last executing test programs:

2m17.98519363s ago: executing program 2 (id=70):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000280)=ANY=[], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000540)='cpuacct.stat\x00', 0x275a, 0x0)
setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0xfffff000}, 0x1c)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x338, 0x7, 0x6, 0x6, 0xd, @local}, 0x10)
getrandom(&(0x7f0000000240)=""/286, 0xfffffe3b, 0x100000000000001)

2m17.640756695s ago: executing program 2 (id=72):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRESOCT=r0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="e98b362a90c61bfbd0d56678a9672ca2ec508415ac5a708e44f1909544e06ef548ed4464a99c8bbcadce9f831ef17beb6294e651bbacca"], 0x38}}, 0x0) (async)
r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@noauto_da_alloc}, {@bsdgroups}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000000480)="$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") (async)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async)
bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async)
sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xfffffff9}], 0x18, 0x40}, 0x4000000) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd02, 0x55)
r5 = socket$igmp6(0xa, 0x3, 0x2) (async)
pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x92042, 0x8)
write$nci(r6, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0xf, {0x1, 0xf, 0xa, 0x2, 0x6, 0x4, 0xff, 0x5, 0x30}}, 0xfffffed7)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000180)={'team0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0xbe}, [@IFA_LOCAL={0x14, 0x2, @private0}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000001440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000a40)=@newchain={0x9ac, 0x64, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1, 0xe}, {0xa, 0xffe0}, {0xa, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @filter_kind_options=@f_basic={{0xa}, {0x7dc, 0x2, [@TCA_BASIC_POLICE={0x438, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0xe, 0x2b, 0x4, 0x6, 0x9, 0x8, 0x4, 0x8, 0x5, 0xf5, 0xdef8, 0x1000, 0xef, 0x6, 0x2, 0x0, 0x395, 0x1, 0xfffff1b4, 0x8001, 0x8, 0x2, 0x1, 0x5, 0x6f, 0x7, 0x0, 0x7, 0x8, 0xfffffff7, 0xffff8000, 0x1, 0x1, 0x5, 0x2, 0x6, 0x0, 0x9, 0x81, 0x4, 0x401, 0x7, 0x1, 0x7fff, 0xc, 0x3, 0x4ff8, 0x8, 0xe98, 0xfff, 0x0, 0x800, 0x3, 0x81, 0x1, 0x101, 0x1, 0x800, 0xb9, 0x2, 0x8, 0x9, 0xff, 0x3, 0x0, 0x8b, 0xd8, 0x81, 0x1, 0x0, 0x1, 0x0, 0x3, 0x3, 0x26, 0x3, 0x1, 0x8, 0x1, 0x6, 0x16fd, 0xadd0, 0x4800, 0x8, 0x1, 0x6, 0x401, 0xfffffffd, 0x15c0, 0x73, 0xffff, 0x7, 0x5, 0x66c, 0xfffffe00, 0x9, 0x9, 0xa18, 0x3, 0x1ff, 0xfffffff7, 0x8, 0x80000000, 0x30bf, 0x3ff, 0x2, 0xfffffff6, 0x5, 0xfa75, 0x10000, 0x3, 0x0, 0x0, 0x9, 0x1, 0xa, 0xffff, 0x8001, 0x1, 0x8, 0x9, 0x5, 0x6, 0x8, 0x101, 0x6, 0x1, 0x3, 0x3, 0xd, 0xd, 0x7, 0x0, 0x8, 0x7ff, 0x6fd, 0x1, 0x5, 0x4f, 0x5432, 0x8, 0x2, 0x10001, 0xfffeffff, 0x40, 0x1, 0xffffffff, 0x8, 0x80000001, 0xfffffff7, 0x0, 0x91, 0x2, 0xc, 0x7, 0x8, 0x7e63c3b, 0x307, 0x100010, 0x7, 0x3, 0x7, 0x8, 0x9, 0x4, 0x5, 0x1000, 0x56d1, 0x0, 0x9, 0x6bd, 0x2, 0x0, 0x1, 0x662, 0x5c3d, 0x7, 0x1, 0x4, 0x9, 0x7, 0x5c95, 0xa, 0x4, 0x7, 0x1, 0x9, 0x7, 0x1, 0xc12a, 0x6, 0x8, 0xe69e, 0x6, 0x0, 0x2, 0x5469, 0x7, 0x7599, 0x100, 0x9, 0x1496, 0x6, 0x4, 0xc, 0x8, 0x9, 0x80000000, 0xc, 0x7fffffff, 0x8, 0x3, 0x0, 0xf, 0xc0000000, 0xb14, 0x1000, 0x6, 0x6, 0x8, 0xe, 0xff, 0xffffffff, 0x0, 0x1ff, 0x4, 0x10, 0x80000001, 0x2, 0x1, 0x4, 0x7, 0x3, 0x6, 0x401, 0x1, 0xcb, 0x4, 0xd, 0x7ff, 0x7, 0x8, 0xd1, 0xa, 0x800, 0xfffffffe, 0x6, 0x4, 0x7, 0xffffffff, 0xfff, 0x8000, 0x2, 0x6, 0x4]}]}, @TCA_BASIC_EMATCHES={0x38c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x3, 0x0, 0x0, {{0x9, 0x9, 0xfff8}, [@TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x3}, {0x4, 0x3, 0x8001, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfff, 0x7, 0x7}, {{0x1, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xfffb}, {0x4, 0x8e, 0x1, 0xfffffffa}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x3, 0x8, 0x0, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8001, 0x7, 0x5}, {{0x2, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x11, 0x2, 0xfff4}, {0x0, 0x1, 0x0, '.'}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x9}, {0x5, 0x3, 0x1, "d1ac70"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfffc, 0x3, 0x4}, {0x80000001, 0x0, 0xa6b1, 0x83efa83c}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x3ff}, {0x3, 0x0, 0x4}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xa0, 0x2, 0x297}, {0x3, 0xa, 0x2, "724ad36dc764028ccbd6"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd436, 0x1, 0x5}, {0x2, 0x6, 0x3ee3, 0x2, 0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8a}, {0x6, 0x8, 0x4800, 0x1, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0xe0}, {{0x4, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0xfff9}, {0x1, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x1e4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x400}, {0x8, 0x100, 0x8, 0x4}}}, @TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x860}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x401, 0x8, 0x4}, {0x0, 0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0xffff}, {0x8, 0x5, 0x8, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0xffff}, {{}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3ff, 0x8, 0x1}, {0x1, 0x4, 0x2}}}, @TCF_EM_CONTAINER={0xe4, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x2}, "56093808107dfc794fcc22033b8bf3e58975d2801f9c03933d9d38f6e00f3e20d75f8dd4f31ee7ea2fbd46ec7d48f4f2af4b4fc81cd254bdf70259ca2691825a8c8bd4e311a139e9ec3e9ddba1fb76bf723405bffb37abaac3fddcdd2ad8b39083d91584f0aaa61ea219618eb81e7c2a1c9b4553ddd370c45837fada1002f32e1d7c3f521abc6cb3b0831bde92c7a762d8d07aab7e513c1935bf5427b67f4ff9d61c0dbb1a23eeef09327856808e6bb501a911574b99a6a78d861092980ee02e59a11de9a888ea01236e64c83346a09a452c47c733064b17"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x4}, {0x8, 0x29, 0x7, 0x6e767fe4}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x0, 0x1, 0x0, 'n'}}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4]}]}}]}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0xf4, 0x3}}, @TCA_RATE={0x6, 0x5, {0xa0, 0x58}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @filter_kind_options=@f_flower={{0xb}, {0x16c, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xe7}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x7}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x120, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000001}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8c7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9e}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xd37}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x815}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x4}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xfff}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xaafe}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff000000}]}}, @TCA_RATE={0x6, 0x5, {0x1c, 0x7}}]}, 0x9ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)

2m17.598993281s ago: executing program 2 (id=79):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x2a0, 0xe0, 0xffffffff, 0xe0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@time={{0x38}, {0x1ff, 0xfffffffd, 0xa7d5, 0x74a1, 0x401, 0x0, 0x5}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @port=0x4e24}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="032a010000000000500012800b0001126d616373656300004000028005000c000300000005000900010000000c00050000000c000400000000000000000005000a00080000000500030001000000"], 0x70}, 0x1, 0x0, 0x0, 0x4404d80c}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xbc}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, '-'}}]})
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
syz_open_dev$mtd(&(0x7f0000000180), 0x5, 0x181100)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r5], 0x50)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x2442}, 0x18)
fchmodat(r6, 0x0, 0xe3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xec}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
getsockname$packet(r8, &(0x7f0000000440), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r10 = getpid()
sched_setscheduler(r10, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)

2m17.411500636s ago: executing program 2 (id=83):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) (async, rerun: 64)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES8=0x0, @ANYRES16], 0xfd, 0x2b0, &(0x7f00000007c0)="$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") (rerun: 64)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fcntl$lock(r2, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x1, 0xffffffffffffffff})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 32)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0xfffd, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) (rerun: 32)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r4, &(0x7f0000000100)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x1f90, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000c80)=[{0x100, 0x110, 0x1, "8a3079a7ec0b0d4e6fa52985e08949d13d9fa3f55fb64418ada77b37aff2465253e58e70e39aba38cdcc8582b4551b1b31576f4346fcbdf458e6a51dc19356ae85630c19a212de3fc5a4a7beeb07ccc76da9af48afcadce4b4aec17662fa341fe48c2244ae6d7df9aa400715f0b2c2b5c5e294a078953ab4a42b0780d64d676ad702391b86b7771a5b2eac0e017bf1a7407ea865a6c7535b4432d756f48a52d87ff73cf08362a600fec7afa6487d2da15712ce4cbd1bf3f5ba706b88b7b10a8062fe4be0cb18674a97b99cec306ea64b16e529595fb9699fb4125632d76d1725455b7e9c54a10a32e7972947d1c5"}], 0x100}, 0x4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x49b2b26753be10f5}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) (async)
recvmmsg(r5, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x4453b}, {{0x0, 0x0, 0x0}, 0xad}], 0x2, 0x40002000, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) (rerun: 32)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x101040, 0xa9)
read(r7, &(0x7f0000000380)=""/14, 0xe)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf25100000009800058008000100657468000c000280080002004000000008000100756470003c000280080003000500000008000200e5c6533fcf12d88fc8bdd24916ae94619300000800040003000000080003003f070000080003000000008008000200080c000008000300ffffff7f340002800800030000000000080001000200000008000400080000000800040000100000080001000c000000080001001d0000000800010065746800080002800400040049bb7443e62d152d12041ebc2c164137f2bfb166e219c6de"], 0xb4}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r8, 0xc0406619, 0x0) (async, rerun: 32)
r9 = socket(0x10, 0x803, 0x0) (rerun: 32)
r10 = syz_io_uring_setup(0x85b1a, &(0x7f0000000400)={0x0, 0x0, 0x20014, 0x2, 0x55}, &(0x7f00000002c0)=<r11=>0x0, &(0x7f0000000140)=<r12=>0x0, &(0x7f0000000340)=<r13=>0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_io_uring_submit(r11, r12, r13, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r9, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="101000000000000007010000c91e00007a60398801b43111c045e55e5ebe7bad3497e80a530fa8432a33a304ec8846e2f7155e75b6bdbbbb696048fc00b141cd15"], 0x11d0}, 0x7, 0x3ed763469f8f58cc}) (async)
io_uring_enter(r10, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4)

2m16.783868752s ago: executing program 2 (id=86):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bind$can_raw(r0, &(0x7f00000001c0), 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301)
ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1)

2m16.660734081s ago: executing program 4 (id=89):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000002e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000000c8000000000000001701000002"], 0xe0, 0x11}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x22b8, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x2, 0x22b8, @loopback}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f0000000080), 0x4, 0x4b1, &(0x7f0000000bc0)="$eJzs3MtvVNUfAPDvvX3w/NH+EB8gahWNjQ+gBZWFCzUaXWBiogtc1rYQpFBDayKESDUGl4bEPTGu/BdcuTLGlYlb3RpDQpSY8Ng45s69F2amM4VOpzNAP59kOufMPefe8+25d3ruOdMJYM0ayX4kEZsj4reIGMqz9QVG8qerl89MXrt8ZjKJSuXdv5JquSuXz0yWRct6m4rMaBqRfpEUB6k3d+r0sYmZmemTRX7P/PGP9sydOv380eMTR6aPTJ8YP3Bg/76xl14cf6EjcWZturLj09md2996//zbk4fOf7C+bnttHJ0ykgX+d6WqcdtTnT5Yj/1buRln0t/r1nC7+iIi666B6vU/FH1xs/OG4o3Pe9o4YFVl79l/NL44cCO1UAHuYUm0VS3aqwbcOco/9Nn9b/no4vCj5y69mt8AZXFfLR75lv5Ii1/QwCoefyQiDi1cv5A9omEeotJk3gAAYKV+yMY/zy0e/yUR8UBNuaRYGxqOiP9HxNaIuC8itkXE/UXZByPioWUev3FpaPH4M73YZmi3JRv/vVysbdWP/9KyyHBfkftfNf6B5PDRmem9EbElIkZjYF2WH2u283IXr//6Vavj147/Di3k7SjHgsVOLvavq6lw9tv8uUOD0kufRezobxZ/Ul0JSKJSyfp+e0TsWN6ut5SJo898tzN7fvPxxYXq479+YXH8S+jAOlPlm4in8/5fiIb4S8nS65N71sfM9N6sP6pnxWI//3LunVZNX1H8HZD1/8b687/ctDF/GvonqV2vnVv+Mc79/mXLe8r+W8bfcP5HxNTE/MRg8l51zXqweO2Tifn5k2MRg8nBar7u9fGbdct8WT6Lf3RX8+t/a1Eni//hiMhO4kci4tGIeKzou+yUfiIidi0R/0+vPflhq213Qv9PNX3/u3H+D9f3//ITfcd+/L7V8ZeMv/oOkvX//mp2tKiT9X+eWt8yrtbNKeu0ezYDAADA3SeNiM2RpLtvpNN09+788/LbYmM6Mzs3/+zh2Y9PTOX/IzAcA2k5/zlUMx86liwUe8zz48Vccbl9XzFv/HU5rTA5OzPVw7iB/Dpvdv1n/uxrXmdDV1sIrKrqYtTgUiW2dq0tQHc1rqOnPWoH0H23+zmaFvcDwF2s3c/RGSfA3W/J6/+V7rUD6L5m1//ZhryxP9yb2hv/bzrQ8YYAXef7GmHtWnz9J9fqvx6owcF1q94moDv8/Yc1aSX/178qieq8Y++bIXGrRKSrdoiF5ddK79TzeQWJDW1X76/5bZRfFLTc/fTm/QgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDT/gsAAP//gZXwUg==")
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r1, &(0x7f0000002e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000000c8000000000000001701000002"], 0xe0, 0x11}], 0x1, 0x0) (async)
socket$inet(0x2, 0x2, 0x0) (async)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x22b8, @loopback}, 0x10) (async)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x2, 0x22b8, @loopback}, 0x10) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f0000000080), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") (async)

2m16.402264418s ago: executing program 4 (id=94):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d030000000d00000005000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x28) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001700)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x1, 0x8, 0x200, 0x2, 0x7}, 0x7, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x9, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x5, 0x0, 0x80, 0x9, 0x30, 0x4, 0x81, 0x9, 0x2, 0x8, 0x40, 0xe80c, 0x80000001, 0x80, 0x400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x200, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x5, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0x3, 0x80000001, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x800, 0xfff, 0x2, 0x5, 0x26, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0xf, 0x8, 0x12, 0x2, 0x80000001, 0x325b, 0x7, 0x400, 0x6, 0x2, 0x3, 0x5, 0x1, 0x8001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x0, 0xffffffff, 0x4, 0x1000, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x6, 0x1, 0x7fffffff, 0x8, 0x1, 0x800, 0x8, 0x91e, 0x4, 0xe, 0xdd, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x6, 0x8, 0x100, 0x8, 0x0, 0xd, 0x2, 0x9, 0x4, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x20000, 0xfffffffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x9, 0x2, 0x20c, 0xd, 0x4, 0xa, 0xfff, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x4, 0x40, 0x5, 0x6, 0x2ed, 0xfffffffb, 0xcf30, 0x7, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xffd, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x2, 0x8, 0xc, 0x3, 0x1, 0x0, 0x3, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x3ff, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x0)

2m16.291864295s ago: executing program 2 (id=95):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9febfbff17000000000000000c0000005bfffffff721bb2a0000004cc16765347fbd1e7db4bd34291dde035abfd32beda405ceba9c"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_open_dev$dri(&(0x7f0000002180), 0x1, 0x0)

2m16.225697169s ago: executing program 32 (id=95):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9febfbff17000000000000000c0000005bfffffff721bb2a0000004cc16765347fbd1e7db4bd34291dde035abfd32beda405ceba9c"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_open_dev$dri(&(0x7f0000002180), 0x1, 0x0)

2m16.218953872s ago: executing program 4 (id=97):
add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x0, 0xb, 0x148, 0x198, 0x148, 0x298, 0x240, 0x240, 0x298, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x130, 0x198, 0x0, {0xff0f000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'macsec0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'veth0_vlan\x00'})

2m16.159248155s ago: executing program 4 (id=98):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1011})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0)
write(r2, &(0x7f0000000380)='200000000\x00', 0xa)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syz_tun\x00', 0x41})
write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="4500005c000040004004269c0a0000010a00000245000048000040004006b75cc0a80101c0a8010204d2005000001000000000015010ffff173e00"/92], 0x5c)
write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="4500005c000040004004269c0a0000010a00000245000048000040004006b75cc0a80101c0a8010204d2005000001020000000015018ffff171600"/92], 0x5c)
nanosleep(&(0x7f0000000700)={0x0, 0x11e1a300}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000d0c100000000000224e0000", 0x58}], 0x1)

2m15.731749598s ago: executing program 4 (id=104):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='9', 0x1)
sendmsg$nl_generic(r1, 0x0, 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800)
openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x86)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregset(0x4205, r2, 0x402, &(0x7f0000000000)={0x0})
unshare(0x6a040000)
r3 = fsopen(&(0x7f0000000180)='minix\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fspick(r1, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x1)

2m15.147530116s ago: executing program 4 (id=111):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x74, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x800) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', <r3=>0x0}) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x154, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8004}, 0x44) (async)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r10=>0x0}) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 32)
r11 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r12 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") (async, rerun: 32)
r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r13, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x4040010) (async)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, 0x4000, 0x5ea7}}, 0x20}}, 0x2000e844)

2m10.371801766s ago: executing program 3 (id=150):
r0 = socket$kcm(0x10, 0x4fbc35da9dc05429, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

2m10.310408923s ago: executing program 3 (id=152):
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
syz_open_dev$dri(0x0, 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x810)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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")
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x4f, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, [0x0, 0x2]}})
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000100000000000000ffffffffffffffff00000000000000000000000000000001000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a000000000000000000000000000000d48e000000000000000000000000000000000000000000000700000000000000"])

2m10.115038005s ago: executing program 3 (id=154):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4)
syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa010000072f9078ac14140bac1414bb890777ac1414bb8903c100000c21880b00000005acba7e00080086dd080088be000020031906860801000000000000a806698c723e72130022039a0802000000000000012ffca51a0800655800000002976b143d7b3e14dea367d34d5212d52d42163612f8bf152a651b805adc4187f96be4e8a7392b9c83d109588589d979dfb292aaed63a7bd99a1a01b4132ff27058389942da2e6"], 0x0)

2m9.907043915s ago: executing program 3 (id=158):
r0 = syz_clone(0x4800000, &(0x7f0000000000)="6db880f94df13f909cac1fa4d24da13cc004ca6d0ff5a66cb8abe885525a853afab83d7187244cacec6f55faf803580ea335f7d0", 0x34, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)="1fc0ffd429112eac80b4f528414a0a210ce451d9701a3e2d132853b08ee987207ec2b96b1480a6563914fa473c5f63c63c8add88d440bbb5f13853eb40b317a845caf9458b69d982b103a0716dc9f98868420908b737efcce911ffba3454362450f5675759f56d2eab0ef36f5bb2aa")
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x40}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6e}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x50b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000380)=0x90)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000200)={0x11, 0x10, r8, 0x1, 0x0, 0x6, @random}, 0x14)
r9 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r10 = socket(0xa, 0x3, 0x87)
r11 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', <r12=>0x0})
bind$bt_hci(r11, &(0x7f00000002c0)={0x1f, 0x4, 0x7}, 0x6)
ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000040)={@local, 0x40, r12})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r12}, [@IFA_FLAGS={0x8, 0x8, 0x7a2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=@mpls_newroute={0x178, 0x18, 0x408, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x0, 0x80, 0x2, 0x0, 0x2, 0xfe, 0x1, 0x1500}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x2b, 0xe0, r2}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x19, 0x1, r5}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x10, 0x8, r8}}, @RTA_MULTIPATH={0xc, 0x9, {0xd9b, 0x4, 0x8, r12}}, @RTA_DST={0x8, 0x1, {0x6b}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_NEWDST={0x84, 0x13, [{0x1}, {0x9}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x4}, {0x2, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x267, 0x0, 0x1}, {0xde0, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x47}, {0x8}, {0x1400, 0x0, 0x1}, {0x9}, {0x4b8, 0x0, 0x1}, {0x6546}, {0xa, 0x0, 0x1}, {0x3}, {0x6ad}, {0x10, 0x0, 0x1}, {0x8000}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7}, {0x8000}, {0x2fd, 0x0, 0x1}, {0x1}, {0x3ff}, {0x10}]}, @RTA_NEWDST={0x84, 0x13, [{0x7, 0x0, 0x1}, {0x13}, {0x400, 0x0, 0x1}, {0x8}, {0xabe0, 0x0, 0x1}, {0x2}, {0x3, 0x0, 0x1}, {0x6b8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {}, {0x3ee}, {0x4}, {0xaca, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x9}, {0x6, 0x0, 0x1}, {0x1}, {0x8384}, {0x81, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x2}, {0x4}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0xfd49, 0x0, 0x1}, {0x319}, {0x88000, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x25, "f31db6da5e703c34500e7acd63c6"}}]}, 0x178}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040)
capset(&(0x7f0000000500)={0x0, r0}, &(0x7f0000000200)={0x200002, 0x10, 0x805, 0x4, 0xa, 0x6})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f0000000300)={[{@discard}, {@errors_remount}, {@dioread_lock}, {@usrquota}]}, 0x5, 0x523, &(0x7f0000000c40)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2m9.538813081s ago: executing program 3 (id=162):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @float={0x2, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x5f]}}, &(0x7f0000000100), 0x33, 0x0, 0x0, 0x9, 0x80e35b4f6685421d}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x1, &(0x7f0000000580)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x64, 0x3}], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})

2m9.071085175s ago: executing program 3 (id=166):
r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xaf9b, 0x28480)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})

2m8.907668913s ago: executing program 33 (id=166):
r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xaf9b, 0x28480)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})

2m0.130817896s ago: executing program 34 (id=111):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x74, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x800) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', <r3=>0x0}) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x154, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8004}, 0x44) (async)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r10=>0x0}) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 32)
r11 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r12 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x11ff, &(0x7f0000001280)="$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") (async, rerun: 32)
r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r13, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x4040010) (async)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, 0x4000, 0x5ea7}}, 0x20}}, 0x2000e844)

1m6.43952097s ago: executing program 0 (id=679):
prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
setxattr$incfs_metadata(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setns(0xc9, 0x0)
r1 = socket(0x2a, 0x2, 0x9)
connect(r1, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=<r2=>0x0)
prlimit64(r2, 0xf, &(0x7f0000000200)={0x1, 0x8}, &(0x7f00000002c0))
fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xee01, 0xffffffffffffffff, 0x1000)
bind$inet(r1, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10)

1m6.258759839s ago: executing program 0 (id=682):
r0 = syz_io_uring_setup(0x76ea, 0x0, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000"], 0x4c}}, 0x0)

1m5.367503358s ago: executing program 0 (id=693):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000018100200280012800b00010067656e65766500001800028014000700ff"], 0x5c}}, 0x80)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45}})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0xbc, &(0x7f00000026c0)}, 0x10)

1m5.137549248s ago: executing program 0 (id=696):
r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./mnt\x00', 0x4010, &(0x7f0000000280)={[{@barrier}]}, 0x2, 0xbdf, &(0x7f0000003140)="$eJzs3M9rHG8ZAPBnJptt0kY3XxHx68WISAviNqmk2CLYSsWLB0GvQkO6KSHbHySRmjSHjf4Dop4VL0K1KB7suRdFr160vSoehCKxUShiV2Z3NonZbH40u5l+088H3sz7zjuT53kyTWdeyGwA76yJ7Esa8X5E3EwiKvn+NCLKrd5IRKN93ObG2uy/N9Zmk2g2v/GPJJKIeLmxNtv5Xkm+PZcPRiLij19O4iPf6467tLK6MFOv1xbz8cXlO/cvLq2sfm7+zszt2u3a3anLX5i+NH158sp032p99ZdrT/71qa/+rfGfn//38T9/+LMkrsVYPrezjn6ZiImtn8lOpYiY6Xewggzl9eysMykdcFI64KQAAOgp3fEM97GoxFBsP7xV4rd/KjQ5AAAAoC+aQxFNAAAA4JRLrP8BAADglOv8HcDLjbXZTiv2LxJO1ovrETHern8zb+2ZUjRa25EYjoizL5PY+Vpr0j7t2CYi4q/Pr/wqa9H1HvJPHvUhxL4a6xHx8b2uf9Kqf7z1Fnd3/WlETPYh/sSu8Un/+ztO/df6EL/o+gF4Nz293r6Rdd//0q3nn9jj/lfa4971Joq+/3We/za7nv+26x/q8fz39UPGePjoxw96zWX1f/HJV37ZaVn8bHusoo7gxXrEJ0p71Z9s1Z/0qP/mIWNUXj+o9Zoruv7mTyPOx971dyT7fz7Rxbn5em2y/XXPGOt/mP5Fr/hF159d/7M96u98/lOv63//kDG+dePGr7t2Pt/u7l9/+vdy8s1Wr5zv+c7M8vLiVEQ5+Vr3/kv7JNLYPqbzPbL6L3x6/9//3fW/zt+Zb+Q/h2wtsJ5vs/F3d4X90uOHv+mVUmf9d+TrP3rgEYeS1X+rx/XfWf/vS93X//uHjPGZ3/3gQq+5nevfrGXxO2thAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhII2IskrS61U/TajXiXER8NM6m9XtLy5+du/ftu7eyuYjxGE7n5uu1yYiotMdJNp5q9bfHl3aNPx8R70XEjyqjrXF19l79VtHFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsOVcRIxFklYjIo2IzUqaVqtFZwUAAAD03XjRCQAAAAADZ/0PAAAAp5/1PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP23iefPksionF1tNUy5XxuuNDMgEFLj37K6CDyAE7eUNEJAIUpFZ0AUJgjrvE9LsAplBwwP9Jz5kzfcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7XX+/afPkohoXB1ttUw5nxsuNDNg0NLjnFzuXx7AyRvab7J0cnkAJ8+vOLy7rPGB5ID5ke1jGv8/c2ZgOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw9hlrtSStRkQ531etRnwoIsZjOJmbr9cmI+LDEfHnyvCZbDxVcM4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD039LK6sJMvV5bzDpp5J2tPR+ATiTtSgYeK4/TKL5knb50yvGGp79qNptF5Dx8kkEL/W8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICCLK2sLszU67XFpaIzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIq2tLK6MFOv1xYH2Cm6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAivO/AAAA///usQuw")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1) (async)
write(r2, &(0x7f0000000240)='1', 0x1)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002abd7000fedbdf2501000000000000000c410000000c0014737a7a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x10)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4bfa, 0x10000000000004)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@usrquota}, {@errors_remount}]}, 0x2, 0x5b9, &(0x7f0000000680)="$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")
setxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00') (async)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x80000, {{0x2, 0xfffe, @multicast1}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) (async)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x80000, {{0x2, 0xfffe, @multicast1}}, {{0x2, 0x4e22, @multicast1}}}, 0x108)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00010029b57000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="66005e190a000200aaaaaaaa47acea1b0800"], 0x28}, 0x1, 0x0, 0x0, 0x24000894}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r7, {0x2, 0x10}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x10}, 0xc4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0xc00)

1m4.011134256s ago: executing program 0 (id=702):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c250000000000206ea37b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) (async, rerun: 64)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})

1m2.891077594s ago: executing program 0 (id=709):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x2c, 0x2, 0x6, "b43d7000ffff00000002000000000000000000000000000000006700", 0x20363159}) (async)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000ffff0000070000000500000008100400", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000f5ffffffffffffff000000000000080000000000"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000000000000000000000080000000000800", @ANYRES32=r2, @ANYBLOB="feffffff000000000000000000000000f6ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0xb4, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x25dfdbfe, {}, [{0xa0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x5, 0xd}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mount$nfs4(&(0x7f0000000300)='/dev/video#\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0xa20041, &(0x7f00000003c0)={[{'-!-(}.'}, {'/$.]-%'}, {'\x00'}], [{@appraise_type}, {@obj_role={'obj_role', 0x3d, 'memory.events\x00'}}, {@seclabel}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@permit_directio}, {@hash}, {@fsname={'fsname', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/fb0\x00'}}]}) (async)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r8, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a0102000000000000000001ce00000900030073797a320000000014000480080002400000000008000140000000040900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004"], 0xcc}}, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x100, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0xf4ef, 0x300}, {0x4, 0x4000002, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) (async)
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)

1m2.66021433s ago: executing program 35 (id=709):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x2c, 0x2, 0x6, "b43d7000ffff00000002000000000000000000000000000000006700", 0x20363159}) (async)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000ffff0000070000000500000008100400", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000f5ffffffffffffff000000000000080000000000"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000000000000000000000080000000000800", @ANYRES32=r2, @ANYBLOB="feffffff000000000000000000000000f6ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0xb4, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x25dfdbfe, {}, [{0xa0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x5, 0xd}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mount$nfs4(&(0x7f0000000300)='/dev/video#\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0xa20041, &(0x7f00000003c0)={[{'-!-(}.'}, {'/$.]-%'}, {'\x00'}], [{@appraise_type}, {@obj_role={'obj_role', 0x3d, 'memory.events\x00'}}, {@seclabel}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@permit_directio}, {@hash}, {@fsname={'fsname', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/fb0\x00'}}]}) (async)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r8, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a0102000000000000000001ce00000900030073797a320000000014000480080002400000000008000140000000040900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004"], 0xcc}}, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x100, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0xf4ef, 0x300}, {0x4, 0x4000002, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) (async)
accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)

3.663026564s ago: executing program 5 (id=1184):
unshare(0xa020480)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r0, 0x20, 0xfffffffffffffffe}, 0x10)
r1 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access\x00', 0x2, 0x0)
r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x3af}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x521c, 0x1, 0x61, 0x0, 0x18)
ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b8b000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
r6 = io_uring_setup(0xfa0, &(0x7f0000000340)={0x0, 0x0, 0x2, 0xfffffffd, 0x7})
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r10=>0x0}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0xe, 0x22, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setreuid(r10, 0x0)
r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$EVIOCGSW(r12, 0x8040451b, &(0x7f0000000100)=""/90)
statx(0xffffffffffffffff, &(0x7f0000002400)='./file0\x00', 0x800, 0x0, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
write$FUSE_ATTR(r7, &(0x7f0000002540)={0x78, 0xfffffffffffffff5, r9, {0xf13, 0xdd, 0x0, {0x0, 0x1, 0x8000000000000001, 0x2, 0xa, 0x2, 0x40, 0x4, 0x55, 0xc000, 0x9, r10, r13, 0x40, 0x1}}}, 0x78)
io_uring_enter(r6, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18)

3.408996808s ago: executing program 5 (id=1189):
openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000001940)='/sys/fs/smackfs/load2\x00', 0x2, 0x0)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000000)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18)
add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)

3.276064592s ago: executing program 5 (id=1192):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffa, 0x20000)
setrlimit(0x7, &(0x7f0000000000)) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) (async)
r2 = dup(0xffffffffffffffff) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000ae2f0627c3045e641802c48bae7d0173ad28b2806e874a5828a13226e333eeb59f069d6cace31ba94136eb0e2fc62d48d975eb90c8fb249b207640537bace89a4b9d70eca3dc4bb8c570abb5915faa0afb921750dadc1114d6c8f0cb1662ed296e313d5a47720fbdd6365128ff14fd929f67fedd54f2500b9de21769c7", @ANYRES16=r4, @ANYBLOB="000826bd7000ffdbdf2510000000440003800800020004000000080003000000000008000100fa0a000008000200070000000800020003000000080001000800000008000200400000000800010001000000480002803c000380080001000900000008000200ff0f00000800010014ffffff0800010008000000080002000100000008000200ffffff7f08000200070000000800020008000000"], 0xa0}}, 0x48040) (async)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffff6, 0x4)
ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000440)={&(0x7f0000000140), &(0x7f0000000340)=""/248, 0xf8}) (async)
accept$phonet_pipe(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
mmap(&(0x7f0000078000/0x2000)=nil, 0x2000, 0x1000003, 0x80010, r0, 0x9de1d000)

3.275609401s ago: executing program 1 (id=1193):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x10, &(0x7f0000000100)={[{@rodir}, {@uni_xlate}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8}, {@numtail}, {}, {@numtail}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}, {@fat=@debug}, {@uni_xlate}]}, 0x3, 0x29e, &(0x7f0000000800)="$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") (async)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00') (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x153042, 0x80)

3.187472767s ago: executing program 1 (id=1195):
r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000001c00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010122, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x44, 0x4, "850e"}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61c3e61e153b3cba6a2b9ccd973a55baebe0cc6c880fbf3255007bd80c3a7f2347e6154e6baa4586c2fd4d56caf6f7dda6f46e474eb90a5d2988cf92"}}}}, 0x73)
syz_read_part_table(0x407b, &(0x7f0000000180)="$eJzszz9K83AcBvCnafu+qRSKoJMgFgc3iZtTLuDcXbq6OjmomJs4igfwHt7B1SNUpDa2ijiIiPL5LMn3eZLfn/Cjis8+eFy8lG3USXI3vV1PsjNOU1XzsrfoB69/Vwfpr5VFhklO3y8+ufnq+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/h3/zxfykqlvLkIklzf7Y3eJnLtp1upTmvczhMys1RctVNv97uZCMZ77/Z5uQo6SYP6bXRZPR9twIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/pLj1fFydSw+Kp5d76ap+207mz2xO8cEAIBADAM7gkBMYrJY4Pc7A0mb/ZldybnzWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCkAAP//oYMWnA==")
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000040)='maps\x00')
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2.887088204s ago: executing program 6 (id=1199):
prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x3f)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
setxattr$incfs_metadata(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setns(0xc9, 0x0)
r1 = socket(0x2a, 0x2, 0x9)
connect(r1, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80)

2.76116636s ago: executing program 6 (id=1200):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
socket$packet(0x11, 0x2, 0x300)
ioprio_set$pid(0x2, 0x0, 0x0)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000e)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r2, r1, 0x0, 0x40001)
fchdir(r0)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)

2.595392307s ago: executing program 5 (id=1202):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x4, 0x400, 0x2, 0x55, 0x0, r0}, &(0x7f0000000100)=<r1=>0x0, 0x0, &(0x7f00000003c0)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11d0}, 0x7, 0x3ed763469f8e598c})
syz_emit_ethernet(0x47c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000380)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@flush}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x0, 0x1, 0x90001)
pwritev2(r3, &(0x7f0000001b40)=[{&(0x7f0000000180)="445cf1bffa04fa2e711715609d25fe73d8587868e3ed7c081ea4c8d31e45fe972b864c26ceb82cec232f47e4f7e2c9ddd61947a8a74dbf9e923471bdb41084277342c96929f4d5be1d6010", 0x4b}, {0x0}], 0x2, 0x3c, 0x0, 0x2)
unshare(0x22020600)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e)
connect$pptp(r4, &(0x7f00000005c0)={0x18, 0x2, {0x0, @empty}}, 0x1e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x1)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x77)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
mlockall(0x3)
openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000001940)='/sys/fs/smackfs/load2\x00', 0x2, 0x0)
r6 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ea, 0x2, 0x0, 0x2a6}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd=r0, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r6, 0x521c, 0x1, 0x61, 0x0, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="e6240380fdf2d95d4ac68df5080002000100000025c99c3c80552ec4d40397b96bf2b9f163f76afed37d0b33569a5563590dfc44dc7644e18bc8d8af5e8d7c283b0f7e17b0f4088db61adf6ef723b451837e09f09cbcb2934f6ebbb69069aa913e24f785208d5d74cf649093965678b9fb00959f174b4449e39c5380153772adcacf5f7a908aec962b14238d5b1d5aaddc4ccfe616ae12be5574563d2e838d75b02c7f71911822d0e6fd897774b1dc5ab16358ae6e2e5cbd61045432a5d09256a8f51aee0681770819a3a5b32d445b57ccaeb8fffd58c993fc4ccfeca92ecfec27f382503f40"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004010)
add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)

2.594621076s ago: executing program 6 (id=1203):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x10080)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0x3, &(0x7f00000000c0)=""/3, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
accept$unix(r1, 0x0, &(0x7f0000000100))
r2 = socket$packet(0x11, 0x3, 0x300)
recvmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x2, 0x0)

2.462505015s ago: executing program 8 (id=1205):
openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x80)
ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, '\x00', {0x0, 0x3, 0x5, 0xffffffff, 0x2, 0x2, 0x0, 0x1, {0x7, 0x6}, {0xf, 0x7}, {0x10, 0x40}, 0xfffffffffffffffe, 0xffff, 0xf4b8, 0x80, 0x9, 0x6, 0x1, 0x0, 0x4, 0xfffb, '\x00', 0x1, 0xfffffc00, 0x4, 0x7b5}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ptrace$peekuser(0x3, r0, 0xe92)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x6, &(0x7f0000000500)=ANY=[], 0x0}, 0x94)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})

2.052762538s ago: executing program 6 (id=1207):
socket(0x10, 0x803, 0x0)
syz_io_uring_setup(0x6e8c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
setns(0xc9, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket(0x2a, 0x2, 0x80000001)
ioctl$PPPOEIOCDFWD(r0, 0x541b, 0xf0ff1f00000000)
socket(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0)
sendfile(r4, r2, 0x0, 0x100000000)

1.993562039s ago: executing program 1 (id=1208):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x407}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x24000000)

1.871779118s ago: executing program 1 (id=1209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x80000001, 0x10000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', <r2=>0x0})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_pidfd_open(r3, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
fcntl$setownex(r4, 0xf, &(0x7f0000000080)={0x1, r3})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@empty, 0x1b, r2})
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x2, {0x80, 0x20, 0x0, 0x48, 0xfd, 0x4, 0x0, 0x2, 0x700}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40010)

1.86743897s ago: executing program 6 (id=1210):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000036010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x84, &(0x7f0000000580)=""/132}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ab)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c)
pwritev2(r5, &(0x7f0000000100), 0x0, 0x5412, 0x8, 0x0)
sendfile(r4, r4, 0x0, 0x1000000000007)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x49)
pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
write$sysctl(r6, &(0x7f0000000080)='1\x00', 0x2)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
syz_usbip_server_init(0x3)

1.560628307s ago: executing program 8 (id=1212):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x301}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x80c0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xff, @local, 0x2e98}, {0xa, 0x4e21, 0x401, @mcast2, 0x101}, r2, 0x1}}, 0x48)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
fsopen(&(0x7f0000000180)='smb3\x00', 0x0)

1.337462442s ago: executing program 8 (id=1214):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8)
syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7fa0, 0x4000, 0x0, 0x200000ba}, 0x0, 0x0, &(0x7f0000000000))
syz_emit_ethernet(0x6a, &(0x7f00000024c0)=ANY=[@ANYBLOB="ffffffffff004503002a00650000002f90780000000000000000248088a80000000000ff9c16190bef0e53bcca000010000800000086dd080088be00000000100700000100000000000000080022eb000000000000000002000000000000000000000008006558fffffffd0000000000000000"], 0x0)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0xffffffffffffffff)
setgroups(0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800}}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@minixdf}, {@nojournal_checksum}]}, 0x21, 0x4c1, &(0x7f0000000540)="$eJzs3cFvFF8dAPDvTFvaX3+FFuWgRgURRUPYbRdoCCe8aAwhMRJPHqC2S9N0t9t0t0grh/I/mEjiSf8EDyYeTDiZeDTxoDcveDBBJRpK4mHNzG5LKd22QNn9pfv5JJOZN2/Z73ts5r3d727nBdC3zkXERkSciIh7ETHePp+0t7jZ2rLHvXzxaHbzxaPZJJrNO/9K8vrsXOz4N5lP2885EhE//F7ET5K349bX1hdnKpXySrtcbFSXi/W19csL1Zn58nx5qVSanpqevH7lWunI+nq2+pvn31249aPf/+4rz/608e2fZc0aa9ft7MdRanV9aDtOZjAibn2MYD0w0O7PiV43hPeSRsTnIuJ8fv2Px0D+agIAx1mzOR7N8Z1lAOC4S/McWJIW2rmAsUjTQqGVwzsTo2mlVm9cul9bXZpr5comYii9v1ApT7ZzhRMxlGTlqfz4dbm0q3wlIk5HxM+HP8nLhdlaZa6Xb3wAoI99umv+/+9wa/4HAI65kV43AADoOvM/APQf8z8A9J93mv//uPznax+vKQBAl/j8DwD9x/wPAP3H/A8AfeUHt29nW3Ozff/ruQdrq4u1B5fnyvXFQnV1tjBbW1kuzNdq8/k9e6oHPV+lVlueuhqrD4uNcr1RrK+t363WVpcad/P7et8tD3WlVwDAfk6fffrXJCI2bnySb7FjLQdzNRxvaa8bAPTMQK8bAPSM1b6gf/mMD+yxRO8bOv5E6MnRtwXojotflP+HfiX/D/1L/h/6l/w/9K9mM7HmPwD0GTl+4F2+/3/jtwCH//7fXUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4dsbyLUkL7bXAxyJNC4WIkxExEUPJ/YVKeTIiTkXEX4aHhrPyVK8bDQB8oPQfSXv9r4vjF8Z2155IXg3n+4j46S/v/OLhTKOxMpWd//f2+caT9vlSL9oPABxka57emse3vHzxaHZr62Z7nn+ntTJoFnezvbVqBmMw34/EUESM/idpl1uy9ysDRxB/43FEfGGv/id5bmSivWzp7vhZ3cmuxk/fiJ/mda199n/x+SNoC/Sbp9n4c3Ov6y+Nc/l+7+t/JB+hPtzW+Lf51viXbo9/Ax3Gv3OHjXH1D9/vWPc44kuDe8VPtuMnHeJfOGT8v335q+c71TV/FXEx9o6/M1axUV0u1tfWLy9UZ+bL8+WlUml6anry+pVrpWKeoy5uZarf9s8bl07t1//RDvFHDuj/Nw7Z/1//796Pv7ZP/G99fe/X/8w+8bM58ZuHjD8z+tuOa29n8ec69P+g1//SIeM/+/v63CEfCgB0QX1tfXGmUimvOHDg4L0OXn02mnHEB70emYCP7fVF3+uWAAAAAAAAAAAAAAAAnXTjz4l63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOr/8HAAD///2V3CI=")
quotactl$Q_GETNEXTQUOTA(0x9ba428c686d19cfe, &(0x7f0000000000)=@nullb, 0xee00, &(0x7f00000001c0))
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x20000, 0xb)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='environ\x00')
preadv(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0)
fcntl$notify(r2, 0x410, 0x80000002)
renameat2(r2, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./bus\x00', 0x4)
r4 = socket$netlink(0x10, 0x3, 0x13)
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x43, 0x5)
fcntl$setlease(r6, 0x400, 0x1)
fcntl$getflags(r6, 0x401)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r5, 0x0, 0x100000000000000}, 0x38)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r4)
setns(0xc9, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x12)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001100034700bb65e1c3e4ffff0100", 0x12}], 0x1)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000023c0)=ANY=[@ANYBLOB="3000000083dc5b6cf59ef3cecd2062a64576d42f61ea2892d234162fb69a5938ae0f40ad4a20dd02aa510d53526cbae315c5c1e4baeda7ddeaf144baed56f89f2a2a039a69fb6aa8b6d2c84007f702cb51e4165b722a4f42feee2934a6707e515f55cf160bf18bb49e295010ddd5d1d4e5289fb78cd5d5f4db6d6643e096896e2cdad66206419917f6e418074aa0a9a02742b738a23966c7", @ANYRES16=r7, @ANYBLOB="000428bd7000fbdbdf250100000005000400030000001400070000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20048000)
getsockname$netlink(r4, &(0x7f0000000500), &(0x7f0000000a40)=0xc)

1.227532642s ago: executing program 7 (id=1215):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000300)='./file0\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff})
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.147900513s ago: executing program 7 (id=1216):
openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000001940)='/sys/fs/smackfs/load2\x00', 0x2, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(0xffffffffffffffff, 0x521c, 0x1, 0x61, 0x0, 0x18)

1.135685554s ago: executing program 8 (id=1217):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0xffffffff, 0x5}, 0x10)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @adiantum, 0x1, @auto="e8d470ec9c6282e5"})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xa}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x58}}, 0x20000010)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x5)
unshare(0x6a040000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
lseek(r5, 0x289e0cb5, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003e0007016741d0248000000005000000047c0000040049800c0001730600060a000000000000002a"], 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x8010)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x48}}, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2)
sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

1.019616241s ago: executing program 1 (id=1218):
io_setup(0x10003ff, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0xf0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [], [], 'macvtap0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0x6536, 0xdfc, 0x25676d1d, 0x1000, 0x1ff, 0x81]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket(0x848000000015, 0x2, 0xfffffffd)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1b)
io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9, r2, 0x0, 0x0, 0x8}])
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000080)={0x58, 0x1, 0x6, 0xe, "5f977e0ab6545629998201c838b1b202fa62564a40865b4c62a29080b9683007fb479bba745e8cb8196aa3a3af5e244e76710c07c5487f839042d81f9dea95c2"})

1.019058217s ago: executing program 7 (id=1219):
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_ublk_setup_io_uring(0x44dd, &(0x7f0000000180)={0x0, 0x336a, 0x4, 0xffffffff, 0x357}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
io_uring_setup(0x65d4, &(0x7f00000002c0)={0x0, 0x2d68, 0x1000, 0x0, 0x8a, 0x0, r1})
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000040)=0x90)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gretap0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x2100, 0x80, 0xfffffffb, 0xfffefffc, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010102}}}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00')
utimensat(r4, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8000000000000000, 0x3a, '$', 0x3a, '%,', 0x3a, './file0/file0'}, 0x30)
ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f00000003c0))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x4c, r5, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x4c}}, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340), &(0x7f0000000480), 0x2, 0x0)

851.786848ms ago: executing program 1 (id=1220):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x28008dd, &(0x7f0000000240)={[{@nodelalloc}, {}, {@sysvgroups}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@debug}]}, 0x3, 0x580, &(0x7f0000000a80)="$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") (async, rerun: 32)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) (async, rerun: 32)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004600002c00000000fd059078ac141428640101020702000100044e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) (async, rerun: 32)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x100010e, &(0x7f0000000140)={[{@nogrpid}, {@debug}, {@quota}, {@bh}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$eJzs289vFFUcAPDvzLZg+WEr4g9+qFU0Nv5oaUHl4EGNJh40MfGCx9oWgizU0JoIIYrG4NGQeDceTfwLPOnFqCcTr3o3JMRwEU1M1szuDLs77C4U2i5lP59k4L2d17733Tdv9715nQAG1nj2TxKxLSJ+j4jRRra9wHjjvyuXz879c/nsXBK12tt/JfVyf18+O1cULX5ua56ZSCPSz5LY06HepdNnjs9Wqwun8vzU8on3p5ZOn3n22InZowtHF07OHDp08MD0C8/PPHeDkfxX63X2nqytuz9a3Lvr9XcuvDl3+MK7P3+bFPGX4lgl471OPlHr2dwNZ3tLOhnqY0NYkUpEZN01XB//o1GJZueNxmuf9rVxwJqq5bqcPlcD7mBJ9LsFQH8UX/TZ+rc41m/20X+XXm4sgLK4r+RH48xQpNFYGA2X1reraTwiDp/796vsiLW5DwEA0Ob7bP7zTKf5Xxr3t5S7O98bGsv3UnZExL0RsTMi7ouol30gIh5cYf3lTZJr5z/pxZsK7AZl878X872t9vlfWhQZq+S57fXMcHLkWHVhf/6eTMTw5iw/3aOOH1797Ytu51rnf9mR1V/MBfN2XBza3P4z87PLs7cSc6tLn0TsHuoUf3J1JyCJiF0Rsfsm6zj21Dd7u50rxT/SvvlY9lJ7dhX2mWpfRzzZ6P9zUYq/kPTen5y6K6oL+6eKq+Jav/x6/q1u9V+//9dW1v9bOl7/V+MfS1r3a5dWXsf5Pz7vuqaZXPH1vyk65T6cXV4+NR2xKXmj0ejW12ea5Yt8UT6Lf2Jf5/G/I5rvxJ6IyC7ihyLi4Yh4JO+7RyPisYjYVw4sbSZ/euXx95q59gv8duj/+VL/j7UXKfV/M7Epyq90TlSO//hd+29sJm/s8+9gPTWRv5J9/l1v97y1FUmPBt7auwcAAAAbQxoR2yJJJ6+m03RysvE3/DtjS1pdXFp++sjiByfnG88IjMVwWtzpatwPbtwPnc6X9UV+ppQ/kN83/rIyUs9Pzi1W5/sdPAy4rV3Gf+bPSr9bB6w5z2vB4DL+YXAZ/zC4jH8YXB3G/0g/2gGsv07f/x83k7XR9WwMsK5K49+2HwwQ638YXMY/DK7W8d/z+XvgTrI0Er0f3h+ARHp7NGODJSLtW+3pqv/mZI1Hwbb+99dKE/3+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgd/wcAAP//nHbk3g==") (rerun: 32)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) (async, rerun: 32)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) (rerun: 32)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r1 = gettid()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (rerun: 32)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) (async, rerun: 32)
r3 = gettid() (async)
unshare(0x64000600)
r4 = syz_open_procfs(r3, &(0x7f0000000640)='net/route\x00')
pread64(r4, &(0x7f000001a340)=""/102390, 0x18ff6, 0x4)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) (rerun: 64)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r6, 0x400, 0x0) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
fcntl$setlease(r6, 0x400, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)

650.615347ms ago: executing program 7 (id=1221):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}, @nested={0x4, 0x37}]}, 0x28}], 0x1, 0x0, 0x0, 0x20011}, 0x0)
close_range(r0, r0, 0x0)

499.930876ms ago: executing program 8 (id=1222):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcef, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x14, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x80, 0x9}, {0x28, 0x1, 0xf7, 0xfffff034}, {0x6, 0x5, 0x2, 0x57c}]}, 0x10)
write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xa052)
accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x1000) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0xffffffffffffff86)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r6, &(0x7f0000000280)={0x1f, @none}, 0x8) (async)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r5, 0x1, 0x6, @local}, 0x10)

498.49949ms ago: executing program 5 (id=1223):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r2=>0x0, 0x2}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={<r3=>r2, 0x3}, &(0x7f0000000100)=0x8)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000140)={<r5=>r3, 0x65, "498a1dffbde39f46b66b810f9bd8daca8b77cb17d871536f040b89f04401d2df9c793b932e98b8c0ffeb6f17de8adf594dfa32d0ef0c74b5ba0a3d32e6d2032ff096859cc053222c31032766278dcaae2de77fce6ceef0a0cff9d92f88f22aecac490c322e"}, &(0x7f00000001c0)=0x6d)
r6 = fsopen(&(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='{$\x00', &(0x7f0000000280)='\x9e\x00', 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r7, 0x89e0, &(0x7f00000002c0))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r8=>r7}, './file0\x00'})
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000340)={r2, 0x7c, "6fcbb60e91e06446b8c2722342ec972f1c980bb39f34206594ba1857949223dd9640dc60513d2639aa29ff9d90f974282a137fd4c5fc511fc43a033e06ee500353fd79dc52092f51385d3e2e014daa2dd50e6da6e6d22df704cbefc62920a6c41d8c9d1a55d3d4daf4582593bf22ba717abe2a3a463af267928b4933"}, &(0x7f0000000400)=0x84)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000440)={0x4, 0x7})
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000480)={r5, 0xc3, "701e86230482b7839658aa862ad4da3f53c4aa10a800ef4b5a9cc7443774ee291161f552124a4c1c1dee6cd3b34343b17fb340c054f9e46ea4f705811fb9ff2c97da87f03ee3af61efd39f5b5680e551a008b4c5033e2c995e2c5c1a821b08d3a4d2097e15daf5beab8f95081634351f745a8820c10d4e7a7403a939648374cd51d5db8ea9a3f6cff3720c4f77ed938afa0b1821ab0124418edeba1026cc594e80a75833645affb8ce5f5401bf392e8b1002b23198a7b60d7f56df98b7969edc8a0ebf"}, &(0x7f0000000580)=0xcb)
r9 = io_uring_setup(0x6b34, &(0x7f00000005c0)={0x0, 0xbedc, 0x4000, 0x1, 0xcf, 0x0, r8})
r10 = io_uring_setup(0x664e, &(0x7f0000000640)={0x0, 0x403, 0x10, 0x0, 0x1c1, 0x0, r9})
fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f00000006c0)='(\x00', &(0x7f0000000700)='./file0\x00', r8)
ioctl$KDGETMODE(r8, 0x4b3b, &(0x7f0000000740))
r11 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x4, 0x0, 0x11, r8, 0x20000000)
r12 = mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x0, 0x20010, r10, 0x0)
syz_io_uring_submit(r11, r12, 0x0, &(0x7f0000000840)=@IORING_OP_READ=@pass_buffer={0x16, 0x690289cf84e0c404, 0x4007, @fd_index=0x8, 0x1, &(0x7f0000000780), 0x0, 0x6, 0x1, {0x0, 0x0, 0x2, '\x00', &(0x7f0000000800)={0x7f, 0x1, 0x14, &(0x7f00000007c0)="0ac4270d1c6dd30b9c2954f709b5c659e784db01", 0x81}, 0xffffffff00000000}})
r13 = syz_open_dev$rtc(&(0x7f00000008c0), 0x7fff, 0x440000)
ioctl$RTC_ALM_SET(r13, 0x40247007, &(0x7f0000000900)={0x3, 0x9, 0x15, 0x5, 0xa, 0x7, 0x1, 0x38, 0xffffffffffffffff})
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000940)=0x1, 0x4)
r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r14, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x140c, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x2000)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
io_uring_register$IORING_UNREGISTER_BUFFERS(r10, 0x1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r10, 0x20, &(0x7f0000000c00)={0x800, 0x7, 0x4ad9, 0x1, &(0x7f0000000b00)={&(0x7f0000000a80)="a3d4b1c3165277077cd076850a005e06a74175a20ad907e8c63fec275ceedcae47e721910b338c3cbf7036301fde29eb24644ec221a09cde840fd3d694c3f6b23c8f896a2874c85b782c16701510d37ca11f8e61f7029ca2360f33bea9ed96af38323f34b6aadd2902c0391559d4fa1b79970d940e34435cb19668f25e811f2c", 0x80, 0x9c, 0x1, 0xffff}, &(0x7f0000000bc0)={&(0x7f0000000b40)="294c5167ec53b125e886ebd88ffd49e99a2c4985e25db7edc566b59731fccf61cffc249749b70c4f7136d9ccd341fbb6c2c31a0122e7a3e5766b973f2d10c2e78fd4d35b9cdead450958451bf3f1584c14c0c1af17d9e6bea9", 0x59, 0x0, 0x8, 0x1000}, {0x4, 0x2, 0x7f}, 0x1, 0x2}, 0x1)

453.043879ms ago: executing program 6 (id=1224):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket(0xa, 0x3, 0xff)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
preadv(r1, &(0x7f0000003380)=[{&(0x7f0000002200)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000)
quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0)
sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000000)=@llc={0x1a, 0x30e, 0x2, 0xf, 0x7, 0x2}, 0x80, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080))

441.579379ms ago: executing program 7 (id=1225):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x457f1c9146f8f874, "4649f6441214bdf0c12f00007f9d0000310fa145d5fbffffff00", 0xb5315241})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x20, 0x0)

235.695915ms ago: executing program 8 (id=1226):
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0x5}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)
mq_open(&(0x7f00000000c0)='{\x00', 0x803, 0x8, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) (async)
write(r1, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0x5}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) (async)
mq_open(&(0x7f00000000c0)='{\x00', 0x803, 0x8, 0x0) (async)

235.039967ms ago: executing program 7 (id=1227):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
socket$inet(0x2, 0x2, 0x0) (async)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async)
bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) (async)
write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0674dd960c6bd8aa6a4592437efb1", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

0s ago: executing program 5 (id=1228):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000002e000100fcffffff0000000008000000", @ANYRES32, @ANYBLOB="100a21d223536b9cd32f3e3ee147b814bcacc540786e34d545395901c1b3fe2cbdc036f5e2af1170e7e087b1a61f573a8d07d2beea86fb3784532bbcc2172a975ee7fe8187044ff02b22985f3a5790cb8535ee44fc1b49509b6c8b175637"], 0x18}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

e loop6): ext4_free_blocks:6719: comm syz.6.613: Freeing blocks not in datazone - block = 0, count = 4096
[   99.813976][ T7956] loop6: lost filesystem error report for type 5 error -117
[   99.814123][ T7956] EXT4-fs (loop6): Remounting filesystem read-only
[   99.814172][ T7956] EXT4-fs (loop6): 1 orphan inode deleted
[   99.814633][ T7956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.835020][  T524] EXT4-fs (loop6): Quota write (off=3072, len=1024) cancelled because transaction is not started
[   99.835039][  T524] Quota error (device loop6): write_blk: dquota write failed
[   99.835061][  T524] Quota error (device loop6): free_dqentry: Can't move quota data block (2) to free list
[   99.882682][ T4724] Bluetooth: hci2: connection err: -111
[   99.889903][ T7948] FAULT_INJECTION: forcing a failure.
[   99.889903][ T7948] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   99.889921][ T7948] CPU: 0 UID: 0 PID: 7948 Comm: syz.7.610 Not tainted syzkaller #0 PREEMPT 
[   99.889932][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   99.889938][ T7948] Call trace:
[   99.889941][ T7948]  show_stack+0x2c/0x3c (C)
[   99.889963][ T7948]  __dump_stack+0x30/0x40
[   99.889975][ T7948]  dump_stack_lvl+0xd8/0x12c
[   99.889987][ T7948]  dump_stack+0x1c/0x28
[   99.889998][ T7948]  should_fail_ex+0x418/0x58c
[   99.890011][ T7948]  should_fail_alloc_page+0xec/0x10c
[   99.890024][ T7948]  prepare_alloc_pages+0x194/0x484
[   99.890038][ T7948]  __alloc_frozen_pages_noprof+0x180/0x578
[   99.890051][ T7948]  alloc_pages_mpol+0x1fc/0x3d0
[   99.890068][ T7948]  alloc_frozen_pages_noprof+0xc4/0x10c
[   99.890077][ T7948]  alloc_pages_noprof+0x30/0x148
[   99.890087][ T7948]  kimage_alloc_pages+0xa8/0x3d0
[   99.890096][ T7948]  kimage_alloc_control_pages+0x348/0x714
[   99.890106][ T7948]  do_kexec_load+0x38c/0x678
[   99.890115][ T7948]  __arm64_sys_kexec_load+0x1b4/0x1d4
[   99.890125][ T7948]  invoke_syscall+0x98/0x244
[   99.890137][ T7948]  el0_svc_common+0xec/0x23c
[   99.890149][ T7948]  do_el0_svc+0x4c/0x5c
[   99.890160][ T7948]  el0_svc+0x60/0x1d8
[   99.890171][ T7948]  el0t_64_sync_handler+0x44/0x104
[   99.890182][ T7948]  el0t_64_sync+0x198/0x19c
[   99.890192][ T7948] kexec: Could not allocate swap buffer
[   99.892571][ T5643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.020587][ T7963] FAULT_INJECTION: forcing a failure.
[  100.020587][ T7963] name fail_futex, interval 1, probability 0, space 0, times 0
[  100.020614][ T7963] CPU: 0 UID: 0 PID: 7963 Comm: syz.6.616 Not tainted syzkaller #0 PREEMPT 
[  100.020626][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  100.020631][ T7963] Call trace:
[  100.020634][ T7963]  show_stack+0x2c/0x3c (C)
[  100.020655][ T7963]  __dump_stack+0x30/0x40
[  100.020667][ T7963]  dump_stack_lvl+0xd8/0x12c
[  100.020678][ T7963]  dump_stack+0x1c/0x28
[  100.020689][ T7963]  should_fail_ex+0x418/0x58c
[  100.020702][ T7963]  should_fail+0x14/0x24
[  100.020713][ T7963]  get_futex_key+0x1ec/0x12b0
[  100.020723][ T7963]  futex_wake+0x10c/0x594
[  100.020734][ T7963]  do_futex+0x2c4/0x378
[  100.020744][ T7963]  __arm64_sys_futex+0x2e4/0x418
[  100.020754][ T7963]  invoke_syscall+0x98/0x244
[  100.020766][ T7963]  el0_svc_common+0xec/0x23c
[  100.020778][ T7963]  do_el0_svc+0x4c/0x5c
[  100.020789][ T7963]  el0_svc+0x60/0x1d8
[  100.020800][ T7963]  el0t_64_sync_handler+0x44/0x104
[  100.020810][ T7963]  el0t_64_sync+0x198/0x19c
[  100.059008][ T7965] loop0: detected capacity change from 0 to 1024
[  100.085824][ T7965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  100.116732][ T7965] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.617: bg 0: block 112: padding at end of block bitmap is not set
[  100.141359][ T7965] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.617: lblock 0 mapped to illegal pblock 0 (length 1)
[  100.143925][ T7969] bond4 (unregistering): Released all slaves
[  100.151112][ T7965] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.617: lblock 0 mapped to illegal pblock 0 (length 1)
[  100.160134][ T7965] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.617: lblock 0 mapped to illegal pblock 0 (length 1)
[  100.163005][ T7965] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.617: lblock 0 mapped to illegal pblock 0 (length 1)
[  100.172784][ T7965] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.617: lblock 0 mapped to illegal pblock 0 (length 1)
[  100.173074][ T7965] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.617: lblock 0 mapped to illegal pblock 0 (length 1)
[  100.257491][ T7438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  100.295604][ T7972] loop6: detected capacity change from 0 to 4096
[  100.300341][ T7972] ext4: Unknown parameter 'nouser_xattr'
[  100.387158][ T7978] __nla_validate_parse: 34 callbacks suppressed
[  100.387173][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.621'.
[  100.388599][ T7978] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.512630][ T7981] loop6: detected capacity change from 0 to 512
[  100.561090][ T7981] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  100.568530][ T7981] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.622: invalid block
[  100.568551][ T7981] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  100.569961][ T7981] EXT4-fs error (device loop6) in ext4_process_orphan:346: IO failure
[  100.569986][ T7981] loop6: lost filesystem error report for type 5 error -5
[  100.571143][ T7981] EXT4-fs (loop6): 1 truncate cleaned up
[  100.571851][ T7981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.696679][ T5643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.841645][ T6523] Bluetooth: hci4: Frame reassembly failed (-84)
[  101.049502][ T8004] Bluetooth: MGMT ver 1.23
[  101.083866][ T8004] wg1 speed is unknown, defaulting to 1000
[  101.117440][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.628'.
[  101.133032][ T4710] Bluetooth: hci2: unexpected cc 0x1003 length: 1 < 9
[  101.133053][ T4710] Bluetooth: hci2: unexpected event for opcode 0x1003
[  101.862254][ T6538] IPVS: starting estimator thread 0...
[  102.864677][ T8044] IPVS: using max 59 ests per chain, 141600 per kthread
[  102.872309][ T8045] set_capacity_and_notify: 2 callbacks suppressed
[  102.872319][ T8045] loop5: detected capacity change from 0 to 128
[  102.882179][ T8048] loop1: detected capacity change from 0 to 128
[  103.835912][ T4724] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  103.848632][ T8048] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  103.877168][ T8048] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  103.879427][   T30] audit: type=1326 audit(103.850:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8041 comm="syz.5.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b79368 code=0x0
[  103.884007][ T7999] FAULT_INJECTION: forcing a failure.
[  103.884007][ T7999] name failslab, interval 1, probability 0, space 0, times 0
[  103.884029][ T7999] CPU: 0 UID: 0 PID: 7999 Comm: syz.7.627 Not tainted syzkaller #0 PREEMPT 
[  103.884042][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  103.884047][ T7999] Call trace:
[  103.884050][ T7999]  show_stack+0x2c/0x3c (C)
[  103.884078][ T7999]  __dump_stack+0x30/0x40
[  103.884090][ T7999]  dump_stack_lvl+0xd8/0x12c
[  103.884101][ T7999]  dump_stack+0x1c/0x28
[  103.884110][ T7999]  should_fail_ex+0x418/0x58c
[  103.884121][ T7999]  should_failslab+0xc4/0x120
[  103.884132][ T7999]  __kmalloc_noprof+0x108/0x6c8
[  103.884143][ T7999]  kobject_get_path+0xbc/0x2a4
[  103.884154][ T7999]  kobject_uevent_env+0x264/0x944
[  103.884163][ T7999]  kobject_uevent+0x2c/0x3c
[  103.884173][ T7999]  device_del+0x5f8/0x71c
[  103.884181][ T7999]  rfkill_unregister+0xa8/0x204
[  103.884190][ T7999]  hci_unregister_dev+0x318/0x4c4
[  103.884200][ T7999]  hci_uart_tty_close+0x1bc/0x2d4
[  103.884209][ T7999]  tty_ldisc_close+0x114/0x194
[  103.884219][ T7999]  tty_ldisc_kill+0xb0/0x130
[  103.884228][ T7999]  tty_ldisc_hangup+0x2ec/0x3b8
[  103.884236][ T7999]  __tty_hangup+0x2cc/0x598
[  103.884247][ T7999]  tty_ioctl+0x2f8/0xcb0
[  103.884254][ T7999]  __arm64_sys_ioctl+0x154/0x1cc
[  103.884264][ T7999]  invoke_syscall+0x98/0x244
[  103.884273][ T7999]  el0_svc_common+0xec/0x23c
[  103.884283][ T7999]  do_el0_svc+0x4c/0x5c
[  103.884292][ T7999]  el0_svc+0x60/0x1d8
[  103.884301][ T7999]  el0t_64_sync_handler+0x44/0x104
[  103.884309][ T7999]  el0t_64_sync+0x198/0x19c
[  105.033778][ T8048] SET target dimension over the limit!
[  105.151901][ T4714] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.271642][ T8070] nfs4: Unknown parameter 'ad0.1'
[  105.636560][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'.
[  105.639461][ T8079] tipc: Started in network mode
[  105.639482][ T8079] tipc: Node identity 7a0698b2bd7e, cluster identity 4711
[  105.639601][ T8079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.640228][ T8079] syzkaller0: entered promiscuous mode
[  105.640242][ T8079] syzkaller0: entered allmulticast mode
[  105.670969][ T8079] tipc: Resetting bearer <eth:syzkaller0>
[  105.686928][ T8077] tipc: Resetting bearer <eth:syzkaller0>
[  105.714713][ T8077] tipc: Disabling bearer <eth:syzkaller0>
[  105.729177][ T8098] netlink: 132 bytes leftover after parsing attributes in process `syz.7.648'.
[  106.838448][ T8105] loop7: detected capacity change from 0 to 1024
[  106.838823][ T8105] ext2: Unknown parameter 'appraise'
[  106.867749][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.652'.
[  106.898180][ T8113] loop6: detected capacity change from 0 to 512
[  106.982356][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.653'.
[  107.052083][ T8117] loop1: detected capacity change from 0 to 4096
[  107.120871][ T8117] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  107.120889][ T8117] EXT4-fs (loop1): Test dummy encryption mode enabled
[  107.131762][ T8117] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[  107.131798][ T8117] System zones: 0-5
[  107.132591][ T8117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.141232][ T8124] vivid-000: =================  START STATUS  =================
[  107.141243][ T8124] vivid-000: Radio HW Seek Mode: Bounded
[  107.141257][ T8124] vivid-000: Radio Programmable HW Seek: false
[  107.141270][ T8124] vivid-000: RDS Rx I/O Mode: Block I/O
[  107.141281][ T8124] vivid-000: Generate RBDS Instead of RDS: false
[  107.141291][ T8124] vivid-000: RDS Reception: true
[  107.141299][ T8124] vivid-000: RDS Program Type: 0 inactive
[  107.141310][ T8124] vivid-000: RDS PS Name:  inactive
[  107.141321][ T8124] vivid-000: RDS Radio Text:  inactive
[  107.141332][ T8124] vivid-000: RDS Traffic Announcement: false inactive
[  107.141342][ T8124] vivid-000: RDS Traffic Program: false inactive
[  107.141352][ T8124] vivid-000: RDS Music: false inactive
[  107.141363][ T8124] vivid-000: ==================  END STATUS  ==================
[  107.141372][ T8124] FAULT_INJECTION: forcing a failure.
[  107.141372][ T8124] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  107.141384][ T8124] CPU: 0 UID: 0 PID: 8124 Comm: syz.0.656 Not tainted syzkaller #0 PREEMPT 
[  107.141393][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  107.141398][ T8124] Call trace:
[  107.141401][ T8124]  show_stack+0x2c/0x3c (C)
[  107.141420][ T8124]  __dump_stack+0x30/0x40
[  107.141431][ T8124]  dump_stack_lvl+0xd8/0x12c
[  107.141440][ T8124]  dump_stack+0x1c/0x28
[  107.141449][ T8124]  should_fail_ex+0x418/0x58c
[  107.141460][ T8124]  should_fail+0x14/0x24
[  107.141469][ T8124]  should_fail_usercopy+0x20/0x30
[  107.141479][ T8124]  simple_read_from_buffer+0xc4/0x238
[  107.141489][ T8124]  proc_fail_nth_read+0x1a8/0x248
[  107.141497][ T8124]  vfs_read+0x230/0x8c8
[  107.141507][ T8124]  ksys_read+0x12c/0x228
[  107.141516][ T8124]  __arm64_sys_read+0x84/0x98
[  107.141526][ T8124]  invoke_syscall+0x98/0x244
[  107.141536][ T8124]  el0_svc_common+0xec/0x23c
[  107.141546][ T8124]  do_el0_svc+0x4c/0x5c
[  107.141555][ T8124]  el0_svc+0x60/0x1d8
[  107.141564][ T8124]  el0t_64_sync_handler+0x44/0x104
[  107.141573][ T8124]  el0t_64_sync+0x198/0x19c
[  107.316036][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.329358][ T8132] binder: binder_mmap: 8130 0-800000 bad vm_flags failed -1
[  107.365444][ T8132] binder: 8130:8132 ioctl 8933 20000140 returned -22
[  108.080855][ T8172] loop1: detected capacity change from 0 to 512
[  108.110651][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'.
[  108.199481][ T8175] loop5: detected capacity change from 0 to 256
[  108.199846][ T8175] vfat: Unknown parameter 'u'
[  108.255034][ T8175] loop5: detected capacity change from 0 to 128
[  108.255377][ T8175] vfat: Unknown parameter 'short'
[  108.476075][ T8175] netlink: 'syz.5.670': attribute type 10 has an invalid length.
[  108.476247][ T8175] veth0_vlan: left promiscuous mode
[  108.476728][ T8175] team0: Device veth0_vlan failed to register rx_handler
[  108.705126][ T8183] netlink: 108 bytes leftover after parsing attributes in process `syz.5.673'.
[  108.752166][ T8170] loop6: detected capacity change from 0 to 32768
[  108.785580][ T8170]  loop6: [POWERTEC] p1 p2 p3
[  108.785671][ T8170] loop6: p1 start 1768846639 is beyond EOD, truncated
[  108.785683][ T8170] loop6: p2 start 1056964608 is beyond EOD, truncated
[  108.785691][ T8170] loop6: p3 start 3242065920 is beyond EOD, truncated
[  108.891096][ T8199] FAULT_INJECTION: forcing a failure.
[  108.891096][ T8199] name failslab, interval 1, probability 0, space 0, times 0
[  108.891124][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.0.679 Not tainted syzkaller #0 PREEMPT 
[  108.891137][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  108.891144][ T8199] Call trace:
[  108.891147][ T8199]  show_stack+0x2c/0x3c (C)
[  108.891169][ T8199]  __dump_stack+0x30/0x40
[  108.891181][ T8199]  dump_stack_lvl+0xd8/0x12c
[  108.891193][ T8199]  dump_stack+0x1c/0x28
[  108.891204][ T8199]  should_fail_ex+0x418/0x58c
[  108.891216][ T8199]  should_failslab+0xc4/0x120
[  108.891229][ T8199]  kmem_cache_alloc_noprof+0x94/0x5d4
[  108.891242][ T8199]  sk_prot_alloc+0x60/0x1e8
[  108.891255][ T8199]  sk_alloc+0x44/0x320
[  108.891267][ T8199]  qrtr_create+0xc4/0x1dc
[  108.891276][ T8199]  __sock_create+0x31c/0x670
[  108.891285][ T8199]  __sys_socket_create+0xc0/0x11c
[  108.891294][ T8199]  __sys_socket+0x44/0xec
[  108.891303][ T8199]  __arm64_sys_socket+0x84/0x9c
[  108.891312][ T8199]  invoke_syscall+0x98/0x244
[  108.891324][ T8199]  el0_svc_common+0xec/0x23c
[  108.891336][ T8199]  do_el0_svc+0x4c/0x5c
[  108.891347][ T8199]  el0_svc+0x60/0x1d8
[  108.891357][ T8199]  el0t_64_sync_handler+0x44/0x104
[  108.891368][ T8199]  el0t_64_sync+0x198/0x19c
[  108.934665][ T8202] netlink: 'syz.6.680': attribute type 4 has an invalid length.
[  108.979555][ T8202] netlink: 'syz.6.680': attribute type 4 has an invalid length.
[  109.386915][ T8211] loop7: detected capacity change from 0 to 512
[  109.405369][ T8216] loop6: detected capacity change from 0 to 128
[  109.408284][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.683'.
[  109.420049][ T8216] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.598981][ T4710] Bluetooth: hci2: unexpected event for opcode 0x200f
[  109.618596][ T5643] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.015086][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'.
[  110.238928][ T8257] loop0: detected capacity change from 0 to 4096
[  110.268612][ T8257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.285409][ T8262] loop1: detected capacity change from 0 to 128
[  110.441812][ T8267] xt_hashlimit: size too large, truncated to 1048576
[  110.509832][ T8270] loop1: detected capacity change from 0 to 512
[  110.549773][ T8270] loop1: detected capacity change from 0 to 512
[  110.580514][ T8270] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.700: bad orphan inode 13
[  110.580536][ T8270] loop1: lost filesystem error report for type 5 error -117
[  110.580726][ T8270] ext4_test_bit(bit=12, block=4) = 1
[  110.580735][ T8270] is_bad_inode(inode)=0
[  110.580740][ T8270] NEXT_ORPHAN(inode)=0
[  110.580746][ T8270] max_ino=32
[  110.580752][ T8270] i_nlink=1
[  110.581257][ T8270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.742546][ T8263] overlay: filesystem on ./file0 not supported as upperdir
[  110.746217][ T8268] overlay: filesystem on ./file0 not supported as upperdir
[  110.840913][ T8279] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.700: Hash code is SIPHASH, but hash not in dirent
[  110.840937][ T8279] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.700: Corrupt directory, running e2fsck is recommended
[  110.841445][ T8279] tipc: Enabling of bearer <eth:syz_tu> rejected, failed to enable media
[  110.863217][ T8263] bridge_slave_1: default FDB implementation only supports local addresses
[  110.867590][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'.
[  110.878718][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.916521][ T8263] bridge_slave_1 (unregistering): left allmulticast mode
[  110.916546][ T8263] bridge_slave_1 (unregistering): left promiscuous mode
[  110.916589][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.973479][ T8276] tmpfs: Bad value for 'mpol'
[  111.250347][ T7438] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /29/mnt/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.252816][ T7438] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.265389][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.265575][ T7438] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /29/mnt/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.275812][ T7438] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.302201][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.302389][ T7438] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /29/mnt/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.302801][ T7438] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.302967][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.303089][ T7438] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /29/mnt/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.303296][ T7438] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.303440][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.303539][ T7438] EXT4-fs error (device loop0): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /29/mnt/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.333550][ T7438] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  111.333782][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.342316][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.342961][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.343365][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.343736][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.355594][ T7438] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..'
[  111.635669][ T8287] Injecting memory failure for pfn 0x13853d at process virtual address 0x20000000
[  111.638190][ T8287] Memory failure: 0x13853d: Sending SIGBUS to syz.6.703:8287 due to hardware memory corruption
[  111.638230][ T8287] Memory failure: 0x13853d: recovery action for dirty LRU page: Recovered
[  111.638277][ T8287] Injecting memory failure for pfn 0x138538 at process virtual address 0x20001000
[  111.640885][ T8287] Memory failure: 0x138538: Sending SIGBUS to syz.6.703:8287 due to hardware memory corruption
[  111.640922][ T8287] Memory failure: 0x138538: recovery action for dirty LRU page: Recovered
[  111.640968][ T8287] Injecting memory failure for pfn 0x142c3a at process virtual address 0x20002000
[  111.641218][ T8287] Memory failure: 0x142c3a: recovery action for clean LRU page: Recovered
[  111.641263][ T8287] Injecting memory failure for pfn 0x120295 at process virtual address 0x20003000
[  111.641324][ T8287] Memory failure: 0x120295: recovery action for clean LRU page: Recovered
[  111.641366][ T8287] Injecting memory failure for pfn 0x138774 at process virtual address 0x20004000
[  111.641437][ T8287] Memory failure: 0x138774: recovery action for clean LRU page: Recovered
[  111.641491][ T8287] Injecting memory failure for pfn 0x14293d at process virtual address 0x20005000
[  111.641592][ T8287] Memory failure: 0x14293d: recovery action for clean LRU page: Recovered
[  111.641672][ T8287] Injecting memory failure for pfn 0x1202fa at process virtual address 0x20006000
[  111.641835][ T8287] Memory failure: 0x1202fa: recovery action for clean LRU page: Recovered
[  111.641967][ T8287] Injecting memory failure for pfn 0x138539 at process virtual address 0x20007000
[  111.642257][ T8287] Memory failure: 0x138539: recovery action for clean LRU page: Recovered
[  111.642511][ T8287] Injecting memory failure for pfn 0x1387fd at process virtual address 0x20008000
[  111.689492][ T8291] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  111.690166][ T8287] Memory failure: 0x1387fd: recovery action for clean LRU page: Recovered
[  111.690234][ T8287] Injecting memory failure for pfn 0x1380bc at process virtual address 0x20009000
[  111.692047][ T8291] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  111.692177][ T8291] EXT4-fs (loop7): orphan cleanup on readonly fs
[  111.694023][ T8291] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4223: comm syz.7.705: Allocating blocks 41-42 which overlap fs metadata
[  111.694040][ T8291] loop7: lost filesystem error report for type 5 error -117
[  111.708182][ T8219] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  111.792448][ T8291] EXT4-fs (loop7): Remounting filesystem read-only
[  111.792537][ T8291] Quota error (device loop7): write_blk: dquota write failed
[  111.792584][ T8291] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  111.792659][ T8291] EXT4-fs (loop7): 1 truncate cleaned up
[  111.794502][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  111.794518][    C0] EXT4-fs (loop7): initial error at time 111: ext4_mb_mark_diskspace_used:4223
[  111.794530][    C0] EXT4-fs (loop7): last error at time 111: ext4_mb_mark_diskspace_used:4223
[  111.807238][ T8291] EXT4-fs (loop7): pa 000000009a12ca70: logic 1, phys. 41, len 23
[  111.807783][ T8291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  111.809962][ T8287] Memory failure: 0x1380bc: recovery action for clean LRU page: Recovered
[  111.810032][ T8287] Injecting memory failure for pfn 0x140a41 at process virtual address 0x2000a000
[  111.831450][ T8287] Memory failure: 0x140a41: recovery action for clean LRU page: Recovered
[  111.831529][ T8287] Injecting memory failure for pfn 0x11f67b at process virtual address 0x2000b000
[  111.831608][ T8287] Memory failure: 0x11f67b: recovery action for clean LRU page: Recovered
[  111.831661][ T8287] Injecting memory failure for pfn 0x11f662 at process virtual address 0x2000c000
[  111.831735][ T8287] Memory failure: 0x11f662: recovery action for clean LRU page: Recovered
[  111.831801][ T8287] Injecting memory failure for pfn 0x138380 at process virtual address 0x2000d000
[  111.831902][ T8287] Memory failure: 0x138380: recovery action for clean LRU page: Recovered
[  112.012508][ T8287] Injecting memory failure for pfn 0x11f676 at process virtual address 0x2000e000
[  112.028628][ T8287] Memory failure: 0x11f676: recovery action for clean LRU page: Recovered
[  112.053072][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.235969][ T8306] netlink: 72 bytes leftover after parsing attributes in process `syz.6.708'.
[  112.235989][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.708'.
[  112.235999][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.708'.
[  112.317123][ T7438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.408829][ T8285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.527688][ T8285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.583514][ T8285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.659438][ T8285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.734844][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.836994][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.838201][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.842785][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.843184][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.843424][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.911897][ T8320] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.929010][ T8285] bridge_slave_0: left allmulticast mode
[  112.929032][ T8285] bridge_slave_0: left promiscuous mode
[  112.929139][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.955842][ T8285] dvmrp0: left allmulticast mode
[  113.223780][ T8285] gretap0 (unregistering): left allmulticast mode
[  113.290694][ T8285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.301953][ T8285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.303569][ T8285] bond0 (unregistering): Released all slaves
[  113.400135][ T4714] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.430817][ T8285] tipc: Left network mode
[  113.712891][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12
[  113.769594][ T8316] wg1 speed is unknown, defaulting to 1000
[  113.803539][ T8363] set_capacity_and_notify: 2 callbacks suppressed
[  113.803553][ T8363] loop1: detected capacity change from 0 to 4096
[  113.803942][ T8363] journal_path: Non-blockdev passed as './file2'
[  113.803954][ T8363] EXT4-fs: error: could not find journal device path
[  113.856334][ T8285] hsr_slave_0: left promiscuous mode
[  113.857944][ T8285] hsr_slave_1: left promiscuous mode
[  113.858712][ T8285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.858726][ T8285] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.860586][ T8285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.860599][ T8285] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.893709][ T8285] veth1_macvtap: left promiscuous mode
[  113.893744][ T8285] veth0_macvtap: left promiscuous mode
[  113.893790][ T8285] veth1_vlan: left promiscuous mode
[  113.893825][ T8285] veth0_vlan: left promiscuous mode
[  114.521180][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.723'.
[  114.647976][ T8285] team0 (unregistering): Port device team_slave_1 removed
[  114.663735][ T8285] team0 (unregistering): Port device team_slave_0 removed
[  114.813976][ T8406] bond2: option miimon: invalid value (18446744072564182783)
[  114.817306][ T8406] bond2: option miimon: allowed values 0 - 2147483647
[  114.818370][ T8406] bond2 (unregistering): Released all slaves
[  114.852915][ T4400] 8021q: adding VLAN 0 to HW filter on device eth13
[  114.894931][ T4724] Bluetooth: hci0: command tx timeout
[  114.900662][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.726'.
[  115.007133][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.726'.
[  115.061152][ T8421] netlink: 'syz.1.728': attribute type 83 has an invalid length.
[  115.097981][ T8285] IPVS: stop unused estimator thread 0...
[  115.121629][ T8425] netlink: 'syz.7.729': attribute type 1 has an invalid length.
[  115.255266][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.255335][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.255393][ T8316] bridge_slave_0: entered allmulticast mode
[  115.256758][ T8316] bridge_slave_0: entered promiscuous mode
[  115.267037][ T8440] loop7: detected capacity change from 0 to 512
[  115.271645][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.272753][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.273305][ T8316] bridge_slave_1: entered allmulticast mode
[  115.282140][ T8316] bridge_slave_1: entered promiscuous mode
[  115.286972][ T8440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  115.287017][ T8440] System zones: 1-12
[  115.288968][ T8440] EXT4-fs error (device loop7): ext4_xattr_inode_iget:473: comm syz.7.731: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  115.288989][ T8440] loop7: lost filesystem error report for type 5 error -117
[  115.291619][ T8440] EXT4-fs (loop7): 1 orphan inode deleted
[  115.313016][ T8440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.346374][ T8316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.347228][ T8316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.353912][ T8449] loop6: detected capacity change from 0 to 512
[  115.399530][ T8449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.411384][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.432079][ T8316] team0: Port device team_slave_0 added
[  115.436225][ T8449] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  115.441908][ T8316] team0: Port device team_slave_1 added
[  115.458394][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.458575][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.506016][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.506031][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  115.506045][ T8316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.510092][ T8454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.734'.
[  115.529288][ T8449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.529442][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.529451][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  115.529470][ T8316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.608617][ T8316] hsr_slave_0: entered promiscuous mode
[  115.608948][ T8316] hsr_slave_1: entered promiscuous mode
[  115.609169][ T8316] debugfs: 'hsr0' already exists in 'hsr'
[  115.609319][ T8316] Cannot create hsr debugfs directory
[  115.843692][ T4400] 8021q: adding VLAN 0 to HW filter on device eth14
[  115.847770][ T8316] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  115.856055][ T8316] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  115.866471][ T8316] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  115.869420][ T8316] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  115.869724][ T8316] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  115.870719][ T8316] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  115.872877][ T8316] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  115.887786][ T8316] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  115.992281][ T8316] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.017725][ T8316] 8021q: adding VLAN 0 to HW filter on device team0
[  116.027538][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.027566][ T8280] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.040391][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.040420][ T8285] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.090517][ T5643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.365099][ T8487] wg1 speed is unknown, defaulting to 1000
[  116.676221][ T8528] loop7: detected capacity change from 0 to 512
[  116.729766][ T8528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022]
[  116.729805][ T8528] System zones: 1-12
[  116.729910][ T8528] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.743: Directory hole found for htree index block 0
[  116.729926][ T8528] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  116.734151][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  116.734165][    C0] EXT4-fs (loop7): initial error at time 116: dx_probe:791: inode 2
[  116.734182][    C0] EXT4-fs (loop7): last error at time 116: dx_probe:791: inode 2
[  116.750427][ T8528] EXT4-fs (loop7): Remounting filesystem read-only
[  116.750784][ T8528] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117
[  116.750828][ T8528] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  116.751286][ T8528] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.839675][ T4400] 8021q: adding VLAN 0 to HW filter on device eth15
[  116.873960][ T8316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.897374][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.948267][ T8523] fuse: Bad value for 'fd'
[  116.979640][ T4724] Bluetooth: hci0: command tx timeout
[  117.026629][ T8538] loop6: detected capacity change from 0 to 256
[  117.220288][ T8557] fuse: Bad value for 'fd'
[  117.328987][ T8561] loop1: detected capacity change from 0 to 1024
[  117.343801][ T8561] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.350966][ T8316] veth0_vlan: entered promiscuous mode
[  117.430104][ T8561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  117.440019][ T8316] veth1_vlan: entered promiscuous mode
[  117.648983][ T8316] veth0_macvtap: entered promiscuous mode
[  117.651445][ T8561] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 16: comm syz.1.751: path /171/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0
[  117.652111][ T8561] EXT4-fs (loop1): Remounting filesystem read-only
[  117.663487][ T8316] veth1_macvtap: entered promiscuous mode
[  117.701044][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.712918][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.733538][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  117.748793][   T54] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.749025][   T54] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.749048][   T54] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.750281][   T54] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.872760][ T8576] loop1: detected capacity change from 0 to 512
[  117.893733][ T8285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.893751][ T8285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.909946][ T8576] EXT4-fs (loop1): Test dummy encryption mode enabled
[  117.909958][ T8576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  117.911688][ T8576] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.754: bad orphan inode 131083
[  117.911709][ T8576] loop1: lost filesystem error report for type 5 error -117
[  117.914108][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  117.914124][    C0] EXT4-fs (loop1): initial error at time 117: ext4_orphan_get:1429
[  117.914136][    C0] EXT4-fs (loop1): last error at time 117: ext4_orphan_get:1429
[  117.930894][ T8576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.973807][ T6528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.973825][ T6528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.104002][ T8583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.185404][ T8585] loop8: detected capacity change from 0 to 512
[  118.939234][ T8615] FAULT_INJECTION: forcing a failure.
[  118.939234][ T8615] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.939257][ T8615] CPU: 0 UID: 0 PID: 8615 Comm: syz.7.760 Not tainted syzkaller #0 PREEMPT 
[  118.939269][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  118.939276][ T8615] Call trace:
[  118.939279][ T8615]  show_stack+0x2c/0x3c (C)
[  118.939301][ T8615]  __dump_stack+0x30/0x40
[  118.939311][ T8615]  dump_stack_lvl+0xd8/0x12c
[  118.939321][ T8615]  dump_stack+0x1c/0x28
[  118.939330][ T8615]  should_fail_ex+0x418/0x58c
[  118.939341][ T8615]  should_fail+0x14/0x24
[  118.939350][ T8615]  should_fail_usercopy+0x20/0x30
[  118.939360][ T8615]  _copy_from_iter+0x188/0x1064
[  118.939371][ T8615]  netlink_sendmsg+0x570/0x948
[  118.939381][ T8615]  __sock_sendmsg+0xc8/0x17c
[  118.939389][ T8615]  ____sys_sendmsg+0x3d0/0x6c8
[  118.939397][ T8615]  ___sys_sendmsg+0x198/0x224
[  118.939406][ T8615]  __sys_sendmsg+0x158/0x204
[  118.939414][ T8615]  __arm64_sys_sendmsg+0x88/0x9c
[  118.939422][ T8615]  invoke_syscall+0x98/0x244
[  118.939432][ T8615]  el0_svc_common+0xec/0x23c
[  118.939441][ T8615]  do_el0_svc+0x4c/0x5c
[  118.939451][ T8615]  el0_svc+0x60/0x1d8
[  118.939460][ T8615]  el0t_64_sync_handler+0x44/0x104
[  118.939469][ T8615]  el0t_64_sync+0x198/0x19c
[  119.055112][ T4724] Bluetooth: hci0: command tx timeout
[  119.114892][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'.
[  119.114913][ T8624] openvswitch: netlink: nsh attribute has 220 unknown bytes.
[  119.315754][ T8630] netlink: 132 bytes leftover after parsing attributes in process `syz.8.766'.
[  119.698184][ T8645] scsi_nl_rcv_msg: discarding partial skb
[  119.731622][ T8651] loop8: detected capacity change from 0 to 512
[  119.746769][ T8651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  119.746815][ T8651] System zones: 1-12
[  119.749273][ T8651] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.771: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  119.749292][ T8651] loop8: lost filesystem error report for type 5 error -117
[  119.749787][ T8651] EXT4-fs (loop8): 1 orphan inode deleted
[  119.750291][ T8651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.853608][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.933793][ T8659] loop8: detected capacity change from 0 to 512
[  119.959361][ T8659] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.015286][ T8659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.031584][ T8659] netlink: 'syz.8.772': attribute type 29 has an invalid length.
[  120.031596][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.8.772'.
[  120.031611][ T8659] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  120.231035][ T8666] fuse: Bad value for 'fd'
[  120.311733][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.7.777'.
[  120.311755][ T8669] netlink: 36 bytes leftover after parsing attributes in process `syz.7.777'.
[  120.392164][ T8669] loop7: detected capacity change from 0 to 512
[  120.652939][ T8669] EXT4-fs (loop7): Test dummy encryption mode enabled
[  120.652962][ T8669] EXT4-fs (loop7): Invalid default hash set in the superblock
[  120.882504][ T8688] loop7: detected capacity change from 0 to 512
[  120.941161][ T8688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  120.941216][ T8688] System zones: 1-12
[  120.941548][ T8688] EXT4-fs error (device loop7): ext4_xattr_inode_iget:473: comm syz.7.782: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  120.941563][ T8688] loop7: lost filesystem error report for type 5 error -117
[  120.941867][ T8688] EXT4-fs (loop7): 1 orphan inode deleted
[  120.942349][ T8688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.969257][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.013003][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.784'.
[  121.091296][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.138134][ T4724] Bluetooth: hci0: command tx timeout
[  121.293927][   T30] audit: type=1326 audit(121.260:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.294041][   T30] audit: type=1326 audit(121.260:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.308255][   T30] audit: type=1326 audit(121.280:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.308338][   T30] audit: type=1326 audit(121.280:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.308479][   T30] audit: type=1326 audit(121.280:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.308551][   T30] audit: type=1326 audit(121.280:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.308625][   T30] audit: type=1326 audit(121.280:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.308709][   T30] audit: type=1326 audit(121.280:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.308778][   T30] audit: type=1326 audit(121.280:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.310477][   T30] audit: type=1326 audit(121.280:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8716 comm="syz.1.791" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  121.364704][ T8711] netlink: 52 bytes leftover after parsing attributes in process `syz.5.790'.
[  121.372245][ T8711] netlink: 52 bytes leftover after parsing attributes in process `syz.5.790'.
[  121.393399][ T8719] netlink: 164 bytes leftover after parsing attributes in process `syz.5.790'.
[  121.571312][ T8735] netlink: 176 bytes leftover after parsing attributes in process `syz.5.795'.
[  121.602646][ T8737] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  121.622183][ T8737] gretap0: entered promiscuous mode
[  121.737294][ T8744] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20ffd000
[  121.738103][ T8742] loop7: detected capacity change from 0 to 512
[  121.761139][ T8744] Memory failure: 0x2193cf: unhandlable page.
[  121.761154][ T8744] Memory failure: 0x2193cf: recovery action for reserved kernel page: Ignored
[  121.853615][ T8751] loop7: detected capacity change from 0 to 1024
[  121.861768][ T8751] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  121.861816][ T8751] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  121.873335][ T8751] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  121.873482][ T8751] EXT4-fs (loop7): orphan cleanup on readonly fs
[  121.877934][ T8751] EXT4-fs error (device loop7): ext4_quota_enable:7256: comm syz.7.801: Bad quota inum: 9, type: 2
[  121.877957][ T8751] loop7: lost filesystem error report for type 5 error -117
[  121.878100][ T8751] EXT4-fs (loop7): Remounting filesystem read-only
[  121.878109][ T8751] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix.
[  121.878185][ T8751] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  121.878647][ T8751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  123.906690][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.494180][    C0] net_ratelimit: 87 callbacks suppressed
[  124.591645][ T8750] __nla_validate_parse: 2 callbacks suppressed
[  124.591659][ T8750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.800'.
[  124.591673][ T8750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.800'.
[  124.591682][ T8750] netlink: 'syz.1.800': attribute type 6 has an invalid length.
[  124.610612][ T8769] vivid-000: =================  START STATUS  =================
[  124.610623][ T8769] vivid-000: Radio HW Seek Mode: Bounded
[  124.610637][ T8769] vivid-000: Radio Programmable HW Seek: false
[  124.610649][ T8769] vivid-000: RDS Rx I/O Mode: Block I/O
[  124.610659][ T8769] vivid-000: Generate RBDS Instead of RDS: false
[  124.610669][ T8769] vivid-000: RDS Reception: true
[  124.610678][ T8769] vivid-000: RDS Program Type: 0 inactive
[  124.610690][ T8769] vivid-000: RDS PS Name:  inactive
[  124.610702][ T8769] vivid-000: RDS Radio Text:  inactive
[  124.610713][ T8769] vivid-000: RDS Traffic Announcement: false inactive
[  124.611814][ T8769] vivid-000: RDS Traffic Program: false inactive
[  124.611830][ T8769] vivid-000: RDS Music: false inactive
[  124.611843][ T8769] vivid-000: ==================  END STATUS  ==================
[  124.948640][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.8.809'.
[  124.950462][ T8791] loop8: detected capacity change from 0 to 128
[  124.963246][ T8791] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  125.025358][ T8791] tipc: Started in network mode
[  125.025368][ T8791] tipc: Node identity 4, cluster identity 4711
[  125.025374][ T8791] tipc: Node number set to 4
[  125.443415][ T8316] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.968561][ T1597] ieee802154 phy0 wpan0: encryption failed: -22
[  125.968591][ T1597] ieee802154 phy1 wpan1: encryption failed: -22
[  127.047012][ T8878] loop6: detected capacity change from 0 to 256
[  127.086306][ T8878] FAT-fs (loop6): error, clusters badly computed (0 != 128)
[  127.086322][ T8878] FAT-fs (loop6): Filesystem has been set read-only
[  127.086341][ T8878] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  127.160197][ T8882] loop7: detected capacity change from 0 to 1024
[  127.160745][ T8882] EXT4-fs: Ignoring removed bh option
[  127.202630][ T8882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.361630][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.562291][ T8900] sctp: [Deprecated]: syz.5.838 (pid 8900) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.562291][ T8900] Use struct sctp_sack_info instead
[  127.598787][ T8896] FAULT_INJECTION: forcing a failure.
[  127.598787][ T8896] name failslab, interval 1, probability 0, space 0, times 0
[  127.598808][ T8896] CPU: 0 UID: 0 PID: 8896 Comm: syz.6.834 Not tainted syzkaller #0 PREEMPT 
[  127.598820][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  127.598833][ T8896] Call trace:
[  127.598836][ T8896]  show_stack+0x2c/0x3c (C)
[  127.598855][ T8896]  __dump_stack+0x30/0x40
[  127.598868][ T8896]  dump_stack_lvl+0xd8/0x12c
[  127.598880][ T8896]  dump_stack+0x1c/0x28
[  127.598892][ T8896]  should_fail_ex+0x418/0x58c
[  127.598904][ T8896]  should_failslab+0xc4/0x120
[  127.598917][ T8896]  __kmalloc_noprof+0x108/0x6c8
[  127.598931][ T8896]  security_prepare_creds+0x60/0x35c
[  127.598942][ T8896]  prepare_creds+0x500/0x7d0
[  127.598966][ T8896]  __arm64_sys_capset+0x420/0x5b0
[  127.598978][ T8896]  invoke_syscall+0x98/0x244
[  127.598991][ T8896]  el0_svc_common+0xec/0x23c
[  127.599003][ T8896]  do_el0_svc+0x4c/0x5c
[  127.599014][ T8896]  el0_svc+0x60/0x1d8
[  127.599026][ T8896]  el0t_64_sync_handler+0x44/0x104
[  127.599036][ T8896]  el0t_64_sync+0x198/0x19c
[  127.678919][ T8896] ������: renamed from vlan0 (while UP)
[  128.190046][ T8926] loop8: detected capacity change from 0 to 256
[  128.191624][ T8926] vfat: Bad value for 'shortname'
[  128.258411][ T8923] vivid-000: =================  START STATUS  =================
[  128.258426][ T8923] vivid-000: Radio HW Seek Mode: Bounded
[  128.258447][ T8923] vivid-000: Radio Programmable HW Seek: false
[  128.258463][ T8923] vivid-000: RDS Rx I/O Mode: Block I/O
[  128.258479][ T8923] vivid-000: Generate RBDS Instead of RDS: false
[  128.258493][ T8923] vivid-000: RDS Reception: true
[  128.258504][ T8923] vivid-000: RDS Program Type: 0 inactive
[  128.258518][ T8923] vivid-000: RDS PS Name:  inactive
[  128.258530][ T8923] vivid-000: RDS Radio Text:  inactive
[  128.258542][ T8923] vivid-000: RDS Traffic Announcement: false inactive
[  128.258554][ T8923] vivid-000: RDS Traffic Program: false inactive
[  128.258566][ T8923] vivid-000: RDS Music: false inactive
[  128.258578][ T8923] vivid-000: ==================  END STATUS  ==================
[  128.320243][ T8923] overlayfs: upper fs does not support tmpfile.
[  128.477044][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.477965][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.539229][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.846'.
[  129.586715][ T8481] net_ratelimit: 44 callbacks suppressed
[  129.956719][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.852'.
[  130.941931][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.593489][ T9081] fsa4480 0-0042: error -ENODEV: FSA4480 not found
[  131.602570][ T9081] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42
[  131.619551][ T9079] i2c i2c-0: Failed to register i2c client fsa4480 at 0x42 (-16)
[  131.643768][ T9084] netlink: 60 bytes leftover after parsing attributes in process `syz.5.861'.
[  131.643790][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.861'.
[  132.125749][ T9103] overlayfs: failed to resolve './bus': -2
[  132.257820][ T9110] loop8: detected capacity change from 0 to 512
[  132.273417][ T9110] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  132.273517][ T9110] System zones: 1-12
[  132.277027][ T9110] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.868: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  132.277053][ T9110] loop8: lost filesystem error report for type 5 error -117
[  132.277338][ T9110] EXT4-fs (loop8): 1 orphan inode deleted
[  132.277860][ T9110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.366702][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.389324][ T9118] FAULT_INJECTION: forcing a failure.
[  132.389324][ T9118] name fail_futex, interval 1, probability 0, space 0, times 0
[  132.389345][ T9118] CPU: 0 UID: 0 PID: 9118 Comm: syz.7.870 Not tainted syzkaller #0 PREEMPT 
[  132.389357][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  132.389371][ T9118] Call trace:
[  132.389374][ T9118]  show_stack+0x2c/0x3c (C)
[  132.389397][ T9118]  __dump_stack+0x30/0x40
[  132.389409][ T9118]  dump_stack_lvl+0xd8/0x12c
[  132.389420][ T9118]  dump_stack+0x1c/0x28
[  132.389432][ T9118]  should_fail_ex+0x418/0x58c
[  132.389445][ T9118]  should_fail+0x14/0x24
[  132.389456][ T9118]  get_futex_key+0x1ec/0x12b0
[  132.389467][ T9118]  futex_wait_setup+0x58/0x674
[  132.389478][ T9118]  __futex_wait+0x108/0x25c
[  132.389488][ T9118]  futex_wait+0x108/0x2c0
[  132.389499][ T9118]  do_futex+0x320/0x378
[  132.389509][ T9118]  __arm64_sys_futex+0x2e4/0x418
[  132.389520][ T9118]  invoke_syscall+0x98/0x244
[  132.389532][ T9118]  el0_svc_common+0xec/0x23c
[  132.389544][ T9118]  do_el0_svc+0x4c/0x5c
[  132.389555][ T9118]  el0_svc+0x60/0x1d8
[  132.389566][ T9118]  el0t_64_sync_handler+0x44/0x104
[  132.389577][ T9118]  el0t_64_sync+0x198/0x19c
[  132.793899][ T9129] batman_adv: batadv0: Adding interface: veth0
[  132.793905][ T9129] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.793920][ T9129] batman_adv: batadv0: Interface activated: veth0
[  132.858649][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.873'.
[  132.858761][ T9127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.893041][ T9127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.023701][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  133.023710][   T30] audit: type=1326 audit(132.990:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9134 comm="syz.5.876" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b79368 code=0x0
[  133.048916][ T9149] loop6: detected capacity change from 0 to 512
[  133.070113][ T9149] EXT4-fs: Mount option(s) incompatible with ext2
[  133.143255][ T9149] binder: 9145:9149 ioctl 4018620d 0 returned -22
[  133.442698][ T9170] loop6: detected capacity change from 0 to 512
[  133.466609][ T9170] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.881: attempt to clear invalid blocks 2 len 1
[  133.466629][ T9170] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  133.467372][ T9170] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  133.468207][ T9170] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.881: invalid indirect mapped block 1819239214 (level 0)
[  133.468227][ T9170] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  133.468875][ T9170] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.881: invalid indirect mapped block 1819239214 (level 1)
[  133.468904][ T9170] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  133.469908][ T9170] EXT4-fs (loop6): 1 truncate cleaned up
[  133.470397][ T9170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.000875][ T9199] netlink: 'syz.1.884': attribute type 32 has an invalid length.
[  134.259043][ T5643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.263496][ T9208] 9p: Bad value for 'rfdno'
[  134.612310][ T5820] net_ratelimit: 178 callbacks suppressed
[  136.003754][ T4710] Bluetooth: hci3: unexpected event for opcode 0x042e
[  136.027296][ T9265] FAULT_INJECTION: forcing a failure.
[  136.027296][ T9265] name fail_futex, interval 1, probability 0, space 0, times 0
[  136.027313][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.7.897 Not tainted syzkaller #0 PREEMPT 
[  136.027324][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  136.027338][ T9265] Call trace:
[  136.027341][ T9265]  show_stack+0x2c/0x3c (C)
[  136.027362][ T9265]  __dump_stack+0x30/0x40
[  136.027377][ T9265]  dump_stack_lvl+0xd8/0x12c
[  136.027388][ T9265]  dump_stack+0x1c/0x28
[  136.027399][ T9265]  should_fail_ex+0x418/0x58c
[  136.027413][ T9265]  should_fail+0x14/0x24
[  136.027423][ T9265]  get_futex_key+0x1ec/0x12b0
[  136.027435][ T9265]  futex_wake+0x10c/0x594
[  136.027446][ T9265]  do_futex+0x2c4/0x378
[  136.027456][ T9265]  __arm64_sys_futex+0x2e4/0x418
[  136.027467][ T9265]  invoke_syscall+0x98/0x244
[  136.027480][ T9265]  el0_svc_common+0xec/0x23c
[  136.027492][ T9265]  do_el0_svc+0x4c/0x5c
[  136.027503][ T9265]  el0_svc+0x60/0x1d8
[  136.027514][ T9265]  el0t_64_sync_handler+0x44/0x104
[  136.027525][ T9265]  el0t_64_sync+0x198/0x19c
[  136.131503][ T9267] loop6: detected capacity change from 0 to 512
[  136.159971][ T9267] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  136.278967][ T9267] loop6: detected capacity change from 0 to 1024
[  136.298533][ T9267] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5
[  136.298555][ T9267] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  136.298563][ T9267] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.898: Failed to acquire dquot type 0
[  136.298573][ T9267] loop6: lost filesystem error report for type 5 error -117
[  136.304110][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  136.304121][    C0] EXT4-fs (loop6): initial error at time 136: ext4_acquire_dquot:7069
[  136.304135][    C0] EXT4-fs (loop6): last error at time 136: ext4_acquire_dquot:7069
[  136.391220][ T9267] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  136.405417][ T9267] EXT4-fs (loop6): 1 truncate cleaned up
[  136.405846][ T9267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.419873][ T9267] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.621791][ T9291] cgroup: none used incorrectly
[  137.323079][ T9322] tipc: Started in network mode
[  137.323096][ T9322] tipc: Node identity 4, cluster identity 4711
[  137.323106][ T9322] tipc: Node number set to 4
[  137.333758][ T9322] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  137.637027][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.8.914'.
[  137.788785][ T9346] netlink: 'syz.1.917': attribute type 1 has an invalid length.
[  137.788857][ T9346] netlink: 'syz.1.917': attribute type 1 has an invalid length.
[  138.619521][ T9391] syz_tun: entered allmulticast mode
[  138.675482][   T30] audit: type=1326 audit(138.650:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9375 comm="syz.7.926" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b79368 code=0x0
[  138.994579][ T9402] Injecting memory failure for pfn 0x11e803 at process virtual address 0x20003000
[  139.012086][ T9402] Memory failure: 0x11e803: recovery action for dirty LRU page: Recovered
[  139.024963][ T9403] loop8: detected capacity change from 0 to 512
[  139.025416][ T9403] EXT4-fs: Ignoring removed i_version option
[  139.046356][ T9403] EXT4-fs (loop8): 1 orphan inode deleted
[  139.046826][ T9403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.249871][ T9429] input: syz0 as /devices/virtual/input/input5
[  139.290085][ T9419] netlink: 'syz.1.936': attribute type 1 has an invalid length.
[  139.348743][ T9435] netlink: 'syz.6.939': attribute type 1 has an invalid length.
[  139.453099][ T9442] netlink: 51 bytes leftover after parsing attributes in process `syz.1.940'.
[  139.457437][ T9435] veth3: entered allmulticast mode
[  139.466697][ T9444] overlayfs: failed to clone upperpath
[  139.471811][ T9441] fuse: Bad value for 'fd'
[  139.488468][ T9435] bond4: (slave veth3): Enslaving as an active interface with a down link
[  139.526960][ T9435] bond4: (slave veth0_to_bond): making interface the new active one
[  139.531912][ T9435] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  139.565137][ T9435] macvlan2: entered promiscuous mode
[  139.565147][ T9435] macvlan2: entered allmulticast mode
[  139.567354][ T9435] bond4: entered promiscuous mode
[  139.567368][ T9435] veth0_to_bond: entered promiscuous mode
[  139.573340][ T9435] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  139.581642][ T9435] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  139.581815][ T9435] bond4: left promiscuous mode
[  139.581824][ T9435] veth0_to_bond: left promiscuous mode
[  139.670764][ T9448] loop6: detected capacity change from 0 to 128
[  139.692363][ T9448] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.719487][ T9448] syz.6.941 (pid 9448) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  139.763091][ T9448] overlayfs: failed to resolve './file0': -2
[  139.776528][ T9451] overlayfs: failed to resolve './file0': -2
[  139.816177][ T5643] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.854138][    C0] net_ratelimit: 72 callbacks suppressed
[  141.316197][   T30] audit: type=1400 audit(141.290:376): lsm=SMACK fn=smack_file_ioctl action=denied subject="_" object="e" requested=r pid=9460 comm="syz.6.944" path="/133/file1" dev="tmpfs" ino=748
[  141.574803][ T9471] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  141.575695][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.579104][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.594625][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.595682][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.595866][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.596038][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.596212][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.596372][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.596539][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.596695][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.596860][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.597019][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.597186][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.597350][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.597505][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.597774][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.597949][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.598126][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.598297][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.598451][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.598612][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.601397][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.601575][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.601744][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.601914][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.602086][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.602249][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.602409][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.602583][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.602738][ T9471] overlay: filesystem on ./bus not supported as upperdir
[  141.673307][ T9468] loop6: detected capacity change from 0 to 512
[  141.673535][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.673587][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.673633][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.673678][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.673722][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.673769][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.673815][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.673859][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.673903][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.673948][ T9472] overlayfs: failed lookup in lower (newroot/136, name='file0', err=-40): overlapping layers
[  141.925556][ T9403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  142.072346][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.283357][ T9487] loop8: detected capacity change from 0 to 2048
[  142.340103][ T9487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.445164][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.952'.
[  142.450988][ T9487] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  142.452446][ T9487] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  142.452467][ T9487] EXT4-fs (loop8): This should not happen!! Data will be lost
[  142.452467][ T9487] 
[  142.452476][ T9487] EXT4-fs (loop8): Total free blocks count 0
[  142.452484][ T9487] EXT4-fs (loop8): Free/Dirty block details
[  142.452516][ T9487] EXT4-fs (loop8): free_blocks=4096
[  142.452534][ T9487] EXT4-fs (loop8): dirty_blocks=64
[  142.452540][ T9487] EXT4-fs (loop8): Block reservation details
[  142.452547][ T9487] EXT4-fs (loop8): i_reserved_data_blocks=4
[  142.492883][ T9486] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  142.592525][ T9511] netlink: 'syz.7.955': attribute type 3 has an invalid length.
[  142.697034][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.7.955'.
[  142.721076][ T9510] tmpfs: User quota inode hardlimit too large.
[  143.099062][ T9522] loop7: detected capacity change from 0 to 512
[  143.116398][ T9522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.271657][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.566813][ T9538] FAULT_INJECTION: forcing a failure.
[  143.566813][ T9538] name failslab, interval 1, probability 0, space 0, times 0
[  143.566835][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.7.964 Not tainted syzkaller #0 PREEMPT 
[  143.566847][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  143.566861][ T9538] Call trace:
[  143.566865][ T9538]  show_stack+0x2c/0x3c (C)
[  143.566885][ T9538]  __dump_stack+0x30/0x40
[  143.566897][ T9538]  dump_stack_lvl+0xd8/0x12c
[  143.566909][ T9538]  dump_stack+0x1c/0x28
[  143.566921][ T9538]  should_fail_ex+0x418/0x58c
[  143.566934][ T9538]  should_failslab+0xc4/0x120
[  143.566947][ T9538]  kmem_cache_alloc_lru_noprof+0x98/0x5d8
[  143.566961][ T9538]  shmem_alloc_inode+0x2c/0x48
[  143.566974][ T9538]  alloc_inode+0x68/0x198
[  143.566985][ T9538]  new_inode+0x20/0x50
[  143.566995][ T9538]  shmem_get_inode+0xac/0x788
[  143.567007][ T9538]  __shmem_file_setup+0x168/0x284
[  143.567018][ T9538]  shmem_zero_setup+0x90/0x130
[  143.567029][ T9538]  mmap_region+0x12f0/0x1c28
[  143.567040][ T9538]  do_mmap+0xb88/0x1104
[  143.567049][ T9538]  vm_mmap_pgoff+0x298/0x46c
[  143.567062][ T9538]  ksys_mmap_pgoff+0xd0/0x5b4
[  143.567071][ T9538]  __arm64_sys_mmap+0x110/0x12c
[  143.567084][ T9538]  invoke_syscall+0x98/0x244
[  143.567096][ T9538]  el0_svc_common+0xec/0x23c
[  143.567108][ T9538]  do_el0_svc+0x4c/0x5c
[  143.567120][ T9538]  el0_svc+0x60/0x1d8
[  143.567132][ T9538]  el0t_64_sync_handler+0x44/0x104
[  143.567143][ T9538]  el0t_64_sync+0x198/0x19c
[  143.571943][ T9526] netlink: 68 bytes leftover after parsing attributes in process `syz.6.959'.
[  143.572275][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.959'.
[  143.701144][ T4710] Bluetooth: hci0: unexpected event 0x1c length: 12 > 5
[  143.715453][ T9540] loop8: detected capacity change from 0 to 128
[  144.015220][ T9550] FAULT_INJECTION: forcing a failure.
[  144.015220][ T9550] name failslab, interval 1, probability 0, space 0, times 0
[  144.015247][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.7.969 Not tainted syzkaller #0 PREEMPT 
[  144.015260][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  144.015277][ T9550] Call trace:
[  144.015280][ T9550]  show_stack+0x2c/0x3c (C)
[  144.015302][ T9550]  __dump_stack+0x30/0x40
[  144.015317][ T9550]  dump_stack_lvl+0xd8/0x12c
[  144.015331][ T9550]  dump_stack+0x1c/0x28
[  144.015345][ T9550]  should_fail_ex+0x418/0x58c
[  144.015360][ T9550]  should_failslab+0xc4/0x120
[  144.015376][ T9550]  __kmalloc_noprof+0x108/0x6c8
[  144.015392][ T9550]  security_key_alloc+0x60/0x380
[  144.015408][ T9550]  key_alloc+0x618/0xd30
[  144.015423][ T9550]  keyring_alloc+0x68/0xe0
[  144.015432][ T9550]  install_process_keyring_to_cred+0x98/0x12c
[  144.015444][ T9550]  keyctl_set_reqkey_keyring+0xf4/0x1e4
[  144.015456][ T9550]  __arm64_sys_keyctl+0x120/0x3e8
[  144.015467][ T9550]  invoke_syscall+0x98/0x244
[  144.015482][ T9550]  el0_svc_common+0xec/0x23c
[  144.015496][ T9550]  do_el0_svc+0x4c/0x5c
[  144.015510][ T9550]  el0_svc+0x60/0x1d8
[  144.015523][ T9550]  el0t_64_sync_handler+0x44/0x104
[  144.015536][ T9550]  el0t_64_sync+0x198/0x19c
[  144.163748][ T9552] netlink: 36 bytes leftover after parsing attributes in process `syz.6.970'.
[  144.217531][ T9556] fuse: Unknown parameter 'default_permissions��P/��zL6)��������O6
[  144.217531][ T9556] 1�P�ˬ4w����!���'
[  144.349038][ T9563] loop6: detected capacity change from 0 to 128
[  144.360168][ T9563] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.375677][ T9559] fscrypt (loop6, inode 12): Unsupported encryption flags (0x46)
[  144.387062][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.974'.
[  144.486041][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.973'.
[  144.489788][ T9568] loop7: detected capacity change from 0 to 1024
[  144.500158][ T9564] 8021q: adding VLAN 0 to HW filter on device bond2
[  144.705453][ T9568] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.705468][ T9568] EXT4-fs: Ignoring removed oldalloc option
[  144.729990][ T9568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  144.751033][ T9564] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.974: bg 0: block 112: padding at end of block bitmap is not set
[  144.772259][ T9564] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm syz.7.974: lblock 0 mapped to illegal pblock 0 (length 1)
[  144.772606][ T9564] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: comm syz.7.974: lblock 0 mapped to illegal pblock 0 (length 1)
[  144.781751][ T9564] gretap0: left promiscuous mode
[  144.807363][ T9564] bond2: (slave gretap0): Enslaving as an active interface with an up link
[  144.812240][ T5643] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.898719][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  144.974156][    C0] net_ratelimit: 59 callbacks suppressed
[  145.036689][ T4710] Bluetooth: hci1: ISO packet too small
[  145.128921][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.980'.
[  145.267188][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.980'.
[  145.317967][ T9595] loop7: detected capacity change from 0 to 512
[  145.372700][ T9595] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  146.384615][ T9608] overlayfs: failed to clone upperpath
[  147.686393][ T9612] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  148.298861][ T9639] loop8: detected capacity change from 0 to 512
[  148.331943][ T9639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  148.331984][ T9639] System zones: 1-12
[  148.345393][ T9639] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.993: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  148.345409][ T9639] loop8: lost filesystem error report for type 5 error -117
[  148.345614][ T9639] EXT4-fs (loop8): 1 orphan inode deleted
[  148.346167][ T9639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.386798][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.386815][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.386824][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.386832][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.386840][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.386848][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.386855][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.386862][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.386868][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.386875][ T9626] tc action pedit unable to extract header offset for header type (0x4)
[  148.415535][ T9626] netlink: 'syz.6.989': attribute type 3 has an invalid length.
[  148.423591][ T9646] loop7: detected capacity change from 0 to 512
[  148.440236][ T9646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  148.440270][ T9646] System zones: 1-12
[  148.441285][ T9646] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #12: comm syz.7.994: missing EA_INODE flag
[  148.441306][ T9646] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  148.444118][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  148.444136][    C0] EXT4-fs (loop7): initial error at time 148: ext4_xattr_inode_iget:437: inode 12
[  148.444152][    C0] EXT4-fs (loop7): last error at time 148: ext4_xattr_inode_iget:437: inode 12
[  148.456053][ T9646] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.994: error while reading EA inode 12 err=-117
[  148.456082][ T9646] loop7: lost filesystem error report for type 5 error -117
[  148.475843][ T9646] EXT4-fs (loop7): 1 orphan inode deleted
[  148.476357][ T9646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.598701][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.848763][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.027587][ T9666] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  149.067573][ T9671] FAULT_INJECTION: forcing a failure.
[  149.067573][ T9671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.067593][ T9671] CPU: 0 UID: 0 PID: 9671 Comm: syz.8.999 Not tainted syzkaller #0 PREEMPT 
[  149.067604][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  149.067618][ T9671] Call trace:
[  149.067621][ T9671]  show_stack+0x2c/0x3c (C)
[  149.067641][ T9671]  __dump_stack+0x30/0x40
[  149.067654][ T9671]  dump_stack_lvl+0xd8/0x12c
[  149.067665][ T9671]  dump_stack+0x1c/0x28
[  149.067676][ T9671]  should_fail_ex+0x418/0x58c
[  149.067689][ T9671]  should_fail+0x14/0x24
[  149.067700][ T9671]  should_fail_usercopy+0x20/0x30
[  149.067712][ T9671]  strncpy_from_user+0x48/0x388
[  149.067721][ T9671]  setxattr_copy+0x88/0x1c0
[  149.067731][ T9671]  path_setxattrat+0x130/0x2a8
[  149.067740][ T9671]  __arm64_sys_setxattr+0xd0/0xec
[  149.067748][ T9671]  invoke_syscall+0x98/0x244
[  149.067761][ T9671]  el0_svc_common+0xec/0x23c
[  149.067772][ T9671]  do_el0_svc+0x4c/0x5c
[  149.067784][ T9671]  el0_svc+0x60/0x1d8
[  149.067795][ T9671]  el0t_64_sync_handler+0x44/0x104
[  149.067805][ T9671]  el0t_64_sync+0x198/0x19c
[  149.334646][ T9699] binder: 9697:9699 ioctl c0306201 20000100 returned -14
[  149.968533][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1013'.
[  149.968552][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1013'.
[  149.968571][ T9726] netlink: 'syz.8.1013': attribute type 11 has an invalid length.
[  150.073340][ T9729] FAULT_INJECTION: forcing a failure.
[  150.073340][ T9729] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.073367][ T9729] CPU: 0 UID: 0 PID: 9729 Comm: syz.8.1014 Not tainted syzkaller #0 PREEMPT 
[  150.073387][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  150.073412][ T9729] Call trace:
[  150.073417][ T9729]  show_stack+0x2c/0x3c (C)
[  150.073437][ T9729]  __dump_stack+0x30/0x40
[  150.073450][ T9729]  dump_stack_lvl+0xd8/0x12c
[  150.073462][ T9729]  dump_stack+0x1c/0x28
[  150.073473][ T9729]  should_fail_ex+0x418/0x58c
[  150.073486][ T9729]  should_fail+0x14/0x24
[  150.073496][ T9729]  should_fail_usercopy+0x20/0x30
[  150.073508][ T9729]  strncpy_from_user+0x48/0x388
[  150.073518][ T9729]  setxattr_copy+0x88/0x1c0
[  150.073527][ T9729]  path_setxattrat+0x130/0x2a8
[  150.073536][ T9729]  __arm64_sys_setxattr+0xd0/0xec
[  150.073545][ T9729]  invoke_syscall+0x98/0x244
[  150.073557][ T9729]  el0_svc_common+0xec/0x23c
[  150.073568][ T9729]  do_el0_svc+0x4c/0x5c
[  150.073579][ T9729]  el0_svc+0x60/0x1d8
[  150.073591][ T9729]  el0t_64_sync_handler+0x44/0x104
[  150.073601][ T9729]  el0t_64_sync+0x198/0x19c
[  150.189535][ T6541] net_ratelimit: 49 callbacks suppressed
[  150.392487][ T9736] netlink: 'syz.1.1010': attribute type 10 has an invalid length.
[  150.393943][ T9736] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  150.420504][ T9740] loop8: detected capacity change from 0 to 128
[  150.437658][ T9740] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  150.492258][ T8316] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  150.577324][ T9744] fuse: Unknown parameter '�H\��ḡ^����0x0000000000000009'
[  150.752389][ T9744] Bluetooth: Invalid esc byte 0x04
[  150.838849][ T9749] loop8: detected capacity change from 0 to 512
[  150.871038][ T9749] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  150.880774][ T9749] EXT4-fs (loop8): 1 truncate cleaned up
[  150.882525][ T9749] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.933325][ T9749] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #2: block 13: comm syz.8.1021: bad entry in directory: directory entry overrun - offset=92, inode=1, rec_len=1024, size=1024 fake=0
[  151.025471][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.184922][ T9756] bond2: (slave gretap0): Releasing backup interface
[  151.186794][ T9758] FAULT_INJECTION: forcing a failure.
[  151.186794][ T9758] name failslab, interval 1, probability 0, space 0, times 0
[  151.186817][ T9758] CPU: 0 UID: 0 PID: 9758 Comm: syz.8.1023 Not tainted syzkaller #0 PREEMPT 
[  151.186836][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  151.186853][ T9758] Call trace:
[  151.186857][ T9758]  show_stack+0x2c/0x3c (C)
[  151.186878][ T9758]  __dump_stack+0x30/0x40
[  151.186891][ T9758]  dump_stack_lvl+0xd8/0x12c
[  151.186904][ T9758]  dump_stack+0x1c/0x28
[  151.186916][ T9758]  should_fail_ex+0x418/0x58c
[  151.186929][ T9758]  should_failslab+0xc4/0x120
[  151.186942][ T9758]  kmem_cache_alloc_lru_noprof+0x98/0x5d8
[  151.186955][ T9758]  __d_alloc+0x50/0x600
[  151.186964][ T9758]  d_alloc_pseudo+0x2c/0xd8
[  151.186973][ T9758]  alloc_path_pseudo+0xe8/0x1d4
[  151.186982][ T9758]  alloc_file_pseudo+0xb0/0x198
[  151.186990][ T9758]  __shmem_file_setup+0x210/0x284
[  151.187002][ T9758]  shmem_file_setup+0x40/0x54
[  151.187012][ T9758]  memfd_alloc_file+0x9c/0x2f0
[  151.187022][ T9758]  __arm64_sys_memfd_create+0x318/0x3ec
[  151.187032][ T9758]  invoke_syscall+0x98/0x244
[  151.187044][ T9758]  el0_svc_common+0xec/0x23c
[  151.187061][ T9758]  do_el0_svc+0x4c/0x5c
[  151.187073][ T9758]  el0_svc+0x60/0x1d8
[  151.187084][ T9758]  el0t_64_sync_handler+0x44/0x104
[  151.187095][ T9758]  el0t_64_sync+0x198/0x19c
[  151.248193][ T9760] overlayfs: upper fs does not support tmpfile.
[  151.287451][ T9756] batman_adv: batadv0: Interface deactivated: veth0
[  151.287463][ T9756] batman_adv: batadv0: Removing interface: veth0
[  151.308583][ T9756] bridge_slave_0: left allmulticast mode
[  151.308595][ T9756] bridge_slave_0: left promiscuous mode
[  151.308684][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.326179][ T9756] bridge_slave_1: left allmulticast mode
[  151.326189][ T9756] bridge_slave_1: left promiscuous mode
[  151.326253][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.382950][ T9762] loop8: detected capacity change from 0 to 128
[  151.389310][ T9762] EXT4-fs: quotafile must be on filesystem root
[  151.937329][ T9769] fuse: Bad value for 'fd'
[  152.048313][ T9756] bond0: (slave bond_slave_0): Releasing backup interface
[  152.069574][ T9756] bond0: (slave bond_slave_1): Releasing backup interface
[  152.098950][ T9756] team0: Port device team_slave_0 removed
[  152.109111][ T9756] team0: Port device team_slave_1 removed
[  152.109516][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.109528][ T9756] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.126026][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.126037][ T9756] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.135746][ T5680] wg1 speed is unknown, defaulting to 1000
[  152.207672][ T9772] vlan2: entered promiscuous mode
[  152.207680][ T9772] hsr0: entered promiscuous mode
[  152.244457][ T9780] [U] �
[  152.252565][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'.
[  152.271304][ T9772] hsr_slave_0: left promiscuous mode
[  152.271916][ T9772] hsr_slave_1: left promiscuous mode
[  152.458464][ T9777] netlink: 'syz.7.1029': attribute type 3 has an invalid length.
[  152.503591][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  152.503611][ T9787] netlink: 'syz.1.1031': attribute type 30 has an invalid length.
[  152.542507][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  152.542527][ T9787] netlink: 'syz.1.1031': attribute type 30 has an invalid length.
[  152.594320][ T8285] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.594340][ T8285] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.594354][ T8285] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.594369][ T8285] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.861028][ T9807] loop7: detected capacity change from 0 to 1024
[  153.150933][ T9821] Invalid source name
[  153.150941][ T9821] UBIFS error (pid: 9821): cannot open "./file0", error -22
[  153.536685][ T9846] FAULT_INJECTION: forcing a failure.
[  153.536685][ T9846] name failslab, interval 1, probability 0, space 0, times 0
[  153.536701][ T9846] CPU: 0 UID: 0 PID: 9846 Comm: syz.7.1043 Not tainted syzkaller #0 PREEMPT 
[  153.536714][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  153.536730][ T9846] Call trace:
[  153.536733][ T9846]  show_stack+0x2c/0x3c (C)
[  153.536755][ T9846]  __dump_stack+0x30/0x40
[  153.536769][ T9846]  dump_stack_lvl+0xd8/0x12c
[  153.536781][ T9846]  dump_stack+0x1c/0x28
[  153.536792][ T9846]  should_fail_ex+0x418/0x58c
[  153.536805][ T9846]  should_failslab+0xc4/0x120
[  153.536818][ T9846]  __kmalloc_cache_noprof+0x94/0x5fc
[  153.536827][ T9846]  vicodec_open+0xe8/0x9a0
[  153.536839][ T9846]  v4l2_open+0x198/0x338
[  153.536852][ T9846]  chrdev_open+0x398/0x3e8
[  153.536863][ T9846]  do_dentry_open+0x5c4/0xfbc
[  153.536874][ T9846]  vfs_open+0x44/0x2dc
[  153.536884][ T9846]  path_openat+0x1084/0x18f0
[  153.536895][ T9846]  do_file_open+0x1c8/0x2e8
[  153.536904][ T9846]  do_sys_openat2+0x114/0x1e8
[  153.536915][ T9846]  do_sys_open+0xb0/0xe0
[  153.536926][ T9846]  __arm64_sys_openat+0xa8/0xc4
[  153.536937][ T9846]  invoke_syscall+0x98/0x244
[  153.536950][ T9846]  el0_svc_common+0xec/0x23c
[  153.536962][ T9846]  do_el0_svc+0x4c/0x5c
[  153.536973][ T9846]  el0_svc+0x60/0x1d8
[  153.536985][ T9846]  el0t_64_sync_handler+0x44/0x104
[  153.536995][ T9846]  el0t_64_sync+0x198/0x19c
[  153.616043][ T4710] Bluetooth: hci2: command 0x0401 tx timeout
[  155.214111][    C0] net_ratelimit: 98 callbacks suppressed
[  158.331609][ T9869] loop6: detected capacity change from 0 to 512
[  158.345836][ T9869] FAT-fs (loop6): bogus number of FAT sectors
[  158.345845][ T9869] FAT-fs (loop6): Can't find a valid FAT filesystem
[  158.417893][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'.
[  158.428348][ T9865] loop8: detected capacity change from 0 to 4096
[  158.439663][ T9865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  158.439685][ T9865] EXT4-fs (loop8): Test dummy encryption mode enabled
[  158.448094][ T9865] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  158.448134][ T9865] System zones: 0-5
[  158.449174][ T9865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.733933][ T9885] loop7: detected capacity change from 0 to 512
[  158.742103][ T9885] EXT4-fs: Ignoring removed i_version option
[  158.742114][ T9885] EXT4-fs: Ignoring removed nobh option
[  158.742142][ T9885] ext4: Unknown parameter 'obj_role'
[  158.803939][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.952677][ T9888] loop6: detected capacity change from 0 to 128
[  158.965544][ T9888] vfat: Unknown parameter '01777777777777777777777��V<x�YL��w��@[v��k������֬��g�P��ɟ�R��*P4x��+�4#�ԟo�`Jݿ�Jb'������KN�'
[  159.356553][ T9917] Injecting memory failure for pfn 0x17c001 at process virtual address 0x20000000
[  159.382818][ T9917] Memory failure: 0x17c001: Sending SIGBUS to syz.5.1064:9917 due to hardware memory corruption
[  159.382873][ T9917] Memory failure: 0x17c001: recovery action for dirty LRU page: Recovered
[  159.382898][ T9917] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20001000
[  159.382995][ T9917] Memory failure: 0x2193cf: Sending SIGBUS to syz.5.1064:9917 due to hardware memory corruption
[  159.383019][ T9917] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed
[  159.410355][ T9920] loop8: detected capacity change from 0 to 512
[  159.425769][ T9920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  159.425818][ T9920] System zones: 1-12
[  159.426464][ T9920] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.1065: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  159.426479][ T9920] loop8: lost filesystem error report for type 5 error -117
[  159.426654][ T9920] EXT4-fs (loop8): 1 orphan inode deleted
[  159.427983][ T9920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.460520][ T9926] loop6: detected capacity change from 0 to 512
[  159.476151][ T9926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  159.476189][ T9926] System zones: 1-12
[  159.476766][ T9926] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.1066: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  159.476788][ T9926] loop6: lost filesystem error report for type 5 error -117
[  159.480029][ T9926] EXT4-fs (loop6): 1 orphan inode deleted
[  159.480515][ T9926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.541843][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.560864][ T5643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.605551][ T9930] loop8: detected capacity change from 0 to 512
[  159.626959][ T9930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.254100][    C0] net_ratelimit: 49 callbacks suppressed
[  160.388867][ T9941] loop6: detected capacity change from 0 to 128
[  160.397008][ T9941] FAT-fs (loop6): bogus number of reserved sectors
[  160.397025][ T9941] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  160.397033][ T9941] FAT-fs (loop6): Can't find a valid FAT filesystem
[  160.498016][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.547711][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'.
[  160.550362][ T9949] loop7: detected capacity change from 0 to 512
[  160.550721][ T9949] EXT4-fs: Ignoring removed nobh option
[  160.677577][ T9949] EXT4-fs error (device loop7): ext4_init_orphan_info:583: comm syz.7.1071: inode #0: comm syz.7.1071: iget: illegal inode #
[  160.677595][ T9949] loop7: lost filesystem error report for type 5 error -117
[  160.678451][ T9949] EXT4-fs (loop7): Remounting filesystem read-only
[  160.678474][ T9949] EXT4-fs (loop7): get orphan inode failed
[  160.678718][ T9949] EXT4-fs (loop7): mount failed
[  160.684117][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  160.684132][    C0] EXT4-fs (loop7): initial error at time 160: ext4_init_orphan_info:583
[  160.684146][    C0] EXT4-fs (loop7): last error at time 160: ext4_init_orphan_info:583
[  161.463694][ T9946] bond1 (unregistering): Released all slaves
[  161.485405][ T9984] loop8: detected capacity change from 0 to 512
[  161.512935][ T9984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  161.513066][ T9984] System zones: 1-12
[  161.523095][ T9984] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.1081: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  161.523121][ T9984] loop8: lost filesystem error report for type 5 error -117
[  161.523356][ T9984] EXT4-fs (loop8): 1 orphan inode deleted
[  161.540764][ T9984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.551338][ T5677] wg1 speed is unknown, defaulting to 1000
[  161.551361][ T5677] syz0: Port: 1 Link DOWN
[  161.556772][ T6515] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.564558][ T6515] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.564579][ T6515] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.564595][ T6515] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.677369][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1082'.
[  161.716149][ T9992] 8021q: adding VLAN 0 to HW filter on device bond5
[  162.165561][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.632161][T10019] EXT4-fs: Ignoring removed nobh option
[  162.637388][T10019] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  162.641718][T10019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[  162.641811][T10019] EXT4-fs (loop7): orphan cleanup on readonly fs
[  162.652293][T10019] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.1090: attempt to clear invalid blocks 1024 len 1
[  162.652315][T10019] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  162.654121][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  162.654134][    C0] EXT4-fs (loop7): initial error at time 162: ext4_clear_blocks:876: inode 11
[  162.654152][    C0] EXT4-fs (loop7): last error at time 162: ext4_clear_blocks:876: inode 11
[  162.671302][T10019] EXT4-fs (loop7): Remounting filesystem read-only
[  162.676962][T10017] FAULT_INJECTION: forcing a failure.
[  162.676962][T10017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.676983][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.8.1087 Not tainted syzkaller #0 PREEMPT 
[  162.676995][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  162.677010][T10017] Call trace:
[  162.677014][T10017]  show_stack+0x2c/0x3c (C)
[  162.677035][T10017]  __dump_stack+0x30/0x40
[  162.677047][T10017]  dump_stack_lvl+0xd8/0x12c
[  162.677065][T10017]  dump_stack+0x1c/0x28
[  162.677076][T10017]  should_fail_ex+0x418/0x58c
[  162.677090][T10017]  should_fail+0x14/0x24
[  162.677101][T10017]  should_fail_usercopy+0x20/0x30
[  162.677113][T10017]  __arm64_sys_openat2+0x19c/0x404
[  162.677126][T10017]  invoke_syscall+0x98/0x244
[  162.677138][T10017]  el0_svc_common+0xec/0x23c
[  162.677150][T10017]  do_el0_svc+0x4c/0x5c
[  162.677161][T10017]  el0_svc+0x60/0x1d8
[  162.677172][T10017]  el0t_64_sync_handler+0x44/0x104
[  162.677183][T10017]  el0t_64_sync+0x198/0x19c
[  162.679535][T10019] EXT4-fs (loop7): 1 truncate cleaned up
[  162.681613][T10019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  162.909620][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  163.046728][T10046] FAULT_INJECTION: forcing a failure.
[  163.046728][T10046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.046751][T10046] CPU: 0 UID: 0 PID: 10046 Comm: syz.6.1098 Not tainted syzkaller #0 PREEMPT 
[  163.046762][T10046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  163.046775][T10046] Call trace:
[  163.046778][T10046]  show_stack+0x2c/0x3c (C)
[  163.046797][T10046]  __dump_stack+0x30/0x40
[  163.046810][T10046]  dump_stack_lvl+0xd8/0x12c
[  163.046822][T10046]  dump_stack+0x1c/0x28
[  163.046833][T10046]  should_fail_ex+0x418/0x58c
[  163.046845][T10046]  should_fail+0x14/0x24
[  163.046856][T10046]  should_fail_usercopy+0x20/0x30
[  163.046868][T10046]  strncpy_from_user+0x48/0x388
[  163.046878][T10046]  setxattr_copy+0x88/0x1c0
[  163.046887][T10046]  path_setxattrat+0x130/0x2a8
[  163.046896][T10046]  __arm64_sys_setxattr+0xd0/0xec
[  163.046904][T10046]  invoke_syscall+0x98/0x244
[  163.046917][T10046]  el0_svc_common+0xec/0x23c
[  163.046928][T10046]  do_el0_svc+0x4c/0x5c
[  163.046940][T10046]  el0_svc+0x60/0x1d8
[  163.046951][T10046]  el0t_64_sync_handler+0x44/0x104
[  163.046961][T10046]  el0t_64_sync+0x198/0x19c
[  163.129713][T10060] overlayfs: failed to resolve '/��i~rtkԪG˽�f����y�E��)�6���6�s���q�v��ۿ��?�O�����eL�Ξ��O�������-�e�l�>����]�'�����v�"��x�����XDX&Ɵ_X9�H;��"&[��n��M���Dω��_j������bI~�[A��d���
[  163.129713][T10060] ��o': -2
[  163.309917][T10070] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  163.321413][T10070] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1103: bad orphan inode 131083
[  163.321434][T10070] loop6: lost filesystem error report for type 5 error -117
[  163.322545][T10070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.345188][T10070] EXT4-fs error (device loop6): ext4_empty_dir:3093: inode #2: block 13: comm syz.6.1103: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  163.345420][T10070] EXT4-fs warning (device loop6): ext4_empty_dir:3096: inode #2: comm syz.6.1103: directory missing '.'
[  163.399695][T10076] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  163.411092][ T5643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.460277][T10083] Injecting memory failure for pfn 0x142da6 at process virtual address 0x20000000
[  163.481717][T10083] Memory failure: 0x142da6: Sending SIGBUS to syz.5.1105:10083 due to hardware memory corruption
[  163.481776][T10083] Memory failure: 0x142da6: recovery action for dirty LRU page: Recovered
[  163.481803][T10083] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20001000
[  163.481825][T10083] Memory failure: 0x2193cf: Sending SIGBUS to syz.5.1105:10083 due to hardware memory corruption
[  163.481839][T10083] Memory failure: 0x2193cf: recovery action for already poisoned page: Failed
[  163.498845][T10085] set_capacity_and_notify: 2 callbacks suppressed
[  163.498860][T10085] loop6: detected capacity change from 0 to 128
[  163.499267][T10085] EXT4-fs: Ignoring removed mblk_io_submit option
[  163.503618][T10085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  163.503646][T10085] System zones: 1-3, 19-19, 35-36
[  163.515122][T10085] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  163.583245][ T5643] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.646827][T10091] loop6: detected capacity change from 0 to 512
[  163.657863][T10091] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  163.680951][T10091] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4223: comm syz.6.1107: Allocating blocks 41-42 which overlap fs metadata
[  163.680968][T10091] loop6: lost filesystem error report for type 5 error -117
[  163.684113][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  163.684127][    C0] EXT4-fs (loop6): initial error at time 163: ext4_mb_mark_diskspace_used:4223
[  163.684145][    C0] EXT4-fs (loop6): last error at time 163: ext4_mb_mark_diskspace_used:4223
[  163.703120][T10091] EXT4-fs (loop6): Remounting filesystem read-only
[  163.703219][T10091] Quota error (device loop6): write_blk: dquota write failed
[  163.703231][T10091] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  163.703305][T10091] Quota error (device loop6): write_blk: dquota write failed
[  163.703343][T10091] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  163.703408][T10091] EXT4-fs (loop6): 1 truncate cleaned up
[  163.703912][T10091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.022148][ T4710] Bluetooth: hci3: command 0x2016 tx timeout
[  164.128318][T10107] syzkaller0: entered promiscuous mode
[  164.128332][T10107] syzkaller0: entered allmulticast mode
[  164.263021][   T30] audit: type=1326 audit(164.230:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10116 comm="syz.1.1114" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  164.263044][   T30] audit: type=1326 audit(164.230:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10116 comm="syz.1.1114" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  164.283989][   T30] audit: type=1326 audit(164.250:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10116 comm="syz.1.1114" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  164.284020][   T30] audit: type=1326 audit(164.250:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10116 comm="syz.1.1114" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  164.284039][   T30] audit: type=1326 audit(164.250:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10116 comm="syz.1.1114" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  164.290889][   T30] audit: type=1326 audit(164.260:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10116 comm="syz.1.1114" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff9b379368 code=0x7ffc0000
[  164.352931][T10121] ip6tnl1: entered promiscuous mode
[  164.400905][T10113] loop8: detected capacity change from 0 to 1024
[  164.429046][T10113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  164.517976][ T5643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.569850][T10130] overlayfs: failed to clone upperpath
[  164.592677][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  164.708981][T10136] FAULT_INJECTION: forcing a failure.
[  164.708981][T10136] name failslab, interval 1, probability 0, space 0, times 0
[  164.709005][T10136] CPU: 0 UID: 0 PID: 10136 Comm: syz.6.1119 Not tainted syzkaller #0 PREEMPT 
[  164.709017][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  164.709031][T10136] Call trace:
[  164.709034][T10136]  show_stack+0x2c/0x3c (C)
[  164.709053][T10136]  __dump_stack+0x30/0x40
[  164.709072][T10136]  dump_stack_lvl+0xd8/0x12c
[  164.709085][T10136]  dump_stack+0x1c/0x28
[  164.709096][T10136]  should_fail_ex+0x418/0x58c
[  164.709109][T10136]  should_failslab+0xc4/0x120
[  164.709122][T10136]  kmem_cache_alloc_lru_noprof+0x98/0x5d8
[  164.709135][T10136]  __d_alloc+0x50/0x600
[  164.709144][T10136]  d_alloc+0x54/0x17c
[  164.709152][T10136]  d_alloc_name+0x98/0xe0
[  164.709160][T10136]  proc_setup_self+0x4c/0x198
[  164.709173][T10136]  proc_fill_super+0x4d4/0x6fc
[  164.709186][T10136]  vfs_get_super+0xb8/0x148
[  164.709195][T10136]  get_tree_nodev+0x2c/0x3c
[  164.709204][T10136]  proc_get_tree+0x28/0x38
[  164.709216][T10136]  vfs_get_tree+0x90/0x28c
[  164.709225][T10136]  fc_mount+0x24/0xac
[  164.709235][T10136]  do_new_mount+0x2a4/0x538
[  164.709245][T10136]  path_mount+0x5f0/0xa88
[  164.709255][T10136]  do_mount+0xe8/0x148
[  164.709265][T10136]  __arm64_sys_mount+0x33c/0x388
[  164.709276][T10136]  invoke_syscall+0x98/0x244
[  164.709288][T10136]  el0_svc_common+0xec/0x23c
[  164.709300][T10136]  do_el0_svc+0x4c/0x5c
[  164.709311][T10136]  el0_svc+0x60/0x1d8
[  164.709322][T10136]  el0t_64_sync_handler+0x44/0x104
[  164.709333][T10136]  el0t_64_sync+0x198/0x19c
[  164.709343][T10136] proc_fill_super: can't allocate /proc/self
[  164.709572][T10139] FAULT_INJECTION: forcing a failure.
[  164.709572][T10139] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.709591][T10139] CPU: 0 UID: 0 PID: 10139 Comm: syz.8.1121 Not tainted syzkaller #0 PREEMPT 
[  164.709607][T10139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  164.709620][T10139] Call trace:
[  164.709622][T10139]  show_stack+0x2c/0x3c (C)
[  164.709636][T10139]  __dump_stack+0x30/0x40
[  164.709648][T10139]  dump_stack_lvl+0xd8/0x12c
[  164.709660][T10139]  dump_stack+0x1c/0x28
[  164.709670][T10139]  should_fail_ex+0x418/0x58c
[  164.709682][T10139]  should_fail+0x14/0x24
[  164.709693][T10139]  should_fail_usercopy+0x20/0x30
[  164.709705][T10139]  strncpy_from_user+0x48/0x388
[  164.709714][T10139]  setxattr_copy+0x88/0x1c0
[  164.709723][T10139]  path_setxattrat+0x130/0x2a8
[  164.709731][T10139]  __arm64_sys_setxattr+0xd0/0xec
[  164.709740][T10139]  invoke_syscall+0x98/0x244
[  164.709752][T10139]  el0_svc_common+0xec/0x23c
[  164.709763][T10139]  do_el0_svc+0x4c/0x5c
[  164.709775][T10139]  el0_svc+0x60/0x1d8
[  164.709785][T10139]  el0t_64_sync_handler+0x44/0x104
[  164.709795][T10139]  el0t_64_sync+0x198/0x19c
[  164.959761][T10146] loop8: detected capacity change from 0 to 1024
[  164.976511][T10146] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  164.976557][T10146] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  164.980657][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  164.980730][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  164.980785][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  164.980838][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  164.980904][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  164.980961][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  164.981050][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  164.981112][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  164.981171][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  164.981219][T10148] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1123'.
[  165.016035][T10146] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  165.016155][T10146] EXT4-fs (loop8): orphan cleanup on readonly fs
[  165.032256][T10146] EXT4-fs error (device loop8): ext4_quota_enable:7256: comm syz.8.1123: Bad quota inum: 9, type: 2
[  165.032282][T10146] loop8: lost filesystem error report for type 5 error -117
[  165.032780][T10146] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix.
[  165.033098][T10146] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  165.033539][T10146] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  165.145606][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.317566][T10168] loop8: detected capacity change from 0 to 256
[  165.322153][T10168] vfat: Deprecated parameter 'posix'
[  165.322161][T10168] FAT-fs: "posix" option is obsolete, not supported now
[  165.339880][T10167] net_ratelimit: 138 callbacks suppressed
[  165.507312][T10182] FAULT_INJECTION: forcing a failure.
[  165.507312][T10182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.507336][T10182] CPU: 0 UID: 0 PID: 10182 Comm: syz.7.1133 Not tainted syzkaller #0 PREEMPT 
[  165.507349][T10182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  165.507364][T10182] Call trace:
[  165.507367][T10182]  show_stack+0x2c/0x3c (C)
[  165.507391][T10182]  __dump_stack+0x30/0x40
[  165.507407][T10182]  dump_stack_lvl+0xd8/0x12c
[  165.507418][T10182]  dump_stack+0x1c/0x28
[  165.507433][T10182]  should_fail_ex+0x418/0x58c
[  165.507446][T10182]  should_fail+0x14/0x24
[  165.507458][T10182]  should_fail_usercopy+0x20/0x30
[  165.507471][T10182]  strncpy_from_user+0x48/0x388
[  165.507480][T10182]  setxattr_copy+0x88/0x1c0
[  165.507490][T10182]  path_setxattrat+0x130/0x2a8
[  165.507499][T10182]  __arm64_sys_setxattr+0xd0/0xec
[  165.507507][T10182]  invoke_syscall+0x98/0x244
[  165.507520][T10182]  el0_svc_common+0xec/0x23c
[  165.507532][T10182]  do_el0_svc+0x4c/0x5c
[  165.507543][T10182]  el0_svc+0x60/0x1d8
[  165.507555][T10182]  el0t_64_sync_handler+0x44/0x104
[  165.507566][T10182]  el0t_64_sync+0x198/0x19c
[  166.357712][T10195] netlink: 'syz.7.1138': attribute type 1 has an invalid length.
[  166.412164][T10208] loop8: detected capacity change from 0 to 1024
[  166.429588][T10208] EXT4-fs: Ignoring removed bh option
[  166.437875][T10208] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  166.454868][T10208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.478453][T10195] 8021q: adding VLAN 0 to HW filter on device bond3
[  166.557521][T10220] overlayfs: failed to resolve './bus': -2
[  166.619426][T10221] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  166.681705][T10195] bond3: (slave bridge1): making interface the new active one
[  166.693848][T10195] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  167.167107][T10252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.342599][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.222013][T10267] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  168.558790][T10355] overlayfs: failed to resolve './bus': -2
[  168.922555][T10376] loop6: detected capacity change from 0 to 1024
[  168.940895][T10376] EXT4-fs: Ignoring removed bh option
[  168.945991][T10376] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  168.968273][T10376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.978679][ T4724] Bluetooth: hci1: command 0x0406 tx timeout
[  169.101802][T10384] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  169.120981][T10384] loop8: detected capacity change from 0 to 512
[  170.150474][ T5643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.461643][T10407] FAULT_INJECTION: forcing a failure.
[  170.461643][T10407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  170.461661][T10407] CPU: 0 UID: 0 PID: 10407 Comm: syz.7.1172 Not tainted syzkaller #0 PREEMPT 
[  170.461672][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  170.461686][T10407] Call trace:
[  170.461689][T10407]  show_stack+0x2c/0x3c (C)
[  170.461711][T10407]  __dump_stack+0x30/0x40
[  170.461725][T10407]  dump_stack_lvl+0xd8/0x12c
[  170.461737][T10407]  dump_stack+0x1c/0x28
[  170.461748][T10407]  should_fail_ex+0x418/0x58c
[  170.461762][T10407]  should_fail+0x14/0x24
[  170.461773][T10407]  should_fail_usercopy+0x20/0x30
[  170.461785][T10407]  strncpy_from_user+0x48/0x388
[  170.461795][T10407]  setxattr_copy+0x88/0x1c0
[  170.461804][T10407]  path_setxattrat+0x130/0x2a8
[  170.461814][T10407]  __arm64_sys_setxattr+0xd0/0xec
[  170.461822][T10407]  invoke_syscall+0x98/0x244
[  170.461835][T10407]  el0_svc_common+0xec/0x23c
[  170.461847][T10407]  do_el0_svc+0x4c/0x5c
[  170.461858][T10407]  el0_svc+0x60/0x1d8
[  170.461869][T10407]  el0t_64_sync_handler+0x44/0x104
[  170.461880][T10407]  el0t_64_sync+0x198/0x19c
[  171.065592][    C0] net_ratelimit: 164 callbacks suppressed
[  171.426910][T10452] sch_tbf: burst 0 is lower than device veth0 mtu (1514) !
[  171.453118][T10452] 9p: Bad value for 'wfdno'
[  171.463757][T10454] __nla_validate_parse: 42 callbacks suppressed
[  171.463771][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.465304][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.465378][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.465443][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.465505][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.465564][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.465623][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.465681][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.465824][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.465884][T10454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1182'.
[  171.702228][T10458] loop7: detected capacity change from 0 to 512
[  171.715700][T10458] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  171.715736][T10458] System zones: 1-12
[  171.716909][T10458] EXT4-fs error (device loop7): ext4_xattr_inode_iget:473: comm syz.7.1183: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  171.716924][T10458] loop7: lost filesystem error report for type 5 error -117
[  171.717133][T10458] EXT4-fs (loop7): 1 orphan inode deleted
[  171.717982][T10458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.721239][T10464] x_tables: duplicate underflow at hook 2
[  171.721667][T10463] FAULT_INJECTION: forcing a failure.
[  171.721667][T10463] name failslab, interval 1, probability 0, space 0, times 0
[  171.721691][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.6.1185 Not tainted syzkaller #0 PREEMPT 
[  171.721708][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  171.721724][T10463] Call trace:
[  171.721727][T10463]  show_stack+0x2c/0x3c (C)
[  171.721749][T10463]  __dump_stack+0x30/0x40
[  171.721761][T10463]  dump_stack_lvl+0xd8/0x12c
[  171.721773][T10463]  dump_stack+0x1c/0x28
[  171.721784][T10463]  should_fail_ex+0x418/0x58c
[  171.721797][T10463]  should_failslab+0xc4/0x120
[  171.721810][T10463]  kmem_cache_alloc_noprof+0x94/0x5d4
[  171.721823][T10463]  do_getname+0x48/0x234
[  171.721832][T10463]  getname_flags+0x2c/0x3c
[  171.721839][T10463]  path_setxattrat+0x170/0x2a8
[  171.721849][T10463]  __arm64_sys_setxattr+0xd0/0xec
[  171.721857][T10463]  invoke_syscall+0x98/0x244
[  171.721870][T10463]  el0_svc_common+0xec/0x23c
[  171.721881][T10463]  do_el0_svc+0x4c/0x5c
[  171.721892][T10463]  el0_svc+0x60/0x1d8
[  171.721904][T10463]  el0t_64_sync_handler+0x44/0x104
[  171.721915][T10463]  el0t_64_sync+0x198/0x19c
[  171.799260][ T6008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.012566][T10482] loop8: detected capacity change from 0 to 512
[  172.026790][T10482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  172.026826][T10482] System zones: 1-12
[  172.027228][T10482] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.1191: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  172.027242][T10482] loop8: lost filesystem error report for type 5 error -117
[  172.027423][T10482] EXT4-fs (loop8): 1 orphan inode deleted
[  172.027901][T10482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.091763][ T8316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.203869][T10491] loop8: detected capacity change from 0 to 128
[  172.271568][T10501] loop6: detected capacity change from 0 to 512
[  172.284544][T10501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002]
[  172.284597][T10501] System zones: 1-12
[  172.292817][T10501] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.1197: EA inode 11 has unexpected i_nlink=0 ref_count=1
[  172.292847][T10501] loop6: lost filesystem error report for type 5 error -117
[  172.295052][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  172.295073][    C0] EXT4-fs (loop6): initial error at time 172: ext4_xattr_inode_iget:473
[  172.295099][    C0] EXT4-fs (loop6): last error at time 172: ext4_xattr_inode_iget:473
[  172.302134][T10501] EXT4-fs (loop6): 1 orphan inode deleted
[  172.302615][T10501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.387715][ T5643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.318589][T10534] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  173.536082][T10528] loop7: detected capacity change from 0 to 32768
[  173.562048][T10540] loop6: detected capacity change from 0 to 512
[  173.565131][T10528]  loop7: p1 p9 p11
[  173.580311][T10540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.607222][T10540] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[  173.607239][T10540] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  173.607283][T10540] vhci_hcd vhci_hcd.0: Device attached
[  173.767834][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  173.767846][   T30] audit: type=1326 audit(173.787:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.767868][   T30] audit: type=1326 audit(173.787:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.768528][   T30] audit: type=1326 audit(173.787:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.768691][   T30] audit: type=1326 audit(173.787:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.769486][   T30] audit: type=1326 audit(173.787:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.804978][   T30] audit: type=1326 audit(173.817:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.805002][   T30] audit: type=1326 audit(173.817:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.805018][   T30] audit: type=1326 audit(173.817:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.822948][   T30] audit: type=1326 audit(173.837:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.822969][   T30] audit: type=1326 audit(173.837:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10545 comm="syz.7.1211" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3b79368 code=0x7ffc0000
[  173.881348][ T5694] usb 14-1: new high-speed USB device number 2 using vhci_hcd
[  174.013781][T10554] loop8: detected capacity change from 0 to 512
[  174.027369][T10554] EXT4-fs: Invalid want_extra_isize 2048
[  174.105585][T10554] scsi_nl_rcv_msg: discarding partial skb
[  174.221273][ T9880] udevd[9880]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  174.236472][T10389] udevd[10389]: inotify_add_watch(7, /dev/loop7p11, 10) failed: No such file or directory
[  174.251098][ T9887] udevd[9887]: inotify_add_watch(7, /dev/loop7p9, 10) failed: No such file or directory
[  174.263155][T10543] vhci_hcd: connection reset by peer
[  174.263351][ T6515] vhci_hcd vhci_hcd.6: stop threads
[  174.263361][ T6515] vhci_hcd vhci_hcd.6: release socket
[  174.291739][ T6515] vhci_hcd vhci_hcd.6: disconnect device
[  174.367752][T10560] wg1 speed is unknown, defaulting to 1000
[  174.613303][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.613384][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.613473][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.613565][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.613654][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.613725][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.613796][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.613865][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.613934][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614003][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614140][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614212][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614284][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614353][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614423][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614493][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614563][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614633][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614703][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614773][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614844][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614914][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.614984][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615054][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615145][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615215][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615284][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615355][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615425][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615494][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615564][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615633][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.615703][ T4710] Bluetooth: hci2: unexpected event for opcode 0x204e
[  174.864965][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  174.866268][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  174.867708][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  174.867962][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  174.879895][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  174.881882][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  174.887271][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  174.897700][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  174.902002][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  174.902624][ T5643] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size
[  175.017347][T10580] wg1 speed is unknown, defaulting to 1000
[  175.206873][ T8495] syz_tun (unregistering): left allmulticast mode
[  175.304494][T10596] ------------[ cut here ]------------
[  175.304499][T10596] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x100c/0x1b10, CPU#0: syz.7.1227/10596
[  175.308215][T10596] Modules linked in:
[  175.308965][T10596] CPU: 0 UID: 0 PID: 10596 Comm: syz.7.1227 Not tainted syzkaller #0 PREEMPT 
[  175.310624][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  175.312552][T10596] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[  175.313957][T10596] pc : mac80211_hwsim_tx+0x100c/0x1b10
[  175.314969][T10596] lr : mac80211_hwsim_tx+0x100c/0x1b10
[  175.316026][T10596] sp : ffff800094ea6a00
[  175.316796][T10596] x29: ffff800094ea6b60 x28: dfff800000000000 x27: 0000000000000000
[  175.318347][T10596] x26: 0000000000000000 x25: ffff000121313538 x24: ffff000121317b00
[  175.319890][T10596] x23: ffff0000f335ec70 x22: 000000006d537749 x21: 1ffff000129d4d84
[  175.321482][T10596] x20: dfff800000000000 x19: ffff0000d7eccb40 x18: ffff8001254c8000
[  175.323033][T10596] x17: ffff0001adee5e07 x16: ffff0000ccd73b14 x15: ffff80008a707000
[  175.324640][T10596] x14: 0000000000000004 x13: 0000000000000002 x12: 0000000000000000
[  175.326259][T10596] x11: 0000000000000000 x10: ffff0001213132a0 x9 : 0000000000000200
[  175.327837][T10596] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000
[  175.329363][T10596] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800082eb1384
[  175.330905][T10596] x2 : 0000000000000000 x1 : ffff0000ccd73b00 x0 : 0000000000000000
[  175.332572][T10596] Call trace:
[  175.333209][T10596]  mac80211_hwsim_tx+0x100c/0x1b10 (P)
[  175.334250][T10596]  ieee80211_tx_frags+0x2f4/0x6d8
[  175.335214][T10596]  __ieee80211_xmit_fast+0x7ac/0x17bc
[  175.336268][T10596]  ieee80211_mesh_xmit_fast+0x8e0/0xc84
[  175.337424][T10596]  __ieee80211_subif_start_xmit+0x438/0xfcc
[  175.338636][T10596]  ieee80211_subif_start_xmit+0xe8/0x45c
[  175.339761][T10596]  dev_hard_start_xmit+0x1dc/0x794
[  175.340801][T10596]  __dev_queue_xmit+0xed4/0x2a9c
[  175.341801][T10596]  packet_xmit+0x6c/0x314
[  175.342674][T10596]  packet_sendmsg+0x2eac/0x3de4
[  175.343649][T10596]  __sock_sendmsg+0xc8/0x17c
[  175.344553][T10596]  sock_write_iter+0x220/0x310
[  175.345476][T10596]  vfs_write+0x51c/0xa0c
[  175.346317][T10596]  ksys_write+0x12c/0x228
[  175.347130][T10596]  __arm64_sys_write+0x84/0x98
[  175.348047][T10596]  invoke_syscall+0x98/0x244
[  175.348927][T10596]  el0_svc_common+0xec/0x23c
[  175.349797][T10596]  do_el0_svc+0x4c/0x5c
[  175.350580][T10596]  el0_svc+0x60/0x1d8
[  175.351341][T10596]  el0t_64_sync_handler+0x44/0x104
[  175.352321][T10596]  el0t_64_sync+0x198/0x19c
[  175.353175][T10596] irq event stamp: 901
[  175.353949][T10596] hardirqs last  enabled at (900): [<ffff80008688206c>] _raw_spin_unlock_irqrestore+0x38/0x98
[  175.355963][T10596] hardirqs last disabled at (901): [<ffff80008685dbf4>] el1_brk64+0x20/0x54
[  175.357685][T10596] softirqs last  enabled at (888): [<ffff800084bb85e4>] __alloc_skb+0x1c0/0x610
[  175.359448][T10596] softirqs last disabled at (898): [<ffff800084c24864>] __dev_queue_xmit+0x1fc/0x2a9c
[  175.361331][T10596] ---[ end trace 0000000000000000 ]---
[  175.595453][ T6515] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.664767][ T6515] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.709598][ T6515] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.743107][ T8495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.749946][ T6515] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.891602][ T6515] bridge_slave_1: left promiscuous mode
[  175.891693][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.892901][ T6515] bridge_slave_0: left allmulticast mode
[  175.892910][ T6515] bridge_slave_0: left promiscuous mode
[  175.892969][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.169045][ T6515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.171253][ T6515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.176257][ T6515] bond0 (unregistering): Released all slaves
[  176.199893][ T6515] bond1 (unregistering): Released all slaves
[  176.221395][ T6515] bond2 (unregistering): Released all slaves
[  176.246283][ T6515] bond3 (unregistering): Released all slaves
[  176.282977][ T6515] bond4 (unregistering): (slave veth3): Releasing active interface
[  176.285445][ T6515] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface
[  176.286782][ T6515] bond4 (unregistering): Released all slaves
[  176.318502][ T6515] bond5 (unregistering): Released all slaves
[  176.366200][    C0] net_ratelimit: 167 callbacks suppressed
[  176.541290][ T6515] hsr_slave_0: left promiscuous mode
[  176.541988][ T6515] hsr_slave_1: left promiscuous mode
[  176.542335][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.542345][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.543498][ T6515] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.543506][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.578629][ T6515] veth1_macvtap: left promiscuous mode
[  176.578664][ T6515] veth0_macvtap: left promiscuous mode
[  176.578738][ T6515] veth1_vlan: left promiscuous mode
[  176.578775][ T6515] veth0_vlan: left promiscuous mode
[  177.144382][ T6515] team0 (unregistering): Port device team_slave_1 removed
[  177.159708][ T6515] team0 (unregistering): Port device team_slave_0 removed
[  177.381656][ T4400] 8021q: adding VLAN 0 to HW filter on device eth16
[  177.955248][ T4400] 8021q: adding VLAN 0 to HW filter on device eth17
[  178.237949][ T4400] 8021q: adding VLAN 0 to HW filter on device eth19
[  178.557957][ T4400] 8021q: adding VLAN 0 to HW filter on device eth18
[  179.236638][ T5694] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  181.906609][    C0] net_ratelimit: 71 callbacks suppressed