last executing test programs: 21.928576975s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) close(0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x84100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0b00000007000000ff0700000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff000002000000005a90000000008200006b0acd99bee218cded2a0966008360af907e1d856892f10fa8000c736559a1cb4b16a48d0c8ef7f4a4809857c670d04cdc727c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x2000005e, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c80)={r2}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000d40)=0x6, 0x4) sendmmsg$inet6(r3, &(0x7f0000000d80)=[{{&(0x7f0000000dc0)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0xd5f31383e735357e) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000e40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000e80)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f00000002c0)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1, 0x0) 21.641968335s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r0, &(0x7f00000042c0)='0', 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000004300)=[{&(0x7f0000004340)=""/52, 0x34}], 0x1, &(0x7f0000004380)=[{&(0x7f00000043c0)=""/28, 0x1c}], 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x3, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000044c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = open(&(0x7f0000004c40)='./bus\x00', 0x141bc2, 0x32) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1000004, 0x4024011, r5, 0x8b15f000) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000004c80)=[@text64={0x40, &(0x7f0000004d80)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000004dc0)={[0x9, 0xffff, 0x0, 0xfffffffffffffffd, 0x8800, 0x4, 0xc9, 0x3, 0x2, 0x33, 0x7, 0x3, 0x3, 0xea, 0x5, 0x1], 0x8000000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000041c0)={0x1, &(0x7f0000004200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x9, &(0x7f0000004240)) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004400)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004440)={r2, 0x18000000000002a0, 0xba, 0x0, &(0x7f0000004cc0)="000100959fb9cf1b133e582a2fcd86311e2751bff7ba29d6a904b92edea7209c9d0fce6e00475fff550c22c1203adee4fed5571a8cab42cc5c7a8d2881cec8505c82d0491f6c3b8ba5f4b5d05cd1a6ced797083b1965ee8edf9af1105a1eb45da07d2cd7f63bb71f1adee821fe44a703526c7b4b79447b62c66ca531899322357ded04da93b1952010b67406401a293eb2edf434b068ee7becadc0f4ca8c309453c56ad13515c1e24bd3a76606ceefe81b15f2676c1d8f31e06c", 0x0, 0x30, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) syz_usb_control_io$hid(r7, 0x0, 0x0) write(r2, &(0x7f0000000100)="2d25c873c6d0ff57318d8185a94d488b38f0fcd919d01038dc3dc25401000000febae03d46fdca85c1a1862b89b5ec78104a2521d9223abb9b169eceaaca9ccf1cb8d8714bdff1", 0x47) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r8, &(0x7f00000001c0)=""/16384, 0x4000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, 0x0, 0x0) 20.659434868s ago: executing program 1 (id=19): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f00000002c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mkdir(&(0x7f0000006840)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000006880)={0x20080522}, &(0x7f00000068c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$tun(0xffffffffffffff9c, 0x0, 0xe0280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006900)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000006940)='./file0\x00', &(0x7f0000006980), 0x0, &(0x7f00000069c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006a00)) lchown(&(0x7f0000006a80)='./file0\x00', 0x0, 0x0) 20.010354825s ago: executing program 1 (id=23): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x2810400, &(0x7f0000000140)=ANY=[], 0x1, 0x216, &(0x7f0000000440)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) write$binfmt_script(r0, &(0x7f0000000000), 0x10) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x42, 0x21) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020200000000000000000002000000020800011001000000"], 0x1c}}, 0x0) syz_usb_connect$uac2(0x0, 0x97, &(0x7f0000002bc0)=ANY=[@ANYBLOB="12015002000000201e043732400001020301090285000301db6007080b0102010a200209040000000101200009240104041c15007f0c240303030308f90206000a090401", @ANYRES64, @ANYRESHEX], &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0}) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24004800) read(r3, &(0x7f0000000780)=""/1024, 0x400) read$FUSE(r3, &(0x7f0000000b80)={0x2020}, 0x2020) 19.564992681s ago: executing program 1 (id=28): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10e, &(0x7f0000000080), 0x4, 0x470, &(0x7f0000000340)="$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") openat(r2, &(0x7f00000007c0)='./file2\x00', 0xa0641, 0x6ab858183a7ef7e1) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./sys\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x2, 0x0) sync() r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x181341, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xb, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x890, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x85c, 0x2, [@TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0x8, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4bb, 0x5, 0x80000001, 0x2, 0xe0, 0xf9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x2, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x4, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x6, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x200, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x5, 0x2845, 0xff, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0x9, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x9, 0xffffff2d, 0x80000000, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xa, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ac, 0xb, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x3, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x7, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x400, 0x74db, 0x60000000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x10000005, 0x5, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0xa, 0x10000, 0x4d4fbb35, 0xb2, 0x800004, 0x5, 0x20000000, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0x4, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x2, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfff7fffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0xfffffff2, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x8, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0xc3a, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0xffffffff, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x7, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0xc, 0x6, 0x7, 0x6, 0xea, 0x7, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x1, 0x3, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x27e, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x1, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0xdd, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0x3}}, @TCA_U32_LINK={0x8, 0x3, 0x80000001}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x890}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) r8 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000013c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000001400)={0x0, 0x0, 0x1, r9}, 0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf25190000007c0001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468305f6d616376746170000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d3672656700000000000000000014000200726f73653000"/40, @ANYRES32=r9, @ANYBLOB="2800018008000300010000001400020076657468305f746f5f687372000000000800030002000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4048004}, 0x800) r10 = fspick(r5, &(0x7f0000000240)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x4000, 0x0, 0x0) fallocate(r4, 0x0, 0x1, 0x2000404) r11 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xe70, 0x2, 0x10, 0xffffffffffffffff, 0x20000000) syz_io_uring_modify_offsets$generic(r11, r3, 0x64, 0xcca) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) 19.513517607s ago: executing program 32 (id=28): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10e, &(0x7f0000000080), 0x4, 0x470, &(0x7f0000000340)="$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") openat(r2, &(0x7f00000007c0)='./file2\x00', 0xa0641, 0x6ab858183a7ef7e1) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./sys\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x2, 0x0) sync() r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x181341, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xb, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x890, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x85c, 0x2, [@TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0x8, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4bb, 0x5, 0x80000001, 0x2, 0xe0, 0xf9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x2, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x4, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x6, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x200, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x5, 0x2845, 0xff, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0x9, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x9, 0xffffff2d, 0x80000000, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xa, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ac, 0xb, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x3, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x7, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x400, 0x74db, 0x60000000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x10000005, 0x5, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0xa, 0x10000, 0x4d4fbb35, 0xb2, 0x800004, 0x5, 0x20000000, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0x4, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x2, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfff7fffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0xfffffff2, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x8, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0xc3a, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0xffffffff, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x7, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0xc, 0x6, 0x7, 0x6, 0xea, 0x7, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x1, 0x3, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x27e, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x1, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0xdd, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0x3}}, @TCA_U32_LINK={0x8, 0x3, 0x80000001}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x890}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) r8 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000013c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000001400)={0x0, 0x0, 0x1, r9}, 0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fedbdf25190000007c0001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468305f6d616376746170000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d3672656700000000000000000014000200726f73653000"/40, @ANYRES32=r9, @ANYBLOB="2800018008000300010000001400020076657468305f746f5f687372000000000800030002000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4048004}, 0x800) r10 = fspick(r5, &(0x7f0000000240)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x4000, 0x0, 0x0) fallocate(r4, 0x0, 0x1, 0x2000404) r11 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xe70, 0x2, 0x10, 0xffffffffffffffff, 0x20000000) syz_io_uring_modify_offsets$generic(r11, r3, 0x64, 0xcca) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000003, 0x1000000}) 16.833075096s ago: executing program 4 (id=41): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) memfd_create(&(0x7f0000000180)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xc5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\x9c2:\xfa\xf9\xb7\x05q>d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1\x00\x00\x00\x00\x00', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x28100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setfsuid(0xee01) setresuid(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x200000000000, 0x100000000, 0x0, 0x7b, 0x100000, 0x1000, 0x2004c8, 0x7fff, 0x0, 0x0, 0x5, 0x0, 0x3, 0x8, 0x2, 0xffffffffffffffff], 0x200000, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.759609492s ago: executing program 4 (id=52): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xfffffffffffffe6d, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xfffffffffffffe6d, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000000)="00000000000000a90000", 0xa}], 0x2}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5508, &(0x7f0000000740)="$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") syz_mount_image$msdos(&(0x7f0000005c80), &(0x7f0000005cc0)='.\x00', 0x2820f8, &(0x7f0000005d00)=ANY=[], 0x0, 0x0, &(0x7f0000005d40)) pipe(&(0x7f0000005d00)={0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f0000005d40), &(0x7f0000005e00)='system_u:object_r:cron_log_t:s0\x00', 0x20, 0x1) (async) fsetxattr$security_selinux(r4, &(0x7f0000005d40), &(0x7f0000005e00)='system_u:object_r:cron_log_t:s0\x00', 0x20, 0x1) syz_mount_image$msdos(&(0x7f0000005d80), &(0x7f0000005dc0)='.\x00', 0x1a5a438, &(0x7f0000005e00)=ANY=[], 0xd, 0x0, &(0x7f0000005e40)) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffffa}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xb0}]}, 0x64}, 0x1, 0x0, 0x0, 0x20050}, 0x8000) 13.570335436s ago: executing program 4 (id=56): prctl$PR_SET_PDEATHSIG(0x1, 0x34) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x20, 0x2, 0x4b, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x889d}, 0x4000040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @empty, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 13.24599053s ago: executing program 4 (id=58): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2a10416, &(0x7f0000000080)=ANY=[], 0x1, 0x2c4, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x4102, 0x1bc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000700)={0x18, 0xfffffffffffffff5, 0x0, {0x21}}, 0x18) setsockopt$inet6_buf(r0, 0x29, 0x1c, 0x0, 0x0) keyctl$reject(0x14, 0x0, 0x80007ffffffff000, 0x1, 0x0) (async) keyctl$reject(0x14, 0x0, 0x80007ffffffff000, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0xfc1) tkill(r1, 0x13) rt_sigprocmask(0x2, &(0x7f00000007c0)={[0x7]}, 0x0, 0x8) (async) rt_sigprocmask(0x2, &(0x7f00000007c0)={[0x7]}, 0x0, 0x8) r2 = gettid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, &(0x7f0000000800)={0x0, 0x3f, 0x0, @tid=r2}, &(0x7f0000000840)) (async) timer_create(0x2, &(0x7f0000000800)={0x0, 0x3f, 0x0, @tid=r2}, &(0x7f0000000840)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x313603, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) (async) write(r4, &(0x7f00000002c0)="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", 0xfc) 12.549824013s ago: executing program 4 (id=65): r0 = io_uring_setup(0x478a, &(0x7f0000000000)={0x0, 0xeec2, 0x400, 0x0, 0x115}) close_range(r0, r0, 0x0) mmap(&(0x7f00002ab000/0x4000)=nil, 0x4000, 0x8, 0x31, r0, 0x106a000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140), 0xfffffecc) syz_usb_connect$uac1(0x6, 0x82, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102000000ff6b1d0101400001020301090a0904000000010101000a240100001a000201020724080218020f09240304010206010409040100000102000009040101010102000009050109100002047c07250104070700090402000001020000090402010101020000090582092000010906072501040b2b0700000000000000"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000680000/0x1000)=nil, 0x1000, 0x11) ioprio_set$uid(0x3, 0x0, 0x6000) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000217000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r4, 0x4000) rt_tgsigqueueinfo(0x0, 0x0, 0xf, &(0x7f0000000300)={0x40, 0x8, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f00000002c0), 0x195d, 0xec4d2770249a3ef5) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000003c0)={r6, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000080)=0x6, 0x4) recvfrom(r5, 0x0, 0x0, 0x32, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12.368573281s ago: executing program 4 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x30000, 0x6, 0x6, 0x6d, 0x0, [{0x2, 0xd, 0x6, '\x00', 0x7}, {0x9, 0xb, 0x9, '\x00', 0x7f}, {0x6, 0x6, 0xf9}, {0x50, 0x4, 0x6, '\x00', 0x7}, {0x6, 0x2, 0x40, '\x00', 0x6}, {0xf6, 0x0, 0x3, '\x00', 0xd}, {0xf0, 0x7, 0x4, '\x00', 0x9}, {0x7f, 0x1, 0xc, '\x00', 0x7}, {0xfe, 0x1, 0x24, '\x00', 0xfe}, {0x5, 0x7f, 0x5, '\x00', 0x9}, {0x2, 0x4, 0x2, '\x00', 0x8}, {0x7, 0x4, 0x2c, '\x00', 0xa}, {0x4, 0xff, 0x0, '\x00', 0x6}, {0x1, 0xfa, 0x6, '\x00', 0x81}, {0x3, 0x8, 0x0, '\x00', 0xa}, {0x1, 0x5b, 0x9, '\x00', 0x8}, {0x6f, 0x1, 0xff}, {0x4, 0x80, 0x80, '\x00', 0x2}, {0xf, 0x1b, 0xc4, '\x00', 0x80}, {0x1, 0x8, 0x81, '\x00', 0xe}, {0xca, 0xf1, 0x6, '\x00', 0x6}, {0x1, 0x4, 0x4, '\x00', 0x6}, {0x1, 0x3d, 0x0, '\x00', 0xa}, {0xd, 0x1, 0xf8, '\x00', 0x8}]}}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @remote}, 0x3ff, 0x0, 0x1, 0x5, 0x401, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000000)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000040)=""/21, &(0x7f0000000100)=0x15) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.349013103s ago: executing program 33 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x30000, 0x6, 0x6, 0x6d, 0x0, [{0x2, 0xd, 0x6, '\x00', 0x7}, {0x9, 0xb, 0x9, '\x00', 0x7f}, {0x6, 0x6, 0xf9}, {0x50, 0x4, 0x6, '\x00', 0x7}, {0x6, 0x2, 0x40, '\x00', 0x6}, {0xf6, 0x0, 0x3, '\x00', 0xd}, {0xf0, 0x7, 0x4, '\x00', 0x9}, {0x7f, 0x1, 0xc, '\x00', 0x7}, {0xfe, 0x1, 0x24, '\x00', 0xfe}, {0x5, 0x7f, 0x5, '\x00', 0x9}, {0x2, 0x4, 0x2, '\x00', 0x8}, {0x7, 0x4, 0x2c, '\x00', 0xa}, {0x4, 0xff, 0x0, '\x00', 0x6}, {0x1, 0xfa, 0x6, '\x00', 0x81}, {0x3, 0x8, 0x0, '\x00', 0xa}, {0x1, 0x5b, 0x9, '\x00', 0x8}, {0x6f, 0x1, 0xff}, {0x4, 0x80, 0x80, '\x00', 0x2}, {0xf, 0x1b, 0xc4, '\x00', 0x80}, {0x1, 0x8, 0x81, '\x00', 0xe}, {0xca, 0xf1, 0x6, '\x00', 0x6}, {0x1, 0x4, 0x4, '\x00', 0x6}, {0x1, 0x3d, 0x0, '\x00', 0xa}, {0xd, 0x1, 0xf8, '\x00', 0x8}]}}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @remote}, 0x3ff, 0x0, 0x1, 0x5, 0x401, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000000)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000040)=""/21, &(0x7f0000000100)=0x15) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.302845207s ago: executing program 0 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) close(0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x84100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0b00000007000000ff0700000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff000002000000005a90000000008200006b0acd99bee218cded2a0966008360af907e1d856892f10fa8000c736559a1cb4b16a48d0c8ef7f4a4809857c670d04cdc727c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x2000005e, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c80)={r2}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000d40)=0x6, 0x4) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0xd5f31383e735357e) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000e00)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000e40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000e80)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f00000002c0)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x1, 0x0) 9.365294794s ago: executing program 0 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000007c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, 0x0) 9.324904718s ago: executing program 0 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000f80)='./tracing\x00', &(0x7f0000000fc0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000001040)="65486d795fe250efdeed7dda726561511574b9ff9be37786fe66e431205f2e767362", 0x22) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x802, &(0x7f0000000080)=ANY=[], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r1 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x163c81, &(0x7f0000000140), 0x1, 0x265, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./debug\x00', &(0x7f00000007c0)='debugfs\x00', 0x0, 0x0) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r2, &(0x7f0000000e40)='1', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="380000001800ef0100000000fedbdf250a0000000000fd000000000014000500ff0500"], 0x38}, 0x1, 0x11}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) 9.244525357s ago: executing program 0 (id=89): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f00000002c0)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mkdir(&(0x7f0000006840)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000006880)={0x20080522}, &(0x7f00000068c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$tun(0xffffffffffffff9c, 0x0, 0xe0280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006900)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000006940)='./file0\x00', &(0x7f0000006980), 0x0, &(0x7f00000069c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006a40), 0x651, 0x0) lchown(&(0x7f0000006a80)='./file0\x00', 0x0, 0x0) 8.478064177s ago: executing program 5 (id=95): fsopen(&(0x7f00000014c0)='proc\x00', 0x0) (async) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = memfd_create(&(0x7f0000000280)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r2, &(0x7f00000002c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) lseek(r2, 0xffffffffffffffff, 0x4) sendfile(r2, r2, &(0x7f0000000300), 0x7fa) (async) sendfile(r2, r2, &(0x7f0000000300), 0x7fa) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[]) (async) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[]) symlink(&(0x7f00000004c0)='./file0/../file0/file0\x00', &(0x7f0000000500)='./file0/../file0/file0\x00') write$FUSE_INIT(r4, &(0x7f0000000540)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000002, 0x40020104, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0xcaaf}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000540)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000002, 0x40020104, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0xcaaf}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, 0x0) write(r3, 0x0, 0x0) (async) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003f80)='./file0/file1\x00', 0x880cc2, 0x20) (async) openat(0xffffffffffffff9c, &(0x7f0000003f80)='./file0/file1\x00', 0x880cc2, 0x20) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) (async) syz_clone3(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003fc0)={0x14, 0x4, &(0x7f0000004080)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000070000009500000000000000ccda1f05d52d885110be08939bc2feed105ac32634fc3006cb866c85c2fdaefbd454388b0325c2a176d2e65b202ec03242a22621eca1b87fa11dfc0270b894259227108d3b7ff28f01a58f3482015bfcef5bad4e70e674951d4403a981ce79bac1b1390a06691c2583c15b144e34151172582afdcb1fc4872026d433de449b72633ac915fcdd30c6ac8da626635223170fab9e323ffe94aaabfaa3e882ef86243d3148"], &(0x7f0000004180)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003fc0)={0x14, 0x4, &(0x7f0000004080)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000070000009500000000000000ccda1f05d52d885110be08939bc2feed105ac32634fc3006cb866c85c2fdaefbd454388b0325c2a176d2e65b202ec03242a22621eca1b87fa11dfc0270b894259227108d3b7ff28f01a58f3482015bfcef5bad4e70e674951d4403a981ce79bac1b1390a06691c2583c15b144e34151172582afdcb1fc4872026d433de449b72633ac915fcdd30c6ac8da626635223170fab9e323ffe94aaabfaa3e882ef86243d3148"], &(0x7f0000004180)='syzkaller\x00'}, 0x94) fchdir(r1) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)) statx(r1, &(0x7f0000000140)='./dev\x00', 0x800, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r5, r6) chdir(&(0x7f00000000c0)='./file0/../file0/file0\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3800009, 0x20010, 0xffffffffffffffff, 0x33ed0000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 8.371855718s ago: executing program 0 (id=99): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000025c0)={0x1, &(0x7f0000002600)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 8.193014707s ago: executing program 0 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000f80)='./tracing\x00', &(0x7f0000000fc0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000001040)="65486d795fe250efdeed7dda726561511574b9ff9be37786fe66e431205f2e767362", 0x22) socket(0x1e, 0x805, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x163c81, &(0x7f0000000140), 0x1, 0x265, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./debug\x00', &(0x7f00000007c0)='debugfs\x00', 0x0, 0x0) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r2, &(0x7f0000000e40)='1', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="380000001800ef0100000000fedbdf250a0000000000fd000000000014000500ff0500"], 0x38}, 0x1, 0x11}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) 8.192839987s ago: executing program 34 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000f80)='./tracing\x00', &(0x7f0000000fc0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000001040)="65486d795fe250efdeed7dda726561511574b9ff9be37786fe66e431205f2e767362", 0x22) socket(0x1e, 0x805, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x163c81, &(0x7f0000000140), 0x1, 0x265, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./debug\x00', &(0x7f00000007c0)='debugfs\x00', 0x0, 0x0) r2 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r2, &(0x7f0000000e40)='1', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="380000001800ef0100000000fedbdf250a0000000000fd000000000014000500ff0500"], 0x38}, 0x1, 0x11}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) 7.947010002s ago: executing program 5 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000007c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000900)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 7.945922672s ago: executing program 6 (id=105): syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="b0", 0x1}], 0x1, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 7.945624052s ago: executing program 5 (id=106): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000001c0), 0x1004) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002240)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/4096}, {&(0x7f0000001940)=""/60}, {&(0x7f0000001980)=""/117}, {&(0x7f0000001a00)=""/116}, {&(0x7f0000001a80)=""/156}, {&(0x7f0000001b40)=""/92}, {&(0x7f0000001bc0)=""/107}, {&(0x7f0000001c40)=""/17}, {&(0x7f0000001c80)=""/32}]}, 0x1ff}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001d80)=""/73}, {&(0x7f0000001e00)=""/250}, {&(0x7f0000001f00)=""/223}, {&(0x7f0000002000)=""/54}, {&(0x7f0000002040)=""/152}, {&(0x7f0000002100)=""/49}, {&(0x7f0000002140)=""/128}]}, 0x3}], 0x1ab50cf, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x1021000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_tables_targets\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4f61e57bac7ed928, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="05020000000100042000000000000000b8e1becda358ad69d51cdb76e8980400"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x6}, 0x94) preadv(r6, &(0x7f0000000500)=[{&(0x7f0000000540)=""/119, 0x77}], 0x1, 0x162, 0x65a) socketpair(0x1e, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002580)=ANY=[@ANYBLOB="120000000b000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000011000000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002600)={{r8}, &(0x7f0000002640), &(0x7f0000002680)=r7}, 0x20) 7.756201992s ago: executing program 5 (id=107): r0 = fsopen(&(0x7f0000001080)='ramfs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000004c0)={0x8000, 0x1, 0xb24, 0x6, 0x51}) fchdir(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10090100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80e8f4d48c21a53b}, 0x452) fchmodat(0xffffffffffffff9c, &(0x7f0000001100)='.\x00', 0xffffffd3) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)={0x8, 0x1, 0x2, 0x0, 0x0, [{{r1}, 0x25}, {{r0}, 0x5}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x10) mount$tmpfs(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x802, &(0x7f0000000640)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000680)='./file0\x00') write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000700)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000740)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x4, 0x103) 7.755716092s ago: executing program 6 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000007c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 7.737379114s ago: executing program 6 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000002a40)='./mnt\x00', 0x17d) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffe7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002a00)={r0, 0xe0, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002740)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000002800)=[{}], 0x8, 0x10, &(0x7f0000002840), &(0x7f0000002880), 0x8, 0x8d, 0x8, 0x8, &(0x7f00000028c0)}}, 0x10) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') utimensat(r4, &(0x7f0000000540)='./mnt\x00', 0x0, 0x100) (async) fchmodat(r4, &(0x7f0000000080)='./dev\x00', 0x4) mkdirat(r4, &(0x7f0000000580)='./dev/sda1\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)='ext4\x00', 0x8410, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r1, @ANYBLOB="f0a5b685a7ef4b027752ae50c916597741db545fd1e126adae7ae7b7628348ab8f24cbf11165dec25e", @ANYRESOCT=r3, @ANYRESHEX=r2], 0x24, 0x3) (async) mount$incfs(&(0x7f0000000000)='./mnt\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000002a80), 0x2040, &(0x7f0000002ac0)={[{@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x5}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x100000000}}, {@no_bf_readahead}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x4}}], [{@dont_appraise}, {@permit_directio}]}) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000500)='Mid', 0x3) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ustat(0x2, &(0x7f0000000680)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x8, 0xc, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000040)=""/12, 0xfe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50) 7.49366687s ago: executing program 6 (id=110): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f00000002c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mkdir(&(0x7f0000006840)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000006880)={0x20080522}, &(0x7f00000068c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$tun(0xffffffffffffff9c, 0x0, 0xe0280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006900)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000006940)='./file0\x00', &(0x7f0000006980), 0x0, &(0x7f00000069c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000006a40), 0x651, 0x0) lchown(&(0x7f0000006a80)='./file0\x00', 0x0, 0x0) 6.756797966s ago: executing program 5 (id=112): mkdir(&(0x7f0000003e40)='./file0\x00', 0x100) mount$bind(&(0x7f0000001b40)='.\x00', &(0x7f0000001b80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000001bc0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000001c00)='./file0/../file0\x00', &(0x7f0000001c40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000001c80)='./file0/../file0\x00', &(0x7f0000001cc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001d00)='.\x00', 0x89901) setresuid(0xee00, 0xffffffffffffffff, 0xffffffffffffffff) move_mount(r0, &(0x7f0000001d40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001d80)='./file0/../file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001dc0)='mountinfo\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000001e00)={0x2020}, 0x2020) 6.662536756s ago: executing program 6 (id=114): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f0000000640)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000080)="080000ffffff7f00", 0x8}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x6c8c0) 6.290253195s ago: executing program 6 (id=118): syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="b0", 0x1}], 0x1, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6.146159s ago: executing program 35 (id=118): syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="b0", 0x1}], 0x1, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6.027623202s ago: executing program 5 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) close(0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x84100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0b00000007000000ff0700000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff000002000000005a90000000008200006b0acd99bee218cded2a0966008360af907e1d856892f10fa8000c736559a1cb4b16a48d0c8ef7f4a4809857c670d04cdc727c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x2000005e, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c80)={r2}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000d80)=[{{&(0x7f0000000dc0)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0xd5f31383e735357e) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000e00)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000e40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000e80)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f00000002c0)="$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") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x1, 0x0) 5.866721569s ago: executing program 36 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) close(0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x84100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0b00000007000000ff0700000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff000002000000005a90000000008200006b0acd99bee218cded2a0966008360af907e1d856892f10fa8000c736559a1cb4b16a48d0c8ef7f4a4809857c670d04cdc727c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x2000005e, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c80)={r2}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000d80)=[{{&(0x7f0000000dc0)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0xd5f31383e735357e) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000e00)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000e40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000e80)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f00000002c0)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x1, 0x0) 2.353025665s ago: executing program 2 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) close(0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x84100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0b00000007000000ff0700000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff000002000000005a90000000008200006b0acd99bee218cded2a0966008360af907e1d856892f10fa8000c736559a1cb4b16a48d0c8ef7f4a4809857c670d04cdc727c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x2000005e, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c80)={r2}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000d40)=0x6, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0xd5f31383e735357e) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000e00)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000e40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000e80)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f00000002c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1, 0x0) 1.984952894s ago: executing program 3 (id=146): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x100000af5, 0x0) close(r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@acquire]}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0xffffffffffffff47}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000000c0)={0x98}) listen(0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.956879306s ago: executing program 3 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000007c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000900)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 1.943373638s ago: executing program 3 (id=148): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x3) sendfile(r1, r0, 0x0, 0x100000000) r2 = timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./trace\x00', &(0x7f0000000940)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./trace/dynamic_events\x00', 0x2, 0x0) write(r3, &(0x7f00000009c0)='e:my_eprobe raw_syscalls/sys_enter\n', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="01000000060000000500000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r5}, &(0x7f0000000b00), &(0x7f0000000b40)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f0000000b80)={{r5}, &(0x7f0000000bc0), 0x0}, 0x20) write(r4, &(0x7f0000000a40)='common_pid == 999999\n', 0x15) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000100)={{0x0, 0x3938700}}, 0x0) r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000140)={0x0, 0x3095, 0x80, 0x2, 0x154}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000340)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000380)={0x0, 0x20fb89, 0x40, 0x1, 0x32c}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x100003, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x12, 0xbd}}], 0x1, &(0x7f0000000680)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) clock_adjtime(0x0, &(0x7f00000007c0)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x5, 0x80, 0x0, 0x6, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x80000, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r13, 0xffffffffffffffff, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r14, 0x0) 1.903477702s ago: executing program 8 (id=149): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_connect$uac1(0x6, 0xf5, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x4, 0x40, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x21}, [@processing_unit={0xb, 0x24, 0x7, 0x6, 0x0, 0x92, "dca94578"}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x7}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x0, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x37, 0xff, "8b22", "a1"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0x15, "b72b"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xebf, 0xfff, 0x2, "28b3c0fb7e49023f6a"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfe, 0x9, 0x9, 0x8, 0xff}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x2, 0x7, "e8"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x5, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0xe, 0xcf, {0x7, 0x25, 0x1, 0xc, 0x98, 0xb3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x6, "9f66"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xaa62, 0x81, 0xa, 0x5}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x4, 0x3, "a1f7c5d335"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x0, 0x5, "bffb13"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x8, 0x8, {0x7, 0x25, 0x1, 0x4, 0x0, 0x2}}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x300, 0xe, 0x80, 0x83, 0x40, 0x1}, 0x6c, &(0x7f0000001240)={0x5, 0xf, 0x6c, 0x3, [@generic={0x48, 0x10, 0xb, "d7742c66c6dfc6ef18a0b4500a82e9efb62f5e9c0920917209812ccd246351cda4f397566f466540f10f6e5e522ec61716ea396c02b09fd28c31f3cab6ef465bd3516608fc"}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "42e3f1b3f3bc58d60229b97b402f0db9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x8, 0x5, 0x40, 0x18}]}, 0x7, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x843}}, {0x9f, &(0x7f00000008c0)=@string={0x9f, 0x3, "0a8bd0d6e4716d153fd3afdee0b8a546ea09724901a2777b6e6702622daba25f84d1e45e7815cdc1a91601f68b514fbaa0f3cc51b90301d4b71c29a10ec41126a23e9b8d5eead050410cd566f56c4344aa7eaace6e9289f8b5d572d4cefe2a9e9dc8441656c4cbb21657c98c882bcaa09f92da4d14455b82b15f8e3ac3199d7f3f11a7578268f2a7743c4401b927c5bce08cf152846b3714a1f041c778"}}, {0x77, &(0x7f0000000980)=@string={0x77, 0x3, "9c590207c56edffc4a170680433c0f85b81e18ed24d7414c21c7a782f2426ba83b941199ce15502a21382a808a575120753db75ee7e8019c0feb2b4ce09d68fc29787d76c83d5e940fe119cc69654530ebd5632fe6facfe3125439c253aa6e654ee14399a46171e0beeb5565f01e44bb19d603596d"}}, {0xca, &(0x7f0000000a00)=@string={0xca, 0x3, "7378cc7ee650ff2c8ba63aea88534bbc70ccc66410ee331f553b1d8a20682643616c9ac7966ba61e6d2f4fa96caf4db4c377c9b6224228d5e000e2962377a71435d3149624dc7643508a32918fa30db1cd83b0cf512b1107d652d8f15dfe515f1f01a494dd853e6f7aba3951b482059a9804f7b0c2cd7b98ea610a7ac11b7bf174e517b5f673745f2afb0682642e5bbb51a291447567c32d1e1e9b10736162f88062f7c1ae4caef096e373e0c119c04e2e6d61b9328348efe51c1bb805075a80d533a01bca5aa2a1"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x480a}}, {0x95, &(0x7f0000000b80)=@string={0x95, 0x3, "d0a58f54747f494e1b7c0838d162dfa0191e2d56a234795c364f639f12993ec8d6ed9aa1a84386e5f15cea4452fb9fe8ff7ff7758bf15f19a15a8c6d7a8995d43de577a825fc4b9cbe9bf9711039bb7d1c679847284fa3064980f6fd9facafe62c474794cf0a144e77dfd341f2180c474e162169d35688cddb1afe9f962678e5c805a1f992063a5d6fe235a035898a1da41481"}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000500)=@ethtool_ringparam={0xe, 0x0, 0x1000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x17, 0x9, &(0x7f0000001180)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xa0}, @generic={0x6e, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x40000000, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f00000007c0)={0x47, 0x1, 0xfffffffffffffed0}, &(0x7f0000000840)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x40003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) unshare(0x2060400) r6 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000580)={r6, 0x7, 0x2, r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000001080)={r6, 0x81, 0x1, r6}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0xff03, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$hiddev(0x0, 0x3, 0x20000) ioctl$HIDIOCSREPORT(r7, 0x400c4808, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x79, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x8, 0x0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0xff, 0x5, {0x7, 0x25, 0x1, 0x4, 0xa, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x10, 0x6, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xc3, 0x5, 0x3, {0x7, 0x25, 0x1, 0x4, 0x3, 0x1}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0x7, 0x41, 0x40, 0xff}, 0x24, &(0x7f00000000c0)={0x5, 0xf, 0x24, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0xe, 0xec, 0x6}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0xc, 0xff00, 0xc}]}, 0x8, [{0x9a, &(0x7f0000000100)=@string={0x9a, 0x3, "cc42b122945ba23ee440e5058afc2065ec0d628fa60a895dafa77acf2b7cb2e4648209479ec46c0a2e9b971915a5b2d0d9f3391a45214ec51e19008394fde8e0c81e2c8196d8db72ded63b8f25ee7241321b84b104b5abaf62d846e493873781646339f255a329d8104527f759aa8e3b6801b63d90bd970747d9ddaaa830f77bc36c29c00669eb519b0137243f272a9a8e7cad16844d99a9"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2001}}, {0x55, &(0x7f00000002c0)=@string={0x55, 0x3, "9352014bf116dbbfe154adfe87629616840e28ea81c677692746947c5615d3ac1cb2502c033ea448537354df1f1565ecd28956fb69f9bd962c1bbbe7117aa60367faf1f0db892e203853fdece77cb4ec5928a2"}}, {0x76, &(0x7f0000000340)=@string={0x76, 0x3, "ef8d745be06050cb0565a46ea0a47300355d28fae4e9d1307b673f30a638de4251e4e58c62c9856e667170c3dca939076d602dd9016cbafb7c9b416600b6ae5adc9dad8b7ce0c8e20843ef70a9d06bd3337a0d4da68cf693e82792e416ba153415f59d48be2830e911bbaa477e314a2ad80e8fc3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x423}}]}) 1.903218172s ago: executing program 7 (id=150): r0 = open(&(0x7f0000000d00)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unshare(0x6020400) sendfile(r0, r0, &(0x7f0000000f40)=0x6, 0x8112) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000000000/0x3000)=nil}) 1.837230059s ago: executing program 7 (id=151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x200880, &(0x7f0000000080)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303030303030303030303030303037373737372c757466382c757466382c6572726f72733d636f6e74696e75652c00b96565c0941c97570bbc7b02c07f780970d7661194c0cf3528e6f7090fdbf3d1ce5c354f013e96c495d8dd8ee8d05f0ed4152a0f085e2263b2a8c3dd78735da134da1353e5b55d8a588c22cc082a840800ae8bc2cf58e90d6995b2dc6cce8a107684bce7c7744ff115c110979f"], 0x1, 0x150d, &(0x7f0000000180)="$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") rename(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) 1.809893182s ago: executing program 7 (id=152): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000a00), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000a40)={0x0, 0x4}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x20) mlock(&(0x7f0000568000/0x1000)=nil, 0x1000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000"], 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x0, 0x0, 0x1}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xfe, 0x17d, &(0x7f00000002c0)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000ac0)='./dev\x00', &(0x7f0000000b00)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./dev/sda\x00', 0x103802, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x2284, 0x0) llistxattr(&(0x7f0000000440)='./file1\x00', 0x0, 0x629) r4 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000040)='\a', 0x1) syz_usb_connect$uac2(0x2, 0xcc, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002000000201e0400304000010203010902ba0003010390c0080b0200010620820904000000010120000924010200064900f20c240904000000ffb2de43251024020601049af273aaf6003c013b2112bfd7ce6eec040303000400000608060924070400000300000b2407030000060300010010240206050204fd07001000000909810904010000010220000904010101010220000824020107022d05090501094000050508082501020c06050009040200000102200009040201010102200000240202ff070900ac7f09"], &(0x7f0000000900)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x8, 0x6, 0x1, 0x48, 0x5}, 0x16d, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f6d01060b10010c01005b010100030a100300010000d604001410040ec6e8fb72c73f95e191bc79fe82e25211d4100a11a924187e0268720f03f78f9e775efc17f159c665ddc313f6e7f2ac6508f6e5ee527f9b535d9b5e4f0ca98a6459e9b9251262129fac1ca80f64d6259749bce3365236c755fca6308be6d456cc5b2de5ffe5dddce674d2919d9599d284ca9d2edb56c1df86329946d61bb17c52ac270be045cab3205746d84fc320a5721374c42f022c4d494409e00a615e38b5c863fc5e8215d24c2132f7973ed314d8c04b1da31b148f40c4117c3b6c21dc04cf9a0f93e26993fd055cc8df79ca4971f5a7bb14571002cfec22fb96c8d937cdb78eda2f0b32de7536474574ce64e2013d4c1af01e7bc5f5d469db9d35c1e091b733ff05fbc29d2cc875a2c1a9e270343150d9b081e82a88426eec1080037cf6890c527d73506c9d3a6dc01410043a2d8c1d24e6dedf4ab5dafcf09913e0411d5833f600"/369], 0x5, [{0xa0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r3]}, {0xe1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="e1033c9acd242d2e327707a3b27ea831715324068ca4217fc6e1d90c07d683c914ed168efa7e11484181b46524ec9b80d9430d4c29df7434a5cebd96e3ccb9067dcaccc558b10fd6f909c8ed1a1ea5c499a23587011ff8eb98e229ffe5637cbf71062fd87fd2eb24aad2a7fa7439d087e8aa0c36eb877fa3e13e475b03ab9980e7b04d416cc6a6b4e25f308534293ebbcbd3ab16021f38c4dcd907e1f960afb50a96dffc3035741611ce01463c5ef99a2e1b2682f6a3847c5ea73e7f0f3f24a25fec5e79ee928044fc105e196bdcb3beb2f943496c4f62d9fb5db9168b9f3c57d60668d280d615bcb8c008ed00b0bf51f20bb9fe5311e15741c29de2197e28000b38e84e115b6375f66f6fb1ac2abafd7ae54f7fcdb5efb9bd13f18edbc15e5dcba16c26c3710455899abe695d4cae2ab791b8e0e8cd0f2f763cbf0938b6bcf60568043c84d0ae378b016482001aa967c9a3920ca2c033ffe96db4bccc3fd4e978ab26b5420c89141b68dc8f4497b0009abd12a28069c088b28e25cbc0c91ea38f8273331ad69e6f3baae53d7c43377f80e0160e75b347c5efde47460000"]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x402}}, {0xfffffffffffffece, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x424}}, {0xab, &(0x7f0000000840)=ANY=[@ANYBLOB="ab03654834ba9b9e61c99ebf7a6359079396d6c3360474836afe6988b07c35160ea87f0ee7ee5625c5704b1c7b72c9c6d48d67b34650b69ebb3203b511d704005df70b008cffdad927ba4cfdd71a9456944b28e400fbc66aa774bbdf927994923e4a825b9f87bd42b56f3f10328fec0aa69bdf81a2f23d74b08eb692da83993da002be62d784ceadc2d79a1c9c35e3b2f81cdb5d0f9b0968ce6a80b647132b9dfdde3a6293e93af6217f9a"]}]}) fcntl$setown(r1, 0x8, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000980)={0x1, &(0x7f00000009c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = timerfd_create(0x0, 0x80800) timerfd_settime(r5, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0500000004000000080000000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0x14, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x0, 0xe, 0x0, &(0x7f0000000e00)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.809637752s ago: executing program 3 (id=153): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000a00)=ANY=[@ANYBLOB="bc54709552ca5d935d9dbd2a5aecba098692fe71811ac12cb0858f4dac4ed1d44a7ba4d58ad446430b491e9579f91ca9cac1af09ab928b2b959b69d6aba80e6b0b895cc20c35507a8ea8774fd0497f1eb24731197787aacaf53005c7eae42f186d33b6e84c8f6a259fd8acccfd214ae1969d730005df61fdf096637d41e19333ca5dba242af4f3aa301edba4bdb4539936e66cc08de5572564cb0307f6f15c9cfcfab30e52425cc8a0bf7761ad0be66775d8d06283bb9a03d30ff2754975b3a6e1af32d942efd61033795995eeb5b7905e5700ba1f8401a3336653161b44cd4faf248f10", @ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32], 0x5, 0x314, &(0x7f0000000f00)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYRESHEX=r1], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="34137280a5adbf583d606f86506ea840fe00", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000000000000014100000018001700000021000000006574683a64756d6d79300000"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r4, 0x5, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0xe000, 0xab00, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0xffff, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast2}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f00000001c0)="8c0064b89ef905f106ab265a095412c2015f7c9fba38b4e10f732b1e4c746f633523d1fde6c7bafdc8691e2b1b92ba4ff531b91a3e9488fdf7a405771e4b8538a1a9e5fa4c415d888411", 0x4a}, {&(0x7f00000002c0)="c6c4164bab6d87a439ea0e40248919324a074154009bdf11be48ca479281721c3cd6c5c7368b47d10c16de89c35dcf459725683de93437e8be7cc141fee2a4089d6ce6cea746eb8449d335e90d9ffc75bafd84a71f544388fa49a2277278e19a2feab366cbe102f6f1692b338f1c", 0x6e}, {&(0x7f0000000340)="8883a18d69274708d4c54941a746d57655b31678b81ca67e375011892a0cdeb715194a4ea58007d7a4d9766c27cf2ba59b90008869332daef08f1355766f3feb9a0323fa5e80d85746e924e9fb9170eb6b480e6bc62a1934fb5818669cfa5d4b430007032015f41a9ecec2dbf5fbf576429b7d825ede1d52a6d14655d251c3fd7268de8af2ce2f776b817ffd4922f149f1d483c666fc4e1c99ffb1c70c3927e91c9a0aa5e9063629e1435e318db7462902d4b8a34132906c716d26bb82f1331da4e774640be581a924a69c428b18a17c89c1a0165098d196", 0xd8}, {&(0x7f00000004c0)="698282bbc5a4d26b6765093194dcb64fab5788b08d923b37bad07f9fcc6feab93372140c4568cd427da65f1003ccc926cb3337d3814ef0b3dd45d6ba9f6bd35eb89aa5623bc2917d5a90cb000cc5744cd45ef5de", 0x54}], 0x4) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x28011, r6, 0xd8081000) fdatasync(r6) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x26) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="0f79c40fa0dadb640fc7781a0f0fae000096baa000ec3e64ac0f30d8463dba200066ed", 0x23}], 0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x0, 0x0, 0x4007) fsopen(&(0x7f0000000800)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 1.505056894s ago: executing program 2 (id=154): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000100), 0x2, 0x790, &(0x7f00000002c0)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x55) syz_create_resource$futex(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000000040)=[{{&(0x7f0000000180), 0x6e, 0x0}}], 0x1, 0x2022, &(0x7f0000000a80)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c40)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000d00)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000dc0), 0x4000087, 0x2, 0x0) unshare(0x72000200) r5 = socket(0x28, 0x801, 0x5) connect$vsock_stream(r5, &(0x7f0000000e00)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000e80)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000ec0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f80)={0x2020}, 0x2020) bind$xdp(0xffffffffffffffff, &(0x7f0000002fc0)={0x2c, 0x8, 0x0, 0x13}, 0x10) r6 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) fsync(r6) 1.317105503s ago: executing program 8 (id=155): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f00000002c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mkdir(&(0x7f0000006840)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000006880)={0x20080522}, &(0x7f00000068c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$tun(0xffffffffffffff9c, 0x0, 0xe0280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006900)='./file2\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000006a40), 0x651, 0x0) lchown(&(0x7f0000006a80)='./file0\x00', 0x0, 0x0) 1.316810313s ago: executing program 9 (id=156): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0x8, 0x3, {{0x2c, 0x4, 0x0, 0x8, 0xb0, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @remote, {[@generic={0x82, 0xf, "48a3cb8b111bec06befdc73391"}, @lsrr={0x83, 0xb, 0x5d, [@rand_addr=0x64010102, @private=0xa010100]}, @timestamp_addr={0x44, 0x4c, 0x64, 0x1, 0xe, [{@rand_addr=0x64010101, 0x6038}, {@loopback, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0xad74}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010102, 0x7ff}, {@rand_addr=0x64010102, 0xe}, {@multicast1, 0x4}]}, @ssrr={0x89, 0x13, 0x91, [@multicast2, @multicast2, @multicast2, @loopback]}, @end, @noop, @cipso={0x86, 0x1a, 0x1, [{0x6, 0x2}, {0x5, 0x6, "a423378d"}, {0x2, 0xc, "31d6e80ce9e8bb154231"}]}, @ssrr={0x89, 0x7, 0xa4, [@empty]}]}}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x2, 0xffffffffffffffe0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x24, r1}, 0x94) 1.316738183s ago: executing program 9 (id=157): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xa318, 0x2002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x8000000d}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000001400)=""/40, &(0x7f0000001440)=0x28) syz_open_dev$evdev(&(0x7f0000000080), 0xa318, 0x2002) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x2}], 0x37) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) 1.315060583s ago: executing program 9 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000007c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000900)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 1.244376991s ago: executing program 9 (id=159): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000025c0)={0x1, &(0x7f0000002600)=[{0x6, 0x0, 0x7, 0x7fff7ffa}]}) r0 = timerfd_create(0x2, 0x80c00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000020feffff620af0fff8ffffff71a4f0ff0000000015040200000000031d400200000000004704000001ed0000620300001e0000001d440000000000007a0a00fe00ffffffdb03000041000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x3}, 0x53, 0x10, &(0x7f0000000e40), 0xfffffffffffffd00}, 0x48) clock_settime(0xfffffffb, 0x0) sendmmsg$unix(r3, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0xfe, {0xffffffff, 0x16, 0x5, 0x1b, 0x5, 0x64, 0x0, 0xc5}}) recvmmsg(r1, &(0x7f0000000100), 0x10106, 0x2, 0x0) sendto$unix(r1, 0x0, 0x0, 0x84, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) timerfd_gettime(r0, &(0x7f0000000000)) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) 1.045245601s ago: executing program 3 (id=160): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000"], 0x0, 0x3c}, 0x28) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) (async, rerun: 32) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001440), 0x400) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000001500)={0x2, 0x2, 0xffffffff, 0x1, 0x9c}) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/event_source/devices/msr/format/event\x00', 0xa00, 0x0) read(r4, &(0x7f0000000240)=""/100, 0x64) close(r4) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0xd000, 0xa000, 0x26000, 0xc000], 0x5, 0x54, 0xffffffffffffff80}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000001080), 0x8, 0x10, &(0x7f00000010c0)={0xfffffffc}, 0x10}, 0x94) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001100)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001140)={r5, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6}}, 0x40) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001200)='memory.events\x00', 0x26e1, 0x0) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000001340)={&(0x7f0000001580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf258200000008000300b23d6eee87dfa374faf47a9b7a75ad7ff23d1204d3edd045297903394cfae9477cdeb748ab1ebc0c7dcec0efefab7721f8f2374c15385a2f95aa84ea4cfecb1c726c879977c25eed94b49e8167f6299c770eaf07b59527a2e5d2be8aebc1c343ecf6ec6d012af8e3faa7e8905d1fc9777a693b8c354a9f62f388e0a6ae01ebd9b8f2", @ANYRES32=0x0, @ANYBLOB="0c0099000100000003000000"], 0x28}}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) fsopen(&(0x7f0000001180)='ramfs\x00', 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008045, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) (async) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 889.051658ms ago: executing program 3 (id=161): prlimit64(0x0, 0x1, &(0x7f0000000040)={0x2, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) r3 = fsopen(&(0x7f0000000880)='fuseblk\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) userfaultfd(0x80001) mount$9p_fd(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) 764.008851ms ago: executing program 2 (id=162): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280), 0x0) socket(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x104, 0x0) read$msr(r1, &(0x7f0000001fc0)=""/102392, 0x18ff8) rt_sigqueueinfo(r0, 0x6, &(0x7f0000000180)={0x1, 0x101, 0x8001}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) 715.567046ms ago: executing program 2 (id=163): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00420040000000060000000c003900ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES64=r1], 0x8c}, 0x1, 0xba01, 0x0, 0x400c085}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x200048d4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x200000000000000) 596.927058ms ago: executing program 2 (id=164): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7ffffffa}]}) timerfd_create(0x6, 0x80800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x2, 0x540, 0x3a0, 0x0, 0x0, 0x3a0, 0x2b0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, [0x0, 0xff, 0xff, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xff], 'veth1_to_hsr\x00', 'veth0_vlan\x00', {0xff}, {}, 0x2b, 0x2, 0x0, 0x50}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@local, 0x12, 0x26, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1b, 0x2b, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x6, 0x13c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r6}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff2, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xa}, {0x0, 0xfff3}, {0xb, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_U32_SEL={0x14, 0x5, {0x10, 0x4, 0x0, 0x9, 0x3, 0xfffa, 0x6, 0x7}}, @TCA_U32_POLICE={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000e40)={&(0x7f0000000e80), 0xc, &(0x7f0000000ec0)={&(0x7f0000000f00)=@delqdisc={0x24, 0x25, 0x10, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe}, {0xfff3, 0x1}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24054040}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x200, 0x27dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffec}, {0xfff1, 0xffff}, {0xfff2, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x0) ptrace$pokeuser(0x6, r7, 0x358, 0xffff8881f5c0a000) syz_clone(0x2000000, &(0x7f0000000100)="67a3", 0x2, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = io_uring_setup(0x650b, &(0x7f0000000340)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) close_range(r10, 0xffffffffffffffff, 0x0) 579.73276ms ago: executing program 2 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) close(0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x84100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0b00000007000000ff0700000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff000002000000005a90000000008200006b0acd99bee218cded2a0966008360af907e1d856892f10fa8000c736559a1cb4b16a48d0c8ef7f4a4809857c670d04cdc727c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x2000005e, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000c00)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c80)={r2}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00\x00', 0x2}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000d80)=[{{&(0x7f0000000dc0)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0xd5f31383e735357e) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000e00)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000e40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000e80)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f00000002c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1, 0x0) 499.860708ms ago: executing program 8 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) 421.106146ms ago: executing program 8 (id=167): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x4, 0x9, 0x7f, 0x200, 0xffffffffffffffff, 0x24c63541, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@arena={0x21, 0x0, 0x0, 0xb, 0x20200, r1, 0x3, '\x00', 0x0, r0, 0x1005, 0x2, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000620afcff0000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@cgroup=r4, r3, 0x3, 0x0, 0x0, @void, @value=0x0}, 0x48) 420.617037ms ago: executing program 7 (id=168): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clock_gettime(0x6, &(0x7f0000000340)={0x0, 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x9c) r5 = accept4$inet(r4, &(0x7f0000000400)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80400) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x80, 0x0, 0x8, 0x10001, {{0x22, 0x4, 0x0, 0x26, 0x88, 0x64, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0x85, [@empty, @broadcast, @remote, @multicast1, @local, @empty]}, @lsrr={0x83, 0xf, 0x21, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xf9, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0x8}, {@multicast1, 0x3}, {@multicast2, 0x9}, {@broadcast, 0x9}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x3, [{@loopback, 0x9}, {@multicast2, 0x7}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'erspan0\x00', r6, 0x80, 0x7, 0xff, 0x4, {{0x15, 0x4, 0x2, 0x3f, 0x54, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0xc, 0x22, 0x0, 0x1, [0xa0f6, 0x5]}, @rr={0x7, 0x13, 0xbb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @remote]}, @end, @ssrr={0x89, 0xf, 0xe4, [@private=0xa010101, @empty, @rand_addr=0x64010101]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xdc, [@remote, @dev={0xac, 0x14, 0x14, 0x21}]}, @end]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) clock_gettime(0x6, &(0x7f0000000340)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000003c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x9c) (async) accept4$inet(r4, &(0x7f0000000400)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80400) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x80, 0x0, 0x8, 0x10001, {{0x22, 0x4, 0x0, 0x26, 0x88, 0x64, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0x85, [@empty, @broadcast, @remote, @multicast1, @local, @empty]}, @lsrr={0x83, 0xf, 0x21, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xf9, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0x8}, {@multicast1, 0x3}, {@multicast2, 0x9}, {@broadcast, 0x9}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x3, [{@loopback, 0x9}, {@multicast2, 0x7}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'erspan0\x00', r6, 0x80, 0x7, 0xff, 0x4, {{0x15, 0x4, 0x2, 0x3f, 0x54, 0x67, 0x0, 0x1, 0x29, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0xc, 0x22, 0x0, 0x1, [0xa0f6, 0x5]}, @rr={0x7, 0x13, 0xbb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @remote]}, @end, @ssrr={0x89, 0xf, 0xe4, [@private=0xa010101, @empty, @rand_addr=0x64010101]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xdc, [@remote, @dev={0xac, 0x14, 0x14, 0x21}]}, @end]}}}}}) (async) 366.993912ms ago: executing program 8 (id=169): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x2000000}}, 0x10, 0x0}, 0x0) 333.359755ms ago: executing program 7 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000780)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000007c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee01}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000900)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 333.135906ms ago: executing program 8 (id=171): socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2, 0x2000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) 260.108243ms ago: executing program 7 (id=172): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101301) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$uac2(0x1, 0xed, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x0, 0x80, 0xd9, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x0, 0x2d, 0x2}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x4, 0x8, 0x6, 0x3}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x303, 0x5, 0x4, 0x7, 0x81, 0x3}, @multiply_unit={0x7, 0x24, 0xc, 0xb2, 0x6, 0x5, 0x2}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x0, "7e0530cf"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xfc}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xc, 0xf1, 0x4, "08fd16"}, @as_header={0x10, 0x24, 0x1, 0x2, 0x0, 0x2, 0x4, 0x20, 0x9, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x3, 0x4, {0x8, 0x25, 0x1, 0x1, 0x3, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xdb, 0xde, 0x1, 0x1001, 0x4, 0xc, 0x1c}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x8, 0x7, "9513490b154bc4"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x1, 0x3, "7174e8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x10, 0xc0, 0x4, {0x8, 0x25, 0x1, 0x40, 0xc, 0x4, 0x1}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x8, 0x7, 0xf, 0x0, 0x5}, 0x4d, &(0x7f0000000400)={0x5, 0xf, 0x4d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x40, 0x3, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf5, 0x8, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc8, 0x4, 0x3, 0x1ff, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x3, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fe4eea925cc3fedb3bd36c26965f0809"}, @wireless={0xb, 0x10, 0x1, 0xe, 0xd2, 0xfa, 0x8, 0xe71e, 0x7f}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc01}}, {0x59, &(0x7f00000004c0)=@string={0x59, 0x3, "fb8b2372c61f034d85b8df90d4650071a515cd969bf20f272ac82091bd850730f1708b9560333f3c0f573b75e287346300741ea8b0deb3ed92c9c8c0597511ecd966a31f79bfc9643e2d3ca23e6755733c67ba624cf80c"}}, {0x8, &(0x7f0000000540)=@string={0x8, 0x3, "228715ec66d9"}}]}) syz_usb_control_io(r2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x44000160) syz_usb_control_io$hid(r2, &(0x7f0000002bc0)={0x24, 0x0, 0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x13, &(0x7f0000000900)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000009c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000a00)=""/222}, 0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtaction={0x70, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x17, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x404, &(0x7f0000000dc0)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@dioread_lock}]}, 0x3, 0x44f, &(0x7f0000000fc0)="$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") r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1a) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = gettid() write(r5, &(0x7f0000000e40)="129e9c85e664ca8862e99d8fa6ac44b94a4067b578f3e28182dce6d6a3b48eca1473dab020bbc10b8dedd574330d78e1a4b1a0c6d7af399b91fe0d64e7ea1f98b874bb8c2c8069c8f142d47769903bb2b72deedd7f8ffc9ab1b9abf53983d4f087638da16ed367883501b1fc5ef8e62cfafbd55e9b2c4c0b8ee2432f507321e98ba0a57aa89311039f4b5bb0bbe18723fb36", 0x92) sendmsg$unix(r6, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x800}, 0x40800) recvmsg$unix(r7, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x2000) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f00000001c0)={0x1, 0x1}) close_range(r0, r1, 0x2) syz_usb_connect(0x5, 0x1b, &(0x7f0000000f80)={{0x12, 0x1, 0x300, 0x37, 0xb6, 0xbd, 0x8, 0xa07, 0x78, 0x227c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x51, 0x7, 0x0, 0xfa}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x438}}, {0x9f, &(0x7f0000000680)=@string={0x9f, 0x3, "1b8f43d336082ca2a0b076f98bde4458405ecd8f30b81f5100877f9b606461997a4d70a8dd88fdf24b314a1aceba88c66759853be7169ad42ab2638fa44c86c10d7bda8e16619175b536713195d93535e606129057c2b15c86428b79a487bcea23d3ddd9439fdb277feb29418cd1e33a08b103828e8bf153ed16a9ec68a13a07604a57c95157d5f12d014fb63f3cf60f74765d51a31d413253d32c306b"}}, {0x4, &(0x7f0000000740)=@lang_id={0x59, 0x3, 0x860}}, {0x34, &(0x7f0000000780)=@lang_id={0x0, 0x3, 0x4ff}}]}) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, &(0x7f0000000d80)=[0xffff, 0x400, 0x10000, 0xf099, 0x80000001, 0x3, 0x4, 0x6]) 108.995849ms ago: executing program 9 (id=173): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_io_uring_setup(0x4e03, &(0x7f0000000680)={0x0, 0x5875, 0x0, 0x1, 0x1a7}, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000800)={0xffffffff, 0x0, &(0x7f0000000840)=[{0x0}], 0x0, 0x1}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x40047459, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000002180)={&(0x7f00000020c0)=[{&(0x7f0000000140)="28b9bf78ed4ad91f6c995f382ebb040566463e0181ae665909f74149dda81a3860bc51b184aa3883c90644452e77b944555d7d8f63aad7d5ad46b79c9e9bd9b796", 0x41}, {&(0x7f0000000240)="afa20fc78c8e4e4a1effc87c9014e5f1221fcd8563d193d91e6624eac386d0d060e948b4e129fd304d82c96fa522eee97fcb1adc1aba0b6943cf5de4356d2aa3b5978f0887c07a5c1355280ed9468815fbbbf3f0028142648d11a98fdcb5f20c35a4346d9622458c6a173fa288ff0ed40af08dc85f441eff212d74881f88bc416e8fbb27c370e82e29248bf13f33949f24d8e55ede28a1db422092e53e", 0x9d}, {&(0x7f0000000300)="9e564032a22fb4c0c2", 0x9}, {&(0x7f0000000380)="43f3f14d7ccff36801ae1080e28bd8cb09eed5c24d391b7f92c3e46a6f215a2d852dcd90575c453359100fc8a03ce0df79280fa2acab646f3a1b2018af8c857e854fb1e2f7b3308760f4aa1055e586a7e2721eda75f8cb7e2ffedc02f69e0f59d98e842ccc52150e5e211b3ee3f716882e4706f05a538c2668684b219d001d149191228a3a8faa5423de1b3e418b4b4f408640f92d426844d774e335041b8804009c0431e3e7db3e9276fc0353629109aa528915b18dafb506768a1acff818c0c3dd42a4f88670d798c7", 0xca}, {&(0x7f0000000480)="ea809079129819d122451a397f1a84dd8c208ba3041a6b6de690402b7fe90a9d966f57", 0x23}, {&(0x7f00000004c0)="559f0eaa535a7ef3919d481c915cc93e69a79a87ef38f8c802447cc7e0abe62deb9f525cd6944ea0a603484f5f06fb62774caadcfd57d84d44e4769298ab6fe48acea412a7e15f918b91514dad0c714162c39db166fa49c5149424d80c88cc9bf4cb64d7fd12f95195010b20229af93dd337cb89e096bf21080ce1e0371298067176a57182a8bd594af9e8fc7cce6c49879ec1ad951eaab128c9b7397ed0e343a6357212735b682449b5fbcfa1acbd16a4a40517158a8e1082d0ddd21eeca739b3d4f2af67cce0c11b031cdf211d9043ab347f131386994fa880f4e3dc4794ada28e413b", 0xe4}, {&(0x7f00000005c0)="f84df1ec5925b367fb17e4ebff5fd545e85d543a7055f8cda7d003fdee1800a6dbfd60c6a5499e285fdf1092ffadd59de381a347d7f8474fd5730edb081e127d84321a841f50e0b9ba37db2c1bbc1ab34ec1d478d06fe7c23dd00607d19f6d400676697067d1cc400e0963b302f0d0833bd3ac23368c8ec37adfb803cf5396ae0988753def1c00791918c4becdd9ac23793421d9d629", 0x96}, {&(0x7f0000000fc0)="8b0c524a1ba37a2a9029660e6565e0295ecebcd9ca92b786fa86dac775a5dd0ff6330330e7b03ec261b44e36becd82c53a5a65fa73680678792f3ba3b113cb978b9d7084461466910720e036abad70d40605ea010d88e71fa41319a40d6924809dffc0a57c7cd1bbeca89e08756d6a1fe73238955e301bd53ad83d3c9aacf461295a4c2fd7d3b87aec79dd3f71f2fdff8ab7de3b808efda92e60f1cf4f9b283e116dbf4805235fb8b279bb089bd689f3cdf97fb3a1e612eba71d9b15986278d28c5a2147553b34382b4ef4037473022eaab69747fd1e574ba40dd8c8081bb095ae170e075d6ec414d91cc9b59356cc2d227a40f2074b5eb14d043c1e9a022d64b86b209561284dc97d7c7039dd2573e60835e94fa2f3f0bf0e06bbffbad44a6af802e064ba292343174bd488d4e6e640d293e4692a31755357858d5bbe8a6976919f32620d6cb99b7a84505e3dab519fcf5726501a06356f9de801174944b3e24bac776ca9cae232188c0f96737ab3ab1e5eac56c3262efa84a4e11dd958b110545a45acf0c654658b35a8dee957c398052f7162ba66e43a4bca4cfc2c192cb0d47d664608614f19ac4a3f13ede0dfd4729081d3cf9f720739a75d975030842c810f35d1b437de5fdc9477c0c8005e90b77859811c9b23928d66bf4afc411ad232a8a4af47a3fa54ab6ab22266307b90a54017bbdcfa5145b820f4c1fce22b403bfd825e0584d091ccd2248cfe53bd6540e587dcaf15770e9df54ce021a06243ed0f0789bde2fa67287f6e8dccfbe353ceac04d0343d65f7ef3a8260169861c6f8d56338ffd93afec89475a95b38a4813a4f6c0c0f30e6edbc545b796fac67ddac21a142f39530c69804f7667c296e11b1088541ff6050ddb8f254843b5189a9df218f940602e98fafd3da9feb5c1eec6bb955b814f63ece95c7d859f2b4ef4f3675b3b87621f7eb5b2b00f7a99ded32b6bf7e73cef080f42cc6ee4d7c11607dd33335fd4fa15a5fafd7afd205ba4f6c5ebaa49302cf0d193719d0116dbd6188ea03a73055d516100b6aa6303cf941a58911e4253e444d29b49d3a02bd8e6e8cfe65891cde3cb304be7329909885d6f939bbb12345177078ae67e8bcef762649bf612ddc17e44ea35d91f8c05324cf0df9845604a7142e9e74014776a97c90916bdcb4613ef8523e14b8ef16b6e3c5834039c86b835d8b870205b20fab899c5ded5be5ce345cf9636a2d8d389fe2936f1295704436e4543fcd5304b23bc7946614916c3f6b23a367288d7a286b21915c3cc38bbac57c5540153c2f992a54d3af8b9d1c6225ce92b952e52515054454bea65cc6cdbeac9095d45c434a3c5c8039de2d2b283db12299803b5c61c730bd7fdc8089f9247d9bdf0391f5892ab6caa3c6a46795595635984ee0f8b969305567b75c666296391061da5766d24a68aa1623f057ec868e5efa73f4b027e29d62e11d7f3858bc5044ecab1c0a79c01cb158086f8c655b24764d0c2528b0bc4e07ddc118e34a773b77db091cdbf4026df601b69e349ea8a268d9082623aea7240d36d28297915c903d0a5e087aebf9e2230181c398cdef54ef575a2692b16369eedd42743894e4ac6b9658b70dafd90226817f1a1e2d27304b7dbf3be1d0ad1e1a63131961a07dd01b93a2abed91c1cce88a31a0fc8a94ff7a1ed58ae58bd2ced60efff8a92b920cbc4f0dad5f94c26c2100e0489fb963ef72299accc3c073ab6e3141636f2b898e8edb8cd5c098b351d99ca16b1490fb0d0d4bb3de30e0e549a2365d1c5d7c8c9825ca5f263aea6e597f8bdd6a14dc848e256c8ddb4f0f70389b60d5a26326dc07828ac062412d39431a3615527d88f917aff3c35bee0f330f881012ad028e35693dae66dd36956d1dd6f2e1694938208e4b8245af4d18ee441380129ac372e3f5cb1d774329e13d16b10b9c5b9f75cd0f95fc7d88991271cfdc5dbc32e6dde560cc9dbe42e3812889b2ad3f70514f79324fc828517761d3a8101f06d61fc64155cfbf7f06b28a4c3db0863fc77ba099cf0e2f4b91c1a474865028c3fa0b7fe81f877d23879a91146f2bc469e4c7de888b6f267d9be6fe7756dc3496508cd59eb82e3f7c9e7efe87081182c2aea3db4e2df6b76807fe2bb944ad16602c26da0c514e2387e2785a35b8f92ed3797e824a1e5277b0853c3f2ec21726e8a338d3881423fac8d1258c6cf071798e01caa1d8fea103c51dc4095df7c3f6b69f4ca10695f6b384b8e419c6feb24fb579435ce56a018b8e5e97a0c6c3858e4e47ccdf7130f026daab829780985a36706a864a0041ef3f11276a0c7e9ff8ce8ad5b45bc611fb40188801592e2227e5cc499742025badd9c2e6f39fcf2f6773c622bbc98bf00d58e503467acec9a9c6bd3a74c768aa2fd8e6a3b55aaf5a748208d758d731d7da6d38c67dba879888d1eb5bc8fbd4d777e2a3b538fdfa034c6e38a179ab8af321c8dd8b4abf019dd85c4eb57eb305e936ed7b5e6e2c1da16b259c244f20ab6ac098625599bff8a2cedfb65cb6bbda866f23ae6d6d4a280bc6f8277da5108e076e5f250f1affac4fc3f86e875d9bc2fb3dbdc78c919937da22b3ddfd2c532f66d92ed886b5775b37946462cb3047af13e0aa91b599c9626835106b12f5cff50a3561b2c94905f9464f62f96324506e979c7d012abaf2cf1bf92fd8d390635283cbb0a15355a44f99d60e21085dad727605bf9b06983568b6333992ced8cdab3f0a14b7f97c61bda62149dd0f5adb57d6735208321b34bfe14abb6181ad58bd34c7a61b1084f270606510dea74d26e7c6d358f6d2d8ee8a63f54504d239ad5ba074352487376187adb18cde89f1f3ddd9bc491a55ec1d6711bdde326d7cc009d5a9b5f42de8bb6ace28abed17c5e8f0ba9a0c2a24fa0d4548ca92d9c1dc9edb620492ab48ff82b954cf30ddee5c2d9bfe2debfa0c0e915689835a49fa5dfb53f13aba5c458b18a1495de56181d87b80261d4135d6b16fbc084df49189a63c99fd37688c0910ce825b970889e99540ee4782e6e6ef0877c8116c38053136ad659192654f26b727e340958730a2746861f38691cd665db39c138f8dae6da9634369298a78801f5e341b06e8b3d62bbd37adcb99734e99422443347091a9efcc0b47fc4efe8bc99ccd1918ba26e8cbad99ad73d9ce861c0392692ef0e592031337e306ece0f82b0711b149c18e9c153b09087a371c18270790ef2177ae9a527ce3eb32a14d60d0bbe711d87b18a735e56b38ad9058aa889715de50308245eff7bfca28d3d2a8df82a5ce1ab6eea2bdb0765244a848e445f98506c208d2579ae620bdc70b7745cb0f2f2ee5d20fc7ae62e489deb519cb71a9ba0d6ff909b1a184e541be8097ce96aa118ae80451474480c30820e5d5fa5439da4854be862ff924475ca7a8f500efb4c68b09dabf62cdf8a8a34f59f1e0c0ee0106f473855df6a4cf3b215f1782deb8ea3077f258deb559772413bb3f114982c7692b71fba9a520c86d0f7e62bc53938874a52dd3b5f95d64a8c4fe79b97e99b8c649f08eb64b1e31655d152d242b6c9c687750f8424076893da3a2f2792d94be45ebdc906769c07b131d31319879e4adb238fe870975a953563e3ad369958f9d32cd39fcc600f31933dfc8a0dd9cf9f87bee2fd8cf6cd6bd93231ea5aa9669e59b131e89284f1851ea88692f7f45cda73692a191c44a78bfdc07e16163633321ec0c183f8c88b7388e3fd3e30186db77e2b85c10cf99923f804de9a592dcdcf3dc1dc2c62de61fe2c79bcc2dd47c0d8daa7932ade25c95227548a2b40492453e4ae552d51c5e21e9e35eab9f7df961385feb55f45ed876caed7c5736c9f29ac13824097bff1b4e56ae8ca0c450dfccde5e72b55a90ea93684b53f66e6b331ba4f4acab5f09635eeff60d142430e062da4e4e7992031fad11b7f72a7b8ad7c77f2cf526bda2a684e0b3c71b2212d762afc42d9fb2bb25a06e47ad9080cbda9e28e223caa776d581f050a53cc69d0563a8b5ecf322c87499a08d0cae4fbde02e62266bd4c1dce2a4bac47f0416d0b2a81a2f5ca2ba9e635821cc22a4815687d5bcc8ae403be4412d63f27e5442311e4b44f96725c07571f4f0e51f987d6b999cbac7133aa1ffc6595d67531f91841482aa0d930b6483de5d712770e3b073ce021350b24b8947c97d52e981bfe77f14c174231cf51a837f43abc89977761126b46fa758f50696e2beb7896e1426cc730325a93d7550c07fdf567793619a1989ba15321cf9e453b432f00ff349f65d1ffaa7adce6c0e2c020b013e50fff4e41fe268cec2d3d788a8eee833160ead5a42c2f7f71f4e0472fb1ea8f46e072d6c959ecbdb35294857dcee0e7dc5104cd35e6312cd10f680a0d43a29b54e1ef54437be29f1a57ba96de6a5fffda239d37a297d97da77641701526ce15d67727d446570ed060bed0a235fdf6c3efe533cfa3b3488f5c63549b18e9484a12d52bed8c0bc7d113364ebc0688b27d0aec0751a659118a9f6eb090ed683ed8086f9ca28eefa1dbe2c1c33b39c2f47fa909f63f5417539a6f1440fd3bf895a59cbe2234ab335ae813c5c81a23bb7d1ea9c7c78fded9d96270369c4a029213e057313a602a867df426c03a337e062a7f243c136172716648e65c9db41e8d6a738b1a74d89a35e458cffa3886c4eebee5feaef7cee4657415324b632afff72dc648b4cd79ff404fa1c009b4d1fc052cc359433570c3873fd3e918fb933eb44396273347b80ef0257bf796f00e3ffc33136c9734ed6a6110c776b387ec91af85cf6281ec4aa41a9aa8d003407bd853220a879898555a615341ba5bda82fc4cd2619cf7e1e17996317abbf6eac1f327ee529def3f0c43b69716a04552c5f5a0818347ffd7d5648c7b8847db8c7ecb290486c849dc97cd009297a60e6ba970cbefb6a9e12f5eacbfd3de7e62d295001237bd8ae0d134296f72f16a7fcd2f3962b9df08219e8119aa765aa62a5698bfa868992250498ba855275734ed0878194518917d6f43504193b6616daee11a4be3bc029f89827624b178262821a2708aff9b487d66000a2a2b6ff9a492a4d146db7fc4a79b1184ba31aae3792515bcdfe17ca60962f4ce1c74da6193775e36d65db532dab6a919b7b96af262b879c02ee01028136be586db80edfce4b42c126b8022b7305d678066d38a0c9db04a603dc2e268eb0a6f61af472f06944ee15851dd34aec291b517d7aac3128a1400f805a5b343347d4372782655b17e5aec312055906ba6e5277a7d3e0a22fe894ba1a5993eeafdf02e12fedbd0f34676a0a197778fcf9bddb0d311f53f3041d30deb7e586c4a82b6ce6d4fe1308637a93bd3a7fbefc4cb1f8344da3b2505c966cb3400fe7060f8bef2d86b5a310a18f818424b0dc4c1ab63ae9767953e1585be9c2d02d19948c0b1ce3da98f999bebe04bc62c081e450044f5eee4039dd03040dcb7636acbc6f5d1fb4c1b3835d1a3b35883b2fa60a0e22cc4673f82bdc0be313b6cc440d1405d5f9f435f9c023afcab4f4ebeedd60ec70b2ad9fc5f96203857df2c1999467b6c0dd766d0b6754a16429246755a963bbc108b32f8ef1b082f9fd2100c95635be20a49c417fd26baa97a2230e448b92fea796aade398fddc7506477de0a62502ed932fdb9507d6da263f052404c793c67396557884421d8b5f1109acfe79d91cc77dcf2a69437feb372c9501036cbb0a29b1b30213d707e0db9a6f3174397f27b492e4e7c155b36cd145e5966d157548bac556cfd90de1e71884a", 0x1000}, {&(0x7f0000001fc0)="ac46ea2dac24b474b73bc885843ac4f3a9f1429a1f5e7ad2c71040bb90f8538e5e72676aed61f895a5e43fa96d99c5fdc03ee274f6da3a1328f6abebc3b61d8db9bde00257d160ae5e42b6faf4b7750705360d9dfc5b3f4c7b22a6c9f2bca4e4a265374d71555055c594ab2ed392607895dee068d9281987b99fe6f2bff7237f2009faea0de97a7c340be7f7dc6b86dc1d83e128b24017d82ff9963234a5120f460cc8bdff0462ed185e280a118a2fe036d5550551396af2f14649a70af32e6e7308ec0d2f804bfa348b1da30796b7a2328abbe7c9596d52c55fa0f3824aaa6b6afe", 0xe2}], 0x9, 0x7, 0x0, 0x5, 0x1, 0x8, 0x0, 0x8000}) r3 = syz_open_procfs(0x0, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(r3, 0x80207513, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, 0x0) clock_settime(0x1, 0x0) r4 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_setup_queues(r4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143041, 0x2a) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x17, 0x4, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x800}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffff00000000}, 0x38) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0\x00', 0x4000, &(0x7f0000000c00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) 0s ago: executing program 9 (id=174): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0xc2, 0x3, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "091317e4"}]}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x2, 0xba, &(0x7f00000004c0)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000640)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000c5005af8ff00000000bfa200000000000007020000bbffffffb703000008000000b704000000000000850000001e0200009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000b40), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000b80)=0x2) recvmmsg(r6, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000c00)={0x0, 'veth0_vlan\x00', {0x10000001}, 0x26}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400002e0002000000000000000000000d03000000000000000000000a05000000000000000000000b0030e4000000"], 0x0, 0x3e}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz1\x00', 0x1ff) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 22.702412][ T28] audit: type=1400 audit(1793210883.636:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.706173][ T279] cgroup: Unknown subsys name 'net' [ 22.725089][ T28] audit: type=1400 audit(1793210883.636:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.752541][ T28] audit: type=1400 audit(1793210883.666:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.754029][ T279] cgroup: Unknown subsys name 'devices' [ 22.897431][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.903112][ T279] cgroup: Unknown subsys name 'rlimit' [ 23.038062][ T28] audit: type=1400 audit(1793210883.976:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.061303][ T28] audit: type=1400 audit(1793210883.976:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.086217][ T28] audit: type=1400 audit(1793210883.976:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.111289][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.120162][ T28] audit: type=1400 audit(1793210884.056:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.145729][ T28] audit: type=1400 audit(1793210884.056:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.175093][ T28] audit: type=1400 audit(1793210884.116:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.200690][ T28] audit: type=1400 audit(1793210884.116:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.200736][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.020901][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.028004][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.035610][ T288] device bridge_slave_0 entered promiscuous mode [ 24.043661][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.050774][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.058448][ T288] device bridge_slave_1 entered promiscuous mode [ 24.154799][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.161884][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.169498][ T287] device bridge_slave_0 entered promiscuous mode [ 24.176646][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.183880][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.191510][ T287] device bridge_slave_1 entered promiscuous mode [ 24.210015][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.217193][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.225136][ T289] device bridge_slave_0 entered promiscuous mode [ 24.247875][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.255039][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.262540][ T289] device bridge_slave_1 entered promiscuous mode [ 24.333110][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.340272][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.347894][ T290] device bridge_slave_0 entered promiscuous mode [ 24.358104][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.365257][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.372753][ T290] device bridge_slave_1 entered promiscuous mode [ 24.379516][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.386658][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.394084][ T291] device bridge_slave_0 entered promiscuous mode [ 24.401387][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.408556][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.416108][ T291] device bridge_slave_1 entered promiscuous mode [ 24.505886][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.512960][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.520298][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.527363][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.611448][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.618575][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.625980][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.633040][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.643009][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.650186][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.657513][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.664646][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.694584][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.701691][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.709015][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.716093][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.746959][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.754296][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.761595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.769947][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.777371][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.785367][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.792540][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.799920][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.807464][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.846058][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.854376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.862244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.870025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.878400][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.885762][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.893189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.901560][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.908634][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.916084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.924239][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.931309][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.939001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.947327][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.954359][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.961881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.970135][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.977219][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.984739][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.993130][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.000221][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.013072][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.021842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.045413][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.053618][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.061903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.070331][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.078617][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.086857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.095095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.102585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.128435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.136865][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.146208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.154600][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.163129][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.170289][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.177769][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.186614][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.194961][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.202096][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.209702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.217471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.225117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.233186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.241254][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.249563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.257869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.266143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.278528][ T290] device veth0_vlan entered promiscuous mode [ 25.291091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.299454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.307122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.314568][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.323167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.331689][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.338801][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.346421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.354329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.362939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.371373][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.378471][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.386097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.394231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.402672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.423792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.432013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.451884][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.460915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.469631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.478136][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.486301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.494435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.503104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.511832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.519532][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.529931][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.538524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.549697][ T290] device veth1_macvtap entered promiscuous mode [ 25.557310][ T288] device veth0_vlan entered promiscuous mode [ 25.568191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.577259][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.591036][ T289] device veth0_vlan entered promiscuous mode [ 25.601399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.609474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.617214][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.625695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.634045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.642401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.650663][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.658945][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.667612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.675378][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.694318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.707770][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 25.708963][ T289] device veth1_macvtap entered promiscuous mode [ 25.722873][ T287] device veth0_vlan entered promiscuous mode [ 25.734207][ T291] device veth0_vlan entered promiscuous mode [ 25.746082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.755311][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.763476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.768766][ T309] loop4: detected capacity change from 0 to 256 [ 25.773175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.791774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.800751][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.818589][ T288] device veth1_macvtap entered promiscuous mode [ 25.831308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.840078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.858462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.862486][ T313] loop4: detected capacity change from 0 to 512 [ 25.868376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.881929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.890236][ T313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 25.910001][ T313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6: bg 0: block 393: padding at end of block bitmap is not set [ 25.922759][ T287] device veth1_macvtap entered promiscuous mode [ 25.931579][ T313] EXT4-fs (loop4): Remounting filesystem read-only [ 25.939654][ T313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 25.947662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.950230][ T313] EXT4-fs (loop4): Remounting filesystem read-only [ 25.957706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.964267][ T313] EXT4-fs (loop4): 2 truncates cleaned up [ 25.971924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.977624][ T313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.987135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.003610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.012022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.042056][ T291] device veth1_macvtap entered promiscuous mode [ 26.049703][ T290] EXT4-fs (loop4): unmounting filesystem. [ 26.062211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.072122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.082304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.091082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.099946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.128983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.139365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.157629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.166659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.201616][ T326] loop1: detected capacity change from 0 to 512 [ 26.225177][ T326] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.266482][ T326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 393: padding at end of block bitmap is not set [ 26.268748][ T328] loop2: detected capacity change from 0 to 512 [ 26.296291][ T320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.298560][ T326] EXT4-fs (loop1): Remounting filesystem read-only [ 26.332843][ T328] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.345678][ T326] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 26.356024][ T326] EXT4-fs (loop1): Remounting filesystem read-only [ 26.362819][ T326] EXT4-fs (loop1): 2 truncates cleaned up [ 26.369681][ T326] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.378841][ T328] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3: bg 0: block 393: padding at end of block bitmap is not set [ 26.404053][ T328] EXT4-fs (loop2): Remounting filesystem read-only [ 26.413959][ T328] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 26.424943][ T328] EXT4-fs (loop2): Remounting filesystem read-only [ 26.431636][ T328] EXT4-fs (loop2): 2 truncates cleaned up [ 26.448047][ T328] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 26.478339][ T287] EXT4-fs (loop1): unmounting filesystem. [ 26.495141][ T291] EXT4-fs (loop2): unmounting filesystem. [ 26.640329][ T346] tc_dump_action: action bad kind [ 26.695784][ T353] loop0: detected capacity change from 0 to 512 [ 26.707574][ T353] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.734627][ T353] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.12: bg 0: block 393: padding at end of block bitmap is not set [ 26.751829][ T353] EXT4-fs (loop0): Remounting filesystem read-only [ 26.758983][ T353] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 26.768959][ T353] EXT4-fs (loop0): Remounting filesystem read-only [ 26.775800][ T353] EXT4-fs (loop0): 2 truncates cleaned up [ 26.781665][ T353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.804127][ T289] EXT4-fs (loop0): unmounting filesystem. [ 26.836979][ T359] loop0: detected capacity change from 0 to 512 [ 26.844887][ T359] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.862168][ T359] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13: bg 0: block 393: padding at end of block bitmap is not set [ 26.879367][ T343] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.886926][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.897650][ T359] EXT4-fs (loop0): Remounting filesystem read-only [ 26.904324][ T359] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 26.914801][ T359] EXT4-fs (loop0): Remounting filesystem read-only [ 26.921492][ T359] EXT4-fs (loop0): 2 truncates cleaned up [ 26.930669][ T359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.954004][ T289] EXT4-fs (loop0): unmounting filesystem. [ 26.979792][ T365] loop0: detected capacity change from 0 to 128 [ 27.012111][ T368] loop0: detected capacity change from 0 to 128 [ 27.083945][ T363] loop2: detected capacity change from 0 to 512 [ 27.090391][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 27.095658][ T343] usb 4-1: Using ep0 maxpacket: 32 [ 27.102751][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.115549][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.126613][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.136594][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.145589][ T363] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 27.147217][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 27.164674][ T343] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 27.176823][ T363] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.15: bg 0: block 393: padding at end of block bitmap is not set [ 27.185128][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.192498][ T363] EXT4-fs (loop2): Remounting filesystem read-only [ 27.204914][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.210250][ T363] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 27.222676][ T363] EXT4-fs (loop2): Remounting filesystem read-only [ 27.225805][ T343] usb 4-1: config 0 descriptor?? [ 27.233059][ T363] EXT4-fs (loop2): 2 truncates cleaned up [ 27.236830][ T6] usb 5-1: config 0 descriptor?? [ 27.245211][ T363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.265926][ T343] hub 4-1:0.0: USB hub found [ 27.277455][ T6] hub 5-1:0.0: USB hub found [ 27.286256][ T370] loop0: detected capacity change from 0 to 512 [ 27.294121][ T370] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 27.306895][ T370] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.18: bg 0: block 393: padding at end of block bitmap is not set [ 27.321582][ T370] EXT4-fs (loop0): Remounting filesystem read-only [ 27.328227][ T370] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 27.337497][ T370] EXT4-fs (loop0): Remounting filesystem read-only [ 27.344158][ T370] EXT4-fs (loop0): 2 truncates cleaned up [ 27.349991][ T370] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 27.479079][ T343] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 27.492843][ T6] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 27.516938][ T343] usbhid 4-1:0.0: can't add hid device: -71 [ 27.523018][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 27.529103][ T343] usbhid: probe of 4-1:0.0 failed with error -71 [ 27.535936][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 27.575792][ T6] usb 5-1: USB disconnect, device number 2 [ 27.582561][ T343] usb 4-1: USB disconnect, device number 2 [ 27.637083][ T375] F2FS-fs (loop1): invalid crc value [ 27.644553][ T375] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.684867][ T375] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 27.710332][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 27.710348][ T28] audit: type=1400 audit(1793210888.646:237): avc: denied { name_bind } for pid=374 comm="syz.1.19" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.738205][ T28] audit: type=1400 audit(1793210888.646:238): avc: denied { write } for pid=374 comm="syz.1.19" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.760397][ T28] audit: type=1400 audit(1793210888.646:239): avc: denied { add_name } for pid=374 comm="syz.1.19" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.781211][ T28] audit: type=1400 audit(1793210888.646:240): avc: denied { create } for pid=374 comm="syz.1.19" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.801552][ T28] audit: type=1400 audit(1793210888.666:241): avc: denied { mounton } for pid=374 comm="syz.1.19" path="/2/file1/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.824320][ T28] audit: type=1400 audit(1793210888.666:242): avc: denied { write } for pid=374 comm="syz.1.19" name="file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.846077][ T28] audit: type=1400 audit(1793210888.666:243): avc: denied { add_name } for pid=374 comm="syz.1.19" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.866824][ T28] audit: type=1400 audit(1793210888.666:244): avc: denied { setattr } for pid=374 comm="syz.1.19" name="work" dev="loop1" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.898656][ T28] audit: type=1400 audit(1793210888.666:245): avc: denied { write open } for pid=374 comm="syz.1.19" path=2F202864656C6574656429 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.933743][ T291] EXT4-fs (loop2): unmounting filesystem. [ 27.945427][ T28] audit: type=1400 audit(1793210888.666:246): avc: denied { create } for pid=374 comm="syz.1.19" name="#1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.983041][ T289] EXT4-fs (loop0): unmounting filesystem. [ 28.092457][ T287] syz-executor: attempt to access beyond end of device [ 28.092457][ T287] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 28.118976][ T287] syz-executor: attempt to access beyond end of device [ 28.118976][ T287] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 28.133865][ T320] syz.4.7 (320) used greatest stack depth: 21440 bytes left [ 28.172533][ T355] kworker/u4:4: attempt to access beyond end of device [ 28.172533][ T355] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 28.303633][ T398] tc_dump_action: action bad kind [ 28.337712][ T399] ======================================================= [ 28.337712][ T399] WARNING: The mand mount option has been deprecated and [ 28.337712][ T399] and is ignored by this kernel. Remove the mand [ 28.337712][ T399] option from the mount to silence this warning. [ 28.337712][ T399] ======================================================= [ 28.624765][ T293] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.805269][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.814742][ T293] usb 4-1: Using ep0 maxpacket: 32 [ 28.821829][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.845026][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.861049][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.879228][ T407] device bridge_slave_0 entered promiscuous mode [ 28.905622][ T293] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.916344][ T355] device bridge_slave_1 left promiscuous mode [ 28.922525][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.940993][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.949963][ T355] device bridge_slave_0 left promiscuous mode [ 28.972153][ T293] usb 4-1: config 0 descriptor?? [ 28.977844][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.993623][ T293] hub 4-1:0.0: USB hub found [ 28.999639][ T355] device veth1_macvtap left promiscuous mode [ 29.007587][ T355] device veth0_vlan left promiscuous mode [ 29.143555][ T422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=422 comm=syz.0.33 [ 29.178069][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.185352][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.196421][ T293] hub 4-1:0.0: 5 ports detected [ 29.202011][ T407] device bridge_slave_1 entered promiscuous mode [ 29.208708][ T293] hub 4-1:0.0: insufficient power available to use all downstream ports [ 29.264788][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.403024][ T293] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 29.419688][ T293] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 29.436525][ T293] usbhid 4-1:0.0: can't add hid device: -71 [ 29.458107][ T293] usbhid: probe of 4-1:0.0 failed with error -71 [ 29.474770][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 29.481719][ T60] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 29.497364][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.510135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.519241][ T293] usb 4-1: USB disconnect, device number 3 [ 29.544418][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.564626][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.584804][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.591979][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.607749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.622689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.632785][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.639912][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.656052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.667837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.676349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.696665][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.705785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.714028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.722431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.732835][ T407] device veth0_vlan entered promiscuous mode [ 29.746373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.757169][ T407] device veth1_macvtap entered promiscuous mode [ 29.769221][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.783246][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.924740][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.972653][ T431] F2FS-fs (loop5): Invalid log_blocksize (2060), supports only 12 [ 29.991089][ T431] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 30.005792][ T431] F2FS-fs (loop5): invalid crc value [ 30.019607][ T431] F2FS-fs (loop5): invalid crc value [ 30.025573][ T431] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 30.114750][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 30.120954][ T24] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.144762][ T24] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.154562][ T24] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.176735][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.183494][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 30.192920][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.205996][ T24] usb 1-1: config 0 descriptor?? [ 30.334761][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.515973][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.526993][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.536830][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.549815][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.559411][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.568643][ T6] usb 4-1: config 0 descriptor?? [ 30.626553][ T24] input: HID 046d:c623 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C623.0001/input/input4 [ 30.688205][ T447] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 30.707515][ T24] logitech 0003:046D:C623.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.0-1/input0 [ 30.879096][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.887694][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.976891][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.984524][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.992061][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.999678][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.007274][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.014785][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.022397][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.029892][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.037984][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.045465][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.052929][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.060455][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.068080][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.075566][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.089340][ T6] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 31.099186][ T6] plantronics 0003:047F:FFFF.0002: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 31.210671][ T456] set_capacity_and_notify: 4 callbacks suppressed [ 31.210700][ T456] loop4: detected capacity change from 0 to 1024 [ 31.224052][ T456] ext3: Unknown parameter 'uid' [ 31.253255][ T355] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.505178][ T407] EXT4-fs (loop5): unmounting filesystem. [ 31.592219][ T471] futex_wake_op: syz.5.43 tries to shift op by 144; fix this program [ 31.603277][ T471] loop5: detected capacity change from 0 to 256 [ 31.614631][ T471] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 31.786161][ T343] usb 4-1: USB disconnect, device number 4 [ 31.895054][ T24] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 31.950498][ T60] usb 3-1: string descriptor 0 read error: -71 [ 31.957868][ T60] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 31.967328][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.977000][ T60] usb 3-1: can't set config #1, error -71 [ 31.983423][ T60] usb 3-1: USB disconnect, device number 2 [ 32.044825][ T24] usb 1-1: device descriptor read/64, error -32 [ 32.312260][ T479] overlayfs: workdir and upperdir must be separate subtrees [ 32.325084][ T24] usb 1-1: device descriptor read/64, error -32 [ 32.401060][ T484] loop5: detected capacity change from 0 to 2048 [ 32.427570][ T484] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 32.479678][ T481] loop3: detected capacity change from 0 to 256 [ 32.686857][ T477] loop0: detected capacity change from 0 to 131072 [ 32.694309][ T477] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 32.703006][ T477] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.711970][ T477] F2FS-fs (loop0): invalid crc value [ 32.719296][ T477] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.755410][ T477] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 32.762640][ T477] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 33.075323][ T429] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 33.178682][ T28] kauditd_printk_skb: 521 callbacks suppressed [ 33.178698][ T28] audit: type=1400 audit(1793210894.116:768): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 33.213502][ T28] audit: type=1400 audit(1793210894.146:769): avc: denied { create } for pid=497 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 33.264901][ T28] audit: type=1400 audit(1793210894.186:770): avc: denied { read write } for pid=497 comm="syz.3.51" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.266277][ T429] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.294861][ T464] Bluetooth: hci0: command 0x1003 tx timeout [ 33.303819][ T39] usb 1-1: USB disconnect, device number 2 [ 33.307430][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.319965][ T28] audit: type=1400 audit(1793210894.186:771): avc: denied { open } for pid=497 comm="syz.3.51" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.326686][ T501] futex_wake_op: syz.3.51 tries to shift op by 144; fix this program [ 33.359330][ T500] FAULT_INJECTION: forcing a failure. [ 33.359330][ T500] name failslab, interval 1, probability 0, space 0, times 1 [ 33.363470][ T407] EXT4-fs (loop5): unmounting filesystem. [ 33.372581][ T500] CPU: 0 PID: 500 Comm: syz.0.50 Not tainted syzkaller #0 [ 33.384869][ T500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.394961][ T500] Call Trace: [ 33.398276][ T500] [ 33.401261][ T500] __dump_stack+0x21/0x24 [ 33.405631][ T500] dump_stack_lvl+0x110/0x170 [ 33.410342][ T500] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.415398][ T500] ? alloc_vmap_area+0x17b6/0x18c0 [ 33.417064][ T504] netlink: 'syz.4.52': attribute type 29 has an invalid length. [ 33.420544][ T500] dump_stack+0x15/0x24 [ 33.420565][ T500] should_fail_ex+0x3bf/0x510 [ 33.437052][ T500] __should_failslab+0xac/0xf0 [ 33.438122][ T502] ./dev/sda1: Can't open blockdev [ 33.441866][ T500] should_failslab+0x9/0x20 [ 33.441892][ T500] __kmem_cache_alloc_node+0x3d/0x2d0 [ 33.449676][ T504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 33.451430][ T500] ? __vmalloc_node_range+0x564/0x1440 [ 33.462511][ T28] audit: type=1400 audit(1793210894.356:772): avc: denied { write } for pid=503 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.465479][ T500] ? _raw_spin_unlock+0x4c/0x70 [ 33.465503][ T500] ? __vmalloc_node_range+0x564/0x1440 [ 33.473363][ T504] netlink: 'syz.4.52': attribute type 29 has an invalid length. [ 33.491132][ T500] __kmalloc_node+0xa2/0x1e0 [ 33.491161][ T500] __vmalloc_node_range+0x564/0x1440 [ 33.491184][ T500] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 33.491211][ T500] ? _parse_integer_limit+0x18e/0x1d0 [ 33.497454][ T429] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.501545][ T500] ? __cfi___vmalloc_node_range+0x10/0x10 [ 33.510060][ T429] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 33.513792][ T500] ? avc_has_perm_noaudit+0x390/0x490 [ 33.520412][ T504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 33.524821][ T500] ? avc_has_perm_noaudit+0x390/0x490 [ 33.524849][ T500] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 33.524875][ T500] __vmalloc+0x79/0x90 [ 33.580567][ T500] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 33.586137][ T500] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 33.591529][ T500] bpf_prog_alloc+0x21/0x1c0 [ 33.596414][ T500] bpf_prog_load+0x811/0x1670 [ 33.601118][ T500] ? map_freeze+0x3a0/0x3a0 [ 33.605654][ T500] ? selinux_bpf+0xc7/0xf0 [ 33.610101][ T500] ? security_bpf+0x93/0xb0 [ 33.614625][ T500] __sys_bpf+0x57b/0x850 [ 33.618886][ T500] ? bpf_link_show_fdinfo+0x330/0x330 [ 33.624292][ T500] ? __cfi_ksys_write+0x10/0x10 [ 33.629175][ T500] ? debug_smp_processor_id+0x17/0x20 [ 33.634592][ T500] __x64_sys_bpf+0x7c/0x90 [ 33.639031][ T500] x64_sys_call+0x488/0x9a0 [ 33.643555][ T500] do_syscall_64+0x4c/0xa0 [ 33.647989][ T500] ? clear_bhb_loop+0x30/0x80 [ 33.652684][ T500] ? clear_bhb_loop+0x30/0x80 [ 33.657386][ T500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.663306][ T500] RIP: 0033:0x7f5640d9f559 [ 33.667743][ T500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.687367][ T500] RSP: 002b:00007f5641bf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 33.695821][ T500] RAX: ffffffffffffffda RBX: 00007f5641025fa0 RCX: 00007f5640d9f559 [ 33.703804][ T500] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 33.711785][ T500] RBP: 00007f5641bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 33.719765][ T500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.727749][ T500] R13: 00007f5641026038 R14: 00007f5641025fa0 R15: 00007ffe1a7505e8 [ 33.735744][ T500] [ 33.738977][ T429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.750799][ T429] usb 3-1: config 0 descriptor?? [ 33.771908][ T28] audit: type=1400 audit(1793210894.706:773): avc: denied { mount } for pid=508 comm="syz.5.53" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.801158][ T509] FAULT_INJECTION: forcing a failure. [ 33.801158][ T509] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.815518][ T509] CPU: 0 PID: 509 Comm: syz.5.53 Not tainted syzkaller #0 [ 33.822678][ T509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.832757][ T509] Call Trace: [ 33.836060][ T509] [ 33.839049][ T509] __dump_stack+0x21/0x24 [ 33.843429][ T509] dump_stack_lvl+0x110/0x170 [ 33.848130][ T509] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.853179][ T509] ? unwind_get_return_address+0x4d/0x90 [ 33.858856][ T509] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.865070][ T509] dump_stack+0x15/0x24 [ 33.869259][ T509] should_fail_ex+0x3bf/0x510 [ 33.873967][ T509] should_fail_alloc_page+0x61/0x90 [ 33.879196][ T509] prepare_alloc_pages+0x131/0x570 [ 33.884686][ T509] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 33.890278][ T509] ? kasan_set_track+0x60/0x70 [ 33.895081][ T509] ? kasan_set_track+0x4b/0x70 [ 33.899877][ T509] ? kasan_save_alloc_info+0x1f/0x30 [ 33.905205][ T509] ? __kasan_slab_alloc+0x72/0x80 [ 33.909519][ T512] device syzkaller0 entered promiscuous mode [ 33.910257][ T509] ? slab_post_alloc_hook+0x4f/0x2d0 [ 33.921539][ T509] __alloc_pages+0x15b/0x610 [ 33.926190][ T509] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.932288][ T509] ? __cfi___alloc_pages+0x10/0x10 [ 33.933448][ T512] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 33.937443][ T509] __get_free_pages+0xe/0x30 [ 33.937476][ T509] kasan_populate_vmalloc_pte+0x29/0x120 [ 33.955675][ T509] __apply_to_page_range+0x8db/0xc80 [ 33.960996][ T509] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 33.967280][ T509] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 33.973552][ T509] apply_to_page_range+0x3b/0x50 [ 33.978526][ T509] kasan_populate_vmalloc+0x60/0x70 [ 33.983856][ T509] alloc_vmap_area+0x1789/0x18c0 [ 33.988850][ T509] ? vm_map_ram+0x930/0x930 [ 33.993382][ T509] ? __kasan_kmalloc+0x95/0xb0 [ 33.998180][ T509] ? kmalloc_node_trace+0x3d/0xb0 [ 34.003236][ T509] __get_vm_area_node+0x160/0x360 [ 34.008293][ T509] __vmalloc_node_range+0x326/0x1440 [ 34.013618][ T509] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 34.019200][ T509] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 34.024949][ T509] ? __stack_depot_save+0x36/0x490 [ 34.030097][ T509] ? selinux_capable+0x2b6/0x3b0 [ 34.035067][ T509] ? _parse_integer_limit+0x18e/0x1d0 [ 34.040463][ T509] ? __cfi___vmalloc_node_range+0x10/0x10 [ 34.046206][ T509] ? avc_has_perm_noaudit+0x390/0x490 [ 34.051608][ T509] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 34.057184][ T509] __vmalloc+0x79/0x90 [ 34.061287][ T509] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 34.066861][ T509] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 34.072269][ T509] ? __kasan_check_write+0x14/0x20 [ 34.077408][ T509] bpf_prog_alloc+0x21/0x1c0 [ 34.082039][ T509] bpf_prog_load+0x811/0x1670 [ 34.086747][ T509] ? map_freeze+0x3a0/0x3a0 [ 34.091277][ T509] ? selinux_bpf+0xc7/0xf0 [ 34.095727][ T509] ? security_bpf+0x93/0xb0 [ 34.100299][ T509] __sys_bpf+0x57b/0x850 [ 34.104572][ T509] ? bpf_link_show_fdinfo+0x330/0x330 [ 34.109973][ T509] ? __cfi_ksys_write+0x10/0x10 [ 34.114860][ T509] ? debug_smp_processor_id+0x17/0x20 [ 34.120266][ T509] __x64_sys_bpf+0x7c/0x90 [ 34.124707][ T509] x64_sys_call+0x488/0x9a0 [ 34.129239][ T509] do_syscall_64+0x4c/0xa0 [ 34.133683][ T509] ? clear_bhb_loop+0x30/0x80 [ 34.138390][ T509] ? clear_bhb_loop+0x30/0x80 [ 34.143112][ T509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.149036][ T509] RIP: 0033:0x7f5f2939f559 [ 34.153479][ T509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.173107][ T509] RSP: 002b:00007f5f2a224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 34.181561][ T509] RAX: ffffffffffffffda RBX: 00007f5f29625fa0 RCX: 00007f5f2939f559 [ 34.189564][ T509] RDX: 0000000000000094 RSI: 00002000000025c0 RDI: 0000000000000005 [ 34.197567][ T509] RBP: 00007f5f2a224090 R08: 0000000000000000 R09: 0000000000000000 [ 34.205561][ T509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.213552][ T509] R13: 00007f5f29626038 R14: 00007f5f29625fa0 R15: 00007fffee92cfe8 [ 34.221558][ T509] [ 34.229484][ T505] loop4: detected capacity change from 0 to 40427 [ 34.243940][ T505] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 34.255661][ T509] syz.5.53: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 34.272270][ T509] CPU: 1 PID: 509 Comm: syz.5.53 Not tainted syzkaller #0 [ 34.274172][ T505] F2FS-fs (loop4): invalid crc value [ 34.279428][ T509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.279442][ T509] Call Trace: [ 34.279448][ T509] [ 34.279455][ T509] __dump_stack+0x21/0x24 [ 34.279479][ T509] dump_stack_lvl+0x110/0x170 [ 34.279498][ T509] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.279524][ T509] ? pr_cont_kernfs_name+0x133/0x160 [ 34.279546][ T509] dump_stack+0x15/0x24 [ 34.296663][ T505] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.298185][ T509] warn_alloc+0x1dc/0x200 [ 34.335224][ T509] ? __cfi_warn_alloc+0x10/0x10 [ 34.340122][ T509] ? __get_vm_area_node+0x175/0x360 [ 34.345353][ T509] __vmalloc_node_range+0x34b/0x1440 [ 34.350665][ T509] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 34.356430][ T509] ? __stack_depot_save+0x36/0x490 [ 34.361594][ T509] ? selinux_capable+0x2b6/0x3b0 [ 34.366565][ T509] ? _parse_integer_limit+0x18e/0x1d0 [ 34.371963][ T509] ? __cfi___vmalloc_node_range+0x10/0x10 [ 34.377707][ T509] ? avc_has_perm_noaudit+0x390/0x490 [ 34.383110][ T509] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 34.388691][ T509] __vmalloc+0x79/0x90 [ 34.389291][ T505] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.392811][ T509] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 34.404752][ T28] audit: type=1400 audit(1793210895.316:774): avc: denied { write } for pid=513 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.405845][ T509] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 34.430423][ T509] ? __kasan_check_write+0x14/0x20 [ 34.432553][ T504] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 34.435573][ T509] bpf_prog_alloc+0x21/0x1c0 [ 34.435603][ T509] bpf_prog_load+0x811/0x1670 [ 34.435628][ T509] ? map_freeze+0x3a0/0x3a0 [ 34.443385][ T28] audit: type=1400 audit(1793210895.316:775): avc: denied { remount } for pid=503 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.447691][ T509] ? selinux_bpf+0xc7/0xf0 [ 34.447720][ T509] ? security_bpf+0x93/0xb0 [ 34.454963][ T505] SELinux: Context system_u:object_r:cron_log_t:s0 is not valid (left unmapped). [ 34.456906][ T509] __sys_bpf+0x57b/0x850 [ 34.477742][ T28] audit: type=1400 audit(1793210895.376:776): avc: denied { relabelfrom } for pid=503 comm="syz.4.52" name="" dev="pipefs" ino=17680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 34.480429][ T509] ? bpf_link_show_fdinfo+0x330/0x330 [ 34.485612][ T28] audit: type=1400 audit(1793210895.376:777): avc: denied { relabelto } for pid=503 comm="syz.4.52" name="" dev="pipefs" ino=17680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:cron_log_t:s0" [ 34.494144][ T509] ? __cfi_ksys_write+0x10/0x10 [ 34.494172][ T509] ? debug_smp_processor_id+0x17/0x20 [ 34.500394][ T504] F2FS-fs (loop4): Unrecognized mount option "system_u:object_r:cron_log_t:s0" or missing value [ 34.520447][ T509] __x64_sys_bpf+0x7c/0x90 [ 34.520475][ T509] x64_sys_call+0x488/0x9a0 [ 34.581637][ T509] do_syscall_64+0x4c/0xa0 [ 34.586068][ T509] ? clear_bhb_loop+0x30/0x80 [ 34.590764][ T509] ? clear_bhb_loop+0x30/0x80 [ 34.595445][ T509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.601342][ T509] RIP: 0033:0x7f5f2939f559 [ 34.605751][ T509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.625360][ T509] RSP: 002b:00007f5f2a224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 34.633795][ T509] RAX: ffffffffffffffda RBX: 00007f5f29625fa0 RCX: 00007f5f2939f559 [ 34.641785][ T509] RDX: 0000000000000094 RSI: 00002000000025c0 RDI: 0000000000000005 [ 34.649760][ T509] RBP: 00007f5f2a224090 R08: 0000000000000000 R09: 0000000000000000 [ 34.657747][ T509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.665722][ T509] R13: 00007f5f29626038 R14: 00007f5f29625fa0 R15: 00007fffee92cfe8 [ 34.673699][ T509] [ 34.686819][ T509] Mem-Info: [ 34.690983][ T429] usbhid 3-1:0.0: can't add hid device: -71 [ 34.696945][ T509] active_anon:12268 inactive_anon:0 isolated_anon:0 [ 34.696945][ T509] active_file:6070 inactive_file:2693 isolated_file:0 [ 34.696945][ T509] unevictable:0 dirty:1667 writeback:0 [ 34.696945][ T509] slab_reclaimable:7910 slab_unreclaimable:71864 [ 34.696945][ T509] mapped:29438 shmem:5191 pagetables:638 [ 34.696945][ T509] sec_pagetables:0 bounce:0 [ 34.696945][ T509] kernel_misc_reclaimable:0 [ 34.696945][ T509] free:1523827 free_pcp:8536 free_cma:0 [ 34.697009][ T509] Node 0 active_anon:49072kB inactive_anon:0kB active_file:24280kB inactive_file:10772kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117752kB dirty:6668kB writeback:0kB shmem:20764kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4448kB pagetables:2552kB sec_pagetables:0kB all_unreclaimable? no [ 34.753496][ T429] usbhid: probe of 3-1:0.0 failed with error -71 [ 34.782583][ T429] usb 3-1: USB disconnect, device number 3 [ 34.861221][ T527] loop4: detected capacity change from 0 to 256 [ 34.870570][ T509] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971856kB mlocked:0kB bounce:0kB free_pcp:5372kB local_pcp:5372kB free_cma:0kB [ 34.900067][ T527] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.905112][ T509] lowmem_reserve[]: 0 3932 3932 3932 [ 34.915968][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 34.916045][ T509] Normal free:3138124kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:40572kB inactive_anon:0kB active_file:24280kB inactive_file:10472kB unevictable:0kB writepending:6668kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:28408kB local_pcp:11108kB free_cma:0kB [ 34.928619][ T527] FAT-fs (loop4): Filesystem has been set read-only [ 34.956099][ T509] lowmem_reserve[]: 0 0 0 0 [ 34.956136][ T509] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB [ 34.964286][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 34.967647][ T509] (M) [ 34.982639][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 34.992039][ T509] = 2966484kB [ 34.995346][ T526] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 35.005367][ T509] Normal: [ 35.008794][ T526] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 35.018548][ T509] 9*4kB [ 35.021844][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 35.038631][ T509] (UM) 4*8kB (M) 72*16kB (UME) 89*32kB (UM) 114*64kB (UM) 66*128kB (UME) 19*256kB (UME) 15*512kB (UM) 11*1024kB (M) 5*2048kB (UM) 753*4096kB (M) = 3138148kB [ 35.047213][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 35.060909][ T509] 11747 total pagecache pages [ 35.070990][ T526] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 35.074857][ T509] 0 pages in swap cache [ 35.086014][ T529] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 35.088961][ T509] Free swap = 124216kB [ 35.088969][ T509] Total swap = 124996kB [ 35.089002][ T509] 2097051 pages RAM [ 35.089008][ T509] 0 pages HighMem/MovableOnly [ 35.089014][ T509] 347487 pages reserved [ 35.089020][ T509] 0 pages cma reserved [ 35.100361][ T527] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 35.252994][ T538] loop2: detected capacity change from 0 to 512 [ 35.285564][ T538] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 35.299464][ T538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 35.308894][ T343] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.325648][ T538] System zones: 0-1 [ 35.328439][ T542] loop5: detected capacity change from 0 to 512 [ 35.352026][ T538] , 15-15, 18-18, 34-34 [ 35.357082][ T538] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.363505][ T538] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 35.378112][ T538] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 35.384888][ T538] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.61: bad orphan inode 16 [ 35.395027][ T538] ext4_test_bit(bit=15, block=18) = 1 [ 35.400564][ T538] is_bad_inode(inode)=0 [ 35.406266][ T538] NEXT_ORPHAN(inode)=0 [ 35.410676][ T538] max_ino=32 [ 35.413996][ T538] i_nlink=2 [ 35.417502][ T538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.430404][ T542] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 35.436421][ T538] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 35.440219][ T542] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.462694][ T538] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 35.478573][ T530] netlink: 'syz.4.58': attribute type 12 has an invalid length. [ 35.488359][ T407] EXT4-fs (loop5): unmounting filesystem. [ 35.494269][ T529] netlink: 'syz.4.58': attribute type 12 has an invalid length. [ 35.505904][ T343] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.520260][ T343] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.529367][ T291] EXT4-fs (loop2): unmounting filesystem. [ 35.543837][ T343] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 35.557575][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.557893][ T290] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 35.575345][ T290] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 35.588267][ T343] usb 1-1: SerialNumber: syz [ 35.608232][ T343] usb 1-1: 0:2 : does not exist [ 35.914509][ T561] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.922027][ T561] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.931125][ T561] device bridge_slave_0 entered promiscuous mode [ 35.941022][ T561] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.948364][ T561] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.956172][ T561] device bridge_slave_1 entered promiscuous mode [ 36.079909][ T561] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.087040][ T561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.094345][ T561] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.101450][ T561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.131065][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.140935][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.148743][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.168883][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.177240][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.184303][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.192459][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.202271][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.209361][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.229388][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.237647][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.255787][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.265752][ T449] device bridge_slave_1 left promiscuous mode [ 36.272138][ T449] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.280012][ T449] device bridge_slave_0 left promiscuous mode [ 36.286296][ T449] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.294915][ T449] device veth1_macvtap left promiscuous mode [ 36.301021][ T449] device veth0_vlan left promiscuous mode [ 36.346087][ T573] loop3: detected capacity change from 0 to 512 [ 36.362626][ T573] ext4: Unknown parameter 'audit' [ 36.585227][ T558] loop2: detected capacity change from 0 to 131072 [ 36.612434][ T558] F2FS-fs (loop2): Test dummy encryption mode enabled [ 36.621248][ T558] F2FS-fs (loop2): invalid crc value [ 36.665583][ T578] loop5: detected capacity change from 0 to 256 [ 36.693075][ T558] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.707150][ T578] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 36.723365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.779094][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.875822][ T561] device veth0_vlan entered promiscuous mode [ 36.885205][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.905179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.912485][ T558] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.927637][ T590] loop5: detected capacity change from 0 to 256 [ 36.944913][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.953623][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.964291][ T561] device veth1_macvtap entered promiscuous mode [ 36.973212][ T558] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 36.992395][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.002360][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.014293][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.032273][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.040798][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.102262][ T595] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.211712][ T604] FAULT_INJECTION: forcing a failure. [ 37.211712][ T604] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.226294][ T604] CPU: 1 PID: 604 Comm: syz.3.77 Not tainted syzkaller #0 [ 37.233493][ T604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.243595][ T604] Call Trace: [ 37.246930][ T604] [ 37.249890][ T604] __dump_stack+0x21/0x24 [ 37.254259][ T604] dump_stack_lvl+0x110/0x170 [ 37.258963][ T604] ? __cfi_dump_stack_lvl+0x8/0x8 [ 37.264019][ T604] ? __cfi_ip_local_deliver_finish+0x10/0x10 [ 37.266545][ T605] loop5: detected capacity change from 0 to 512 [ 37.270031][ T604] ? ip_rcv_finish_core+0xb26/0x14b0 [ 37.270066][ T604] dump_stack+0x15/0x24 [ 37.285804][ T604] should_fail_ex+0x3bf/0x510 [ 37.290526][ T604] should_fail+0xb/0x10 [ 37.294726][ T604] should_fail_usercopy+0x1a/0x20 [ 37.299784][ T604] _copy_from_user+0x1e/0xc0 [ 37.304411][ T604] ___sys_sendmsg+0x1c3/0x360 [ 37.304545][ T605] EXT4-fs: Ignoring removed nobh option [ 37.309126][ T604] ? __sys_sendmsg+0x290/0x290 [ 37.309146][ T604] ? _raw_spin_lock_irq+0x95/0xf0 [ 37.309178][ T604] ? __fdget+0x19c/0x220 [ 37.328783][ T604] __x64_sys_sendmsg+0x20d/0x2e0 [ 37.333763][ T604] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 37.339261][ T604] ? handle_softirqs+0x541/0x5f0 [ 37.344236][ T604] ? debug_smp_processor_id+0x17/0x20 [ 37.349658][ T604] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 37.355757][ T604] x64_sys_call+0x171/0x9a0 [ 37.360300][ T604] do_syscall_64+0x4c/0xa0 [ 37.364838][ T604] ? clear_bhb_loop+0x30/0x80 [ 37.369556][ T604] ? clear_bhb_loop+0x30/0x80 [ 37.374276][ T604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.380218][ T604] RIP: 0033:0x7fea35b9f559 [ 37.384674][ T604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.404350][ T604] RSP: 002b:00007fea36a4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.412799][ T604] RAX: ffffffffffffffda RBX: 00007fea35e25fa0 RCX: 00007fea35b9f559 [ 37.420837][ T604] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 37.428842][ T604] RBP: 00007fea36a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 37.436840][ T604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.444930][ T604] R13: 00007fea35e26038 R14: 00007fea35e25fa0 R15: 00007ffe3ac636e8 [ 37.452939][ T604] [ 37.463193][ T605] EXT4-fs (loop5): orphan cleanup on readonly fs [ 37.470999][ T605] EXT4-fs warning (device loop5): ext4_xattr_inode_get:492: inode #11: comm syz.5.76: ea_inode file size=1535 entry size=6 [ 37.484334][ T605] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.497766][ T605] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #15: comm syz.5.76: corrupted inode contents [ 37.510297][ T605] EXT4-fs (loop5): Remounting filesystem read-only [ 37.517103][ T605] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #15: comm syz.5.76: mark_inode_dirty error [ 37.529108][ T605] EXT4-fs (loop5): Remounting filesystem read-only [ 37.535954][ T605] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #15: comm syz.5.76: corrupted inode contents [ 37.548806][ T605] EXT4-fs (loop5): Remounting filesystem read-only [ 37.555535][ T605] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2947: inode #15: comm syz.5.76: mark_inode_dirty error [ 37.567800][ T605] EXT4-fs (loop5): Remounting filesystem read-only [ 37.574473][ T605] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2950: inode #15: comm syz.5.76: mark inode dirty (error -117) [ 37.578245][ T608] loop3: detected capacity change from 0 to 2048 [ 37.588223][ T605] EXT4-fs (loop5): Remounting filesystem read-only [ 37.600045][ T605] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 37.609360][ T605] EXT4-fs (loop5): 1 orphan inode deleted [ 37.615228][ T605] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 37.635283][ T608] loop3: p2 p3 < > p4 < p5 > [ 37.640114][ T608] loop3: partition table partially beyond EOD, truncated [ 37.648360][ T608] loop3: p3 start 4225 is beyond EOD, truncated [ 37.817494][ T343] usb 1-1: USB disconnect, device number 3 [ 37.928278][ T619] input: syz1 as /devices/virtual/input/input5 [ 37.930494][ T618] loop0: detected capacity change from 0 to 512 [ 37.945973][ T618] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.962038][ T619] Zero length message leads to an empty skb [ 37.971053][ T407] EXT4-fs (loop5): unmounting filesystem. [ 37.977069][ T619] loop3: detected capacity change from 0 to 256 [ 37.984596][ T618] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.81: bg 0: block 393: padding at end of block bitmap is not set [ 38.000268][ T619] FAT-fs (loop3): Unrecognized mount option "¹R«IMÈ-%ç†iocharset=cp1255" or missing value [ 38.012603][ T618] EXT4-fs (loop0): Remounting filesystem read-only [ 38.022506][ T618] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 38.033228][ T618] EXT4-fs (loop0): Remounting filesystem read-only [ 38.040074][ T618] EXT4-fs (loop0): 2 truncates cleaned up [ 38.046202][ T618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.066050][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.184197][ T624] loop3: detected capacity change from 0 to 512 [ 38.193832][ T624] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.212424][ T624] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.85: bg 0: block 393: padding at end of block bitmap is not set [ 38.226991][ T624] EXT4-fs (loop3): Remounting filesystem read-only [ 38.233638][ T624] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 38.243986][ T624] EXT4-fs (loop3): Remounting filesystem read-only [ 38.250721][ T624] EXT4-fs (loop3): 2 truncates cleaned up [ 38.259908][ T624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.751149][ T289] EXT4-fs (loop0): unmounting filesystem. [ 38.825097][ T632] loop0: detected capacity change from 0 to 128 [ 38.985274][ T288] EXT4-fs (loop3): unmounting filesystem. [ 39.031027][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 39.031045][ T28] audit: type=1400 audit(1793210899.966:808): avc: denied { wake_alarm } for pid=635 comm="syz.3.90" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.156752][ T646] xt_hashlimit: size too large, truncated to 1048576 [ 39.221507][ T647] fuse: Bad value for 'fd' [ 39.236138][ T634] F2FS-fs (loop0): invalid crc value [ 39.242190][ T28] audit: type=1400 audit(1793210900.176:809): avc: denied { watch watch_reads } for pid=645 comm="syz.3.92" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 39.281488][ T634] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.293262][ T28] audit: type=1400 audit(1793210900.206:810): avc: denied { write } for pid=648 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.322469][ T28] audit: type=1400 audit(1793210900.206:811): avc: denied { nlmsg_write } for pid=648 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.347997][ T28] audit: type=1400 audit(1793210900.206:812): avc: denied { create } for pid=648 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.367802][ T28] audit: type=1400 audit(1793210900.206:813): avc: denied { bind } for pid=648 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.387604][ T28] audit: type=1400 audit(1793210900.206:814): avc: denied { listen } for pid=648 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.408629][ T28] audit: type=1400 audit(1793210900.206:815): avc: denied { connect } for pid=648 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.428453][ T28] audit: type=1400 audit(1793210900.206:816): avc: denied { read } for pid=648 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.449113][ T28] audit: type=1400 audit(1793210900.286:817): avc: denied { write } for pid=648 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.474832][ T634] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 39.648903][ T682] syz.3.96 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.729266][ T289] syz-executor: attempt to access beyond end of device [ 39.729266][ T289] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 39.744194][ T289] syz-executor: attempt to access beyond end of device [ 39.744194][ T289] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 39.775281][ T355] kworker/u4:4: attempt to access beyond end of device [ 39.775281][ T355] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 40.018261][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.025546][ T690] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.032911][ T690] device bridge_slave_0 entered promiscuous mode [ 40.039986][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.047042][ T690] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.054424][ T690] device bridge_slave_1 entered promiscuous mode [ 40.097256][ T696] EXT4-fs: Ignoring removed i_version option [ 40.106598][ T696] EXT4-fs (loop6): bad block size 16384 [ 40.121256][ T695] device ip6gretap1 entered promiscuous mode [ 40.275506][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.282619][ T690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.289969][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.297049][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.383389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.392057][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.415114][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.451574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.469584][ T714] ./dev/sda1: Can't open blockdev [ 40.476572][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.483662][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.506172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.514669][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.521791][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.539780][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.557166][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.589786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.607371][ T690] device veth0_vlan entered promiscuous mode [ 40.614025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.641291][ T690] device veth1_macvtap entered promiscuous mode [ 40.662278][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.677080][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.688297][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.703900][ T355] device bridge_slave_1 left promiscuous mode [ 40.711942][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.730822][ T711] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 40.742194][ T711] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.753580][ T355] device bridge_slave_0 left promiscuous mode [ 40.760053][ T711] EXT4-fs warning (device loop5): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 40.787955][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.822701][ T355] device veth1_macvtap left promiscuous mode [ 40.860763][ T355] device veth0_vlan left promiscuous mode [ 40.904029][ T719] F2FS-fs (loop6): invalid crc value [ 40.947702][ T719] F2FS-fs (loop6): Found nat_bits in checkpoint [ 41.027656][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.040411][ T719] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 41.065146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.246906][ T734] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.258503][ T734] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.101: bg 0: block 393: padding at end of block bitmap is not set [ 41.273119][ T734] EXT4-fs (loop7): Remounting filesystem read-only [ 41.280098][ T734] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 41.289324][ T734] EXT4-fs (loop7): Remounting filesystem read-only [ 41.296153][ T734] EXT4-fs (loop7): 2 truncates cleaned up [ 41.302101][ T734] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 41.325149][ T407] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 41.341498][ T407] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /20/file1/lost+found: directory fails checksum at offset 0 [ 41.356649][ T407] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /20/file1/lost+found: directory fails checksum at offset 1024 [ 41.372840][ T407] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /20/file1/lost+found: directory fails checksum at offset 8192 [ 41.388113][ T407] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /20/file1/lost+found: directory fails checksum at offset 11264 [ 41.403601][ T407] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 41.419344][ T407] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 41.438688][ T561] syz-executor: attempt to access beyond end of device [ 41.438688][ T561] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 41.453431][ T407] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 41.469428][ T561] syz-executor: attempt to access beyond end of device [ 41.469428][ T561] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 41.483348][ T407] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /20/file1/lost+found: directory fails checksum at offset 0 [ 41.514947][ T407] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /20/file1/lost+found: directory fails checksum at offset 1024 [ 41.535620][ T355] kworker/u4:4: attempt to access beyond end of device [ 41.535620][ T355] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 41.550145][ T407] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /20/file1/lost+found: directory fails checksum at offset 8192 [ 41.569415][ T407] EXT4-fs error (device loop5): ext4_readdir:223: inode #11: comm syz-executor: path /20/file1/lost+found: directory fails checksum at offset 11264 [ 41.585121][ T407] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 41.601090][ T407] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 41.635066][ T407] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 41.698358][ T407] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 41.734973][ T407] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 41.765427][ T407] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 41.794990][ T407] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 42.066588][ T407] EXT4-fs (loop5): unmounting filesystem. [ 42.077219][ T690] EXT4-fs (loop7): unmounting filesystem. [ 42.227651][ T355] device bridge_slave_1 left promiscuous mode [ 42.233838][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.249206][ T355] device bridge_slave_0 left promiscuous mode [ 42.265039][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.284812][ T355] device veth1_macvtap left promiscuous mode [ 42.290885][ T355] device veth0_vlan left promiscuous mode [ 42.403544][ T765] process 'syz.7.125' launched '/dev/fd/4' with NULL argv: empty string added [ 42.523762][ T769] set_capacity_and_notify: 5 callbacks suppressed [ 42.523784][ T769] loop7: detected capacity change from 0 to 512 [ 42.569820][ T769] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 42.570563][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.584813][ T769] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 42.585293][ T769] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #13: comm syz.7.127: iget: bad i_size value: 12154757448730 [ 42.603233][ T752] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.617112][ T752] device bridge_slave_0 entered promiscuous mode [ 42.645440][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.652511][ T752] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.670011][ T769] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.127: couldn't read orphan inode 13 (err -117) [ 42.682906][ T752] device bridge_slave_1 entered promiscuous mode [ 42.704727][ T769] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 42.725029][ T769] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 42.734041][ T769] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 42.742537][ T769] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 42.750717][ T769] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 42.780966][ T690] EXT4-fs (loop7): unmounting filesystem. [ 42.825934][ T762] loop2: detected capacity change from 0 to 40427 [ 42.836932][ T762] F2FS-fs (loop2): invalid crc value [ 42.874539][ T762] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.882692][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.889833][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.897183][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.904236][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.916716][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.923800][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.956118][ T770] device bridge_slave_0 entered promiscuous mode [ 42.995526][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.002607][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.014062][ T770] device bridge_slave_1 entered promiscuous mode [ 43.028391][ T796] loop7: detected capacity change from 0 to 512 [ 43.030329][ T762] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 43.036739][ T796] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.071935][ T796] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.130: bg 0: block 393: padding at end of block bitmap is not set [ 43.088525][ T796] EXT4-fs (loop7): Remounting filesystem read-only [ 43.095143][ T796] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 43.104024][ T796] EXT4-fs (loop7): Remounting filesystem read-only [ 43.112547][ T796] EXT4-fs (loop7): 2 truncates cleaned up [ 43.119676][ T796] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 43.130588][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.138098][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.161850][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.169510][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.185462][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.193828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.202446][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.209501][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.217099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.225588][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.233793][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.240867][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.262646][ T291] syz-executor: attempt to access beyond end of device [ 43.262646][ T291] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.276891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.285575][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.309329][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.318494][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.329476][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.338453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.370109][ T752] device veth0_vlan entered promiscuous mode [ 43.376488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.384614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.393532][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.401194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.421472][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.430175][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.439298][ T752] device veth1_macvtap entered promiscuous mode [ 43.457382][ T804] loop2: detected capacity change from 0 to 512 [ 43.472390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.480471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.489199][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.508066][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.514499][ T804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.517888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.531021][ T804] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.548130][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.559677][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.585935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.597544][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.606385][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.613455][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.621180][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.629906][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.638471][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.645542][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.654347][ T355] device bridge_slave_1 left promiscuous mode [ 43.660923][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.669126][ T355] device bridge_slave_0 left promiscuous mode [ 43.675448][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.683892][ T355] device veth1_macvtap left promiscuous mode [ 43.691093][ T355] device veth0_vlan left promiscuous mode [ 43.768678][ T690] EXT4-fs (loop7): unmounting filesystem. [ 43.797740][ T808] netlink: 4 bytes leftover after parsing attributes in process `syz.8.128'. [ 43.820205][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.833312][ T815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.128'. [ 43.866684][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.907431][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.923339][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.937551][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.946212][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.953917][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.963175][ T770] device veth0_vlan entered promiscuous mode [ 43.977605][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.988259][ T770] device veth1_macvtap entered promiscuous mode [ 44.003052][ T291] EXT4-fs (loop2): unmounting filesystem. [ 44.012629][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.022473][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.041110][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.072307][ T824] FAULT_INJECTION: forcing a failure. [ 44.072307][ T824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.086045][ T824] CPU: 0 PID: 824 Comm: syz.9.121 Not tainted syzkaller #0 [ 44.093289][ T824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.103364][ T824] Call Trace: [ 44.106664][ T824] [ 44.109615][ T824] __dump_stack+0x21/0x24 [ 44.113969][ T824] dump_stack_lvl+0x110/0x170 [ 44.118678][ T824] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.123728][ T824] ? lock_sock_nested+0x212/0x290 [ 44.128783][ T824] dump_stack+0x15/0x24 [ 44.132970][ T824] should_fail_ex+0x3bf/0x510 [ 44.137689][ T824] should_fail+0xb/0x10 [ 44.141896][ T824] should_fail_usercopy+0x1a/0x20 [ 44.146952][ T824] _copy_from_user+0x1e/0xc0 [ 44.151569][ T824] l2cap_sock_setsockopt+0x6a5/0x1de0 [ 44.156976][ T824] ? selinux_socket_setsockopt+0x282/0x360 [ 44.162823][ T824] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 44.169017][ T824] ? __cfi_l2cap_sock_setsockopt+0x10/0x10 [ 44.174856][ T824] ? security_socket_setsockopt+0x93/0xb0 [ 44.180613][ T824] ? __cfi_l2cap_sock_setsockopt+0x10/0x10 [ 44.186445][ T824] __sys_setsockopt+0x2ff/0x4e0 [ 44.191334][ T824] ? __cfi___sys_setsockopt+0x10/0x10 [ 44.196773][ T824] ? ksys_write+0x1fa/0x260 [ 44.201307][ T824] ? __cfi_ksys_write+0x10/0x10 [ 44.206190][ T824] __x64_sys_setsockopt+0xbf/0xd0 [ 44.211254][ T824] x64_sys_call+0x124/0x9a0 [ 44.215785][ T824] do_syscall_64+0x4c/0xa0 [ 44.220227][ T824] ? clear_bhb_loop+0x30/0x80 [ 44.224940][ T824] ? clear_bhb_loop+0x30/0x80 [ 44.229662][ T824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.235588][ T824] RIP: 0033:0x7f2429d9f559 [ 44.240030][ T824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.259848][ T824] RSP: 002b:00007f242abe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 44.268303][ T824] RAX: ffffffffffffffda RBX: 00007f242a025fa0 RCX: 00007f2429d9f559 [ 44.276475][ T824] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000004 [ 44.284475][ T824] RBP: 00007f242abe2090 R08: 0000000000000004 R09: 0000000000000000 [ 44.292475][ T824] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.300469][ T824] R13: 00007f242a026038 R14: 00007f242a025fa0 R15: 00007ffca5db4d38 [ 44.308461][ T824] [ 44.367920][ T833] loop9: detected capacity change from 0 to 16 [ 44.395008][ T833] erofs: (device loop9): mounted with root inode @ nid 36. [ 44.826791][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 44.826808][ T28] audit: type=1326 audit(1793210905.766:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.8.141" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31559f559 code=0x7ffc0000 [ 44.884547][ T842] loop8: detected capacity change from 0 to 512 [ 44.915923][ T28] audit: type=1326 audit(1793210905.806:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.8.141" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb31559f559 code=0x7ffc0000 [ 44.941338][ T847] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 44.951073][ T847] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851] [ 44.962601][ T842] ------------[ cut here ]------------ [ 44.962611][ T842] EA inode 11 i_nlink=0 [ 44.962738][ T842] WARNING: CPU: 0 PID: 842 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4f9/0x560 [ 44.962775][ T842] Modules linked in: [ 44.962787][ T842] CPU: 0 PID: 842 Comm: syz.8.141 Not tainted syzkaller #0 [ 44.969922][ T847] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 44.973175][ T842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 45.012611][ T842] RIP: 0010:ext4_xattr_inode_update_ref+0x4f9/0x560 [ 45.019252][ T842] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 ca 21 ba ff 49 8b 34 24 48 c7 c7 00 50 b5 85 44 89 fa e8 67 06 45 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 45.038954][ T842] RSP: 0018:ffffc900009f71e0 EFLAGS: 00010246 [ 45.045069][ T842] RAX: e4e1f108b8633d00 RBX: ffff888116918880 RCX: 0000000000080000 [ 45.053160][ T842] RDX: ffffc90008f58000 RSI: 0000000000005282 RDI: 0000000000005283 [ 45.061190][ T842] RBP: ffffc900009f72d0 R08: 0000000000000003 R09: 0000000000000004 [ 45.069248][ T842] R10: dffffc0000000000 R11: fffff5200013edec R12: ffff888116918760 [ 45.077310][ T842] R13: dffffc0000000000 R14: ffff888116918720 R15: 0000000000000000 [ 45.085326][ T842] FS: 00007fb3164e76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.094278][ T842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.096213][ T28] audit: type=1326 audit(1793210905.806:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.8.141" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31559f559 code=0x7ffc0000 [ 45.100927][ T842] CR2: 0000000000000000 CR3: 0000000129438000 CR4: 00000000003506b0 [ 45.133455][ T842] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.141510][ T842] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.149536][ T842] Call Trace: [ 45.152841][ T842] [ 45.155826][ T842] ? ext4_xattr_block_csum+0x560/0x560 [ 45.156504][ T28] audit: type=1326 audit(1793210905.806:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.8.141" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb31559f559 code=0x7ffc0000 [ 45.161317][ T842] ? kasan_save_alloc_info+0x1f/0x30 [ 45.191156][ T842] ? __kasan_kmalloc+0x95/0xb0 [ 45.196021][ T842] ? __ext4_journal_ensure_credits+0x30/0x470 [ 45.202119][ T842] ? ext4_xattr_inode_dec_ref_all+0x496/0x1050 [ 45.208356][ T842] ? kmalloc_trace+0x40/0xb0 [ 45.213021][ T842] ext4_xattr_inode_dec_ref_all+0xadc/0x1050 [ 45.219064][ T842] ? errseq_check+0x41/0x80 [ 45.223600][ T842] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 45.229297][ T842] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 45.236030][ T842] ? ext4_mark_iloc_dirty+0x1771/0x19c0 [ 45.241626][ T842] ext4_xattr_delete_inode+0xada/0xca0 [ 45.247166][ T842] ? ext4_truncate+0xc1b/0x1000 [ 45.252047][ T842] ? __cfi_ext4_xattr_delete_inode+0x10/0x10 [ 45.254788][ T28] audit: type=1326 audit(1793210905.806:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.8.141" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31559f559 code=0x7ffc0000 [ 45.258073][ T842] ext4_evict_inode+0xe48/0x1450 [ 45.287585][ T842] ? __cfi_ext4_evict_inode+0x10/0x10 [ 45.292990][ T842] ? __ext4_iget+0x2dae/0x3e70 [ 45.297920][ T842] ? __cfi_ext4_evict_inode+0x10/0x10 [ 45.303322][ T842] evict+0x4c4/0x8c0 [ 45.307454][ T842] ? memset+0x35/0x40 [ 45.311464][ T842] ? proc_nr_inodes+0x2f0/0x2f0 [ 45.313253][ T28] audit: type=1326 audit(1793210905.806:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.8.141" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb31559f559 code=0x7ffc0000 [ 45.316364][ T842] ? _raw_spin_lock+0x94/0xf0 [ 45.316388][ T842] ? __cfi__raw_spin_lock+0x10/0x10 [ 45.350824][ T842] ? __kasan_check_write+0x14/0x20 [ 45.356193][ T842] iput+0x633/0x690 [ 45.360058][ T842] ext4_process_orphan+0x298/0x300 [ 45.365239][ T842] ext4_orphan_cleanup+0xb5d/0x1270 [ 45.370478][ T842] ? __cfi_ext4_orphan_cleanup+0x10/0x10 [ 45.376166][ T842] ? errseq_check_and_advance+0x66/0x130 [ 45.381831][ T842] ext4_fill_super+0x6a53/0x73e0 [ 45.386832][ T842] ? __cfi_ext4_fill_super+0x10/0x10 [ 45.392160][ T842] ? set_blocksize+0x1cc/0x470 [ 45.396992][ T842] ? sb_set_blocksize+0xaa/0xf0 [ 45.401881][ T842] get_tree_bdev+0x450/0x6a0 [ 45.406540][ T842] ? __cfi_ext4_fill_super+0x10/0x10 [ 45.411951][ T842] ext4_get_tree+0x1c/0x20 [ 45.416433][ T842] vfs_get_tree+0x9a/0x270 [ 45.420880][ T842] do_new_mount+0x251/0xb40 [ 45.425457][ T842] ? security_capable+0x99/0xc0 [ 45.430340][ T842] path_mount+0x640/0xfd0 [ 45.434906][ T842] __se_sys_mount+0x320/0x390 [ 45.439622][ T842] ? __x64_sys_mount+0xd0/0xd0 [ 45.444430][ T842] ? __secure_computing+0xea/0x290 [ 45.449645][ T842] __x64_sys_mount+0xbf/0xd0 [ 45.454285][ T842] x64_sys_call+0x65d/0x9a0 [ 45.458867][ T842] do_syscall_64+0x4c/0xa0 [ 45.463354][ T842] ? clear_bhb_loop+0x30/0x80 [ 45.468101][ T842] ? clear_bhb_loop+0x30/0x80 [ 45.472809][ T842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.478867][ T842] RIP: 0033:0x7fb3155a07ca [ 45.483337][ T842] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.503016][ T842] RSP: 002b:00007fb3164e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.511484][ T842] RAX: ffffffffffffffda RBX: 00007fb3164e6ee0 RCX: 00007fb3155a07ca [ 45.519581][ T842] RDX: 0000200000000340 RSI: 0000200000000380 RDI: 00007fb3164e6ea0 [ 45.527630][ T842] RBP: 0000200000000340 R08: 00007fb3164e6ee0 R09: 0000000000000000 [ 45.535678][ T842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000380 [ 45.543687][ T842] R13: 00007fb3164e6ea0 R14: 000000000000047b R15: 00002000000003c0 [ 45.551731][ T842] [ 45.554794][ T842] ---[ end trace 0000000000000000 ]--- [ 45.561299][ T847] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 45.570732][ T847] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851] [ 45.581660][ T847] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 45.634203][ T832] syz.2.139 (832) used greatest stack depth: 21000 bytes left [ 45.655035][ T28] audit: type=1400 audit(1793210905.806:842): avc: denied { watch } for pid=841 comm="syz.8.141" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.736186][ T28] audit: type=1326 audit(1793210905.806:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.8.141" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31559f559 code=0x7ffc0000 [ 45.821764][ T28] audit: type=1326 audit(1793210905.806:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.8.141" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb31559f559 code=0x7ffc0000 [ 45.870004][ T28] audit: type=1326 audit(1793210905.806:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.8.141" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31559f559 code=0x7ffc0000 [ 45.902478][ T842] EXT4-fs (loop8): 1 orphan inode deleted [ 45.914770][ T842] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 45.927077][ T855] loop2: detected capacity change from 0 to 512 [ 45.943673][ T855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.965367][ T841] EXT4-fs (loop8): unmounting filesystem. [ 45.976580][ T855] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.142: bg 0: block 393: padding at end of block bitmap is not set [ 45.995315][ T855] EXT4-fs (loop2): Remounting filesystem read-only [ 46.020195][ T855] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 46.029860][ T855] EXT4-fs (loop2): Remounting filesystem read-only [ 46.041766][ T855] EXT4-fs (loop2): 2 truncates cleaned up [ 46.047823][ T855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.231963][ T879] loop7: detected capacity change from 0 to 256 [ 46.241119][ T879] exfat: Deprecated parameter 'utf8' [ 46.246558][ T879] exfat: Deprecated parameter 'utf8' [ 46.265406][ T879] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 46.284346][ T879] exFAT-fs (loop7): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 46.584753][ T429] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 46.610492][ T291] EXT4-fs (loop2): unmounting filesystem. [ 46.632504][ T889] loop2: detected capacity change from 0 to 2048 [ 46.646274][ T889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.785758][ T429] usb 8-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 46.803659][ T429] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 46.813229][ T429] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.825759][ T429] aiptek 8-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 47.025038][ T885] loop7: detected capacity change from 0 to 16 [ 47.039617][ T338] udevd[338]: incorrect erofs checksum on /dev/loop7 [ 47.043471][ T885] erofs: (device loop7): erofs_superblock_csum_verify: invalid checksum 0xff642a86, 0x7bbbea8c expected [ 47.075708][ T338] udevd[338]: incorrect erofs checksum on /dev/loop7 [ 47.130531][ T885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.149172][ T885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.351741][ T291] EXT4-fs (loop2): unmounting filesystem. [ 47.422938][ T921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 47.450639][ T921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 47.459908][ T921] 8021q: VLANs not supported on ip_vti0 [ 47.679040][ T316] usb 8-1: USB disconnect, device number 2 [ 47.712673][ T933] loop2: detected capacity change from 0 to 512 [ 47.738455][ T933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.795777][ T933] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.165: bg 0: block 393: padding at end of block bitmap is not set [ 47.819929][ T933] EXT4-fs (loop2): Remounting filesystem read-only [ 47.833772][ T933] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 47.898731][ T933] EXT4-fs (loop2): Remounting filesystem read-only [ 47.949461][ T933] EXT4-fs (loop2): 2 truncates cleaned up [ 47.974131][ T933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.036977][ T959] loop9: detected capacity change from 0 to 128 [ 48.068755][ T959] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 48.086726][ T959] FAT-fs (loop9): Filesystem has been set read-only [ 48.245075][ C0] ================================================================== [ 48.253191][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 48.260617][ C0] Read of size 8 at addr ffff88810fcf4d90 by task ksoftirqd/0/13 [ 48.268358][ C0] [ 48.270710][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 [ 48.279493][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.289567][ C0] Call Trace: [ 48.292859][ C0] [ 48.294885][ T316] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 48.295807][ C0] __dump_stack+0x21/0x24 [ 48.307617][ C0] dump_stack_lvl+0x110/0x170 [ 48.312357][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.317404][ C0] ? debug_smp_processor_id+0x17/0x20 [ 48.322811][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 48.327867][ C0] print_address_description+0x71/0x200 [ 48.333554][ C0] print_report+0x4a/0x60 [ 48.337923][ C0] kasan_report+0x122/0x150 [ 48.342457][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 48.347508][ C0] __asan_report_load8_noabort+0x14/0x20 [ 48.353190][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 48.358078][ C0] rcu_do_batch+0x4bc/0xc30 [ 48.362631][ C0] ? rcu_core+0xf00/0xf00 [ 48.367105][ C0] rcu_core+0x486/0xf00 [ 48.371293][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 48.376530][ C0] ? sched_clock+0x9/0x10 [ 48.380897][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 48.385815][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 48.391051][ C0] ? __schedule+0xcbb/0x1700 [ 48.395677][ C0] ? irqtime_account_irq+0x75/0x240 [ 48.400921][ C0] rcu_core_si+0x9/0x10 [ 48.405115][ C0] handle_softirqs+0x1dd/0x5f0 [ 48.409915][ C0] ? __cfi_run_ksoftirqd+0x10/0x10 [ 48.415093][ C0] run_ksoftirqd+0x28/0x30 [ 48.419549][ C0] smpboot_thread_fn+0x48c/0x8e0 [ 48.424529][ C0] kthread+0x281/0x320 [ 48.428629][ C0] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 48.434125][ C0] ? __cfi_kthread+0x10/0x10 [ 48.438749][ C0] ret_from_fork+0x1f/0x30 [ 48.443207][ C0] [ 48.446252][ C0] [ 48.448620][ C0] Allocated by task 959: [ 48.452882][ C0] kasan_set_track+0x4b/0x70 [ 48.457507][ C0] kasan_save_alloc_info+0x1f/0x30 [ 48.462677][ C0] __kasan_kmalloc+0x95/0xb0 [ 48.467301][ C0] __kmalloc+0xb4/0x1e0 [ 48.471483][ C0] l2tp_session_create+0x38/0xbd0 [ 48.476544][ C0] pppol2tp_connect+0xbf5/0x1640 [ 48.481513][ C0] __sys_connect+0x3da/0x460 [ 48.486160][ C0] __x64_sys_connect+0x7a/0x90 [ 48.490968][ C0] x64_sys_call+0x88d/0x9a0 [ 48.495520][ C0] do_syscall_64+0x4c/0xa0 [ 48.499961][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.505945][ C0] [ 48.508292][ C0] Freed by task 43: [ 48.512112][ C0] kasan_set_track+0x4b/0x70 [ 48.516740][ C0] kasan_save_free_info+0x2b/0x40 [ 48.521807][ C0] ____kasan_slab_free+0x132/0x180 [ 48.526958][ C0] __kasan_slab_free+0x11/0x20 [ 48.531762][ C0] slab_free_freelist_hook+0xc2/0x190 [ 48.537163][ C0] __kmem_cache_free+0xb7/0x1b0 [ 48.542063][ C0] kfree+0x6f/0xf0 [ 48.544803][ T316] usb 8-1: Using ep0 maxpacket: 16 [ 48.545812][ C0] l2tp_session_put+0xaf/0x1a0 [ 48.552619][ T316] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.555703][ C0] l2tp_session_delete+0x3df/0x4d0 [ 48.555737][ C0] l2tp_tunnel_del_work+0x199/0x410 [ 48.576983][ C0] process_one_work+0x717/0xc30 [ 48.581872][ C0] worker_thread+0xa4d/0x11d0 [ 48.586754][ C0] kthread+0x281/0x320 [ 48.590852][ C0] ret_from_fork+0x1f/0x30 [ 48.595409][ C0] [ 48.597759][ C0] Last potentially related work creation: [ 48.602633][ T316] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.603492][ C0] kasan_save_stack+0x3a/0x60 [ 48.617974][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 48.623382][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.629217][ C0] call_rcu+0xcf/0xf50 [ 48.633325][ C0] pppol2tp_release+0x1e3/0x2b0 [ 48.638222][ C0] sock_close+0xc9/0x220 [ 48.642492][ C0] __fput+0x1fd/0x8f0 [ 48.646518][ C0] ____fput+0x15/0x20 [ 48.650527][ C0] task_work_run+0x1e1/0x250 [ 48.655150][ C0] do_exit+0xb0d/0x29f0 [ 48.659368][ C0] __cfi___ia32_sys_exit+0x0/0x10 [ 48.664425][ C0] x64_sys_call+0x67/0x9a0 [ 48.664749][ T316] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 48.668896][ C0] do_syscall_64+0x4c/0xa0 [ 48.686253][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.692179][ C0] [ 48.694513][ C0] The buggy address belongs to the object at ffff88810fcf4c00 [ 48.694513][ C0] which belongs to the cache kmalloc-512 of size 512 [ 48.708582][ C0] The buggy address is located 400 bytes inside of [ 48.708582][ C0] 512-byte region [ffff88810fcf4c00, ffff88810fcf4e00) [ 48.721900][ C0] [ 48.724248][ C0] The buggy address belongs to the physical page: [ 48.730663][ C0] page:ffffea00043f3d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fcf4 [ 48.739391][ T316] usb 8-1: config 0 interface 0 has no altsetting 0 [ 48.740942][ C0] head:ffffea00043f3d00 order:2 compound_mapcount:0 compound_pincount:0 [ 48.755872][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 48.761971][ C0] raw: 4000000000010200 ffffea000452e900 dead000000000002 ffff888100042f00 [ 48.770560][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 48.779147][ C0] page dumped because: kasan: bad access detected [ 48.785586][ C0] page_owner tracks the page as allocated [ 48.791315][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 92, tgid 92 (klogd), ts 31097297398, free_ts 24674319439 [ 48.813126][ C0] post_alloc_hook+0x1f5/0x210 [ 48.817926][ C0] prep_new_page+0x1c/0x110 [ 48.822445][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 48.828012][ C0] __alloc_pages+0x1fa/0x610 [ 48.832638][ C0] alloc_slab_page+0x6e/0xf0 [ 48.837250][ C0] new_slab+0x98/0x3e0 [ 48.841350][ C0] ___slab_alloc+0x70f/0xb70 [ 48.845962][ C0] __slab_alloc+0x5e/0xa0 [ 48.850308][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 48.855791][ C0] __kmalloc_node_track_caller+0xa1/0x1e0 [ 48.861543][ C0] __alloc_skb+0x226/0x4a0 [ 48.865978][ C0] alloc_skb_with_frags+0xa8/0x620 [ 48.871119][ C0] sock_alloc_send_pskb+0x87f/0x9a0 [ 48.876333][ C0] unix_dgram_sendmsg+0x5c1/0x1710 [ 48.881469][ C0] __sys_sendto+0x4ac/0x660 [ 48.886013][ C0] __x64_sys_sendto+0xe5/0x100 [ 48.890822][ C0] page last free stack trace: [ 48.895517][ C0] free_unref_page_prepare+0x81b/0x820 [ 48.900994][ C0] free_unref_page+0x93/0x530 [ 48.905681][ C0] __free_pages+0x67/0x100 [ 48.910111][ C0] __free_slab+0xc7/0x1a0 [ 48.914459][ C0] discard_slab+0x29/0x40 [ 48.918796][ C0] __slab_free+0x201/0x280 [ 48.923228][ C0] ___cache_free+0xbf/0xd0 [ 48.927653][ C0] qlist_free_all+0xc6/0x140 [ 48.932249][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 48.937718][ C0] __kasan_slab_alloc+0x24/0x80 [ 48.942579][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 48.947716][ C0] __kmem_cache_alloc_node+0x194/0x2d0 [ 48.953194][ C0] kmalloc_trace+0x29/0xb0 [ 48.957630][ C0] inet_rtm_newaddr+0x2c5/0x1650 [ 48.962588][ C0] rtnetlink_rcv_msg+0xb28/0xde0 [ 48.967544][ C0] netlink_rcv_skb+0x200/0x450 [ 48.972325][ C0] [ 48.974680][ C0] Memory state around the buggy address: [ 48.980330][ C0] ffff88810fcf4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.988411][ C0] ffff88810fcf4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.996567][ C0] >ffff88810fcf4d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.004631][ C0] ^ [ 49.009230][ C0] ffff88810fcf4e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.017307][ C0] ffff88810fcf4e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.025383][ C0] ================================================================== [ 49.033543][ C0] Disabling lock debugging due to kernel taint [ 49.088985][ T316] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 49.136034][ T291] EXT4-fs (loop2): unmounting filesystem. [ 49.265308][ T316] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.548515][ T316] usb 8-1: config 0 descriptor?? [ 49.831722][ T955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.849240][ T955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.923387][ T971] loop9: detected capacity change from 0 to 40427 [ 49.950929][ T971] F2FS-fs (loop9): invalid crc value [ 49.968519][ T971] F2FS-fs (loop9): Found nat_bits in checkpoint [ 50.074753][ T971] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 50.107801][ T971] overlayfs: failed to resolve './file2': -2 [ 50.308663][ T955] usb 8-1: USB disconnect, device number 3 [ 50.326237][ T770] syz-executor: attempt to access beyond end of device [ 50.326237][ T770] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.456201][ T979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.464948][ T979] misc raw-gadget: fail, usb_gadget_register_driver returned -16