecting memory failure for pfn 0x13245b at process virtual address 0x209ce000
[   40.783310][ T5269] Memory failure: 0x13245b: recovery action for clean LRU page: Recovered
[   40.783317][ T5269] Injecting memory failure for pfn 0x13245c at process virtual address 0x209cf000
[   40.783341][ T5269] Memory failure: 0x13245c: recovery action for clean LRU page: Recovered
[   40.783348][ T5269] Injecting memory failure for pfn 0x13245d at process virtual address 0x209d0000
[   40.783373][ T5269] Memory failure: 0x13245d: recovery action for clean LRU page: Recovered
[   40.783380][ T5269] Injecting memory failure for pfn 0x13245e at process virtual address 0x209d1000
[   40.783404][ T5269] Memory failure: 0x13245e: recovery action for clean LRU page: Recovered
[   40.783411][ T5269] Injecting memory failure for pfn 0x13245f at process virtual address 0x209d2000
[   40.783437][ T5269] Memory failure: 0x13245f: recovery action for clean LRU page: Recovered
[   40.783444][ T5269] Injecting memory failure for pfn 0x136560 at process virtual address 0x209d3000
[   40.783468][ T5269] Memory failure: 0x136560: recovery action for clean LRU page: Recovered
[   40.783475][ T5269] Injecting memory failure for pfn 0x136561 at process virtual address 0x209d4000
[   40.783504][ T5269] Memory failure: 0x136561: recovery action for clean LRU page: Recovered
[   40.783512][ T5269] Injecting memory failure for pfn 0x136562 at process virtual address 0x209d5000
[   40.783537][ T5269] Memory failure: 0x136562: recovery action for clean LRU page: Recovered
[   40.783544][ T5269] Injecting memory failure for pfn 0x136563 at process virtual address 0x209d6000
[   40.783569][ T5269] Memory failure: 0x136563: recovery action for clean LRU page: Recovered
[   40.783576][ T5269] Injecting memory failure for pfn 0x136564 at process virtual address 0x209d7000
[   40.783600][ T5269] Memory failure: 0x136564: recovery action for clean LRU page: Recovered
[   40.783607][ T5269] Injecting memory failure for pfn 0x136565 at process virtual address 0x209d8000
[   40.783632][ T5269] Memory failure: 0x136565: recovery action for clean LRU page: Recovered
[   40.783639][ T5269] Injecting memory failure for pfn 0x136566 at process virtual address 0x209d9000
[   40.783664][ T5269] Memory failure: 0x136566: recovery action for clean LRU page: Recovered
[   40.783671][ T5269] Injecting memory failure for pfn 0x136567 at process virtual address 0x209da000
[   40.783695][ T5269] Memory failure: 0x136567: recovery action for clean LRU page: Recovered
[   40.783702][ T5269] Injecting memory failure for pfn 0x136568 at process virtual address 0x209db000
[   40.783726][ T5269] Memory failure: 0x136568: recovery action for clean LRU page: Recovered
[   40.783734][ T5269] Injecting memory failure for pfn 0x136569 at process virtual address 0x209dc000
[   40.783758][ T5269] Memory failure: 0x136569: recovery action for clean LRU page: Recovered
[   40.783765][ T5269] Injecting memory failure for pfn 0x13656a at process virtual address 0x209dd000
[   40.783789][ T5269] Memory failure: 0x13656a: recovery action for clean LRU page: Recovered
[   40.783796][ T5269] Injecting memory failure for pfn 0x13656b at process virtual address 0x209de000
[   40.783821][ T5269] Memory failure: 0x13656b: recovery action for clean LRU page: Recovered
[   40.783828][ T5269] Injecting memory failure for pfn 0x13656c at process virtual address 0x209df000
[   40.783853][ T5269] Memory failure: 0x13656c: recovery action for clean LRU page: Recovered
[   40.783860][ T5269] Injecting memory failure for pfn 0x13656d at process virtual address 0x209e0000
[   40.783885][ T5269] Memory failure: 0x13656d: recovery action for clean LRU page: Recovered
[   40.783892][ T5269] Injecting memory failure for pfn 0x13656e at process virtual address 0x209e1000
[   40.783917][ T5269] Memory failure: 0x13656e: recovery action for clean LRU page: Recovered
[   40.783924][ T5269] Injecting memory failure for pfn 0x13656f at process virtual address 0x209e2000
[   40.783948][ T5269] Memory failure: 0x13656f: recovery action for clean LRU page: Recovered
[   40.783955][ T5269] Injecting memory failure for pfn 0x136570 at process virtual address 0x209e3000
[   40.783980][ T5269] Memory failure: 0x136570: recovery action for clean LRU page: Recovered
[   40.783987][ T5269] Injecting memory failure for pfn 0x136571 at process virtual address 0x209e4000
[   40.784012][ T5269] Memory failure: 0x136571: recovery action for clean LRU page: Recovered
[   40.784019][ T5269] Injecting memory failure for pfn 0x136572 at process virtual address 0x209e5000
[   40.784043][ T5269] Memory failure: 0x136572: recovery action for clean LRU page: Recovered
[   40.784050][ T5269] Injecting memory failure for pfn 0x136573 at process virtual address 0x209e6000
[   40.784075][ T5269] Memory failure: 0x136573: recovery action for clean LRU page: Recovered
[   40.784082][ T5269] Injecting memory failure for pfn 0x136574 at process virtual address 0x209e7000
[   40.784106][ T5269] Memory failure: 0x136574: recovery action for clean LRU page: Recovered
[   40.784113][ T5269] Injecting memory failure for pfn 0x136575 at process virtual address 0x209e8000
[   40.784138][ T5269] Memory failure: 0x136575: recovery action for clean LRU page: Recovered
[   40.784145][ T5269] Injecting memory failure for pfn 0x136576 at process virtual address 0x209e9000
[   40.784169][ T5269] Memory failure: 0x136576: recovery action for clean LRU page: Recovered
[   40.784176][ T5269] Injecting memory failure for pfn 0x136577 at process virtual address 0x209ea000
[   40.784201][ T5269] Memory failure: 0x136577: recovery action for clean LRU page: Recovered
[   40.784208][ T5269] Injecting memory failure for pfn 0x136578 at process virtual address 0x209eb000
[   40.784233][ T5269] Memory failure: 0x136578: recovery action for clean LRU page: Recovered
[   40.784240][ T5269] Injecting memory failure for pfn 0x136579 at process virtual address 0x209ec000
[   40.784264][ T5269] Memory failure: 0x136579: recovery action for clean LRU page: Recovered
[   40.784271][ T5269] Injecting memory failure for pfn 0x13657a at process virtual address 0x209ed000
[   40.784295][ T5269] Memory failure: 0x13657a: recovery action for clean LRU page: Recovered
[   40.784302][ T5269] Injecting memory failure for pfn 0x13657b at process virtual address 0x209ee000
[   40.784326][ T5269] Memory failure: 0x13657b: recovery action for clean LRU page: Recovered
[   40.784334][ T5269] Injecting memory failure for pfn 0x13657c at process virtual address 0x209ef000
[   40.784358][ T5269] Memory failure: 0x13657c: recovery action for clean LRU page: Recovered
[   40.784365][ T5269] Injecting memory failure for pfn 0x13657d at process virtual address 0x209f0000
[   40.784390][ T5269] Memory failure: 0x13657d: recovery action for clean LRU page: Recovered
[   40.784397][ T5269] Injecting memory failure for pfn 0x13657e at process virtual address 0x209f1000
[   40.784421][ T5269] Memory failure: 0x13657e: recovery action for clean LRU page: Recovered
[   40.784428][ T5269] Injecting memory failure for pfn 0x13657f at process virtual address 0x209f2000
[   40.784541][ T5269] Memory failure: 0x13657f: recovery action for clean LRU page: Recovered
[   40.784548][ T5269] Injecting memory failure for pfn 0x136500 at process virtual address 0x209f3000
[   40.784696][ T5269] Memory failure: 0x136500: recovery action for clean LRU page: Recovered
[   40.784703][ T5269] Injecting memory failure for pfn 0x136501 at process virtual address 0x209f4000
[   40.784728][ T5269] Memory failure: 0x136501: recovery action for clean LRU page: Recovered
[   40.784735][ T5269] Injecting memory failure for pfn 0x136502 at process virtual address 0x209f5000
[   40.784760][ T5269] Memory failure: 0x136502: recovery action for clean LRU page: Recovered
[   40.784767][ T5269] Injecting memory failure for pfn 0x136503 at process virtual address 0x209f6000
[   40.784792][ T5269] Memory failure: 0x136503: recovery action for clean LRU page: Recovered
[   40.784799][ T5269] Injecting memory failure for pfn 0x136504 at process virtual address 0x209f7000
[   40.784823][ T5269] Memory failure: 0x136504: recovery action for clean LRU page: Recovered
[   40.784830][ T5269] Injecting memory failure for pfn 0x136505 at process virtual address 0x209f8000
[   40.784855][ T5269] Memory failure: 0x136505: recovery action for clean LRU page: Recovered
[   40.784862][ T5269] Injecting memory failure for pfn 0x136506 at process virtual address 0x209f9000
[   40.784887][ T5269] Memory failure: 0x136506: recovery action for clean LRU page: Recovered
[   40.784894][ T5269] Injecting memory failure for pfn 0x136507 at process virtual address 0x209fa000
[   40.784918][ T5269] Memory failure: 0x136507: recovery action for clean LRU page: Recovered
[   40.784926][ T5269] Injecting memory failure for pfn 0x136508 at process virtual address 0x209fb000
[   40.784950][ T5269] Memory failure: 0x136508: recovery action for clean LRU page: Recovered
[   40.784957][ T5269] Injecting memory failure for pfn 0x136509 at process virtual address 0x209fc000
[   40.784981][ T5269] Memory failure: 0x136509: recovery action for clean LRU page: Recovered
[   40.784989][ T5269] Injecting memory failure for pfn 0x13650a at process virtual address 0x209fd000
[   40.785013][ T5269] Memory failure: 0x13650a: recovery action for clean LRU page: Recovered
[   40.785020][ T5269] Injecting memory failure for pfn 0x13650b at process virtual address 0x209fe000
[   40.785044][ T5269] Memory failure: 0x13650b: recovery action for clean LRU page: Recovered
[   40.785051][ T5269] Injecting memory failure for pfn 0x13650c at process virtual address 0x209ff000
[   40.785077][ T5269] Memory failure: 0x13650c: recovery action for clean LRU page: Recovered
[   40.826824][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.855689][ T5280] overlay: Unknown parameter 'fowner'
[   41.328283][ T4722] Bluetooth: hci1: command 0x0419 tx timeout
[   41.413392][ T5295] loop2: detected capacity change from 0 to 1024
[   41.418195][ T5295] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   41.418249][ T5295] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   41.421413][ T5295] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   41.422247][ T5295] EXT4-fs (loop2): orphan cleanup on readonly fs
[   41.424564][ T5295] EXT4-fs error (device loop2): ext4_read_inode_bitmap:169: comm syz.2.103: Inode bitmap for bg 0 marked uninitialized
[   41.424581][ T5295] loop2: lost filesystem error report for type 5 error -117
[   41.433877][ T5295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.451724][ T5295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.504614][ T5303] process 'syz.3.105' launched './file1' with NULL argv: empty string added
[   41.533676][ T5303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.105'.
[   41.658115][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'.
[   41.870327][ T3958] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[   41.884831][ T5315] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[   42.070001][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'.
[   42.210313][ T5330] syz.2.116 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   42.219205][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'.
[   42.219228][ T5334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.119'.
[   42.220226][ T5331] EXT4-fs: Ignoring removed bh option
[   42.230687][ T5331] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   42.322657][ T5331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.425645][ T5341] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   42.521367][ T5344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.543963][ T5341] FAULT_INJECTION: forcing a failure.
[   42.543963][ T5341] name failslab, interval 1, probability 100, space 1, times 1
[   42.543990][ T5341] CPU: 1 UID: 0 PID: 5341 Comm: syz.4.121 Not tainted syzkaller #0 PREEMPT 
[   42.544001][ T5341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   42.544007][ T5341] Call trace:
[   42.544010][ T5341]  show_stack+0x2c/0x3c (C)
[   42.544029][ T5341]  __dump_stack+0x30/0x40
[   42.544043][ T5341]  dump_stack_lvl+0xd8/0x12c
[   42.544054][ T5341]  dump_stack+0x1c/0x28
[   42.544066][ T5341]  should_fail_ex+0x41c/0x590
[   42.544078][ T5341]  should_failslab+0xc4/0x120
[   42.544092][ T5341]  __kmalloc_noprof+0x108/0x6c8
[   42.544100][ T5341]  tomoyo_realpath_from_path+0xbc/0x4dc
[   42.544112][ T5341]  tomoyo_path_number_perm+0x1f0/0x500
[   42.544121][ T5341]  tomoyo_file_ioctl+0x2c/0x3c
[   42.544132][ T5341]  security_file_ioctl+0xdc/0x2b0
[   42.544142][ T5341]  __arm64_sys_ioctl+0xb0/0x1cc
[   42.544155][ T5341]  invoke_syscall+0x98/0x244
[   42.544167][ T5341]  el0_svc_common+0xec/0x23c
[   42.544178][ T5341]  do_el0_svc+0x4c/0x5c
[   42.544190][ T5341]  el0_svc+0x64/0x260
[   42.544200][ T5341]  el0t_64_sync_handler+0x44/0x104
[   42.544210][ T5341]  el0t_64_sync+0x198/0x19c
[   42.544220][ T5341] ERROR: Out of memory at tomoyo_realpath_from_path.
[   42.625050][ T5331] EXT4-fs error (device loop0): ext4_check_all_de:675: inode #12: block 7: comm syz.0.118: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   42.630764][ T5331] EXT4-fs (loop0): Remounting filesystem read-only
[   42.637803][ T5331] evm: overlay not supported
[   42.827171][   T30] audit: type=1326 audit(42.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5343 comm="syz.2.122" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff913782e8 code=0x0
[   42.869339][ T5349] FAULT_INJECTION: forcing a failure.
[   42.869339][ T5349] name failslab, interval 1, probability 100, space 1, times 0
[   42.869363][ T5349] CPU: 0 UID: 0 PID: 5349 Comm: syz.2.122 Not tainted syzkaller #0 PREEMPT 
[   42.869378][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   42.869385][ T5349] Call trace:
[   42.869388][ T5349]  show_stack+0x2c/0x3c (C)
[   42.869410][ T5349]  __dump_stack+0x30/0x40
[   42.869423][ T5349]  dump_stack_lvl+0xd8/0x12c
[   42.869435][ T5349]  dump_stack+0x1c/0x28
[   42.869447][ T5349]  should_fail_ex+0x41c/0x590
[   42.869459][ T5349]  should_failslab+0xc4/0x120
[   42.869472][ T5349]  kmem_cache_alloc_noprof+0x94/0x5d4
[   42.869489][ T5349]  alloc_empty_file+0x6c/0x1cc
[   42.869498][ T5349]  path_openat+0x78/0x18f4
[   42.869508][ T5349]  do_file_open+0x1c8/0x2e8
[   42.869518][ T5349]  do_sys_openat2+0x114/0x1e8
[   42.869530][ T5349]  do_sys_open+0xb0/0xe0
[   42.869541][ T5349]  __arm64_sys_openat+0xa8/0xc4
[   42.869553][ T5349]  invoke_syscall+0x98/0x244
[   42.869564][ T5349]  el0_svc_common+0xec/0x23c
[   42.869576][ T5349]  do_el0_svc+0x4c/0x5c
[   42.869588][ T5349]  el0_svc+0x64/0x260
[   42.869598][ T5349]  el0t_64_sync_handler+0x44/0x104
[   42.869608][ T5349]  el0t_64_sync+0x198/0x19c
[   42.915397][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.066215][ T4722] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[   43.216757][ T5366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'.
[   43.328579][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.331086][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.334158][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.337864][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.338285][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.338726][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.341902][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.342293][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.345213][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.348363][ T4723] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   43.370288][ T5375] netlink: 'syz.3.127': attribute type 4 has an invalid length.
[   43.535591][ T5381] capability: warning: `syz.1.130' uses 32-bit capabilities (legacy support in use)
[   43.677479][ T5389] EXT4-fs: Ignoring removed i_version option
[   43.704302][ T5389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.713554][ T5389] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.132: iget: bad i_size value: 2533274857506816
[   43.717888][ T5389] EXT4-fs (loop1): Remounting filesystem read-only
[   43.729896][ T5389] kernel profiling enabled (shift: 4)
[   43.895039][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.075440][ T5405] vhci_hcd vhci_hcd.2: default hub control req: 8017 ve640 i0000 l0
[   44.101896][ T4723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.103708][ T5405] netlink: 'syz.1.135': attribute type 1 has an invalid length.
[   44.110286][ T5409] FAULT_INJECTION: forcing a failure.
[   44.110286][ T5409] name failslab, interval 1, probability 100, space 1, times 0
[   44.110309][ T5409] CPU: 1 UID: 0 PID: 5409 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT 
[   44.110321][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   44.110327][ T5409] Call trace:
[   44.110330][ T5409]  show_stack+0x2c/0x3c (C)
[   44.110347][ T5409]  __dump_stack+0x30/0x40
[   44.110359][ T5409]  dump_stack_lvl+0xd8/0x12c
[   44.110369][ T5409]  dump_stack+0x1c/0x28
[   44.110378][ T5409]  should_fail_ex+0x41c/0x590
[   44.110390][ T5409]  should_failslab+0xc4/0x120
[   44.110402][ T5409]  kmem_cache_alloc_noprof+0x94/0x5d4
[   44.110414][ T5409]  sk_prot_alloc+0x60/0x1e8
[   44.110425][ T5409]  sk_alloc+0x44/0x3ac
[   44.110434][ T5409]  inet6_create+0x620/0xfc8
[   44.110442][ T5409]  __sock_create+0x31c/0x670
[   44.110450][ T5409]  __sys_socket_create+0xc0/0x11c
[   44.110457][ T5409]  __sys_socket+0x44/0xec
[   44.110465][ T5409]  __arm64_sys_socket+0x84/0x9c
[   44.110473][ T5409]  invoke_syscall+0x98/0x244
[   44.110483][ T5409]  el0_svc_common+0xec/0x23c
[   44.110498][ T5409]  do_el0_svc+0x4c/0x5c
[   44.110508][ T5409]  el0_svc+0x64/0x260
[   44.110517][ T5409]  el0t_64_sync_handler+0x44/0x104
[   44.110526][ T5409]  el0t_64_sync+0x198/0x19c
[   44.135463][ T5405] bond1: entered promiscuous mode
[   44.135513][ T5405] bond1: entered allmulticast mode
[   44.135655][ T5405] 8021q: adding VLAN 0 to HW filter on device bond1
[   44.233393][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.242016][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[   44.255376][ T5405] erspan1: entered allmulticast mode
[   44.271923][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'.
[   44.274453][ T5405] bond1: (slave erspan1): making interface the new active one
[   44.274465][ T5405] erspan1: entered promiscuous mode
[   44.289821][ T5405] bond1: (slave erspan1): Enslaving as an active interface with an up link
[   44.313868][ T5429] bond1 (unregistering): (slave erspan1): Releasing active interface
[   44.313901][ T5429] erspan1: left promiscuous mode
[   44.363790][ T5429] bond1 (unregistering): Released all slaves
[   44.494348][ T5428] set_capacity_and_notify: 4 callbacks suppressed
[   44.494360][ T5428] loop3: detected capacity change from 0 to 4096
[   44.516806][ T5428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   44.516823][ T5428] EXT4-fs (loop3): Test dummy encryption mode enabled
[   44.542585][ T5428] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   44.542634][ T5428] System zones: 0-5
[   44.555151][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.561426][ T5428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.571345][ T5447] overlayfs: failed to resolve './file1': -2
[   44.573314][ T5447] overlayfs: failed to resolve './file1': -2
[   44.575535][ T5447] overlayfs: failed to resolve './file1': -2
[   44.578756][ T5447] overlayfs: failed to resolve './file1': -2
[   44.587542][ T5447] overlayfs: failed to resolve './file1': -2
[   44.589695][ T5447] overlayfs: failed to resolve './file1': -2
[   44.591324][ T5447] overlayfs: failed to resolve './file1': -2
[   44.591831][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   44.592841][ T5447] overlayfs: failed to resolve './file1': -2
[   44.594989][ T5447] overlayfs: failed to resolve './file1': -2
[   44.601064][ T5447] overlayfs: failed to resolve './file1': -2
[   44.601737][ T5447] overlayfs: failed to resolve './file1': -2
[   44.603585][ T5447] overlayfs: failed to resolve './file1': -2
[   44.603810][ T4721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   44.605213][ T5447] overlayfs: failed to resolve './file1': -2
[   44.605395][ T4721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   44.607257][ T5447] overlayfs: failed to resolve './file1': -2
[   44.609105][ T5447] overlayfs: failed to resolve './file1': -2
[   44.610577][ T4721] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   44.610812][ T5447] overlayfs: failed to resolve './file1': -2
[   44.613070][ T5447] overlayfs: failed to resolve './file1': -2
[   44.614796][ T4721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   44.615770][ T5447] overlayfs: failed to resolve './file1': -2
[   44.678409][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.817416][ T5467] loop9: detected capacity change from 0 to 524287998
[   44.840512][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.878317][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.195075][   T13] bridge_slave_1: left allmulticast mode
[   45.195109][   T13] bridge_slave_1: left promiscuous mode
[   45.196374][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.249184][   T13] bridge_slave_0: left allmulticast mode
[   45.249205][   T13] bridge_slave_0: left promiscuous mode
[   45.249331][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.527318][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.555489][ T5488] loop1: detected capacity change from 0 to 128
[   45.561034][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.607564][   T13] bond0 (unregistering): Released all slaves
[   45.626354][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'.
[   46.072888][ T5518] loop3: detected capacity change from 0 to 2048
[   46.078532][ T5520] netlink: 'syz.1.155': attribute type 10 has an invalid length.
[   46.110437][ T5518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.121925][ T5520] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   46.161330][ T5539] overlayfs: missing 'lowerdir'
[   46.169468][ T5539] Invalid ELF header magic: != ELF
[   46.232244][ T5546] loop4: detected capacity change from 0 to 8
[   46.246906][ T5518] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.253341][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.253410][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.253525][ T5453] bridge_slave_0: entered allmulticast mode
[   46.356330][ T5551] loop0: detected capacity change from 0 to 128
[   46.371349][ T5551] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   46.371943][ T5453] bridge_slave_0: entered promiscuous mode
[   46.372345][ T5551] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   46.377252][ T5553] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   46.377266][ T5553] FAT-fs (loop0): Filesystem has been set read-only
[   46.390597][ T4404] 8021q: adding VLAN 0 to HW filter on device eth1
[   46.393094][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.394568][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.394663][ T5453] bridge_slave_1: entered allmulticast mode
[   46.454499][ T5560] loop1: detected capacity change from 0 to 1024
[   46.551366][ T5567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'.
[   46.566592][ T5453] bridge_slave_1: entered promiscuous mode
[   46.646865][ T5453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.655992][ T4721] Bluetooth: hci3: command tx timeout
[   46.677598][   T13] hsr_slave_0: left promiscuous mode
[   46.678779][   T13] hsr_slave_1: left promiscuous mode
[   46.679148][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.679167][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   46.680338][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.680350][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   46.693538][   T13] veth1_macvtap: left promiscuous mode
[   46.693592][   T13] veth0_macvtap: left promiscuous mode
[   46.693667][   T13] veth1_vlan: left promiscuous mode
[   46.693709][   T13] veth0_vlan: left promiscuous mode
[   46.831268][ T5585] loop3: detected capacity change from 0 to 4096
[   46.835864][ T5585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   46.838807][ T5585] EXT4-fs (loop3): Test dummy encryption mode enabled
[   46.849237][ T5585] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   46.851102][ T5585] System zones: 0-5
[   46.857675][ T5585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.873737][ T5588] loop0: detected capacity change from 0 to 1024
[   46.901659][ T5588] EXT4-fs: Mount option(s) incompatible with ext3
[   46.928759][   T13] team0 (unregistering): Port device team_slave_1 removed
[   46.935114][   T13] team0 (unregistering): Port device team_slave_0 removed
[   46.959458][ T5590] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   47.021909][ T5596] loop0: detected capacity change from 0 to 2048
[   47.051660][ T5596] Alternate GPT is invalid, using primary GPT.
[   47.051712][ T5596]  loop0: p1 p2 p3
[   47.127114][ T5453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.150199][ T5602] netlink: 'syz.0.176': attribute type 10 has an invalid length.
[   47.154490][ T5453] team0: Port device team_slave_0 added
[   47.160924][ T5453] team0: Port device team_slave_1 added
[   47.187741][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.191674][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.192628][ T5602] team0: Port device netdevsim1 added
[   47.198833][ T5602] netlink: 'syz.0.176': attribute type 10 has an invalid length.
[   47.249308][ T5602] team0: Port device netdevsim1 removed
[   47.257743][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.263286][ T5602] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   47.270215][ T5606] netlink: 104 bytes leftover after parsing attributes in process `syz.3.178'.
[   47.270265][ T5606] netlink: 104 bytes leftover after parsing attributes in process `syz.3.178'.
[   47.270284][ T5606] netlink: 81 bytes leftover after parsing attributes in process `syz.3.178'.
[   47.280440][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.280465][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.280505][ T5453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.284103][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.284115][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   47.284133][ T5453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.295072][ T5480] udevd[5480]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   47.300201][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   47.308638][ T5348] udevd[5348]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   47.334979][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   47.339899][ T5348] udevd[5348]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   47.343543][ T5480] udevd[5480]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   47.349518][ T5453] hsr_slave_0: entered promiscuous mode
[   47.352349][ T5453] hsr_slave_1: entered promiscuous mode
[   47.356204][ T5453] debugfs: 'hsr0' already exists in 'hsr'
[   47.356244][ T5453] Cannot create hsr debugfs directory
[   47.484116][ T5623] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   47.484151][ T5623] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[   47.484209][ T5623] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   47.484223][ T5623] EXT4-fs (loop1): filesystem has both journal inode and journal device!
[   47.531372][ T4404] 8021q: adding VLAN 0 to HW filter on device eth0
[   47.544041][ T5453] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   47.551519][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   47.553218][ T5453] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   47.557339][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   47.559208][ T5453] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   47.565423][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   47.565782][ T5453] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   47.569592][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   47.621244][ T5453] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.636433][ T5453] 8021q: adding VLAN 0 to HW filter on device team0
[   47.657373][ T5453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.663056][ T5453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.692434][ T3663] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.692491][ T3663] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.696858][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.696902][ T3663] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.706211][ T5655] fuse: Bad value for 'fd'
[   47.823863][ T5655] overlay: ./file0 is not a directory
[   48.090222][ T5671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'.
[   48.098682][ T5671] ip6gre1: entered allmulticast mode
[   48.105726][ T5672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'.
[   48.190894][ T5684] EXT4-fs: Ignoring removed nobh option
[   48.227887][ T5684] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.189: corrupted inode contents
[   48.230268][ T5684] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.233158][ T5684] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #3: comm syz.1.189: mark_inode_dirty error
[   48.237711][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   48.237724][    C1] EXT4-fs (loop1): initial error at time 48: ext4_do_update_inode:5801: inode 3
[   48.237741][    C1] EXT4-fs (loop1): last error at time 48: ext4_do_update_inode:5801: inode 3
[   48.245079][ T5684] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.245705][ T5684] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #3: comm syz.1.189: corrupted inode contents
[   48.258210][ T5684] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.260089][ T5684] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.189: mark_inode_dirty error
[   48.260168][ T5684] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   48.265478][ T5684] Quota error (device loop1): write_blk: dquota write failed
[   48.265568][ T5684] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   48.265594][ T5684] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.189: Failed to acquire dquot type 0
[   48.265612][ T5684] loop1: lost filesystem error report for type 5 error -117
[   48.280408][ T5684] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.189: corrupted inode contents
[   48.280455][ T5684] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   48.284916][ T5684] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #16: comm syz.1.189: mark_inode_dirty error
[   48.284972][ T5684] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   48.287515][ T5684] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.189: corrupted inode contents
[   48.287547][ T5684] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   48.290824][ T5684] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.189: mark_inode_dirty error
[   48.290847][ T5684] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   48.291198][ T5684] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.189: corrupted inode contents
[   48.291218][ T5684] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   48.291341][ T5684] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem
[   48.291351][ T5684] loop1: lost filesystem error report for type 5 error -117
[   48.291619][ T5684] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #16: comm syz.1.189: corrupted inode contents
[   48.291638][ T5684] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   48.293130][ T5684] EXT4-fs error (device loop1): ext4_truncate:4721: inode #16: comm syz.1.189: mark_inode_dirty error
[   48.293291][ T5684] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[   48.293301][ T5684] loop1: lost filesystem error report for type 5 error -117
[   48.293697][ T5684] EXT4-fs (loop1): 1 truncate cleaned up
[   48.294436][ T5684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.303935][ T5684] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #3: comm syz.1.189: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18]
[   48.303935][ T5684] 
[   48.370236][ T4404] 8021q: adding VLAN 0 to HW filter on device eth2
[   48.378860][ T5453] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.426442][ T5707] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[   48.428464][ T5707] CPU: 1 UID: 0 PID: 5707 Comm: syz.1.189 Not tainted syzkaller #0 PREEMPT 
[   48.428488][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   48.428501][ T5707] Call trace:
[   48.428506][ T5707]  show_stack+0x2c/0x3c (C)
[   48.428528][ T5707]  __dump_stack+0x30/0x40
[   48.428541][ T5707]  dump_stack_lvl+0xd8/0x12c
[   48.428553][ T5707]  dump_stack+0x1c/0x28
[   48.428564][ T5707]  sysfs_warn_dup+0x9c/0xb8
[   48.428576][ T5707]  sysfs_create_dir_ns+0x190/0x1f4
[   48.428588][ T5707]  kobject_add_internal+0x290/0x6f0
[   48.428601][ T5707]  kobject_add_varg+0x9c/0xe8
[   48.428612][ T5707]  kobject_add+0x110/0x1c8
[   48.428623][ T5707]  device_add+0x394/0x9e0
[   48.428632][ T5707]  device_register+0x28/0x38
[   48.428640][ T5707]  tty_register_device_attr+0x31c/0x5e8
[   48.428651][ T5707]  tty_register_device+0x3c/0x50
[   48.428659][ T5707]  gsm_activate_mux+0xdc/0x284
[   48.428670][ T5707]  gsmld_ioctl+0x9d0/0x1414
[   48.428679][ T5707]  tty_ioctl+0x8a8/0xcb0
[   48.428687][ T5707]  __arm64_sys_ioctl+0x154/0x1cc
[   48.428700][ T5707]  invoke_syscall+0x98/0x244
[   48.428712][ T5707]  el0_svc_common+0xec/0x23c
[   48.428723][ T5707]  do_el0_svc+0x4c/0x5c
[   48.428734][ T5707]  el0_svc+0x64/0x260
[   48.428744][ T5707]  el0t_64_sync_handler+0x44/0x104
[   48.428754][ T5707]  el0t_64_sync+0x198/0x19c
[   48.453227][ T5707] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[   48.465694][ T5706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   48.490029][ T5706] EXT4-fs (loop0): 1 truncate cleaned up
[   48.492562][ T5706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.551404][ T5706] EXT4-fs (loop0): Online resizing not supported with sparse_super2
[   48.603459][ T5453] veth0_vlan: entered promiscuous mode
[   48.610426][ T5453] veth1_vlan: entered promiscuous mode
[   48.615098][ T5726] FAULT_INJECTION: forcing a failure.
[   48.615098][ T5726] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   48.615139][ T5726] CPU: 0 UID: 0 PID: 5726 Comm: syz.4.195 Not tainted syzkaller #0 PREEMPT 
[   48.615152][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   48.615159][ T5726] Call trace:
[   48.615163][ T5726]  show_stack+0x2c/0x3c (C)
[   48.615182][ T5726]  __dump_stack+0x30/0x40
[   48.615193][ T5726]  dump_stack_lvl+0xd8/0x12c
[   48.615203][ T5726]  dump_stack+0x1c/0x28
[   48.615213][ T5726]  should_fail_ex+0x41c/0x590
[   48.615224][ T5726]  should_fail_alloc_page+0xec/0x10c
[   48.615235][ T5726]  prepare_alloc_pages+0x194/0x484
[   48.615243][ T5726]  __alloc_frozen_pages_noprof+0x180/0x648
[   48.615251][ T5726]  alloc_pages_mpol+0x1fc/0x3d0
[   48.615259][ T5726]  alloc_frozen_pages_noprof+0xc4/0x10c
[   48.615267][ T5726]  alloc_pages_noprof+0x30/0x148
[   48.615275][ T5726]  get_free_pages_noprof+0x1c/0xbc
[   48.615282][ T5726]  __kasan_populate_vmalloc+0x48/0x1d0
[   48.615292][ T5726]  alloc_vmap_area+0xdf4/0x13e8
[   48.615300][ T5726]  __get_vm_area_node+0x210/0x32c
[   48.615308][ T5726]  __vmalloc_node_range_noprof+0x2a0/0xe9c
[   48.615317][ T5726]  __vmalloc_node_noprof+0xec/0x14c
[   48.615325][ T5726]  vzalloc_noprof+0x3c/0x4c
[   48.615333][ T5726]  vidtv_mux_init+0x18c/0x7e4
[   48.615343][ T5726]  vidtv_start_feed+0x2e0/0x49c
[   48.615351][ T5726]  dmx_ts_feed_start_filtering+0x124/0x1fc
[   48.615362][ T5726]  dvb_dmxdev_start_feed+0x1f4/0x2dc
[   48.615371][ T5726]  dvb_dmxdev_filter_start+0x1bc/0xa8c
[   48.615380][ T5726]  dvb_dmxdev_pes_filter_set+0x3d8/0x508
[   48.615389][ T5726]  dvb_demux_do_ioctl+0x40c/0x4bc
[   48.615398][ T5726]  dvb_usercopy+0x2a4/0x4d4
[   48.615407][ T5726]  dvb_demux_ioctl+0x3c/0x54
[   48.615415][ T5726]  __arm64_sys_ioctl+0x154/0x1cc
[   48.615426][ T5726]  invoke_syscall+0x98/0x244
[   48.615436][ T5726]  el0_svc_common+0xec/0x23c
[   48.615446][ T5726]  do_el0_svc+0x4c/0x5c
[   48.615456][ T5726]  el0_svc+0x64/0x260
[   48.615465][ T5726]  el0t_64_sync_handler+0x44/0x104
[   48.615473][ T5726]  el0t_64_sync+0x198/0x19c
[   48.615619][ T5726] syz.4.195: vmalloc error: size 90164, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   48.615683][ T5726] CPU: 0 UID: 0 PID: 5726 Comm: syz.4.195 Not tainted syzkaller #0 PREEMPT 
[   48.615692][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   48.615696][ T5726] Call trace:
[   48.615699][ T5726]  show_stack+0x2c/0x3c (C)
[   48.615710][ T5726]  __dump_stack+0x30/0x40
[   48.615719][ T5726]  dump_stack_lvl+0xd8/0x12c
[   48.615729][ T5726]  dump_stack+0x1c/0x28
[   48.615738][ T5726]  warn_alloc+0x1c4/0x1d8
[   48.615749][ T5726]  __vmalloc_node_range_noprof+0x2c4/0xe9c
[   48.615758][ T5726]  __vmalloc_node_noprof+0xec/0x14c
[   48.615766][ T5726]  vzalloc_noprof+0x3c/0x4c
[   48.615775][ T5726]  vidtv_mux_init+0x18c/0x7e4
[   48.615784][ T5726]  vidtv_start_feed+0x2e0/0x49c
[   48.615791][ T5726]  dmx_ts_feed_start_filtering+0x124/0x1fc
[   48.615802][ T5726]  dvb_dmxdev_start_feed+0x1f4/0x2dc
[   48.615811][ T5726]  dvb_dmxdev_filter_start+0x1bc/0xa8c
[   48.615825][ T5726]  dvb_dmxdev_pes_filter_set+0x3d8/0x508
[   48.615836][ T5726]  dvb_demux_do_ioctl+0x40c/0x4bc
[   48.615846][ T5726]  dvb_usercopy+0x2a4/0x4d4
[   48.615854][ T5726]  dvb_demux_ioctl+0x3c/0x54
[   48.615863][ T5726]  __arm64_sys_ioctl+0x154/0x1cc
[   48.615873][ T5726]  invoke_syscall+0x98/0x244
[   48.615883][ T5726]  el0_svc_common+0xec/0x23c
[   48.615893][ T5726]  do_el0_svc+0x4c/0x5c
[   48.615902][ T5726]  el0_svc+0x64/0x260
[   48.615911][ T5726]  el0t_64_sync_handler+0x44/0x104
[   48.615919][ T5726]  el0t_64_sync+0x198/0x19c
[   48.621280][ T5726] Mem-Info:
[   48.621295][ T5726] active_anon:66 inactive_anon:5483 isolated_anon:0
[   48.621295][ T5726]  active_file:2842 inactive_file:13768 isolated_file:0
[   48.621295][ T5726]  unevictable:768 dirty:47 writeback:0
[   48.621295][ T5726]  slab_reclaimable:9212 slab_unreclaimable:91115
[   48.621295][ T5726]  mapped:28986 shmem:1121 pagetables:1020
[   48.621295][ T5726]  sec_pagetables:0 bounce:0
[   48.621295][ T5726]  kernel_misc_reclaimable:0
[   48.621295][ T5726]  free:1462313 free_pcp:15712 free_cma:7616
[   48.621325][ T5726] Node 0 active_anon:264kB inactive_anon:21932kB active_file:11368kB inactive_file:55072kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:115944kB dirty:188kB writeback:0kB shmem:4484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9280kB pagetables:4080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   48.621347][ T5726] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB
[   48.621371][ T5726] lowmem_reserve[]: 0 0 3650 3650 3650
[   48.621390][ T5726] Node 0 Normal free:2771364kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:264kB inactive_anon:21932kB active_file:11368kB inactive_file:55072kB unevictable:3072kB writepending:188kB zspages:28kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:62848kB local_pcp:43272kB free_cma:0kB
[   48.621413][ T5726] lowmem_reserve[]: 0 0 0 0 0
[   48.621430][ T5726] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB
[   48.621496][ T5726] Node 0 Normal: 187*4kB (ME) 355*8kB (M) 277*16kB (UME) 177*32kB (M) 111*64kB (UME) 16*128kB (UM) 12*256kB (ME) 8*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 667*4096kB (UM) = 2771252kB
[   48.621575][ T5726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   48.621582][ T5726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[   48.621588][ T5726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   48.621594][ T5726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[   48.621601][ T5726] 17728 total pagecache pages
[   48.621604][ T5726] 1 pages in swap cache
[   48.621608][ T5726] Free swap  = 124980kB
[   48.621611][ T5726] Total swap = 124996kB
[   48.621614][ T5726] 2097152 pages RAM
[   48.621618][ T5726] 0 pages HighMem/MovableOnly
[   48.621621][ T5726] 392568 pages reserved
[   48.621624][ T5726] 8192 pages cma reserved
[   48.621627][ T5726] 1540 pages hwpoisoned
[   48.628233][ T5453] veth0_macvtap: entered promiscuous mode
[   48.632112][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.649458][ T5453] veth1_macvtap: entered promiscuous mode
[   48.660826][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.663292][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.736071][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.736203][ T4721] Bluetooth: hci3: command tx timeout
[   48.736336][ T3663] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.736623][ T3663] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.736837][ T3663] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.787616][ T5741] input: syz0 as /devices/virtual/input/input3
[   48.792828][ T3663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.792858][ T3663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.832183][ T4051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.832227][ T4051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.930856][ T5753] xt_l2tp: v2 sid > 0xffff: 4294967295
[   48.954481][ T5761] Driver unsupported XDP return value 0 on prog  (id 23) dev N/A, expect packet loss!
[   48.989688][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3
[   49.029397][ T5763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.050700][ T5763] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   49.057784][ T5763] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.199: missing EA_INODE flag
[   49.079805][ T5763] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.199: error while reading EA inode 11 err=-117
[   49.521019][ T5788] set_capacity_and_notify: 7 callbacks suppressed
[   49.523517][ T5788] loop3: detected capacity change from 0 to 4096
[   49.523955][ T5788] EXT4-fs: Ignoring removed nomblk_io_submit option
[   49.541098][ T5788] EXT4-fs (loop3): Test dummy encryption mode enabled
[   49.541978][ T5788] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   49.542017][ T5788] System zones: 0-5
[   49.543934][ T5788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.590229][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.634216][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.673313][ T5807] loop1: detected capacity change from 0 to 128
[   49.709767][ T5810] loop5: detected capacity change from 0 to 512
[   49.738376][ T5810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.792801][ T5804] loop3: detected capacity change from 0 to 128
[   49.821132][ T5804] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.827790][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.855242][ T5804] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   49.865578][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.872843][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.875336][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.878908][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.881688][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.884115][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.885771][ T5821] syzkaller0: entered promiscuous mode
[   49.885785][ T5821] syzkaller0: entered allmulticast mode
[   49.889125][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.891604][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.894434][ T5821] tipc: Started in network mode
[   49.894468][ T5821] tipc: Node identity 3afeeb8ed3c1, cluster identity 4711
[   49.900325][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.901403][ T5821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.904044][ T5453] EXT4-fs warning (device loop5): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.'
[   49.983266][ T5830] netlink: 72 bytes leftover after parsing attributes in process `syz.3.217'.
[   49.983309][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[   49.983320][ T5830] netlink: 'syz.3.217': attribute type 2 has an invalid length.
[   50.011366][ T5833] loop3: detected capacity change from 0 to 128
[   50.014960][ T5833] EXT4-fs: Mount option(s) incompatible with ext2
[   50.030853][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'.
[   50.030904][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'.
[   50.032883][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'.
[   50.032899][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.218'.
[   50.046433][    C1] syzkaller0: tun_net_xmit 90
[   50.071698][ T5835] loop0: detected capacity change from 0 to 512
[   50.073787][ T5835] EXT4-fs (loop0): Test dummy encryption mode enabled
[   50.112031][ T5835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.114827][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'.
[   50.133317][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.184344][ T5846] overlayfs: missing 'lowerdir'
[   50.195995][    C1] syzkaller0: tun_net_xmit 90
[   50.242105][ T5851] netlink: 64 bytes leftover after parsing attributes in process `syz.0.224'.
[   50.281774][ T5854] loop0: detected capacity change from 0 to 128
[   50.285796][ T5854] FAT-fs (loop0): bogus number of FAT structure
[   50.285838][ T5854] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   50.285847][ T5854] FAT-fs (loop0): Can't find a valid FAT filesystem
[   50.320004][ T5853] ima: policy update failed
[   50.320108][   T30] audit: type=1802 audit(50.300:4): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.225" res=0 errno=0
[   50.336134][    C1] syzkaller0: tun_net_xmit 90
[   50.377032][ T5860] netlink: 'syz.0.226': attribute type 15 has an invalid length.
[   50.377062][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[   50.381747][ T5860] netlink: 'syz.0.226': attribute type 15 has an invalid length.
[   50.381774][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[   50.396356][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[   50.398526][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[   50.398550][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[   50.398565][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[   50.476043][    C1] syzkaller0: tun_net_xmit 90
[   50.616042][    C1] syzkaller0: tun_net_xmit 90
[   50.751096][ T5815] tipc: Resetting bearer <eth:syzkaller0>
[   50.757159][ T5815] tipc: Disabling bearer <eth:syzkaller0>
[   50.814211][ T5866] loop1: detected capacity change from 0 to 256
[   50.814613][ T5866] vfat: Unknown parameter 'vfat'
[   50.883042][ T5872] loop1: detected capacity change from 0 to 128
[   50.888755][ T5872] EXT4-fs (loop1): Test dummy encryption mode enabled
[   50.894221][ T5872] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   50.919427][ T4713] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   50.950450][ T5875] loop1: detected capacity change from 0 to 2048
[   50.952946][ T5877] netlink: 'syz.3.232': attribute type 11 has an invalid length.
[   51.063090][ T5887] netlink: 'syz.3.236': attribute type 1 has an invalid length.
[   51.081591][ T5890] gre1: entered promiscuous mode
[   51.152317][ T5889] FAT-fs (loop1): bogus sectors per cluster 255
[   51.152371][ T5889] FAT-fs (loop1): Can't find a valid FAT filesystem
[   51.176356][ T5898] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   51.291563][ T5890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   51.313315][ T5890] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:168: inode #12: comm syz.1.237: inline data xattr refers to an external xattr inode
[   51.581578][ T5891] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:168: inode #12: comm syz.1.237: inline data xattr refers to an external xattr inode
[   51.647349][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   51.917233][ T5947] cgroup: Unknown subsys name 'dont_hash'
[   51.921180][ T5947] overlayfs: null uuid in non-single lower fs '/syz3', falling back to xino=off,index=off,nfs_export=off.
[   51.971683][ T5951] netlink: 'syz.3.252': attribute type 1 has an invalid length.
[   52.032413][ T5819] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.044237][ T4728] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   52.092922][ T1090] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.556392][ T5961] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   52.592040][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   52.594976][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   52.600211][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   52.602215][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   52.603885][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   52.627594][ T1090] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.698194][ T1090] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.763709][ T1090] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.787734][ T5981] netlink: 'syz.0.261': attribute type 7 has an invalid length.
[   52.787763][ T5981] netlink: 'syz.0.261': attribute type 8 has an invalid length.
[   52.928324][ T1090] bridge_slave_1: left allmulticast mode
[   52.928354][ T1090] bridge_slave_1: left promiscuous mode
[   52.928451][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.934036][ T1090] bridge_slave_0: left allmulticast mode
[   52.935574][ T1090] bridge_slave_0: left promiscuous mode
[   52.937527][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.975631][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.989431][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.991259][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.993420][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.995080][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.040395][ T6003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.073774][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   53.097329][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   53.116774][ T1090] bond0 (unregistering): Released all slaves
[   53.139255][ T6003] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   53.139850][ T6003] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   53.139879][ T6003] EXT4-fs (loop4): This should not happen!! Data will be lost
[   53.139879][ T6003] 
[   53.139895][ T6003] EXT4-fs (loop4): Total free blocks count 0
[   53.139909][ T6003] EXT4-fs (loop4): Free/Dirty block details
[   53.139926][ T6003] EXT4-fs (loop4): free_blocks=2415919504
[   53.139942][ T6003] EXT4-fs (loop4): dirty_blocks=64
[   53.139952][ T6003] EXT4-fs (loop4): Block reservation details
[   53.139962][ T6003] EXT4-fs (loop4): i_reserved_data_blocks=4
[   53.187305][ T3663] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   53.246916][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.248961][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.249052][ T5963] bridge_slave_0: entered allmulticast mode
[   53.249504][ T5963] bridge_slave_0: entered promiscuous mode
[   53.255504][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.255576][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.255648][ T5963] bridge_slave_1: entered allmulticast mode
[   53.260492][ T5963] bridge_slave_1: entered promiscuous mode
[   53.279702][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.308685][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.313364][ T4404] 8021q: adding VLAN 0 to HW filter on device eth4
[   53.362360][ T5963] team0: Port device team_slave_0 added
[   53.369888][ T5963] team0: Port device team_slave_1 added
[   53.380760][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.380786][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.380802][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.381333][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.381340][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.381354][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.402043][ T5963] hsr_slave_0: entered promiscuous mode
[   53.409147][ T5963] hsr_slave_1: entered promiscuous mode
[   53.412423][ T5963] debugfs: 'hsr0' already exists in 'hsr'
[   53.412458][ T5963] Cannot create hsr debugfs directory
[   53.553660][ T1090] hsr_slave_0: left promiscuous mode
[   53.554965][ T1090] hsr_slave_1: left promiscuous mode
[   53.555287][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.555299][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.563333][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.563360][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.568698][ T1090] veth1_macvtap: left promiscuous mode
[   53.568744][ T1090] veth0_macvtap: left promiscuous mode
[   53.568810][ T1090] veth1_vlan: left promiscuous mode
[   53.568851][ T1090] veth0_vlan: left promiscuous mode
[   53.666789][ T1090] team0 (unregistering): Port device team_slave_1 removed
[   53.670910][ T1090] team0 (unregistering): Port device team_slave_0 removed
[   53.722855][ T4404] 8021q: adding VLAN 0 to HW filter on device eth5
[   53.767998][ T5963] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   53.774229][ T5963] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   53.774590][ T5963] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   53.777369][ T5963] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   53.789265][ T5963] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   53.792975][ T5963] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   53.797837][ T5963] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   53.800429][ T5963] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   53.842027][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.845100][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.847336][ T6000] bridge_slave_0: entered allmulticast mode
[   53.848907][ T6000] bridge_slave_0: entered promiscuous mode
[   53.856561][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.856597][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.856676][ T6000] bridge_slave_1: entered allmulticast mode
[   53.857101][ T6000] bridge_slave_1: entered promiscuous mode
[   53.863747][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.864665][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.889912][ T6000] team0: Port device team_slave_0 added
[   53.896554][ T6000] team0: Port device team_slave_1 added
[   53.905049][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.906901][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.911736][ T6000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.914763][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.920518][ T5963] 8021q: adding VLAN 0 to HW filter on device team0
[   53.926675][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.926698][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.926719][ T6000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.999787][ T6075] netlink: 'syz.4.272': attribute type 1 has an invalid length.
[   54.002152][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.002206][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.005868][ T3822] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.005919][ T3822] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.048319][ T6073] syzkaller1: entered promiscuous mode
[   54.048355][ T6073] syzkaller1: entered allmulticast mode
[   54.049107][ T6083] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   54.063471][ T6075] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.065213][ T6083] EXT4-fs (loop0): 1 truncate cleaned up
[   54.065681][ T6083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.072686][ T4404] 8021q: adding VLAN 0 to HW filter on device eth7
[   54.074362][ T6000] hsr_slave_0: entered promiscuous mode
[   54.075113][ T6000] hsr_slave_1: entered promiscuous mode
[   54.075303][ T6000] debugfs: 'hsr0' already exists in 'hsr'
[   54.075312][ T6000] Cannot create hsr debugfs directory
[   54.331359][ T6075] bond1: (slave geneve3): making interface the new active one
[   54.333145][ T6075] bond1: (slave geneve3): Enslaving as an active interface with an up link
[   54.379282][ T6099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   54.383580][ T6099] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.273: bad orphan inode 131083
[   54.383616][ T6099] loop4: lost filesystem error report for type 5 error -117
[   54.385957][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   54.385986][    C0] EXT4-fs (loop4): initial error at time 54: ext4_orphan_get:1429
[   54.386020][    C0] EXT4-fs (loop4): last error at time 54: ext4_orphan_get:1429
[   54.393436][ T6099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.421842][ T6099] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #2: block 13: comm syz.4.273: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[   54.433306][ T6099] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #2: comm syz.4.273: directory missing '.'
[   54.458958][ T4728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.481361][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.536305][ T6107] set_capacity_and_notify: 8 callbacks suppressed
[   54.536410][ T6107] loop4: detected capacity change from 0 to 1024
[   54.536806][ T6107] EXT4-fs: Ignoring removed bh option
[   54.537374][ T6107] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   54.562626][ T6108] loop0: detected capacity change from 0 to 512
[   54.564771][ T6108] EXT4-fs: Ignoring removed i_version option
[   54.567411][ T6107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.588879][ T6108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.604390][ T6108] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 205 vs 206 free clusters
[   54.614880][ T6108] EXT4-fs (loop0): Remounting filesystem read-only
[   54.650545][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.659953][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.665860][ T3822] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   54.665894][ T3822] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   54.685997][ T4721] Bluetooth: hci3: command tx timeout
[   54.840474][ T6122] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.274: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   54.921797][ T6122] EXT4-fs (loop4): Remounting filesystem read-only
[   55.065781][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.066869][ T4721] Bluetooth: hci2: command tx timeout
[   55.098402][ T6000] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   55.109768][ T6000] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.110111][ T6000] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   55.114558][ T6000] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.115060][ T6000] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   55.122122][ T6000] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.122576][ T6000] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   55.133164][ T6000] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.181542][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.250820][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.259789][ T4404] 8021q: adding VLAN 0 to HW filter on device eth6
[   55.264278][ T5963] veth0_vlan: entered promiscuous mode
[   55.301858][ T5963] veth1_vlan: entered promiscuous mode
[   55.309770][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.350621][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.388173][ T6175] 9p: Bad value for 'rfdno'
[   55.395640][ T6175] loop1: detected capacity change from 0 to 2048
[   55.404668][ T6000] 8021q: adding VLAN 0 to HW filter on device team0
[   55.412370][ T5963] veth0_macvtap: entered promiscuous mode
[   55.413504][ T5963] veth1_macvtap: entered promiscuous mode
[   55.423618][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.423863][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.427374][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.427404][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.433099][ T6175]  loop1: p1 < > p4
[   55.433099][ T6175]  p4: <netbsd: >
[   55.435863][ T6175] loop1: p4 size 722688 extends beyond EOD, truncated
[   55.445885][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.450118][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.462770][ T6000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.464254][ T6175] __nla_validate_parse: 5 callbacks suppressed
[   55.464286][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.280'.
[   55.496476][ T6188] netlink: 'syz.4.281': attribute type 10 has an invalid length.
[   55.526921][ T6188] team0: Cannot enslave team device to itself
[   55.621508][ T3958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.623549][ T3958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.678128][   T12] bridge_slave_1: left allmulticast mode
[   55.678171][   T12] bridge_slave_1: left promiscuous mode
[   55.678275][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.693965][   T12] bridge_slave_0: left allmulticast mode
[   55.694004][   T12] bridge_slave_0: left promiscuous mode
[   55.694084][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.762717][ T6211] loop0: detected capacity change from 0 to 256
[   55.815446][ T6216] loop1: detected capacity change from 0 to 256
[   55.829924][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.850096][ T6216] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   55.869422][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.905675][ T6217] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264)
[   55.905720][ T6217] FAT-fs (loop1): Filesystem has been set read-only
[   55.908572][ T6217] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[   55.908608][ T6217] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[   55.914278][   T12] bond0 (unregistering): Released all slaves
[   55.919536][   T12] bond1 (unregistering): Released all slaves
[   55.933320][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.286'.
[   55.952097][ T3822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.952131][ T3822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.956097][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.956139][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.971054][ T3958] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.971333][ T3958] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.011421][   T12] tipc: Left network mode
[   56.137594][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.150410][ T6244] input: syz0 as /devices/virtual/input/input6
[   56.204520][ T6244] netlink: 40 bytes leftover after parsing attributes in process `syz.6.256'.
[   56.259725][ T4404] 8021q: adding VLAN 0 to HW filter on device eth8
[   56.298473][ T6000] veth0_vlan: entered promiscuous mode
[   56.303641][ T6000] veth1_vlan: entered promiscuous mode
[   56.344390][ T6000] veth0_macvtap: entered promiscuous mode
[   56.350510][ T6000] veth1_macvtap: entered promiscuous mode
[   56.373149][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.383003][ T6244] loop6: detected capacity change from 0 to 32768
[   56.392577][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.399315][ T6267] loop0: detected capacity change from 0 to 256
[   56.401026][ T6267] FAT-fs (loop0): Directory bread(block 1285) failed
[   56.403163][ T6267] FAT-fs (loop0): Directory bread(block 1286) failed
[   56.403214][ T6267] FAT-fs (loop0): Directory bread(block 1287) failed
[   56.403276][ T6267] FAT-fs (loop0): Directory bread(block 1288) failed
[   56.410150][ T6267] FAT-fs (loop0): Directory bread(block 1285) failed
[   56.410190][ T6267] FAT-fs (loop0): Directory bread(block 1286) failed
[   56.410204][ T6267] FAT-fs (loop0): Directory bread(block 1287) failed
[   56.410217][ T6267] FAT-fs (loop0): Directory bread(block 1288) failed
[   56.412730][ T6267] FAT-fs (loop0): Directory bread(block 1285) failed
[   56.412754][ T6267] FAT-fs (loop0): Directory bread(block 1286) failed
[   56.438008][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.438043][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.441674][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.441718][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.469062][   T12] veth1_macvtap: left promiscuous mode
[   56.469113][   T12] veth0_macvtap: left promiscuous mode
[   56.469179][   T12] veth1_vlan: left promiscuous mode
[   56.469221][   T12] veth0_vlan: left promiscuous mode
[   56.577593][ T6217] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[   56.577661][ T6217] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[   56.577685][ T6217] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[   56.736076][ T4721] Bluetooth: hci3: command tx timeout
[   56.764192][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'.
[   56.915401][   T12] team0 (unregistering): Port device team_slave_1 removed
[   56.951414][   T12] team0 (unregistering): Port device team_slave_0 removed
[   57.044289][ T6310] netlink: 256 bytes leftover after parsing attributes in process `syz.1.299'.
[   57.102841][ T6290] team0: Port device team_slave_0 removed
[   57.111454][ T4404] 8021q: adding VLAN 0 to HW filter on device eth9
[   57.137839][ T4721] Bluetooth: hci2: command tx timeout
[   57.214277][ T4051] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.219263][ T4051] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.221138][ T4051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.222714][ T4051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.225028][ T4051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.226842][ T4051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.228723][ T4051] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.231357][ T4051] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.248260][ T6321] syzkaller0: entered promiscuous mode
[   57.248288][ T6321] syzkaller0: entered allmulticast mode
[   57.251356][ T6313] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[   57.739207][ T6329] netlink: 'syz.1.303': attribute type 15 has an invalid length.
[   57.739240][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'.
[   57.760688][ T6329] netlink: 'syz.1.303': attribute type 15 has an invalid length.
[   57.764572][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'.
[   57.774674][ T6346] netlink: 'syz.4.305': attribute type 2 has an invalid length.
[   57.774713][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'.
[   57.779332][ T4051] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[   57.779454][ T4051] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[   57.779473][ T4051] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[   57.779494][ T4051] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[   57.828797][ T6349] loop7: detected capacity change from 0 to 128
[   58.283217][ T6369] gtp0: entered allmulticast mode
[   58.284931][ T6369] team0: Device gtp0 is of different type
[   58.291003][ T6367] loop0: detected capacity change from 0 to 4096
[   58.294063][ T6367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   58.294370][ T6367] EXT4-fs (loop0): Test dummy encryption mode enabled
[   58.296728][ T6367] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   58.296764][ T6367] System zones: 0-5
[   58.343081][ T4404] 8021q: adding VLAN 0 to HW filter on device eth10
[   58.372793][ T6359] netlink: 132 bytes leftover after parsing attributes in process `syz.4.310'.
[   58.376781][ T4712] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   58.378343][ T4712] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers
[   58.473261][ T6385] loop7: detected capacity change from 0 to 512
[   58.559664][ T6394] EXT4-fs: Ignoring removed nobh option
[   58.565159][ T6394] fscrypt (loop4, inode 2): Error -61 getting encryption context
[   58.611264][ T6394] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[   58.619455][ T6394] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.318: inode has both inline data and extents flags
[   58.619501][ T6394] fserror_report: 1 callbacks suppressed
[   58.619526][ T6394] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   58.623351][ T6394] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.318: couldn't read orphan inode 13 (err -117)
[   58.623385][ T6394] loop4: lost filesystem error report for type 5 error -117
[   58.627698][    C0] EXT4-fs (loop4): error count since last fsck: 2
[   58.627716][    C0] EXT4-fs (loop4): initial error at time 58: ext4_orphan_get:1403: inode 13
[   58.627740][    C0] EXT4-fs (loop4): last error at time 58: ext4_orphan_get:1408
[   58.653493][ T6394] fscrypt (loop4, inode 2): Error -61 getting encryption context
[   58.655122][ T6394] fscrypt (loop4, inode 2): Error -61 getting encryption context
[   58.658164][ T6394] fscrypt (loop4, inode 2): Error -61 getting encryption context
[   58.710732][ T6401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[   58.710845][ T6401] System zones: 1-3, 19-19, 35-36
[   58.816110][ T4721] Bluetooth: hci3: command tx timeout
[   58.971090][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[   58.984597][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.085297][ T4404] 8021q: adding VLAN 0 to HW filter on device eth11
[   59.157628][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.164266][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.168651][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.170220][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[   59.170258][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.176816][ T6433] netlink: 'syz.7.327': attribute type 5 has an invalid length.
[   59.178699][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.183829][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.227621][ T4721] Bluetooth: hci2: command tx timeout
[   59.281439][   T12] bond0: (slave netdevsim1): Releasing backup interface
[   59.295750][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[   59.295792][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.362529][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[   59.365021][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.521994][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.522333][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.522398][ T6435] bridge_slave_0: entered allmulticast mode
[   59.522962][ T6435] bridge_slave_0: entered promiscuous mode
[   59.523918][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.523943][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.523996][ T6435] bridge_slave_1: entered allmulticast mode
[   59.524417][ T6435] bridge_slave_1: entered promiscuous mode
[   59.533900][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.548238][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.557178][   T12] bridge_slave_1: left allmulticast mode
[   59.557207][   T12] bridge_slave_1: left promiscuous mode
[   59.557290][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.559966][   T12] bridge_slave_0: left allmulticast mode
[   59.559977][   T12] bridge_slave_0: left promiscuous mode
[   59.560079][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.639364][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.657710][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.667737][   T12] bond0 (unregistering): Released all slaves
[   59.671754][   T12] bond1 (unregistering): Released all slaves
[   59.676405][ T6435] team0: Port device team_slave_0 added
[   59.680041][ T6435] team0: Port device team_slave_1 added
[   59.685773][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.689337][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.689540][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.690313][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.690321][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.690334][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.712630][ T6435] hsr_slave_0: entered promiscuous mode
[   59.713033][ T6435] hsr_slave_1: entered promiscuous mode
[   59.713205][ T6435] debugfs: 'hsr0' already exists in 'hsr'
[   59.713215][ T6435] Cannot create hsr debugfs directory
[   59.815377][ T6435] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   59.819506][ T6435] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.821547][ T6435] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   59.824368][ T6435] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.826537][ T6435] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   59.830054][ T6435] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.832080][ T6435] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   59.834848][ T6435] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.885122][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.885176][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.885265][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.885304][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.944827][ T4404] 8021q: adding VLAN 0 to HW filter on device eth12
[   59.963986][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.986894][ T6435] 8021q: adding VLAN 0 to HW filter on device team0
[   60.002323][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.023307][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.023363][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.759763][ T6435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.896228][ T4721] Bluetooth: hci3: command tx timeout
[   60.906531][ T6520] set_capacity_and_notify: 3 callbacks suppressed
[   60.906556][ T6520] loop4: detected capacity change from 0 to 128
[   60.916454][ T6520] FAT-fs (loop4): Directory bread(block 1048) failed
[   60.916500][ T6520] FAT-fs (loop4): Directory bread(block 1049) failed
[   60.916526][ T6520] FAT-fs (loop4): Directory bread(block 1050) failed
[   60.916543][ T6520] FAT-fs (loop4): Directory bread(block 1051) failed
[   60.916559][ T6520] FAT-fs (loop4): Directory bread(block 1052) failed
[   60.916574][ T6520] FAT-fs (loop4): Directory bread(block 1053) failed
[   60.916588][ T6520] FAT-fs (loop4): Directory bread(block 1054) failed
[   60.916603][ T6520] FAT-fs (loop4): Directory bread(block 1055) failed
[   60.947482][   T12] hsr_slave_0: left promiscuous mode
[   60.952778][   T12] hsr_slave_1: left promiscuous mode
[   60.954560][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.956069][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.958832][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.958863][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.967887][   T12] veth1_macvtap: left promiscuous mode
[   60.969494][   T12] veth0_macvtap: left promiscuous mode
[   60.969640][   T12] veth1_vlan: left promiscuous mode
[   60.969685][   T12] veth0_vlan: left promiscuous mode
[   61.147456][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'.
[   61.210056][ T6532] FAT-fs (loop4): Directory bread(block 1048) failed
[   61.210116][ T6532] FAT-fs (loop4): Directory bread(block 1049) failed
[   61.216109][ T4721] Bluetooth: hci0: command tx timeout
[   61.235917][ T6532] binder: 6519:6532 ioctl c0046209 0 returned -22
[   61.297262][ T4721] Bluetooth: hci2: command tx timeout
[   61.357646][   T12] team0 (unregistering): Port device team_slave_1 removed
[   61.362353][   T12] team0 (unregistering): Port device team_slave_0 removed
[   61.436015][ T6536] team0: Port device team_slave_0 removed
[   61.453244][ T4404] 8021q: adding VLAN 0 to HW filter on device eth13
[   61.615244][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.671207][ T6578] overlay: Unknown parameter 'fowner'
[   61.698489][ T4830] atkbd serio0: keyboard reset failed on 
[   61.811080][ T6599] Process accounting resumed
[   61.812435][ T6596] netlink: 96 bytes leftover after parsing attributes in process `syz.1.342'.
[   61.908373][ T6435] veth0_vlan: entered promiscuous mode
[   61.911518][ T6435] veth1_vlan: entered promiscuous mode
[   61.948724][ T6435] veth0_macvtap: entered promiscuous mode
[   61.952825][ T6435] veth1_macvtap: entered promiscuous mode
[   61.978952][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.980047][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.036544][ T3822] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.036774][ T3822] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.036798][ T3822] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.036822][ T3822] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.050036][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.050065][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.072762][ T3822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.072788][ T3822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.196730][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.8.323'.
[   62.207149][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'.
[   62.353269][ T6636] loop8: detected capacity change from 0 to 8192
[   62.365560][ T6636] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   62.430521][ T6636] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   62.430566][ T6636] FAT-fs (loop8): Filesystem has been set read-only
[   62.643455][ T6663] netlink: 40 bytes leftover after parsing attributes in process `syz.8.353'.
[   62.662426][ T6661] overlay: Unknown parameter 'fowner'
[   63.071721][ T6690] loop8: detected capacity change from 0 to 128
[   63.107763][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.358'.
[   63.107808][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.358'.
[   63.134241][ T4404] 8021q: adding VLAN 0 to HW filter on device eth14
[   63.161227][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.358'.
[   63.161275][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.358'.
[   63.168432][ T6695] loop1: detected capacity change from 0 to 512
[   63.170925][ T6696] netlink: 'syz.8.358': attribute type 10 has an invalid length.
[   63.174484][ T6696] syz_tun: entered promiscuous mode
[   63.179481][ T6696] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   63.183984][ T6696] netlink: 'syz.8.358': attribute type 5 has an invalid length.
[   63.192595][ T6695] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 97 vs 96 free clusters
[   63.198668][ T6695] Quota error (device loop1): write_blk: dquota write failed
[   63.200731][ T6695] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   63.203195][ T6695] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.359: Failed to acquire dquot type 1
[   63.233717][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.358'.
[   63.296099][ T4721] Bluetooth: hci0: command tx timeout
[   63.311783][ T6714] netlink: 'syz.1.360': attribute type 2 has an invalid length.
[   63.412700][ T4404] 8021q: adding VLAN 0 to HW filter on device eth15
[   63.491992][ T6737] loop4: detected capacity change from 0 to 2048
[   63.517309][ T6737]  loop4: p1 < > p4
[   63.517309][ T6737]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 >
[   63.519983][ T6737] loop4: p4 size 722688 extends beyond EOD, truncated
[   63.537328][ T6737] loop4: p6 start 262464109 is beyond EOD, truncated
[   63.538366][ T6737] loop4: p7 size 2304 extends beyond EOD, truncated
[   63.561085][ T6743] loop1: detected capacity change from 0 to 8
[   63.565561][ T6743] squashfs: Unknown parameter '
[   63.565561][ T6743] '
[   63.646664][ T6752] Bluetooth: MGMT ver 1.23
[   63.724539][ T6768] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[   63.792493][ T6779] loop8: detected capacity change from 0 to 256
[   63.872724][ T6784] loop8: detected capacity change from 0 to 8192
[   63.876197][ T6784] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   63.891993][ T6784] IPv6: Can't replace route, no match found
[   64.082256][ T6797] loop1: detected capacity change from 0 to 1024
[   64.498746][ T1596] ieee802154 phy0 wpan0: encryption failed: -22
[   64.500126][ T1596] ieee802154 phy1 wpan1: encryption failed: -22
[   64.507669][   T10] cfg80211: failed to load regulatory.db
[   64.997129][ T6826] loop6: detected capacity change from 0 to 2048
[   65.023353][ T6826]  loop6: p1 < > p4
[   65.023353][ T6826]  p4: <netbsd: >
[   65.025304][ T6826] loop6: p4 size 722688 extends beyond EOD, truncated
[   65.376698][ T4721] Bluetooth: hci0: command tx timeout
[   65.566562][ T6797] FAULT_INJECTION: forcing a failure.
[   65.566562][ T6797] name fail_futex, interval 1, probability 0, space 0, times 0
[   65.582495][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.1.380 Not tainted syzkaller #0 PREEMPT 
[   65.582523][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   65.582529][ T6797] Call trace:
[   65.582532][ T6797]  show_stack+0x2c/0x3c (C)
[   65.582555][ T6797]  __dump_stack+0x30/0x40
[   65.582569][ T6797]  dump_stack_lvl+0xd8/0x12c
[   65.582579][ T6797]  dump_stack+0x1c/0x28
[   65.582588][ T6797]  should_fail_ex+0x41c/0x590
[   65.582600][ T6797]  should_fail+0x14/0x24
[   65.582609][ T6797]  get_futex_key+0x1ec/0x12b0
[   65.582619][ T6797]  futex_wake+0x10c/0x594
[   65.582628][ T6797]  do_futex+0x2c4/0x378
[   65.582637][ T6797]  mm_exit_exec_release+0x190/0x27c
[   65.582645][ T6797]  exit_mm+0x54/0x264
[   65.582656][ T6797]  do_exit+0x524/0x1a74
[   65.582665][ T6797]  do_group_exit+0x198/0x238
[   65.582676][ T6797]  get_signal+0xfb0/0x1094
[   65.582684][ T6797]  arch_do_signal_or_restart+0x288/0x444c
[   65.582694][ T6797]  exit_to_user_mode_loop+0x70/0x17c
[   65.582704][ T6797]  el0_svc+0x18c/0x260
[   65.582713][ T6797]  el0t_64_sync_handler+0x44/0x104
[   65.582722][ T6797]  el0t_64_sync+0x198/0x19c
[   65.962795][ T6852] overlay: Unknown parameter 'fowner'
[   66.110435][ T6868] loop6: detected capacity change from 0 to 256
[   66.114726][ T6868] loop6: detected capacity change from 0 to 256
[   66.118457][ T6868] loop6: detected capacity change from 0 to 256
[   66.122163][ T6868] loop6: detected capacity change from 0 to 256
[   66.125897][ T6868] loop6: detected capacity change from 0 to 256
[   66.129722][ T6868] loop6: detected capacity change from 0 to 256
[   66.133407][ T6868] loop6: detected capacity change from 0 to 256
[   66.137349][ T6868] loop6: detected capacity change from 0 to 256
[   66.141008][ T6868] loop6: detected capacity change from 0 to 256
[   66.144654][ T6868] loop6: detected capacity change from 0 to 256
[   66.610228][ T6887] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.398: corrupted in-inode xattr: invalid ea_ino
[   66.610271][ T6887] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   66.613297][ T6887] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.398: couldn't read orphan inode 15 (err -117)
[   66.613317][ T6887] loop7: lost filesystem error report for type 5 error -117
[   66.616088][ T6887] EXT4-fs mount: 9 callbacks suppressed
[   66.616099][ T6887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.647831][ T6887] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   66.684767][ T6891] EXT4-fs error (device loop1): ext4_quota_enable:7256: comm syz.1.399: Bad quota inum: 4, type: 0
[   66.685000][ T6891] loop1: lost filesystem error report for type 5 error -117
[   66.687327][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   66.687343][    C1] EXT4-fs (loop1): initial error at time 66: ext4_quota_enable:7256
[   66.687355][    C1] EXT4-fs (loop1): last error at time 66: ext4_quota_enable:7256
[   66.692833][ T6000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.701148][ T6891] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=4). Please run e2fsck to fix.
[   66.701435][ T6891] EXT4-fs (loop1): mount failed
[   66.914187][ T6907] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   66.914416][ T6907] FAT-fs (loop8): Filesystem has been set read-only
[   67.366722][ T6945] tipc: Started in network mode
[   67.366771][ T6945] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[   67.366810][ T6945] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   67.374006][ T6945] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0)
[   67.374087][ T6945] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   67.457252][ T4721] Bluetooth: hci0: command tx timeout
[   67.529272][ T6962] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   67.531253][ T6962] EXT4-fs (loop4): orphan cleanup on readonly fs
[   67.537104][ T6962] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present
[   67.539509][ T6962] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   67.541670][ T6962] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.415: Failed to acquire dquot type 1
[   67.544177][ T6962] loop4: lost filesystem error report for type 5 error -5
[   67.545955][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   67.545990][    C1] EXT4-fs (loop4): initial error at time 67: ext4_acquire_dquot:7069
[   67.546027][    C1] EXT4-fs (loop4): last error at time 67: ext4_acquire_dquot:7069
[   67.556303][ T6962] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.415: bg 0: block 40: padding at end of block bitmap is not set
[   67.556355][ T6962] loop4: lost filesystem error report for type 5 error -117
[   67.568247][ T6962] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   67.568284][ T6962] loop4: lost filesystem error report for type 5 error -117
[   67.568615][ T6962] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #16: comm syz.4.415: data will be lost
[   67.568682][ T6962] EXT4-fs (loop4): 1 truncate cleaned up
[   67.587419][ T6962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   67.624627][ T6959] 9p: Bad value for 'wfdno'
[   67.813203][ T6962] FAULT_INJECTION: forcing a failure.
[   67.813203][ T6962] name failslab, interval 1, probability 100, space 1, times 0
[   67.813252][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.4.415 Not tainted syzkaller #0 PREEMPT 
[   67.813266][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   67.813272][ T6962] Call trace:
[   67.813276][ T6962]  show_stack+0x2c/0x3c (C)
[   67.813296][ T6962]  __dump_stack+0x30/0x40
[   67.813310][ T6962]  dump_stack_lvl+0xd8/0x12c
[   67.813322][ T6962]  dump_stack+0x1c/0x28
[   67.813333][ T6962]  should_fail_ex+0x41c/0x590
[   67.813349][ T6962]  should_failslab+0xc4/0x120
[   67.813363][ T6962]  __kvmalloc_node_noprof+0x160/0x7fc
[   67.813373][ T6962]  io_alloc_cache_init+0x48/0x154
[   67.813385][ T6962]  io_ring_ctx_alloc+0x3f8/0x958
[   67.813395][ T6962]  io_uring_create+0x6c/0x830
[   67.813405][ T6962]  __arm64_sys_io_uring_setup+0x284/0x290
[   67.813415][ T6962]  invoke_syscall+0x98/0x244
[   67.813426][ T6962]  el0_svc_common+0x19c/0x23c
[   67.813438][ T6962]  do_el0_svc+0x4c/0x5c
[   67.813449][ T6962]  el0_svc+0x64/0x260
[   67.813460][ T6962]  el0t_64_sync_handler+0x44/0x104
[   67.813470][ T6962]  el0t_64_sync+0x198/0x19c
[   67.831341][ T6999] __nla_validate_parse: 3 callbacks suppressed
[   67.831355][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'.
[   67.881202][ T4728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.123144][ T7034] netlink: 136 bytes leftover after parsing attributes in process `syz.6.424'.
[   68.159900][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.7.427'.
[   68.181962][ T7049] netlink: 'syz.7.427': attribute type 12 has an invalid length.
[   68.181990][ T7049] netlink: 'syz.7.427': attribute type 29 has an invalid length.
[   68.182253][ T7049] netlink: 148 bytes leftover after parsing attributes in process `syz.7.427'.
[   68.182274][ T7049] netlink: 59 bytes leftover after parsing attributes in process `syz.7.427'.
[   68.224260][ T7053] FAULT_INJECTION: forcing a failure.
[   68.224260][ T7053] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   68.224299][ T7053] CPU: 0 UID: 0 PID: 7053 Comm: syz.7.428 Not tainted syzkaller #0 PREEMPT 
[   68.224314][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   68.224322][ T7053] Call trace:
[   68.224326][ T7053]  show_stack+0x2c/0x3c (C)
[   68.224345][ T7053]  __dump_stack+0x30/0x40
[   68.224359][ T7053]  dump_stack_lvl+0xd8/0x12c
[   68.224370][ T7053]  dump_stack+0x1c/0x28
[   68.224382][ T7053]  should_fail_ex+0x41c/0x590
[   68.224395][ T7053]  should_fail_alloc_page+0xec/0x10c
[   68.224409][ T7053]  prepare_alloc_pages+0x194/0x484
[   68.224418][ T7053]  __alloc_frozen_pages_noprof+0x180/0x648
[   68.224427][ T7053]  alloc_pages_mpol+0x1fc/0x3d0
[   68.224436][ T7053]  folio_alloc_mpol_noprof+0x4c/0x248
[   68.224446][ T7053]  vma_alloc_folio_noprof+0x100/0x1dc
[   68.224455][ T7053]  vma_alloc_zeroed_movable_folio+0x74/0x88
[   68.224468][ T7053]  folio_prealloc+0x3c/0x1b0
[   68.224487][ T7053]  do_pte_missing+0x1bd0/0x2a28
[   68.224500][ T7053]  handle_mm_fault+0x1534/0x2bec
[   68.224512][ T7053]  __get_user_pages+0x82c/0x13b0
[   68.224521][ T7053]  __gup_longterm_locked+0x2f4/0xffc
[   68.224531][ T7053]  pin_user_pages+0x9c/0xd8
[   68.224539][ T7053]  xdp_umem_pin_pages+0xf8/0x2c0
[   68.224554][ T7053]  xdp_umem_create+0x4e0/0x6e8
[   68.224566][ T7053]  xsk_setsockopt+0x5d0/0x6c4
[   68.224578][ T7053]  do_sock_setsockopt+0x1f0/0x330
[   68.224589][ T7053]  __sys_setsockopt+0x104/0x170
[   68.224598][ T7053]  __arm64_sys_setsockopt+0xc8/0xe4
[   68.224608][ T7053]  invoke_syscall+0x98/0x244
[   68.224621][ T7053]  el0_svc_common+0xec/0x23c
[   68.224632][ T7053]  do_el0_svc+0x4c/0x5c
[   68.224644][ T7053]  el0_svc+0x64/0x260
[   68.224654][ T7053]  el0t_64_sync_handler+0x44/0x104
[   68.224664][ T7053]  el0t_64_sync+0x198/0x19c
[   68.225154][ T7052] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   68.233187][ T7052] EXT4-fs (loop6): 1 truncate cleaned up
[   68.233982][ T7052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.261768][ T7052] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6537: inode #12: comm syz.6.429: bad extra_isize 62 (inode size 256)
[   68.263578][ T7052] EXT4-fs (loop6): Remounting filesystem read-only
[   68.276298][ T5963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.402927][ T4721] Bluetooth: to_multiplier 17277 > 3200
[   68.409257][ T7066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.071375][ T7074] overlay: ./bus is not a directory
[   69.248010][ T7084] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[   69.252946][ T7084] EXT4-fs (loop7): 1 truncate cleaned up
[   69.253392][ T7084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.268058][ T7085] EXT4-fs error (device loop7): __ext4_expand_extra_isize:6537: inode #15: comm syz.7.438: bad extra_isize 62 (inode size 256)
[   69.271250][ T7085] EXT4-fs (loop7): Remounting filesystem read-only
[   69.682755][ T7097] netlink: 'syz.4.440': attribute type 1 has an invalid length.
[   69.691402][ T7097] 8021q: adding VLAN 0 to HW filter on device bond2
[   69.704164][ T7097] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   69.717886][ T7097] bridge2: entered promiscuous mode
[   69.741511][ T7100] netlink: 'syz.1.441': attribute type 39 has an invalid length.
[   69.792818][ T6617] smc: removing ib device syz1
[   69.832638][ T7104] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF
[   69.835170][ T7104] FAT-fs (loop8): Filesystem has been set read-only
[   69.851098][ T4830] syz1: Port: 1 Link DOWN
[   70.203033][ T6000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.255757][ T7117] devpts: Unknown parameter ''
[   70.255882][ T7116] devpts: Unknown parameter ''
[   70.398783][ T7136] netlink: 44 bytes leftover after parsing attributes in process `syz.8.449'.
[   70.416003][ T4721] Bluetooth: hci2: command tx timeout
[   70.424724][ T6617] ==================================================================
[   70.424740][ T6617] BUG: KASAN: slab-use-after-free in kobject_uevent_net_broadcast+0x110/0x53c
[   70.424767][ T6617] Read of size 8 at addr ffff0000f621ced0 by task kworker/u8:17/6617
[   70.424776][ T6617] 
[   70.424781][ T6617] CPU: 0 UID: 0 PID: 6617 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT 
[   70.424790][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   70.424795][ T6617] Workqueue: ib-unreg-wq ib_unregister_work
[   70.424808][ T6617] Call trace:
[   70.424810][ T6617]  show_stack+0x2c/0x3c (C)
[   70.424824][ T6617]  __dump_stack+0x30/0x40
[   70.424834][ T6617]  dump_stack_lvl+0xd8/0x12c
[   70.424844][ T6617]  print_address_description+0xb0/0x238
[   70.424852][ T6617]  print_report+0x68/0x84
[   70.424859][ T6617]  kasan_report+0x8c/0xc4
[   70.424867][ T6617]  __asan_report_load8_noabort+0x20/0x2c
[   70.424876][ T6617]  kobject_uevent_net_broadcast+0x110/0x53c
[   70.424887][ T6617]  kobject_uevent_env+0x518/0x944
[   70.424896][ T6617]  kobject_uevent+0x2c/0x3c
[   70.424906][ T6617]  device_del+0x5f8/0x71c
[   70.424914][ T6617]  remove_one_compat_dev+0x5c/0x7c
[   70.424923][ T6617]  disable_device+0x184/0x240
[   70.424931][ T6617]  __ib_unregister_device+0x214/0x33c
[   70.424939][ T6617]  ib_unregister_work+0x20/0x38
[   70.424946][ T6617]  process_scheduled_works+0x91c/0x1250
[   70.424956][ T6617]  worker_thread+0x798/0xbd0
[   70.424964][ T6617]  kthread+0x304/0x3d4
[   70.424972][ T6617]  ret_from_fork+0x10/0x20
[   70.424979][ T6617] 
[   70.424980][ T6617] Allocated by task 7081:
[   70.424985][ T6617]  kasan_save_track+0x40/0x78
[   70.424991][ T6617]  kasan_save_alloc_info+0x40/0x50
[   70.424999][ T6617]  __kasan_kmalloc+0x9c/0xb4
[   70.425005][ T6617]  __kmalloc_cache_noprof+0x2f4/0x5fc
[   70.425011][ T6617]  uevent_net_init+0xcc/0x2a0
[   70.425019][ T6617]  ops_init+0x2cc/0x528
[   70.425026][ T6617]  setup_net+0x118/0x2fc
[   70.425032][ T6617]  copy_net_ns+0x454/0x698
[   70.425038][ T6617]  create_new_namespaces+0x304/0x50c
[   70.425045][ T6617]  copy_namespaces+0x3fc/0x474
[   70.425051][ T6617]  copy_process+0x177c/0x332c
[   70.425058][ T6617]  kernel_clone+0x234/0x9fc
[   70.425064][ T6617]  __arm64_sys_clone+0x168/0x1d4
[   70.425070][ T6617]  invoke_syscall+0x98/0x244
[   70.425078][ T6617]  el0_svc_common+0xec/0x23c
[   70.425086][ T6617]  do_el0_svc+0x4c/0x5c
[   70.425094][ T6617]  el0_svc+0x64/0x260
[   70.425101][ T6617]  el0t_64_sync_handler+0x44/0x104
[   70.425108][ T6617]  el0t_64_sync+0x198/0x19c
[   70.425114][ T6617] 
[   70.425116][ T6617] Freed by task 13:
[   70.425119][ T6617]  kasan_save_track+0x40/0x78
[   70.425125][ T6617]  kasan_save_free_info+0x54/0x6c
[   70.425132][ T6617]  __kasan_slab_free+0x74/0xa4
[   70.425138][ T6617]  kfree+0x188/0x698
[   70.425146][ T6617]  uevent_net_exit+0x1b0/0x1cc
[   70.425154][ T6617]  ops_undo_list+0x3cc/0x81c
[   70.425160][ T6617]  cleanup_net+0x474/0x6c4
[   70.425167][ T6617]  process_scheduled_works+0x91c/0x1250
[   70.425174][ T6617]  worker_thread+0x798/0xbd0
[   70.425181][ T6617]  kthread+0x304/0x3d4
[   70.425187][ T6617]  ret_from_fork+0x10/0x20
[   70.425192][ T6617] 
[   70.425193][ T6617] The buggy address belongs to the object at ffff0000f621cec0
[   70.425193][ T6617]  which belongs to the cache kmalloc-32 of size 32
[   70.425199][ T6617] The buggy address is located 16 bytes inside of
[   70.425199][ T6617]  freed 32-byte region [ffff0000f621cec0, ffff0000f621cee0)
[   70.425206][ T6617] 
[   70.425208][ T6617] The buggy address belongs to the physical page:
[   70.425212][ T6617] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000f621ca40 pfn:0x13621c
[   70.425219][ T6617] flags: 0x5ffc00000000200(workingset|node=0|zone=2|lastcpupid=0x7ff)
[   70.425227][ T6617] page_type: f5(slab)
[   70.425233][ T6617] raw: 05ffc00000000200 ffff0000c0001780 fffffdffc3334710 fffffdffc346e790
[   70.425239][ T6617] raw: ffff0000f621ca40 0000000000400039 00000000f5000000 0000000000000000
[   70.425243][ T6617] page dumped because: kasan: bad access detected
[   70.425246][ T6617] 
[   70.425247][ T6617] Memory state around the buggy address:
[   70.425251][ T6617]  ffff0000f621cd80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[   70.425256][ T6617]  ffff0000f621ce00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[   70.425261][ T6617] >ffff0000f621ce80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[   70.425264][ T6617]                                                  ^
[   70.425268][ T6617]  ffff0000f621cf00: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc
[   70.425272][ T6617]  ffff0000f621cf80: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[   70.425276][ T6617] ==================================================================
[   70.425299][ T6617] Disabling lock debugging due to kernel taint