last executing test programs: 3m41.871359178s ago: executing program 0 (id=77): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 3m39.428875817s ago: executing program 0 (id=85): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x559, r2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="13f8183cd25c08e21f09df1f2ec7db0a04003fbf4f3c0aa6a1c1a63028ee041022cf3c2685cfc435f9a3f0b5ebc37245e3b2ccfe900c1df109f4f2aee2c32dc1dc635c4db0de08f76917f950c498216dc72fa98e1cb566c5f1c62e35348ac872ea315a181469de6b5ceed1ec45ded323da97da4eeda1200ec2d6e8d49218736c89b050ed709375e98981fd02462f889f1caf45d0cbfd37cbef232b058a117ed9555907241cee0dcdb3e4c018a8712826a3713427ca"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3m38.638199302s ago: executing program 0 (id=92): setns(0xc9, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@usrquota}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10) listen(r1, 0x5) r2 = syz_io_uring_setup(0x10, &(0x7f0000000400), &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) fcntl$setflags(r0, 0x2, 0x1) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/events/sched/sched_switch/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='1', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 3m36.546472746s ago: executing program 0 (id=97): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000140)={[{@fat=@fmask={'fmask', 0x3d, 0x4}}, {@shortname_mixed}, {@fat=@showexec}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m31.380594146s ago: executing program 0 (id=107): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000187b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m29.067953663s ago: executing program 0 (id=112): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r1, 0x0, 0xa}}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r1, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x70, 0x2) unshare(0x20040400) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x4, 0x0, 0x6, 0x4}) 3m26.545901581s ago: executing program 32 (id=112): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r1, 0x0, 0xa}}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r1, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x70, 0x2) unshare(0x20040400) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x4, 0x0, 0x6, 0x4}) 3m12.332134697s ago: executing program 4 (id=145): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}}]}, 0x60}, 0x1, 0x7}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newqdisc={0x68, 0x24, 0xe0b, 0x78bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x6, 0xfffffffd}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffb, 0x5, 0x73328a9a, 0x4}}]}]}}}]}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) 3m10.549125926s ago: executing program 4 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500f5000000002fe80a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012400068014000400000000000000000000000000000000010c000380060002004e"], 0xb8}}, 0x0) 3m10.29729331s ago: executing program 4 (id=156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d00)=@newtfilter={0x110, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x5}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xe0, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xcc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m7.515269395s ago: executing program 4 (id=162): syz_mount_image$ext4(&(0x7f00000011c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000540)={[{@journal_dev={'journal_dev', 0x3d, 0xe}}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000340)='./file1\x00', &(0x7f0000000440)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x2832449, 0x0, 0xfd, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x9, 0xc9c9, 0x5, 0x1, 0xfffffffd, 0x8, 0x3, 0x71, 0x5, 0x6a24c25eb7d29bdc, {0xa82, 0x8}, 0x5, 0x5}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000040)=[0x5], 0x0, 0xfffffffffffffffd, 0x1, 0x1}}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) 3m5.494180766s ago: executing program 4 (id=165): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 3m3.449286094s ago: executing program 4 (id=168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000110000000000020000000900010073797a300000000074000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084300009801c0002800c00018008000140000000040c0001800800014000000004100002800c00018008000140000000088409"], 0xa40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m2.4485635s ago: executing program 33 (id=168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000110000000000020000000900010073797a300000000074000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084300009801c0002800c00018008000140000000040c0001800800014000000004100002800c00018008000140000000088409"], 0xa40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m54.863244937s ago: executing program 1 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x44, 0x20, 0xf4db158ec847dc81, 0xfffffff8, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_FLOW={0x8, 0xb, 0x1}, @FRA_SRC={0x8, 0x2, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x44004) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x1410, 0x2, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040800) (async) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x404, &(0x7f0000000640)=ANY=[@ANYBLOB='gid=ignore,unhide,utf8,adinicb,longad,iocharset=cp936,volume=00000000000000000263,dmode=00000000000000000000004,longad,gid=forget,dmode=00000000000000000024303,gid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x4, 0xc80, &(0x7f0000001bc0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002c000000850000000500000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {0x0, 0x8}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x46}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2000}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x4, 0xa2, 0x3, 0x4}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000340)) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 1m46.61079174s ago: executing program 1 (id=321): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5000000, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m45.136025895s ago: executing program 1 (id=322): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat(0xffffffffffffffff, 0x0, 0x4c0142, 0x163) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000005000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c000180080001000000010014000000110001"], 0xb0}}, 0x0) 1m42.024248488s ago: executing program 1 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200", "0000fffffdfd00"}, 0x7, 0x4}) socket$netlink(0x10, 0x3, 0x9) 1m40.928112638s ago: executing program 1 (id=328): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r1, 0x0, 0xa}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r1, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x70, 0x2) unshare(0x20040400) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@resgid}]}, 0x0, 0x48f, &(0x7f00000006c0)="$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") syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x4, 0x0, 0x6, 0x4}) 1m36.003918034s ago: executing program 1 (id=334): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@acl}, {@discard}]}, 0xee, 0x498, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x9, 0x80006, 0xfffffffe, 0x950}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xa90d, 0x80, 0x2, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000400), 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m28.889343481s ago: executing program 3 (id=343): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000011"}], 0x18}, 0x0) 1m26.157149418s ago: executing program 3 (id=346): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x61, 0x62, 0x64, 0x39, 0x63, 0x62, 0x34, 0x39, 0x62, 0x35, 0x37, 0x66, 0x65, 0x32, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x2d}, 0x48, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dfbec526e380f13d050708a7819b61ee6c9d743e8b956569f65ba5a50ce32b80704c73fec83cfc484c0ac694dfe368c1f0f364b3d7be80586a15869af5e02f5dc46de16b33835a0eac56e3f653181", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000006900)="$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") 1m22.984467165s ago: executing program 3 (id=350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff00000000003e0000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000006000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1m22.477706135s ago: executing program 5 (id=351): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa3, 0x0, &(0x7f0000000180)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc6f6322cbfac4000000000000008163063239d18657d8f6f274d1347d38650608e39d2f8e61c96bbe67808cf339089d46844de51517a756705ab535c084ee3da160dffccc6ecbc132908c2d4588aec206fc5ae73940dfd53875423d82d19a374aa73c2bfcc1", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4002}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m18.753594717s ago: executing program 34 (id=334): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@acl}, {@discard}]}, 0xee, 0x498, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x9, 0x80006, 0xfffffffe, 0x950}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xa90d, 0x80, 0x2, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000400), 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m18.482354304s ago: executing program 2 (id=353): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x8000001}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, 0x0, &(0x7f0000000500)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4}, 0x20) 1m17.000158528s ago: executing program 3 (id=355): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000840}, 0x48014) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/123, 0x7b, 0x841) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m16.223575586s ago: executing program 5 (id=356): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000840}, 0x48014) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/123, 0x7b, 0x841) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m14.88829578s ago: executing program 2 (id=357): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@acl}, {@discard}]}, 0xee, 0x498, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x9, 0x80006, 0xfffffffe, 0x950}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f00000001c0)=0x7ff, 0x4) socket$packet(0x11, 0x3, 0x300) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x10, 0x301, 0x270bd20, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xa90d, 0x80, 0x2, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000400), 0x0) 1m12.935256809s ago: executing program 3 (id=359): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0x39}, 0x0, &(0x7f0000000780)="b0f5ec01e02085647da6d8b2b2a69c0000000000000001aa0eedaa25e8466819395b8df98f3c90a03be929d2802703139af648e434001000cc", 0x0) 1m12.551081271s ago: executing program 5 (id=360): r0 = socket$inet6(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xc, &(0x7f0000000480)="9c9fbafe", 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x180, 0x24, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa5, 0x5d, 0x9, 0x10001, 0x0, 0x3, 0xd25, 0x8}}, {0x14, 0x2, [0x6, 0x4, 0xffff, 0x2, 0x7, 0x7, 0x73b, 0x5]}}, {{0x1c, 0x1, {0x1c, 0x1, 0x6, 0x80000001, 0x1, 0xff, 0x3, 0x2}}, {0x8, 0x2, [0x101, 0x2]}}, {{0x1c, 0x1, {0x5, 0x2, 0x5, 0x6, 0x0, 0x7, 0xffffffff, 0x3}}, {0xa, 0x2, [0x2, 0x0, 0x0]}}, {{0x1c, 0x1, {0x3, 0x1, 0x3ff, 0x44bf, 0x0, 0xd, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x1, 0xa00, 0xffffff81, 0x2, 0x2, 0x4, 0x4}}, {0xc, 0x2, [0x8000, 0x8, 0xe7, 0x26]}}, {{0x1c, 0x1, {0x9, 0x3, 0x7, 0x0, 0x2, 0x4, 0x4, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x2, 0x5, 0x6, 0x2, 0x1, 0x2, 0x1, 0x5}}, {0xe, 0x2, [0x7, 0x5, 0x9, 0x1, 0x40]}}, {{0x1c, 0x1, {0x8, 0xf8, 0x200, 0x1, 0x2, 0x1e, 0xf, 0x5}}, {0xe, 0x2, [0x3327, 0x7, 0x7, 0xf, 0x3]}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x193002) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x45}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008816}, 0x20008000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x2, 0x1, {0xa, 0x4e1d, 0x7, @rand_addr=' \x01\x00', 0x6}}}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="f9fd33728a6e"}) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000280)=0x6c6) 1m5.144421947s ago: executing program 3 (id=361): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x61, 0x62, 0x64, 0x39, 0x63, 0x62, 0x34, 0x39, 0x62, 0x35, 0x37, 0x66, 0x65, 0x32, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x2d}, 0x48, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dfbec526e380f13d050708a7819b61ee6c9d743e8b956569f65ba5a50ce32b80704c73fec83cfc484c0ac694dfe368c1f0f364b3d7be80586a15869af5e02f5dc46de16b33835a0eac56e3f653181", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000006900)="$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") 1m5.143971763s ago: executing program 6 (id=362): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa2, 0x0, &(0x7f0000000180)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc6f6322cbfac4000000000000008163063239d18657d8f6f274d1347d38650608e39d2f8e61c96bbe67808cf339089d46844de51517a756705ab535c084ee3da160dffccc6ecbc132908c2d4588aec206fc5ae73940dfd53875423d82d19a374aa73c2bfc", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4002}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m2.555762819s ago: executing program 5 (id=363): syz_usb_connect(0x5, 0x27, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=cp85%!7,shortname=winnt,utf8=1,shortname=mixed,shortname=mixed,rodir,utf8=0,rodir,codepage=936,shortname=lower,iocharset=cp932,utf8=1,nocase,utf8=0,rodir\x00'/175], 0x1, 0x2a6, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000001c0)={0x17c04, r1, 0x5000, 0x24000007, 0x2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) read$eventfd(r4, &(0x7f00000001c0), 0x8) ioctl$KDSETLED(r4, 0x4b32, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r7, 0x0) 1m2.509188781s ago: executing program 2 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c00343b000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000062c000000000000c1334d04000280040003"], 0x64}}, 0x0) 1m1.87895683s ago: executing program 6 (id=365): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa3, 0x0, &(0x7f0000000180)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc6f6322cbfac4000000000000008163063239d18657d8f6f274d1347d38650608e39d2f8e61c96bbe67808cf339089d46844de51517a756705ab535c084ee3da160dffccc6ecbc132908c2d4588aec206fc5ae73940dfd53875423d82d19a374aa73c2bfcc1", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4002}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m1.026831778s ago: executing program 2 (id=366): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x8000001}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, 0x0, &(0x7f0000000500)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4}, 0x20) 54.661362063s ago: executing program 6 (id=367): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "0200000000"}], 0x18}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c646f74732c646d61736b3d3030300200000030303030303030303030306ea4ef45276f2edd643dd57bfdd82271b3974dbd6458737c6a99139e84d104c956f308dea702f56c13c8422ef390c55ed7a526f04b60029cb1", @ANYRESHEX=0x0, @ANYBLOB=',dots,showexec,time_offset=0x00000000000003a4,nodots,check=relaxed,nodots,dots,nodots,dots,flush,codepage=874,flush,dots,dots,flush,dots,dmask=01777777777777777777774,dots,subj_role=dots,fowner<', @ANYRESDEC=0x0, @ANYRESHEX], 0x1, 0x21a, &(0x7f0000000640)="$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") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 53.644974544s ago: executing program 5 (id=368): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@acl}, {@discard}]}, 0xee, 0x498, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x9, 0x80006, 0xfffffffe, 0x950}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f00000001c0)=0x7ff, 0x4) socket$packet(0x11, 0x3, 0x300) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x10, 0x301, 0x270bd20, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xa90d, 0x80, 0x2, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000400), 0x0) 49.582850737s ago: executing program 35 (id=361): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x61, 0x61, 0x62, 0x64, 0x39, 0x63, 0x62, 0x34, 0x39, 0x62, 0x35, 0x37, 0x66, 0x65, 0x32, 0x65]}, &(0x7f0000000300)={0x0, "470f70bd989b74fc1963471df7d1ba26479918a5138a6a93e2abce7f2f9cdb7931450c6679c369b428e4403b24f03148bdf1f9558d12deadab63b858c64b24d9", 0x2d}, 0x48, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dfbec526e380f13d050708a7819b61ee6c9d743e8b956569f65ba5a50ce32b80704c73fec83cfc484c0ac694dfe368c1f0f364b3d7be80586a15869af5e02f5dc46de16b33835a0eac56e3f653181", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") 46.187089216s ago: executing program 6 (id=370): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "0200000000"}], 0x18}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c646f74732c646d61736b3d3030300200000030303030303030303030306ea4ef45276f2edd643dd57bfdd82271b3974dbd6458737c6a99139e84d104c956f308dea702f56c13c8422ef390c55ed7a526f04b60029cb1", @ANYRESHEX=0x0, @ANYBLOB=',dots,showexec,time_offset=0x00000000000003a4,nodots,check=relaxed,nodots,dots,nodots,dots,flush,codepage=874,flush,dots,dots,flush,dots,dmask=01777777777777777777774,dots,subj_role=dots,fowner<', @ANYRESDEC=0x0, @ANYRESHEX], 0x1, 0x21a, &(0x7f0000000640)="$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") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 46.092777542s ago: executing program 2 (id=371): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002", @ANYRES64, @ANYRES64], 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r1) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) futex(&(0x7f0000000500)=0x2, 0x8c, 0x1, 0x0, &(0x7f00000005c0)=0x1, 0x0) 43.380575963s ago: executing program 5 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x10000002, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0x80, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0xd, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x4a0, 0xa, 0x0, 0x1, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000021006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 36.263571659s ago: executing program 2 (id=373): r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='mountaddr\x00', &(0x7f00000005c0)='\x93\xff\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x40c, &(0x7f00000000c0)=ANY=[]) (async, rerun: 32) read$FUSE(r2, 0x0, 0x0) (async, rerun: 32) write$FUSE_INIT(r2, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2c01e84a, 0x6, 0x0, 0x4a5, 0x3}}, 0x92) (async) syz_fuse_handle_req(r2, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x10001, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x8, 0xfffffffffffffff6, 0x7f, 0x1ff, 0x75, 0xfffffffe, 0x7, 0x1, 0x4000, 0xfffffff4, 0x0, 0x0, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000010)=0x400, 0x4) (async) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) listen(r5, 0x5) (async) connect$inet(r4, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}}, 0x28) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000300)=0x400, 0x4) sendto$inet(r4, &(0x7f0000001000)='\x00'/1700, 0x6a4, 0x40, 0x0, 0x0) (async, rerun: 32) sendto$inet(r4, &(0x7f0000005000)='\x00', 0x1, 0x40, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 36.236621033s ago: executing program 6 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400", 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000001}) poll(&(0x7f00000001c0)=[{r3, 0x13}], 0x1, 0x10002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) fallocate(0xffffffffffffffff, 0x1, 0x7, 0x8010004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x70bd21, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22420}, [@IFLA_IFALIAS={0x0, 0x14, 'vlan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004000) 28.960438291s ago: executing program 6 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000002c0)=""/21, 0x214000, 0x1000, 0x3}, 0xfffffffffffffffe) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2c018, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x28200, 0x4) r1 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'vlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000104a2d600400400000900000000000000dd7be2f0785cf0eea29dd14f594d1f798e5aa50ef219753caaa89ada366f1f66d728d76b7efcd98db9a829ce444d2b8701ba68a0e78d1bd3d4c6629b181f87da4d7abd1512633688f112e3d1cd435463cf6202ae7504dc57baa0fd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000009000000040000000100000000000000", @ANYRESHEX=r3], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000005700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fddbdf2512000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8080) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x5, r2, 0x8000000}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x4000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fsopen(&(0x7f00000000c0)='romfs\x00', 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f00003cf000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) 0s ago: executing program 36 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x10000002, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0x80, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0xd, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x4a0, 0xa, 0x0, 0x1, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000021006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) kernel console output (not intermixed with test programs): ꖘ羸瓨ๆꇵ젂ඦꂐ⼝硐ꈑ௬뮓揭恵罟⢥缸·哥ﲓ嘄ᚋ褪ṭ瘣ᝓ싘䎺蝄꾺 [ 92.037012][ T5869] 9p: Bad value for 'rfdno' [ 92.198026][ T5742] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.409171][ T5742] usb 2-1: device descriptor read/64, error -71 [ 92.437378][ T5870] loop0: detected capacity change from 0 to 4096 [ 92.699057][ T5742] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.851691][ T5742] usb 2-1: device descriptor read/64, error -71 [ 92.951224][ T5874] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.974184][ T5742] usb usb2-port1: attempt power cycle [ 93.388124][ T5873] loop3: detected capacity change from 0 to 512 [ 93.489802][ T5742] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.510375][ T5742] usb 2-1: device descriptor read/8, error -71 [ 94.485030][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.946857][ T5729] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 94.999968][ T5873] FAULT_INJECTION: forcing a failure. [ 94.999968][ T5873] name failslab, interval 1, probability 0, space 0, times 1 [ 94.999999][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT(full) [ 95.000023][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.000036][ T5873] Call Trace: [ 95.000045][ T5873] [ 95.000054][ T5873] dump_stack_lvl+0xe8/0x150 [ 95.000092][ T5873] should_fail_ex+0x3eb/0x540 [ 95.000130][ T5873] should_failslab+0xa8/0x100 [ 95.000165][ T5873] __kmalloc_cache_noprof+0x9e/0x600 [ 95.000195][ T5873] ? ceph_auth_init+0x5d/0x350 [ 95.000233][ T5873] ? ceph_auth_init+0x5d/0x350 [ 95.000271][ T5873] ceph_auth_init+0x5d/0x350 [ 95.000308][ T5873] ceph_monc_init+0x52f/0xb10 [ 95.000351][ T5873] ceph_create_client+0x225/0x310 [ 95.000389][ T5873] ceph_get_tree+0x1ca/0x1a40 [ 95.000421][ T5873] ? apparmor_capable+0x126/0x170 [ 95.000456][ T5873] vfs_get_tree+0x92/0x2a0 [ 95.000486][ T5873] vfs_cmd_create+0xa2/0x200 [ 95.000522][ T5873] __se_sys_fsconfig+0x6b9/0x810 [ 95.000561][ T5873] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 95.000601][ T5873] ? ksys_write+0x242/0x270 [ 95.000640][ T5873] ? __pfx_ksys_write+0x10/0x10 [ 95.000670][ T5873] ? __x64_sys_fsconfig+0x20/0xc0 [ 95.000701][ T5873] do_syscall_64+0x166/0x520 [ 95.000723][ T5873] ? trace_irq_disable+0x3b/0x140 [ 95.000745][ T5873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.000765][ T5873] ? clear_bhb_loop+0x70/0xc0 [ 95.000790][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.000812][ T5873] RIP: 0033:0x7f3f8299e159 [ 95.000831][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.000847][ T5873] RSP: 002b:00007f3f838e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 95.000869][ T5873] RAX: ffffffffffffffda RBX: 00007f3f82c25fa0 RCX: 00007f3f8299e159 [ 95.000884][ T5873] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 95.000895][ T5873] RBP: 00007f3f838e9090 R08: 0000000000000000 R09: 0000000000000000 [ 95.000908][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.000919][ T5873] R13: 00007f3f82c26038 R14: 00007f3f82c25fa0 R15: 00007ffd0b2561e8 [ 95.000951][ T5873] [ 95.620925][ T5729] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 95.650043][ T5879] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:005b:0000:00bb with DS=0x1b [ 95.675579][ T5729] usb 5-1: USB disconnect, device number 2 [ 95.726307][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.433844][ T5886] loop0: detected capacity change from 0 to 4096 [ 96.568184][ T5886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.961167][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.260372][ T5876] loop4: detected capacity change from 0 to 32768 [ 97.270387][ T5876] ======================================================= [ 97.270387][ T5876] WARNING: The mand mount option has been deprecated and [ 97.270387][ T5876] and is ignored by this kernel. Remove the mand [ 97.270387][ T5876] option from the mount to silence this warning. [ 97.270387][ T5876] ======================================================= [ 97.418356][ T5876] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.013180][ T5876] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop4": -EINTR [ 98.018170][ T5876] XFS (loop4): log mount failed [ 98.562546][ T5912] loop0: detected capacity change from 0 to 256 [ 98.585944][ T5893] ceph: No mds server is up or the cluster is laggy [ 100.862780][ T5917] loop4: detected capacity change from 0 to 1024 [ 100.863831][ T5917] EXT4-fs: Ignoring removed orlov option [ 100.938252][ T5917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.184611][ T5928] Zero length message leads to an empty skb [ 101.309413][ T5742] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.371136][ T5935] loop1: detected capacity change from 0 to 512 [ 101.476444][ T5742] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 101.477616][ T5935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.477715][ T5935] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.484011][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.484084][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.484176][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.493777][ T5742] usb 5-1: config 0 descriptor?? [ 101.585939][ T33] audit: type=1800 audit(1789333609.553:3): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 101.615999][ T5935] FAULT_INJECTION: forcing a failure. [ 101.615999][ T5935] name failslab, interval 1, probability 0, space 0, times 0 [ 101.616029][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(full) [ 101.616053][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.616067][ T5935] Call Trace: [ 101.616076][ T5935] [ 101.616085][ T5935] dump_stack_lvl+0xe8/0x150 [ 101.616133][ T5935] should_fail_ex+0x3eb/0x540 [ 101.616175][ T5935] should_failslab+0xa8/0x100 [ 101.616211][ T5935] __kmalloc_noprof+0xf9/0x710 [ 101.616238][ T5935] ? lock_acquire+0x115/0x350 [ 101.616262][ T5935] ? io_cache_alloc_new+0x40/0x100 [ 101.616291][ T5935] ? io_cache_alloc_new+0x40/0x100 [ 101.616327][ T5935] io_cache_alloc_new+0x40/0x100 [ 101.616359][ T5935] __io_prep_rw+0x281/0xe70 [ 101.616402][ T5935] ? __pfx___io_prep_rw+0x10/0x10 [ 101.616436][ T5935] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 101.616490][ T5935] io_prep_read+0x33/0x110 [ 101.616519][ T5935] ? blk_start_plug_nr_ios+0x81/0x1b0 [ 101.616557][ T5935] io_submit_sqes+0xbde/0x2310 [ 101.616620][ T5935] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 101.616663][ T5935] ? __fget_files+0x3a2/0x420 [ 101.616691][ T5935] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 101.616723][ T5935] ? fput+0xa0/0xd0 [ 101.616755][ T5935] ? ksys_write+0x242/0x270 [ 101.616783][ T5935] ? __pfx_ksys_write+0x10/0x10 [ 101.616812][ T5935] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 101.616848][ T5935] do_syscall_64+0x166/0x520 [ 101.616871][ T5935] ? trace_irq_disable+0x3b/0x140 [ 101.616896][ T5935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.616919][ T5935] ? clear_bhb_loop+0x70/0xc0 [ 101.616946][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.616969][ T5935] RIP: 0033:0x7f245db9e159 [ 101.616989][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.617007][ T5935] RSP: 002b:00007f245e9e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 101.617041][ T5935] RAX: ffffffffffffffda RBX: 00007f245de25fa0 RCX: 00007f245db9e159 [ 101.617055][ T5935] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 101.617066][ T5935] RBP: 00007f245e9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 101.617077][ T5935] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 101.617088][ T5935] R13: 00007f245de26038 R14: 00007f245de25fa0 R15: 00007ffc0486a4b8 [ 101.617126][ T5935] [ 101.978584][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.003350][ T5742] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 102.003386][ T5742] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 102.003412][ T5742] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 102.003435][ T5742] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 102.003459][ T5742] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 102.003482][ T5742] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 102.003505][ T5742] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 102.097946][ T5742] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 102.195042][ T5742] cp2112 0003:10C4:EA90.0001: error requesting version [ 102.239232][ T5742] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -5 [ 102.244114][ T5948] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 102.283170][ T5951] loop0: detected capacity change from 0 to 512 [ 102.330597][ T5954] IPVS: stopping master sync thread 5948 ... [ 102.341293][ T5951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.341569][ T5951] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.407302][ T5951] EXT4-fs warning (device loop0): ext4_empty_dir:3106: inode #12: comm syz.0.33: directory missing '..' [ 103.801301][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.070434][ T5975] loop0: detected capacity change from 0 to 512 [ 104.136864][ T5975] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 104.179137][ T5975] EXT4-fs (loop0): invalid journal inode [ 104.182726][ T5975] EXT4-fs (loop0): can't get journal size [ 104.217028][ T5975] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 104.231336][ T5975] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.256824][ T5975] EXT4-fs (loop0): 1 truncate cleaned up [ 104.294055][ T5975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.682353][ T5978] loop2: detected capacity change from 0 to 512 [ 104.904037][ T5978] dns_resolver: Unsupported server list version (6) [ 105.069201][ T5804] usb 5-1: USB disconnect, device number 3 [ 105.366654][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.385293][ T5978] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 105.395554][ T5980] loop3: detected capacity change from 0 to 164 [ 105.477697][ T5980] Unable to read rock-ridge attributes [ 105.483276][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.888911][ T5754] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.018881][ T5991] FAULT_INJECTION: forcing a failure. [ 106.018881][ T5991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.018961][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.3.44 Not tainted syzkaller #0 PREEMPT(full) [ 106.018984][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.018996][ T5991] Call Trace: [ 106.019004][ T5991] [ 106.019012][ T5991] dump_stack_lvl+0xe8/0x150 [ 106.019047][ T5991] should_fail_ex+0x3eb/0x540 [ 106.019081][ T5991] _copy_from_user+0x2d/0xb0 [ 106.019103][ T5991] io_register_clone_buffers+0xaa/0x300 [ 106.019133][ T5991] ? __pfx_io_register_clone_buffers+0x10/0x10 [ 106.019164][ T5991] ? __se_sys_io_uring_register+0xf74/0x1aa0 [ 106.019198][ T5991] __se_sys_io_uring_register+0xf84/0x1aa0 [ 106.019230][ T5991] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 106.019262][ T5991] ? rcu_is_watching+0x16/0xb0 [ 106.019301][ T5991] do_syscall_64+0x166/0x520 [ 106.019323][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.019344][ T5991] ? clear_bhb_loop+0x70/0xc0 [ 106.019369][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.019411][ T5991] RIP: 0033:0x7f3f8299e159 [ 106.019431][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.019449][ T5991] RSP: 002b:00007f3f838e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 106.019473][ T5991] RAX: ffffffffffffffda RBX: 00007f3f82c25fa0 RCX: 00007f3f8299e159 [ 106.019490][ T5991] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 106.019504][ T5991] RBP: 00007f3f838e9090 R08: 0000000000000000 R09: 0000000000000000 [ 106.019518][ T5991] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 106.019531][ T5991] R13: 00007f3f82c26038 R14: 00007f3f82c25fa0 R15: 00007ffd0b2561e8 [ 106.019567][ T5991] [ 106.093669][ T5754] usb 1-1: Using ep0 maxpacket: 32 [ 106.282441][ T5754] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 106.394984][ T5754] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 106.395125][ T5754] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.395163][ T5754] usb 1-1: config 0 has no interface number 0 [ 106.552328][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.552354][ T5754] usb 1-1: Product: syz [ 106.552367][ T5754] usb 1-1: Manufacturer: syz [ 106.552380][ T5754] usb 1-1: SerialNumber: syz [ 106.587502][ T5754] usb 1-1: config 0 descriptor?? [ 106.600101][ T5754] f81534 1-1:0.12: required endpoints missing [ 106.852413][ T5754] usb 1-1: USB disconnect, device number 2 [ 106.864867][ T5994] FAULT_INJECTION: forcing a failure. [ 106.864867][ T5994] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 106.864893][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT(full) [ 106.864915][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.864927][ T5994] Call Trace: [ 106.864935][ T5994] [ 106.864944][ T5994] dump_stack_lvl+0xe8/0x150 [ 106.864977][ T5994] should_fail_ex+0x3eb/0x540 [ 106.865009][ T5994] prepare_alloc_pages+0x21e/0x5f0 [ 106.865038][ T5994] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 106.865069][ T5994] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.865101][ T5994] ? policy_nodemask+0x2cc/0x8e0 [ 106.865141][ T5994] alloc_pages_mpol+0x21e/0x390 [ 106.865177][ T5994] folio_alloc_mpol_noprof+0x39/0x160 [ 106.865207][ T5994] vma_alloc_folio_noprof+0xe1/0x1e0 [ 106.865258][ T5994] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 106.865295][ T5994] do_wp_page+0x1178/0x4b70 [ 106.865321][ T5994] ? __pfx_do_wp_page+0x10/0x10 [ 106.865333][ T5994] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.865357][ T5994] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.865387][ T5994] handle_mm_fault+0x15d7/0x3750 [ 106.865409][ T5994] ? handle_mm_fault+0xf1/0x3750 [ 106.865431][ T5994] ? __pfx_handle_mm_fault+0x10/0x10 [ 106.865444][ T5994] ? lock_vma_under_rcu+0x45a/0x500 [ 106.865476][ T5994] do_user_addr_fault+0xb35/0x1480 [ 106.865498][ T5994] ? trace_page_fault_user+0x84/0x1e0 [ 106.865514][ T5994] exc_page_fault+0x6a/0xc0 [ 106.865530][ T5994] asm_exc_page_fault+0x26/0x30 [ 106.865545][ T5994] RIP: 0033:0x7f3f828551a3 [ 106.865570][ T5994] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 106.865582][ T5994] RSP: 002b:00007f3f838e8470 EFLAGS: 00010206 [ 106.865594][ T5994] RAX: 0000000000003c00 RBX: 00007f3f838e8530 RCX: 00007f3f78600000 [ 106.865604][ T5994] RDX: 00007f3f838e86d0 RSI: 0000000000000003 RDI: 00007f3f838e85d0 [ 106.865613][ T5994] RBP: 000000000000004a R08: 0000000000000009 R09: 00000000000001aa [ 106.865621][ T5994] R10: 00000000000001b6 R11: 00007f3f838e8530 R12: 0000000000000001 [ 106.865629][ T5994] R13: 00007f3f82a55040 R14: 00000000000000c0 R15: 00007f3f838e85d0 [ 106.865649][ T5994] [ 106.874829][ T5994] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 106.988806][ T6002] netlink: 44 bytes leftover after parsing attributes in process `syz.1.45'. [ 106.988922][ T6002] netlink: 44 bytes leftover after parsing attributes in process `syz.1.45'. [ 106.988966][ T6002] netlink: 256 bytes leftover after parsing attributes in process `syz.1.45'. [ 107.160104][ T5994] loop3: detected capacity change from 0 to 1024 [ 107.216506][ T5994] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 107.216592][ T5994] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 107.216611][ T5994] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.46: Failed to acquire dquot type 0 [ 107.216641][ T5994] loop3: lost filesystem error report for type 5 error -117 [ 107.218751][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 107.218813][ C1] EXT4-fs (loop3): initial error at time 1789333615: ext4_acquire_dquot:7069 [ 107.218885][ C1] EXT4-fs (loop3): last error at time 1789333615: ext4_acquire_dquot:7069 [ 107.375739][ T5994] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 107.408507][ T5994] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #13: comm syz.3.46: corrupted inode contents [ 107.408874][ T5994] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.431512][ T5994] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #13: comm syz.3.46: mark_inode_dirty error [ 107.431541][ T5994] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.433921][ T5994] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #13: comm syz.3.46: corrupted inode contents [ 107.433961][ T5994] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.434331][ T5994] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.46: mark_inode_dirty error [ 107.434357][ T5994] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.436861][ T5994] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #13: comm syz.3.46: corrupted inode contents [ 107.436888][ T5994] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.469046][ T5994] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 107.469105][ T5994] loop3: lost filesystem error report for type 5 error -117 [ 107.476380][ T5994] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #13: comm syz.3.46: corrupted inode contents [ 107.476442][ T5994] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.498085][ T5994] EXT4-fs error (device loop3): ext4_truncate:4721: inode #13: comm syz.3.46: mark_inode_dirty error [ 107.498155][ T5994] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 107.499943][ T5994] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 107.500004][ T5994] loop3: lost filesystem error report for type 5 error -117 [ 107.627389][ T5994] EXT4-fs (loop3): 1 truncate cleaned up [ 107.628512][ T5994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.023726][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.241523][ T6014] capability: warning: `syz.2.51' uses 32-bit capabilities (legacy support in use) [ 108.484847][ T6019] loop3: detected capacity change from 0 to 256 [ 110.048047][ T6009] loop0: detected capacity change from 0 to 40427 [ 110.589975][ T6009] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(512) [ 110.590059][ T6009] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.671106][ T6009] F2FS-fs (loop0): Image doesn't support compression [ 110.671267][ T6009] F2FS-fs (loop0): build fault injection rate: 7 [ 110.671315][ T6009] F2FS-fs (loop0): build fault injection type: 0x3b4c63 [ 110.834607][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57b/0xe50 [ 111.172132][ T6009] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 111.608689][ T6029] loop4: detected capacity change from 0 to 256 [ 111.609775][ T6029] exfat: Deprecated parameter 'utf8' [ 111.609828][ T6029] exfat: Deprecated parameter 'namecase' [ 111.616868][ T6029] exfat: Deprecated parameter 'namecase' [ 111.616957][ T6029] exfat: Deprecated parameter 'utf8' [ 111.688731][ T6026] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 111.727586][ T6031] loop3: detected capacity change from 0 to 1024 [ 111.728040][ T6029] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 111.732087][ T6029] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 111.822775][ T6036] netlink: 'syz.1.59': attribute type 4 has an invalid length. [ 111.826959][ T6031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.088759][ T6031] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 112.117434][ T6031] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 112.174517][ T6031] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.233950][ T6031] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 112.432829][ T6046] loop2: detected capacity change from 0 to 8 [ 112.544894][ T6046] SQUASHFS error: Failed to read block 0x6de: -5 [ 112.544942][ T6046] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 112.545036][ T6046] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 113.023684][ T6047] FAULT_INJECTION: forcing a failure. [ 113.023684][ T6047] name failslab, interval 1, probability 0, space 0, times 0 [ 113.023726][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.4.62 Not tainted syzkaller #0 PREEMPT(full) [ 113.023747][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.023759][ T6047] Call Trace: [ 113.023767][ T6047] [ 113.023775][ T6047] dump_stack_lvl+0xe8/0x150 [ 113.023809][ T6047] should_fail_ex+0x3eb/0x540 [ 113.023842][ T6047] should_failslab+0xa8/0x100 [ 113.023874][ T6047] __kmalloc_noprof+0xf9/0x710 [ 113.023899][ T6047] ? __netlink_lookup+0x7e4/0x8b0 [ 113.023926][ T6047] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 113.023948][ T6047] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 113.023976][ T6047] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 113.024006][ T6047] genl_start+0x180/0x6d0 [ 113.024033][ T6047] __netlink_dump_start+0x442/0x7b0 [ 113.024066][ T6047] genl_family_rcv_msg_dumpit+0x213/0x310 [ 113.024090][ T6047] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 113.024111][ T6047] ? genl_get_cmd+0x6cc/0x960 [ 113.024132][ T6047] ? __pfx___mutex_lock+0x10/0x10 [ 113.024161][ T6047] ? __pfx_genl_start+0x10/0x10 [ 113.024179][ T6047] ? __pfx_genl_dumpit+0x10/0x10 [ 113.024197][ T6047] ? __pfx_genl_done+0x10/0x10 [ 113.024218][ T6047] ? __dev_queue_xmit+0x29b/0x3820 [ 113.024256][ T6047] genl_rcv_msg+0x5e1/0x7a0 [ 113.024283][ T6047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.024303][ T6047] ? __pfx_smc_nl_dump_ueid+0x10/0x10 [ 113.024345][ T6047] netlink_rcv_skb+0x226/0x4a0 [ 113.024372][ T6047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.024394][ T6047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.024434][ T6047] ? down_read+0x2b9/0x320 [ 113.024460][ T6047] genl_rcv+0x28/0x40 [ 113.024478][ T6047] netlink_unicast+0x7bd/0x940 [ 113.024511][ T6047] netlink_sendmsg+0x7c3/0xae0 [ 113.024544][ T6047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.024578][ T6047] ? apparmor_socket_sendmsg+0x18b/0x360 [ 113.024610][ T6047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.024636][ T6047] sock_sendmsg_nosec+0x13a/0x180 [ 113.024672][ T6047] ____sys_sendmsg+0x54e/0x850 [ 113.024701][ T6047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.024733][ T6047] ? import_iovec+0x73/0xa0 [ 113.024757][ T6047] ___sys_sendmsg+0x2a5/0x360 [ 113.024779][ T6047] ? __lock_acquire+0x747/0x2de0 [ 113.024807][ T6047] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.024863][ T6047] ? __fget_files+0x2a/0x420 [ 113.024883][ T6047] ? __fget_files+0x3a2/0x420 [ 113.024913][ T6047] __x64_sys_sendmsg+0x1b1/0x290 [ 113.024936][ T6047] ? fput+0xb1/0xd0 [ 113.024965][ T6047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.025009][ T6047] do_syscall_64+0x166/0x520 [ 113.025030][ T6047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.025050][ T6047] ? clear_bhb_loop+0x70/0xc0 [ 113.025073][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.025093][ T6047] RIP: 0033:0x7fb7e239e159 [ 113.025110][ T6047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.025125][ T6047] RSP: 002b:00007fb7e3241028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.025153][ T6047] RAX: ffffffffffffffda RBX: 00007fb7e2625fa0 RCX: 00007fb7e239e159 [ 113.025167][ T6047] RDX: 0000000020040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 113.025180][ T6047] RBP: 00007fb7e3241090 R08: 0000000000000000 R09: 0000000000000000 [ 113.025191][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.025202][ T6047] R13: 00007fb7e2626038 R14: 00007fb7e2625fa0 R15: 00007ffcbcf5f048 [ 113.025232][ T6047] [ 113.690612][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.049164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 114.086286][ T6053] loop0: detected capacity change from 0 to 512 [ 114.095310][ T6053] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.095327][ T6053] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.140097][ T6053] EXT4-fs (loop0): 1 orphan inode deleted [ 114.140115][ T6053] EXT4-fs (loop0): 1 truncate cleaned up [ 114.168431][ T6053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.259269][ T6038] loop1: detected capacity change from 0 to 32768 [ 114.284899][ T6053] EXT4-fs error (device loop0): ext4_search_dir:1476: inode #12: block 7: comm syz.0.63: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 114.424040][ T6038] JBD2: Ignoring recovery information on journal [ 114.580908][ T5754] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 114.609738][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.654277][ T6038] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 114.658536][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 114.711782][ T5754] usb 5-1: device descriptor read/64, error -71 [ 114.960393][ T5754] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 115.063565][ T6071] FAULT_INJECTION: forcing a failure. [ 115.063565][ T6071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 115.063618][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.3.69 Not tainted syzkaller #0 PREEMPT(full) [ 115.063639][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.063651][ T6071] Call Trace: [ 115.063659][ T6071] [ 115.063667][ T6071] dump_stack_lvl+0xe8/0x150 [ 115.063711][ T6071] should_fail_ex+0x3eb/0x540 [ 115.063744][ T6071] prepare_alloc_pages+0x21e/0x5f0 [ 115.063776][ T6071] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 115.063807][ T6071] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.063843][ T6071] ? policy_nodemask+0x2cc/0x8e0 [ 115.063870][ T6071] ? ktime_get+0x1f5/0x220 [ 115.063895][ T6071] alloc_pages_mpol+0x21e/0x390 [ 115.063930][ T6071] alloc_pages_noprof+0xb1/0x2b0 [ 115.063962][ T6071] __pmd_alloc+0x3a/0x5c0 [ 115.063985][ T6071] handle_mm_fault+0xe9d/0x3750 [ 115.064014][ T6071] ? handle_mm_fault+0xf1/0x3750 [ 115.064044][ T6071] ? __pfx_handle_mm_fault+0x10/0x10 [ 115.064062][ T6071] ? lock_vma_under_rcu+0x45a/0x500 [ 115.064104][ T6071] do_user_addr_fault+0xb35/0x1480 [ 115.064134][ T6071] ? trace_page_fault_user+0x84/0x1e0 [ 115.064157][ T6071] exc_page_fault+0x6a/0xc0 [ 115.064178][ T6071] asm_exc_page_fault+0x26/0x30 [ 115.064197][ T6071] RIP: 0033:0x7f3f8285524e [ 115.064219][ T6071] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 115.064235][ T6071] RSP: 002b:00007f3f838c7470 EFLAGS: 00010246 [ 115.064256][ T6071] RAX: 0000000000000001 RBX: 00007f3f838c7530 RCX: 0000000000000101 [ 115.064269][ T6071] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 00007f3f838c75d0 [ 115.064281][ T6071] RBP: 0000000000000102 R08: 00007f3f78600000 R09: 0000000000000000 [ 115.064293][ T6071] R10: 0000000000000000 R11: 00007f3f838c7540 R12: 0000000000000001 [ 115.064305][ T6071] R13: 00007f3f82a55040 R14: 0000000000000000 R15: 00007f3f838c75d0 [ 115.064334][ T6071] [ 115.064407][ T6071] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 115.118635][ T5754] usb 5-1: device descriptor read/64, error -71 [ 115.313858][ T5754] usb usb5-port1: attempt power cycle [ 115.487251][ T6071] loop3: detected capacity change from 0 to 512 [ 115.530539][ T33] audit: type=1807 audit(1789333623.473:4): action=measure uid>+ res=0 [ 115.530664][ T33] audit: type=1802 audit(1789333623.473:5): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.70" res=0 errno=0 [ 115.530775][ T33] audit: type=1804 audit(1789333623.483:6): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.2.70" name="ima_policy_written" res=0 errno=-17 [ 115.530884][ T33] audit: type=1807 audit(1789333623.483:7): action=measure uid>+ res=0 [ 115.530915][ T33] audit: type=1802 audit(1789333623.483:8): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.70" res=0 errno=0 [ 115.704261][ T6071] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 115.728769][ T5754] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 115.750176][ T5754] usb 5-1: device descriptor read/8, error -71 [ 115.767223][ T6071] EXT4-fs (loop3): invalid journal inode [ 115.768250][ T6071] EXT4-fs (loop3): can't get journal size [ 115.832300][ T6069] ima: policy update failed [ 115.832772][ T33] audit: type=1802 audit(1789333623.803:9): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.70" res=0 errno=0 [ 115.950731][ T6071] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 115.951528][ T6071] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.024713][ T6071] EXT4-fs (loop3): 1 truncate cleaned up [ 116.054629][ T6071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.080108][ T5754] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 116.103703][ T5754] usb 5-1: device descriptor read/8, error -71 [ 116.215611][ T5754] usb usb5-port1: unable to enumerate USB device [ 116.304887][ T5628] ocfs2: Unmounting device (7,1) on (node local) [ 116.340913][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.341607][ T6066] loop0: detected capacity change from 0 to 32768 [ 116.432710][ T6066] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.682827][ T6091] syzkaller0: entered promiscuous mode [ 117.682849][ T6091] syzkaller0: entered allmulticast mode [ 117.695769][ T6091] tipc: Started in network mode [ 117.695843][ T6091] tipc: Node identity be048becffb3, cluster identity 4711 [ 117.722373][ T6091] tipc: Enabled bearer , priority 0 [ 117.735573][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 117.745328][ T6088] tipc: Resetting bearer [ 117.827662][ T6088] tipc: Disabling bearer [ 117.994444][ T6097] loop1: detected capacity change from 0 to 512 [ 118.026651][ T6099] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0300:00bb with DS=0x1b [ 118.082214][ T6097] FAULT_INJECTION: forcing a failure. [ 118.082214][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 118.082239][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT(full) [ 118.082259][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.082270][ T6097] Call Trace: [ 118.082278][ T6097] [ 118.082286][ T6097] dump_stack_lvl+0xe8/0x150 [ 118.082318][ T6097] should_fail_ex+0x3eb/0x540 [ 118.082350][ T6097] should_failslab+0xa8/0x100 [ 118.082377][ T6097] ? ceph_msg_new2+0x3b/0x4d0 [ 118.082399][ T6097] kmem_cache_alloc_noprof+0x9c/0x600 [ 118.082424][ T6097] ? ceph_msg_new2+0x3b/0x4d0 [ 118.082446][ T6097] ? mutex_init_lockdep+0xdf/0x110 [ 118.082474][ T6097] ceph_msg_new2+0x3b/0x4d0 [ 118.082500][ T6097] ceph_monc_init+0x5a1/0xb10 [ 118.082535][ T6097] ceph_create_client+0x225/0x310 [ 118.082567][ T6097] ceph_get_tree+0x1ca/0x1a40 [ 118.082594][ T6097] ? apparmor_capable+0x126/0x170 [ 118.082623][ T6097] vfs_get_tree+0x92/0x2a0 [ 118.082648][ T6097] vfs_cmd_create+0xa2/0x200 [ 118.082678][ T6097] __se_sys_fsconfig+0x6b9/0x810 [ 118.082719][ T6097] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 118.082745][ T6097] ? ksys_write+0x242/0x270 [ 118.082769][ T6097] ? __pfx_ksys_write+0x10/0x10 [ 118.082797][ T6097] ? __x64_sys_fsconfig+0x20/0xc0 [ 118.082826][ T6097] do_syscall_64+0x166/0x520 [ 118.082844][ T6097] ? trace_irq_disable+0x3b/0x140 [ 118.082871][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.082891][ T6097] ? clear_bhb_loop+0x70/0xc0 [ 118.082913][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.082932][ T6097] RIP: 0033:0x7f245db9e159 [ 118.082949][ T6097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.082963][ T6097] RSP: 002b:00007f245e9e3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 118.082983][ T6097] RAX: ffffffffffffffda RBX: 00007f245de25fa0 RCX: 00007f245db9e159 [ 118.082997][ T6097] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 118.083008][ T6097] RBP: 00007f245e9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 118.083019][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.083031][ T6097] R13: 00007f245de26038 R14: 00007f245de25fa0 R15: 00007ffc0486a4b8 [ 118.083060][ T6097] [ 118.374395][ T6101] loop4: detected capacity change from 0 to 128 [ 119.063223][ T6108] loop1: detected capacity change from 0 to 512 [ 119.080675][ T6108] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 119.089213][ T6108] EXT4-fs (loop1): invalid journal inode [ 119.089691][ T6108] EXT4-fs (loop1): can't get journal size [ 119.151913][ T6108] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 119.155384][ T6108] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.167740][ T6108] EXT4-fs (loop1): 1 truncate cleaned up [ 119.209073][ T6108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.942509][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.972614][ T6116] loop2: detected capacity change from 0 to 512 [ 120.081628][ T6116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.081690][ T6116] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.164365][ T33] audit: type=1800 audit(1789333628.133:10): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.82" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 120.254212][ T6123] SQUASHFS error: Failed to read block 0x0: -5 [ 120.285165][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.294613][ T6123] loop1: detected capacity change from 0 to 512 [ 120.356799][ T6121] macsec1: entered promiscuous mode [ 120.438647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 120.469601][ T6092] loop3: detected capacity change from 0 to 32768 [ 120.532462][ T6092] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 120.655352][ T6092] XFS (loop3): Ending clean mount [ 120.787001][ T5631] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 121.010031][ T6143] loop0: detected capacity change from 0 to 512 [ 121.015598][ T6140] syzkaller0: entered promiscuous mode [ 121.015622][ T6140] syzkaller0: entered allmulticast mode [ 121.086472][ T6140] tipc: Enabled bearer , priority 0 [ 121.100257][ T6139] tipc: Resetting bearer [ 121.145431][ T6143] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.180763][ T6139] tipc: Disabling bearer [ 121.278561][ T5820] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 121.560749][ T5729] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 121.627793][ T6158] loop3: detected capacity change from 0 to 512 [ 121.711815][ T6158] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 121.773989][ T6158] EXT4-fs (loop3): invalid journal inode [ 121.775062][ T6158] EXT4-fs (loop3): can't get journal size [ 121.842030][ T6158] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 121.867794][ T6158] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.891681][ T6158] EXT4-fs (loop3): 1 truncate cleaned up [ 121.945301][ T6149] ceph: No mds server is up or the cluster is laggy [ 121.958759][ T6158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.968896][ T5820] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.069309][ T5804] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 122.228862][ T5820] usb 3-1: device descriptor read/64, error -71 [ 122.909777][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.919250][ T5820] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.037175][ T6163] loop0: detected capacity change from 0 to 128 [ 123.059904][ T5820] usb 3-1: device descriptor read/64, error -71 [ 123.172504][ T5820] usb usb3-port1: attempt power cycle [ 123.285764][ T6168] loop1: detected capacity change from 0 to 1756 [ 123.528847][ T5820] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.588219][ T6172] netlink: 'syz.3.99': attribute type 2 has an invalid length. [ 123.667898][ T5820] usb 3-1: device descriptor read/8, error -71 [ 123.952773][ T5820] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.004039][ T5820] usb 3-1: device descriptor read/8, error -71 [ 124.056134][ T6168] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 124.056148][ T6168] UDF-fs: Scanning with blocksize 512 failed [ 124.112383][ T5820] usb usb3-port1: unable to enumerate USB device [ 124.136738][ T6168] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 124.136759][ T6168] UDF-fs: Scanning with blocksize 1024 failed [ 124.213949][ T6168] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 124.216196][ T6168] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 124.739056][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 124.781061][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 124.886605][ T6179] loop3: detected capacity change from 0 to 32768 [ 124.923822][ T6179] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 125.271053][ T6179] XFS (loop3): Starting recovery (logdev: internal) [ 125.371404][ T6199] 9p: Bad value for 'rfdno' [ 125.400538][ T6179] XFS (loop3): Ending recovery (logdev: internal) [ 126.092876][ T6200] loop4: detected capacity change from 0 to 4096 [ 126.671134][ T6202] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.443807][ T5617] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 128.444187][ T5617] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 128.572728][ T5631] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 128.838607][ T6208] loop2: detected capacity change from 0 to 512 [ 128.893078][ T6208] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 128.964283][ T6208] EXT4-fs (loop2): invalid journal inode [ 128.964815][ T6208] EXT4-fs (loop2): can't get journal size [ 129.050179][ T6208] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 129.056044][ T6208] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.134894][ T6208] EXT4-fs (loop2): 1 truncate cleaned up [ 129.299737][ T6208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.890517][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.451495][ T6207] loop4: detected capacity change from 0 to 32768 [ 131.157378][ T6207] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.108 (6207) [ 131.255940][ T6218] syz.3.109 uses obsolete (PF_INET,SOCK_PACKET) [ 131.341144][ T161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.377962][ T6207] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 131.378006][ T6207] BTRFS info (device loop4): using crc32c checksum algorithm [ 131.432977][ T6211] loop2: detected capacity change from 0 to 32768 [ 131.436469][ T6211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.110 (6211) [ 131.477732][ T6211] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.477765][ T6211] BTRFS info (device loop2): using crc32c checksum algorithm [ 131.583873][ T6207] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 131.691161][ T6207] BTRFS error (device loop4): open_ctree failed: -ENOMEM [ 131.848260][ T161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.871629][ T6211] BTRFS info (device loop2): enabling ssd optimizations [ 131.871654][ T6211] BTRFS info (device loop2): turning on flush-on-commit [ 131.871674][ T6211] BTRFS info (device loop2): enabling free space tree [ 131.871690][ T6211] BTRFS info (device loop2): enabling auto defrag [ 131.871717][ T6211] BTRFS info (device loop2): use lzo compression, level 1 [ 131.871736][ T6211] BTRFS info (device loop2): max_inline set to 4096 [ 132.636201][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.636273][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.249076][ T6255] loop1: detected capacity change from 0 to 4096 [ 134.388614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 134.857175][ T6255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.877311][ T161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.048688][ T5820] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.068386][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.156743][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.162203][ T4936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.171903][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.181260][ T5820] usb 5-1: device descriptor read/64, error -71 [ 135.181943][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.186937][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.406079][ T161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.421125][ T5820] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.558658][ T5820] usb 5-1: device descriptor read/64, error -71 [ 135.653049][ T6274] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 135.670184][ T5820] usb usb5-port1: attempt power cycle [ 135.684166][ T5616] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.976736][ T6281] program syz.1.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.009588][ T5820] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.029453][ T5820] usb 5-1: device descriptor read/8, error -71 [ 136.128953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.424161][ T161] bridge_slave_1: left allmulticast mode [ 136.424198][ T161] bridge_slave_1: left promiscuous mode [ 136.425147][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.473332][ T6284] FAULT_INJECTION: forcing a failure. [ 136.473332][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 136.473360][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT(full) [ 136.473381][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.473393][ T6284] Call Trace: [ 136.473400][ T6284] [ 136.473408][ T6284] dump_stack_lvl+0xe8/0x150 [ 136.473442][ T6284] should_fail_ex+0x3eb/0x540 [ 136.473475][ T6284] should_failslab+0xa8/0x100 [ 136.473506][ T6284] __kmalloc_cache_noprof+0x9e/0x600 [ 136.473533][ T6284] ? genl_start+0x1c9/0x6d0 [ 136.473569][ T6284] ? genl_start+0x1c9/0x6d0 [ 136.473596][ T6284] genl_start+0x1c9/0x6d0 [ 136.473623][ T6284] __netlink_dump_start+0x442/0x7b0 [ 136.473657][ T6284] genl_family_rcv_msg_dumpit+0x213/0x310 [ 136.473690][ T6284] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 136.473712][ T6284] ? genl_get_cmd+0x6cc/0x960 [ 136.473734][ T6284] ? __pfx___mutex_lock+0x10/0x10 [ 136.473757][ T6284] ? __pfx_genl_start+0x10/0x10 [ 136.473775][ T6284] ? __pfx_genl_dumpit+0x10/0x10 [ 136.473794][ T6284] ? __pfx_genl_done+0x10/0x10 [ 136.473816][ T6284] ? __dev_queue_xmit+0x29b/0x3820 [ 136.473853][ T6284] genl_rcv_msg+0x5e1/0x7a0 [ 136.473880][ T6284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.473900][ T6284] ? __pfx_smc_nl_dump_ueid+0x10/0x10 [ 136.473933][ T6284] ? __asan_memcpy+0x40/0x70 [ 136.473956][ T6284] ? __skb_clone+0x5c/0x6c0 [ 136.473987][ T6284] netlink_rcv_skb+0x226/0x4a0 [ 136.474015][ T6284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.474037][ T6284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.474078][ T6284] ? down_read+0x2b9/0x320 [ 136.474106][ T6284] genl_rcv+0x28/0x40 [ 136.474124][ T6284] netlink_unicast+0x7bd/0x940 [ 136.474159][ T6284] netlink_sendmsg+0x7c3/0xae0 [ 136.474193][ T6284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.474229][ T6284] ? apparmor_socket_sendmsg+0x18b/0x360 [ 136.474261][ T6284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.474289][ T6284] sock_sendmsg_nosec+0x13a/0x180 [ 136.474322][ T6284] ____sys_sendmsg+0x54e/0x850 [ 136.474352][ T6284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.474386][ T6284] ? import_iovec+0x73/0xa0 [ 136.474410][ T6284] ___sys_sendmsg+0x2a5/0x360 [ 136.474434][ T6284] ? __lock_acquire+0x747/0x2de0 [ 136.474462][ T6284] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.474531][ T6284] ? __fget_files+0x2a/0x420 [ 136.474550][ T6284] ? __fget_files+0x3a2/0x420 [ 136.474579][ T6284] __x64_sys_sendmsg+0x1b1/0x290 [ 136.474605][ T6284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.474648][ T6284] do_syscall_64+0x166/0x520 [ 136.474668][ T6284] ? trace_irq_disable+0x3b/0x140 [ 136.474696][ T6284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.474716][ T6284] ? clear_bhb_loop+0x70/0xc0 [ 136.474739][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.474758][ T6284] RIP: 0033:0x7f245db9e159 [ 136.474775][ T6284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.474790][ T6284] RSP: 002b:00007f245e9e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.474827][ T6284] RAX: ffffffffffffffda RBX: 00007f245de25fa0 RCX: 00007f245db9e159 [ 136.474842][ T6284] RDX: 0000000020040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 136.474855][ T6284] RBP: 00007f245e9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 136.474867][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.474879][ T6284] R13: 00007f245de26038 R14: 00007f245de25fa0 R15: 00007ffc0486a4b8 [ 136.474911][ T6284] [ 136.603723][ T161] bridge_slave_0: left allmulticast mode [ 136.616097][ T161] bridge_slave_0: left promiscuous mode [ 136.616547][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.047494][ T6289] loop3: detected capacity change from 0 to 8 [ 137.061198][ T6289] SQUASHFS error: zlib decompression failed, data probably corrupt [ 137.061227][ T6289] SQUASHFS error: Failed to read block 0x9b: -5 [ 137.061241][ T6289] SQUASHFS error: Unable to read metadata cache entry [99] [ 137.061253][ T6289] SQUASHFS error: Unable to read inode 0x8 [ 137.202503][ T33] audit: type=1326 audit(1789333645.173:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 137.202741][ T33] audit: type=1326 audit(1789333645.173:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 137.266691][ T33] audit: type=1326 audit(1789333645.183:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 137.266734][ T33] audit: type=1326 audit(1789333645.233:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 137.269169][ T4936] Bluetooth: hci1: command tx timeout [ 137.277427][ T33] audit: type=1326 audit(1789333645.233:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 137.290672][ T33] audit: type=1326 audit(1789333645.243:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 137.290784][ T33] audit: type=1326 audit(1789333645.243:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 137.320678][ T33] audit: type=1326 audit(1789333645.293:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 137.443247][ T33] audit: type=1326 audit(1789333645.413:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 137.446021][ T33] audit: type=1326 audit(1789333645.413:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.1.125" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245db9e159 code=0x7ffc0000 [ 139.348693][ T4936] Bluetooth: hci1: command tx timeout [ 139.612685][ T6302] loop1: detected capacity change from 0 to 4096 [ 139.646698][ T6302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.776880][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.832404][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.865759][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.880639][ T161] bond0 (unregistering): Released all slaves [ 140.129343][ T6313] FAULT_INJECTION: forcing a failure. [ 140.129343][ T6313] name failslab, interval 1, probability 0, space 0, times 0 [ 140.129460][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.1.129 Not tainted syzkaller #0 PREEMPT(full) [ 140.129492][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.129505][ T6313] Call Trace: [ 140.129514][ T6313] [ 140.129523][ T6313] dump_stack_lvl+0xe8/0x150 [ 140.129560][ T6313] should_fail_ex+0x3eb/0x540 [ 140.129597][ T6313] should_failslab+0xa8/0x100 [ 140.129631][ T6313] ? ptlock_alloc+0x20/0x70 [ 140.129654][ T6313] kmem_cache_alloc_noprof+0x9c/0x600 [ 140.129683][ T6313] ? ptlock_alloc+0x20/0x70 [ 140.129712][ T6313] ptlock_alloc+0x20/0x70 [ 140.129734][ T6313] pte_alloc_one+0x7a/0x370 [ 140.129764][ T6313] __pte_alloc+0x25/0x1a0 [ 140.129789][ T6313] ? lockdep_hardirqs_on+0x7b/0x110 [ 140.129816][ T6313] do_pte_missing+0x2db7/0x34b0 [ 140.129866][ T6313] handle_mm_fault+0x1a53/0x3750 [ 140.129900][ T6313] ? handle_mm_fault+0xf1/0x3750 [ 140.129933][ T6313] ? __pfx_handle_mm_fault+0x10/0x10 [ 140.129954][ T6313] ? lock_vma_under_rcu+0x45a/0x500 [ 140.129976][ T6313] ? irqentry_exit+0x218/0x910 [ 140.130013][ T6313] ? do_user_addr_fault+0x21f/0x1480 [ 140.130042][ T6313] do_user_addr_fault+0xb35/0x1480 [ 140.130078][ T6313] ? trace_page_fault_user+0x84/0x1e0 [ 140.130104][ T6313] exc_page_fault+0x6a/0xc0 [ 140.130128][ T6313] asm_exc_page_fault+0x26/0x30 [ 140.130149][ T6313] RIP: 0033:0x7f245da5524e [ 140.130169][ T6313] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 140.130187][ T6313] RSP: 002b:00007f245e9c1470 EFLAGS: 00010246 [ 140.130208][ T6313] RAX: 0000000000000001 RBX: 00007f245e9c1530 RCX: 0000000000000101 [ 140.130223][ T6313] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 00007f245e9c15d0 [ 140.130237][ T6313] RBP: 0000000000000102 R08: 00007f2453800000 R09: 0000000000000000 [ 140.130251][ T6313] R10: 0000000000000000 R11: 00007f245e9c1540 R12: 0000000000000001 [ 140.130265][ T6313] R13: 00007f245dc55040 R14: 0000000000000000 R15: 00007f245e9c15d0 [ 140.130299][ T6313] [ 140.130760][ T6313] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 140.263419][ T6313] loop1: detected capacity change from 0 to 512 [ 140.425095][ T6313] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 140.608721][ T6313] EXT4-fs (loop1): invalid journal inode [ 140.609809][ T6313] EXT4-fs (loop1): can't get journal size [ 140.673687][ T6313] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 140.679211][ T6313] EXT4-fs (loop1): orphan cleanup on readonly fs [ 140.720993][ T6313] EXT4-fs (loop1): 1 truncate cleaned up [ 140.800232][ T6313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.323039][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.429966][ T4936] Bluetooth: hci1: command tx timeout [ 141.776833][ T6328] CUSE: info not properly terminated [ 141.858804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 141.878767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 141.898763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 142.000904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 142.698796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 142.903710][ T6340] loop2: detected capacity change from 0 to 512 [ 142.962879][ T6340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.962962][ T6340] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.035780][ T6340] 9p: Bad value for 'rfdno' [ 143.180975][ T6340] __quota_error: 52 callbacks suppressed [ 143.180993][ T6340] Quota error (device loop2): do_check_range: Getting block 773 out of range 1-5 [ 143.181072][ T6340] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 143.181090][ T6340] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.137: Failed to acquire dquot type 1 [ 143.510350][ T4936] Bluetooth: hci1: command tx timeout [ 143.554852][ T6354] loop3: detected capacity change from 0 to 4096 [ 143.602979][ T6354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.801436][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.832435][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.864454][ T161] hsr_slave_0: left promiscuous mode [ 143.880360][ T161] hsr_slave_1: left promiscuous mode [ 143.884375][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.884412][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.923637][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.923657][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.101100][ T6361] loop1: detected capacity change from 0 to 2048 [ 144.190065][ T161] veth1_macvtap: left promiscuous mode [ 144.190687][ T161] veth0_macvtap: left promiscuous mode [ 144.191720][ T161] veth1_vlan: left promiscuous mode [ 144.193045][ T161] veth0_vlan: left promiscuous mode [ 144.269791][ T6361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.122708][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.539228][ T6385] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 145.828457][ T6372] loop3: detected capacity change from 0 to 32768 [ 145.858157][ T6372] (syz.3.140,6372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.861510][ T6372] (syz.3.140,6372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 145.928125][ T6372] JBD2: Ignoring recovery information on journal [ 146.063092][ T6372] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.248170][ T161] team0 (unregistering): Port device team_slave_1 removed [ 146.334403][ T161] team0 (unregistering): Port device team_slave_0 removed [ 146.962118][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 146.965975][ T6385] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 147.228258][ T5631] ocfs2: Unmounting device (7,3) on (node local) [ 147.505758][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 148.691823][ T6421] loop2: detected capacity change from 0 to 4096 [ 148.733373][ T6421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.865955][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.912551][ T6424] loop0: p1 [ 148.912918][ T6424] loop0: p1 size 196608 extends beyond EOD, truncated [ 149.119494][ T4986] loop0: p1 [ 149.119696][ T4986] loop0: p1 size 196608 extends beyond EOD, truncated [ 149.323404][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.323502][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.323622][ T6262] bridge_slave_0: entered allmulticast mode [ 149.385714][ T6262] bridge_slave_0: entered promiscuous mode [ 149.412694][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.412789][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.412907][ T6262] bridge_slave_1: entered allmulticast mode [ 149.428460][ T6442] loop0: detected capacity change from 128 to 127 [ 149.456609][ T6262] bridge_slave_1: entered promiscuous mode [ 150.327292][ T6454] overlayfs: conflicting lowerdir path [ 151.895920][ T6262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.926772][ T6262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.061473][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 152.227647][ T6469] loop2: detected capacity change from 0 to 4096 [ 152.344377][ T6469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.460345][ T6262] team0: Port device team_slave_0 added [ 152.462931][ T6262] team0: Port device team_slave_1 added [ 152.522209][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.522227][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.522254][ T6262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.540117][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.540157][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.541260][ T6262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.675644][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.682088][ T6473] loop4: detected capacity change from 0 to 512 [ 152.815783][ T6473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.955862][ T6262] hsr_slave_0: entered promiscuous mode [ 152.966378][ T6262] hsr_slave_1: entered promiscuous mode [ 152.968070][ T6262] debugfs: 'hsr0' already exists in 'hsr' [ 152.968088][ T6262] Cannot create hsr debugfs directory [ 153.300923][ T6473] EXT4-fs error (device loop4): __ext4_find_entry:1628: inode #12: comm syz.4.162: checksumming directory block 0 [ 153.582995][ T6473] EXT4-fs error (device loop4): ext4_get_first_dir_block:3539: inode #12: comm syz.4.162: Directory block failed checksum [ 154.101081][ T5625] EXT4-fs error (device loop4): ext4_readdir:226: inode #12: comm syz-executor: path /27/file0/file0: directory fails checksum at offset 0 [ 154.126868][ T5625] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory block failed checksum [ 154.138008][ T5625] EXT4-fs error (device loop4): ext4_readdir:226: inode #12: comm syz-executor: path /27/file0/file0: directory fails checksum at offset 0 [ 154.144608][ T5625] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory block failed checksum [ 154.162828][ T5625] EXT4-fs error (device loop4): ext4_readdir:226: inode #12: comm syz-executor: path /27/file0/file0: directory fails checksum at offset 0 [ 154.169393][ T5625] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory block failed checksum [ 154.172714][ T5625] EXT4-fs error (device loop4): ext4_readdir:226: inode #12: comm syz-executor: path /27/file0/file0: directory fails checksum at offset 0 [ 154.185147][ T5625] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory block failed checksum [ 154.282959][ T6466] loop1: detected capacity change from 0 to 32768 [ 154.299628][ T6466] ocfs2: Bad value for 'resv_level' [ 154.333159][ T6495] loop2: detected capacity change from 0 to 256 [ 154.398994][ T6495] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 154.458254][ T6493] exFAT-fs (loop2): valid_size(150994954) is greater than size(10) [ 154.470843][ T33] audit: type=1800 audit(1789333662.443:73): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.164" name="file1" dev="loop2" ino=1048632 res=0 errno=0 [ 154.789734][ T6262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.809163][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.815746][ T6262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.857098][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.870139][ T6262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.956268][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.957024][ T6262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.996372][ T6262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.100898][ T6506] loop3: detected capacity change from 0 to 512 [ 155.140253][ T5744] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.213693][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.213790][ T6506] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.303265][ T33] audit: type=1800 audit(1789333663.273:74): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.157" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 155.339456][ T5744] usb 2-1: Using ep0 maxpacket: 32 [ 155.340290][ T5744] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 155.343308][ T5744] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.377750][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.377772][ T5744] usb 2-1: Product: syz [ 155.377786][ T5744] usb 2-1: Manufacturer: syz [ 155.377800][ T5744] usb 2-1: SerialNumber: syz [ 155.489364][ T5744] usb 2-1: config 0 descriptor?? [ 155.615677][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.759981][ T5820] usb 2-1: USB disconnect, device number 7 [ 155.807069][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 155.905573][ T6262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.924983][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.026629][ T6262] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.065230][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.065332][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.324519][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.408287][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.408380][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.626092][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.822003][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.043461][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.444288][ T6537] loop2: detected capacity change from 0 to 4096 [ 157.526696][ T6537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.791282][ T6540] loop0: detected capacity change from 127 to 128 [ 157.881275][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.894353][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.911717][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.913447][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.916473][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.917538][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.990520][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 158.521619][ T13] bridge_slave_1: left allmulticast mode [ 158.521982][ T13] bridge_slave_1: left promiscuous mode [ 158.525183][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.570632][ T13] bridge_slave_0: left allmulticast mode [ 158.571020][ T13] bridge_slave_0: left promiscuous mode [ 158.571961][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.077407][ T6564] loop2: detected capacity change from 0 to 512 [ 159.143216][ T6564] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 159.159908][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 159.159965][ C0] EXT4-fs (loop2): initial error at time 1789333667: mb_free_blocks:2049: inode 11: block 64 [ 159.160059][ C0] EXT4-fs (loop2): last error at time 1789333667: mb_free_blocks:2049: inode 11: block 64 [ 159.232097][ T6564] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.179: corrupted inode contents [ 159.232125][ T6564] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.241976][ T6564] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #11: comm syz.2.179: mark_inode_dirty error [ 159.242096][ T6564] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.247686][ T6564] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.179: invalid indirect mapped block 1 (level 1) [ 159.247771][ T6564] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.255613][ T6564] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.179: corrupted inode contents [ 159.255687][ T6564] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.267373][ T6556] loop3: detected capacity change from 0 to 32768 [ 159.349626][ T6564] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 159.349652][ T6564] loop2: lost filesystem error report for type 5 error -117 [ 159.359738][ T6564] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #11: comm syz.2.179: corrupted inode contents [ 159.359811][ T6564] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.383651][ T6564] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.179: mark_inode_dirty error [ 159.383717][ T6564] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.393255][ T6564] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 159.393312][ T6564] loop2: lost filesystem error report for type 5 error -117 [ 159.398165][ T6564] EXT4-fs (loop2): 1 truncate cleaned up [ 159.472125][ T6556] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 159.507879][ T6564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.574913][ T6564] EXT4-fs error (device loop2): ext4_readdir:270: inode #2: block 13: comm syz.2.179: path /40/file0: bad entry in directory: directory entry too close to block end - offset=1016, size=1024 [ 159.795371][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.988998][ T4936] Bluetooth: hci2: command tx timeout [ 160.799762][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.829695][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.834314][ T13] bond0 (unregistering): Released all slaves [ 161.051461][ T6580] loop2: detected capacity change from 0 to 256 [ 161.832288][ T13] tipc: Left network mode [ 162.068769][ T4936] Bluetooth: hci2: command tx timeout [ 164.146410][ T5631] ocfs2: Unmounting device (7,3) on (node local) [ 164.155622][ T4936] Bluetooth: hci2: command tx timeout [ 164.728395][ T6594] loop2: detected capacity change from 0 to 512 [ 164.921368][ T13] hsr_slave_0: left promiscuous mode [ 164.958702][ T13] hsr_slave_1: left promiscuous mode [ 164.959535][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.959556][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.991056][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.991076][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.078498][ T13] veth1_macvtap: left promiscuous mode [ 165.078536][ T13] veth0_macvtap: left promiscuous mode [ 165.143638][ T13] veth1_vlan: left promiscuous mode [ 165.143721][ T13] veth0_vlan: left promiscuous mode [ 165.190016][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 165.965174][ T13] team0 (unregistering): Port device team_slave_1 removed [ 166.016161][ T13] team0 (unregistering): Port device team_slave_0 removed [ 166.105774][ T6627] 9p: Bad value for 'wfdno' [ 167.147044][ T4936] Bluetooth: hci2: command tx timeout [ 167.441544][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 167.714425][ T6262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.936661][ T6657] loop3: detected capacity change from 0 to 256 [ 169.261147][ T6658] loop1: detected capacity change from 0 to 4096 [ 169.565183][ T6658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.038712][ T33] audit: type=1800 audit(1789333678.923:75): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.194" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 171.419796][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.420034][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.420175][ T6544] bridge_slave_0: entered allmulticast mode [ 171.421948][ T6544] bridge_slave_0: entered promiscuous mode [ 171.430505][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.430754][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.431014][ T6544] bridge_slave_1: entered allmulticast mode [ 171.434963][ T6544] bridge_slave_1: entered promiscuous mode [ 171.506317][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.555743][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.682095][ T6262] veth0_vlan: entered promiscuous mode [ 171.785150][ T6544] team0: Port device team_slave_0 added [ 171.809006][ T6544] team0: Port device team_slave_1 added [ 171.874881][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.068187][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.068204][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.068229][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.080600][ T6262] veth1_vlan: entered promiscuous mode [ 172.101373][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.101401][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.101460][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.265169][ T6675] FAULT_INJECTION: forcing a failure. [ 172.265169][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 172.265198][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.1.196 Not tainted syzkaller #0 PREEMPT(full) [ 172.265219][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.265230][ T6675] Call Trace: [ 172.265238][ T6675] [ 172.265246][ T6675] dump_stack_lvl+0xe8/0x150 [ 172.265281][ T6675] should_fail_ex+0x3eb/0x540 [ 172.265313][ T6675] ? __alloc_skb+0x1db/0x7a0 [ 172.265334][ T6675] should_failslab+0xa8/0x100 [ 172.265382][ T6675] ? __alloc_skb+0x1db/0x7a0 [ 172.265402][ T6675] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 172.265427][ T6675] ? __alloc_skb+0x18d/0x7a0 [ 172.265448][ T6675] ? __alloc_skb+0x1db/0x7a0 [ 172.265477][ T6675] __alloc_skb+0x1db/0x7a0 [ 172.265503][ T6675] netlink_dump+0x1e7/0xee0 [ 172.265543][ T6675] ? __pfx_netlink_dump+0x10/0x10 [ 172.265583][ T6675] ? genl_start+0x497/0x6d0 [ 172.265619][ T6675] __netlink_dump_start+0x589/0x7b0 [ 172.265653][ T6675] genl_family_rcv_msg_dumpit+0x213/0x310 [ 172.265680][ T6675] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 172.265702][ T6675] ? genl_get_cmd+0x6cc/0x960 [ 172.265724][ T6675] ? __pfx___mutex_lock+0x10/0x10 [ 172.265748][ T6675] ? __pfx_genl_start+0x10/0x10 [ 172.265767][ T6675] ? __pfx_genl_dumpit+0x10/0x10 [ 172.265786][ T6675] ? __pfx_genl_done+0x10/0x10 [ 172.265809][ T6675] ? __dev_queue_xmit+0x29b/0x3820 [ 172.265848][ T6675] genl_rcv_msg+0x5e1/0x7a0 [ 172.265876][ T6675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.265897][ T6675] ? __pfx_smc_nl_dump_ueid+0x10/0x10 [ 172.265931][ T6675] ? __asan_memcpy+0x40/0x70 [ 172.265954][ T6675] ? __skb_clone+0x5c/0x6c0 [ 172.265986][ T6675] netlink_rcv_skb+0x226/0x4a0 [ 172.266015][ T6675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.266038][ T6675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.266082][ T6675] ? down_read+0x2b9/0x320 [ 172.266113][ T6675] genl_rcv+0x28/0x40 [ 172.266132][ T6675] netlink_unicast+0x7bd/0x940 [ 172.266169][ T6675] netlink_sendmsg+0x7c3/0xae0 [ 172.266214][ T6675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.266249][ T6675] ? apparmor_socket_sendmsg+0x18b/0x360 [ 172.266280][ T6675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.266306][ T6675] sock_sendmsg_nosec+0x13a/0x180 [ 172.266338][ T6675] ____sys_sendmsg+0x54e/0x850 [ 172.266367][ T6675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.266400][ T6675] ? import_iovec+0x73/0xa0 [ 172.266423][ T6675] ___sys_sendmsg+0x2a5/0x360 [ 172.266446][ T6675] ? __lock_acquire+0x747/0x2de0 [ 172.266472][ T6675] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.266531][ T6675] ? __fget_files+0x2a/0x420 [ 172.266551][ T6675] ? __fget_files+0x3a2/0x420 [ 172.266582][ T6675] __x64_sys_sendmsg+0x1b1/0x290 [ 172.266614][ T6675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.266660][ T6675] do_syscall_64+0x166/0x520 [ 172.266679][ T6675] ? trace_irq_disable+0x3b/0x140 [ 172.266701][ T6675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.266721][ T6675] ? clear_bhb_loop+0x70/0xc0 [ 172.266745][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.266764][ T6675] RIP: 0033:0x7f245db9e159 [ 172.266782][ T6675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.266798][ T6675] RSP: 002b:00007f245e9e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.266819][ T6675] RAX: ffffffffffffffda RBX: 00007f245de25fa0 RCX: 00007f245db9e159 [ 172.266833][ T6675] RDX: 0000000020040000 RSI: 0000200000000180 RDI: 0000000000000003 [ 172.266846][ T6675] RBP: 00007f245e9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 172.266858][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.266869][ T6675] R13: 00007f245de26038 R14: 00007f245de25fa0 R15: 00007ffc0486a4b8 [ 172.266900][ T6675] [ 172.760798][ T6544] hsr_slave_0: entered promiscuous mode [ 172.763497][ T6544] hsr_slave_1: entered promiscuous mode [ 172.765893][ T6544] debugfs: 'hsr0' already exists in 'hsr' [ 172.765913][ T6544] Cannot create hsr debugfs directory [ 172.815737][ T6683] program syz.1.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.383219][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 174.628292][ T6262] veth0_macvtap: entered promiscuous mode [ 174.680879][ T6262] veth1_macvtap: entered promiscuous mode [ 174.867971][ T6262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.896328][ T6262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.943797][ T1009] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.041954][ T6707] loop3: detected capacity change from 0 to 256 [ 175.388730][ T139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.426212][ T139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.446503][ T1009] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.573292][ T6712] loop1: detected capacity change from 0 to 4096 [ 176.727041][ T6712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.505057][ T6544] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 178.566968][ T6544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.567739][ T6544] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 178.609049][ T6544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.617042][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.617059][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.657617][ T6544] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 178.685713][ T6544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.689574][ T6544] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.713640][ T6544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.922859][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.153336][ T6730] program syz.3.206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.194288][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.194303][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.514826][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 179.632630][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.717974][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.791545][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.791645][ T5865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.887322][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.887415][ T5865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.001955][ T6544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.365202][ T6767] FAULT_INJECTION: forcing a failure. [ 180.365202][ T6767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.365232][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.5.211 Not tainted syzkaller #0 PREEMPT(full) [ 180.365256][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.365267][ T6767] Call Trace: [ 180.365274][ T6767] [ 180.365282][ T6767] dump_stack_lvl+0xe8/0x150 [ 180.365314][ T6767] should_fail_ex+0x3eb/0x540 [ 180.365344][ T6767] prepare_alloc_pages+0x21e/0x5f0 [ 180.365376][ T6767] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 180.365405][ T6767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 180.365447][ T6767] alloc_pages_mpol+0x21e/0x390 [ 180.365482][ T6767] alloc_pages_noprof+0xb1/0x2b0 [ 180.365512][ T6767] pte_alloc_one+0x22/0x370 [ 180.365537][ T6767] __pte_alloc+0x25/0x1a0 [ 180.365564][ T6767] do_pte_missing+0x2db7/0x34b0 [ 180.365586][ T6767] ? __lock_acquire+0x747/0x2de0 [ 180.365623][ T6767] handle_mm_fault+0x1a53/0x3750 [ 180.365652][ T6767] ? handle_mm_fault+0xf1/0x3750 [ 180.365681][ T6767] ? __pfx_handle_mm_fault+0x10/0x10 [ 180.365698][ T6767] ? lock_vma_under_rcu+0x45a/0x500 [ 180.365741][ T6767] do_user_addr_fault+0xb35/0x1480 [ 180.365771][ T6767] ? trace_page_fault_user+0x84/0x1e0 [ 180.365793][ T6767] exc_page_fault+0x6a/0xc0 [ 180.365813][ T6767] asm_exc_page_fault+0x26/0x30 [ 180.365831][ T6767] RIP: 0033:0x7f89cf65524e [ 180.365848][ T6767] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 180.365864][ T6767] RSP: 002b:00007f89d06f1470 EFLAGS: 00010246 [ 180.365881][ T6767] RAX: 0000000000000001 RBX: 00007f89d06f1530 RCX: 0000000000000101 [ 180.365901][ T6767] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 00007f89d06f15d0 [ 180.365913][ T6767] RBP: 0000000000000102 R08: 00007f89c5400000 R09: 0000000000000000 [ 180.365925][ T6767] R10: 0000000000000000 R11: 00007f89d06f1540 R12: 0000000000000001 [ 180.365936][ T6767] R13: 00007f89cf855040 R14: 0000000000000000 R15: 00007f89d06f15d0 [ 180.365965][ T6767] [ 180.367072][ T6767] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 180.674151][ T6767] loop5: detected capacity change from 0 to 512 [ 180.838681][ T5742] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 180.906426][ T6767] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 181.167510][ T6767] EXT4-fs (loop5): invalid journal inode [ 181.168480][ T6767] EXT4-fs (loop5): can't get journal size [ 181.264172][ T6767] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 181.268820][ T6767] EXT4-fs (loop5): orphan cleanup on readonly fs [ 181.452477][ T6767] EXT4-fs (loop5): 1 truncate cleaned up [ 181.494939][ T6767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.579115][ T5742] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=f6.20 [ 181.737144][ T5742] usb 3-1: config 128 has an invalid interface number: 48 but max is 2 [ 181.737174][ T5742] usb 3-1: config 128 has an invalid interface number: 92 but max is 2 [ 181.737191][ T5742] usb 3-1: config 128 has no interface number 0 [ 181.737204][ T5742] usb 3-1: config 128 has no interface number 2 [ 181.737256][ T5742] usb 3-1: config 128 interface 48 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 181.737280][ T5742] usb 3-1: config 128 interface 48 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 181.737305][ T5742] usb 3-1: config 128 interface 48 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 181.737323][ T5742] usb 3-1: config 128 interface 48 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 181.737343][ T5742] usb 3-1: config 128 interface 48 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 181.737382][ T5742] usb 3-1: config 128 interface 1 altsetting 21 has a duplicate endpoint with address 0x1, skipping [ 181.737416][ T5742] usb 3-1: config 128 interface 1 altsetting 21 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 181.737443][ T5742] usb 3-1: config 128 interface 1 altsetting 21 has a duplicate endpoint with address 0x8, skipping [ 181.737463][ T5742] usb 3-1: config 128 interface 1 altsetting 21 has a duplicate endpoint with address 0x1, skipping [ 181.737484][ T5742] usb 3-1: config 128 interface 1 altsetting 21 has a duplicate endpoint with address 0xB, skipping [ 181.737504][ T5742] usb 3-1: config 128 interface 1 altsetting 21 has a duplicate endpoint with address 0x5, skipping [ 181.737524][ T5742] usb 3-1: config 128 interface 1 altsetting 21 has a duplicate endpoint with address 0xA, skipping [ 181.737543][ T5742] usb 3-1: config 128 interface 1 altsetting 21 has a duplicate endpoint with address 0x6, skipping [ 181.737563][ T5742] usb 3-1: config 128 interface 1 altsetting 21 has an invalid descriptor for endpoint zero, skipping [ 181.737591][ T5742] usb 3-1: config 128 interface 92 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 181.737610][ T5742] usb 3-1: config 128 interface 48 has no altsetting 0 [ 181.737626][ T5742] usb 3-1: config 128 interface 1 has no altsetting 0 [ 181.737642][ T5742] usb 3-1: config 128 interface 92 has no altsetting 0 [ 182.080233][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.080303][ T5742] usb 3-1: Product: ч [ 182.080346][ T5742] usb 3-1: Manufacturer: ś [ 182.080387][ T5742] usb 3-1: SerialNumber: 、 [ 182.173746][ T6760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.450039][ T6772] loop3: detected capacity change from 0 to 256 [ 183.265345][ T6262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.448117][ T5742] dvb-usb: found a 'Pinnacle PCTV HD USB Stick' in cold state, will try to load a firmware [ 185.332524][ T5742] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 185.332652][ T5742] dib0700: firmware download failed at 7 with -22 [ 185.413893][ T5742] dvb-usb: found a 'Pinnacle PCTV HD USB Stick' in cold state, will try to load a firmware [ 185.432212][ T5742] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 185.432313][ T5742] dib0700: firmware download failed at 7 with -22 [ 185.500282][ T5742] dvb-usb: found a 'Pinnacle PCTV HD USB Stick' in cold state, will try to load a firmware [ 185.505024][ T5742] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 185.505113][ T5742] dib0700: firmware download failed at 7 with -22 [ 185.559142][ T5742] usb 3-1: USB disconnect, device number 9 [ 186.754054][ T6803] Bluetooth: MGMT ver 1.23 [ 186.754091][ T6803] Bluetooth: hci0: unsupported parameter 5161 [ 186.754104][ T6803] Bluetooth: hci0: unsupported parameter 8192 [ 186.754119][ T6803] Bluetooth: hci0: unsupported parameter 5161 [ 186.754131][ T6803] Bluetooth: hci0: unsupported parameter 8192 [ 186.755438][ T5742] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 186.901239][ T5742] usb 4-1: Using ep0 maxpacket: 32 [ 186.901964][ T5742] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 186.904205][ T5742] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 186.904226][ T5742] usb 4-1: config 0 has no interface number 0 [ 186.904261][ T5742] usb 4-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.904285][ T5742] usb 4-1: config 0 interface 196 has no altsetting 0 [ 186.906372][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.906394][ T5742] usb 4-1: Product: syz [ 186.906408][ T5742] usb 4-1: Manufacturer: syz [ 186.906423][ T5742] usb 4-1: SerialNumber: syz [ 186.990317][ T5742] usb 4-1: config 0 descriptor?? [ 187.205141][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.257858][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.312635][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.342371][ T5742] ipheth 4-1:0.196: Unable to find endpoints [ 187.368126][ T5742] usb 4-1: USB disconnect, device number 3 [ 187.507419][ T6818] loop2: detected capacity change from 0 to 512 [ 187.534096][ T6818] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 187.561704][ T6818] EXT4-fs (loop2): invalid journal inode [ 187.562008][ T6818] EXT4-fs (loop2): can't get journal size [ 187.630184][ T6818] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 187.631083][ T6818] EXT4-fs (loop2): orphan cleanup on readonly fs [ 187.671060][ T6818] EXT4-fs (loop2): 1 truncate cleaned up [ 187.737702][ T6818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.365561][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.685327][ T6824] loop2: detected capacity change from 0 to 1024 [ 188.823624][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 188.838234][ T6824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.842054][ T6828] loop3: detected capacity change from 0 to 256 [ 188.842772][ T6828] msdos: Bad value for 'dmask' [ 188.985751][ T6824] overlayfs: missing 'lowerdir' [ 189.479251][ T6841] netlink: 112 bytes leftover after parsing attributes in process `syz.2.224'. [ 190.242886][ T6852] loop5: detected capacity change from 0 to 256 [ 193.288509][ T6854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.230'. [ 193.388047][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.413934][ T6544] veth0_vlan: entered promiscuous mode [ 193.464183][ T6544] veth1_vlan: entered promiscuous mode [ 193.637108][ T6544] veth0_macvtap: entered promiscuous mode [ 193.686257][ T6544] veth1_macvtap: entered promiscuous mode [ 193.794121][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.842657][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.071702][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.072639][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.094441][ T5915] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.202199][ T161] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.202533][ T161] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.202568][ T161] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.636706][ T6878] loop1: detected capacity change from 0 to 512 [ 194.688713][ T6878] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 194.702903][ T6878] EXT4-fs (loop1): invalid journal inode [ 194.703731][ T6878] EXT4-fs (loop1): can't get journal size [ 194.803491][ T6878] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 194.805802][ T6878] EXT4-fs (loop1): orphan cleanup on readonly fs [ 194.889392][ T6878] EXT4-fs (loop1): 1 truncate cleaned up [ 194.943847][ T6878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.105952][ T6877] loop3: detected capacity change from 0 to 256 [ 195.106602][ T6877] msdos: Bad value for 'dmask' [ 195.456470][ T5914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.456494][ T5914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.754522][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.754544][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.994514][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.424817][ T6900] loop1: detected capacity change from 0 to 256 [ 199.760468][ T6919] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 199.820296][ T6921] loop5: detected capacity change from 0 to 256 [ 199.942377][ T6921] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 200.019410][ T6919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.027921][ T6921] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 200.055658][ T6922] bond1: (slave gretap1): making interface the new active one [ 200.057244][ T6922] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 200.727412][ T6936] loop5: detected capacity change from 0 to 512 [ 200.728651][ T6936] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 200.746028][ T6936] EXT4-fs (loop5): invalid journal inode [ 200.746414][ T6936] EXT4-fs (loop5): can't get journal size [ 200.761408][ T6936] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 200.761652][ T6936] EXT4-fs (loop5): orphan cleanup on readonly fs [ 200.793139][ T6936] EXT4-fs (loop5): 1 truncate cleaned up [ 200.795600][ T6936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.101463][ T6262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.284328][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 201.284362][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 201.284381][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 202.220576][ T6949] loop1: detected capacity change from 0 to 131072 [ 202.221459][ T6949] xfs: Deprecated parameter 'ikeep' [ 202.221472][ T6949] XFS: ikeep mount option is deprecated. [ 202.268153][ T6949] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 202.311837][ T6943] loop5: detected capacity change from 0 to 256 [ 202.312416][ T6943] msdos: Bad value for 'dmask' [ 202.318156][ T6943] binder: BINDER_SET_CONTEXT_MGR already set [ 202.318167][ T6943] binder: 6942:6943 ioctl 4018620d 200000004a80 returned -16 [ 202.379153][ T6955] program syz.3.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.631510][ T6949] XFS (loop1): Starting recovery (logdev: internal) [ 202.719297][ T6949] XFS (loop1): Ending recovery (logdev: internal) [ 202.835757][ T6965] 9p: Bad value for 'rfdno' [ 203.501759][ T6968] loop3: detected capacity change from 0 to 4096 [ 203.882051][ T6971] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.517947][ T6972] loop2: detected capacity change from 0 to 256 [ 206.523799][ T5628] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 206.614025][ T6976] loop5: detected capacity change from 0 to 512 [ 206.791120][ T6976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.791212][ T6976] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.825299][ T6980] loop3: detected capacity change from 0 to 256 [ 206.874497][ T6980] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 206.908855][ T33] audit: type=1800 audit(1789333714.883:76): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.255" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 206.921597][ T6980] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 206.921652][ T6980] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 206.921685][ T6980] UDF-fs: Scanning with blocksize 512 failed [ 207.035101][ T6980] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 207.131568][ T6980] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 207.245046][ T6987] netlink: 'syz.1.257': attribute type 4 has an invalid length. [ 207.495987][ T6262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.060259][ T7004] program syz.6.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.261945][ T7009] program syz.1.263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.495311][ T7011] loop6: detected capacity change from 0 to 256 [ 208.495994][ T7011] msdos: Bad value for 'dmask' [ 208.676590][ T6986] loop2: detected capacity change from 0 to 32768 [ 208.688240][ T6986] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.258 (6986) [ 208.735011][ T6986] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.735041][ T6986] BTRFS info (device loop2): using crc32c checksum algorithm [ 208.923890][ T6997] loop3: detected capacity change from 0 to 32768 [ 208.940785][ T6986] BTRFS info (device loop2): enabling ssd optimizations [ 208.940810][ T6986] BTRFS info (device loop2): turning on flush-on-commit [ 208.940827][ T6986] BTRFS info (device loop2): enabling free space tree [ 208.940844][ T6986] BTRFS info (device loop2): enabling auto defrag [ 208.940862][ T6986] BTRFS info (device loop2): use lzo compression, level 1 [ 208.940882][ T6986] BTRFS info (device loop2): max_inline set to 4096 [ 209.012261][ T6997] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 1b738bf8-ba72-4bc1-b754-9be50d319dc9 [ 209.012315][ T6997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.260 (6997) [ 209.056228][ T6997] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.056259][ T6997] BTRFS info (device loop3): using crc32c checksum algorithm [ 209.174173][ T7038] loop5: detected capacity change from 0 to 256 [ 211.084398][ T6997] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 211.297326][ T6997] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 211.483234][ T6997] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 211.485276][ T6997] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 211.590641][ T6997] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 211.649196][ T6997] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 211.973236][ T6997] BTRFS error (device loop3): open_ctree failed: -ENOMEM [ 212.169152][ T5616] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.399669][ T7055] loop0: detected capacity change from 128 to 127 [ 213.306827][ T7073] program syz.2.275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.375136][ T7066] tipc: Started in network mode [ 213.375166][ T7066] tipc: Node identity e0000001, cluster identity 4711 [ 213.375214][ T7066] tipc: Enabling of bearer rejected, failed to enable media [ 213.920837][ T7079] loop2: detected capacity change from 0 to 256 [ 213.921650][ T7079] msdos: Bad value for 'dmask' [ 213.946905][ T7085] 9p: Bad value for 'rfdno' [ 214.033997][ T7085] loop5: detected capacity change from 0 to 4096 [ 214.091939][ T7088] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.475175][ T7056] loop6: detected capacity change from 0 to 32768 [ 215.466407][ T7056] JBD2: journal reset failed [ 215.466422][ T7056] (syz.6.269,7056,1):ocfs2_journal_load:1165 ERROR: Failed to load journal! [ 215.466443][ T7056] (syz.6.269,7056,1):ocfs2_check_volume:2394 ERROR: ocfs2 journal load failed! -4 [ 215.845904][ T7107] loop1: detected capacity change from 0 to 512 [ 215.950067][ T7094] loop5: detected capacity change from 0 to 32768 [ 215.988465][ T7094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.281 (7094) [ 216.021069][ T7094] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.021098][ T7094] BTRFS info (device loop5): using crc32c checksum algorithm [ 216.114769][ T7107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.117259][ T7107] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.176855][ T7094] BTRFS info (device loop5): enabling ssd optimizations [ 216.176885][ T7094] BTRFS info (device loop5): turning on flush-on-commit [ 216.176901][ T7094] BTRFS info (device loop5): enabling free space tree [ 216.176934][ T7094] BTRFS info (device loop5): enabling auto defrag [ 216.176951][ T7094] BTRFS info (device loop5): use lzo compression, level 1 [ 216.176971][ T7094] BTRFS info (device loop5): max_inline set to 4096 [ 216.244883][ T33] audit: type=1800 audit(1789333724.213:77): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.282" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 216.646447][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.738231][ T7131] syzkaller0: entered promiscuous mode [ 216.738253][ T7131] syzkaller0: entered allmulticast mode [ 216.784126][ T7131] tipc: Started in network mode [ 216.784155][ T7131] tipc: Node identity 2a79d3009c36, cluster identity 4711 [ 216.788461][ T7131] tipc: Enabled bearer , priority 0 [ 217.185475][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 217.185503][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 217.278333][ T6262] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.321153][ T7130] tipc: Resetting bearer [ 217.574678][ T7130] tipc: Disabling bearer [ 217.838900][ T7151] netlink: 44 bytes leftover after parsing attributes in process `syz.1.288'. [ 217.839039][ T7151] netlink: 44 bytes leftover after parsing attributes in process `syz.1.288'. [ 217.839133][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 218.656149][ T7126] loop6: detected capacity change from 0 to 32768 [ 218.678103][ T7126] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.285 (7126) [ 218.841669][ T7126] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.841711][ T7126] BTRFS info (device loop6): using sha256 checksum algorithm [ 218.955898][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 218.956194][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 218.956409][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 218.956640][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 218.956874][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 218.957100][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 218.959040][ T7160] loop3: detected capacity change from 0 to 256 [ 219.049178][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 219.050113][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 219.050475][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 219.050890][ T7126] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 219.059179][ T7161] netlink: 44 bytes leftover after parsing attributes in process `syz.1.291'. [ 219.127163][ T7160] FAT-fs (loop3): bogus logical sector size 2302 [ 219.127184][ T7160] FAT-fs (loop3): Can't find a valid FAT filesystem [ 219.128139][ T7126] BTRFS error (device loop6): open_ctree failed: -ENOMEM [ 219.164569][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.166458][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.171548][ T7175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.291'. [ 219.527919][ T7160] fuse: Bad value for 'user_id' [ 219.527941][ T7160] fuse: Bad value for 'user_id' [ 219.664715][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 220.424091][ T7148] loop5: detected capacity change from 0 to 32768 [ 220.477845][ T7148] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.621144][ T7148] XFS (loop5): Ending clean mount [ 220.867142][ T6262] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.937434][ T7211] loop2: detected capacity change from 0 to 164 [ 221.050662][ T7211] Unable to read rock-ridge attributes [ 221.310281][ T7213] loop6: detected capacity change from 0 to 512 [ 221.378512][ T7213] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 221.380843][ T7213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 221.381124][ T7213] EXT4-fs (loop6): orphan cleanup on readonly fs [ 221.492735][ T7213] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.299: bg 0: block 15: invalid block bitmap [ 221.492767][ T7213] loop6: lost filesystem error report for type 5 error -117 [ 221.498606][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 221.498625][ C0] EXT4-fs (loop6): initial error at time 1789333729: ext4_validate_block_bitmap:436 [ 221.498649][ C0] EXT4-fs (loop6): last error at time 1789333729: ext4_validate_block_bitmap:436 [ 221.507370][ T7213] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 221.507390][ T7213] loop6: lost filesystem error report for type 5 error -117 [ 221.507980][ T7213] EXT4-fs (loop6): 1 truncate cleaned up [ 221.510145][ T7213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 221.802625][ T7213] EXT4-fs (loop6): shut down requested (2) [ 222.051745][ T7189] loop1: detected capacity change from 0 to 32768 [ 222.474948][ T6544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.663134][ T7189] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 222.773579][ T7199] loop3: detected capacity change from 0 to 32768 [ 222.846456][ T7199] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.298 (7199) [ 222.928101][ T7199] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.928132][ T7199] BTRFS info (device loop3): using crc32c checksum algorithm [ 223.164219][ T7242] loop5: detected capacity change from 0 to 512 [ 223.202051][ T7242] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 223.222278][ T7242] EXT4-fs (loop5): invalid journal inode [ 223.222591][ T7242] EXT4-fs (loop5): can't get journal size [ 223.304640][ T7242] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 223.317262][ T7242] EXT4-fs (loop5): orphan cleanup on readonly fs [ 223.331950][ T7242] EXT4-fs (loop5): 1 truncate cleaned up [ 223.394968][ T7242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.476912][ T7199] BTRFS error (device loop3): open_ctree failed: -EINTR [ 224.543691][ T6262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.544927][ T7189] syz.1.295 (7189) used greatest stack depth: 18760 bytes left [ 225.058560][ T7256] loop5: detected capacity change from 0 to 256 [ 225.947890][ T7258] loop2: detected capacity change from 0 to 256 [ 227.922048][ T5628] ocfs2: Unmounting device (7,1) on (node local) [ 228.849705][ T7273] 9p: Bad value for 'rfdno' [ 229.164067][ T7276] loop3: detected capacity change from 0 to 4096 [ 229.377072][ T7278] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.387906][ T7280] loop1: detected capacity change from 0 to 2048 [ 230.597377][ T7280] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.824557][ T7283] netlink: 20 bytes leftover after parsing attributes in process `syz.5.314'. [ 231.576341][ T7297] loop2: detected capacity change from 0 to 512 [ 231.662547][ T7297] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 231.844097][ T7297] EXT4-fs (loop2): invalid journal inode [ 231.844909][ T7297] EXT4-fs (loop2): can't get journal size [ 231.922872][ T7297] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 231.925040][ T7297] EXT4-fs (loop2): orphan cleanup on readonly fs [ 231.943719][ T7297] EXT4-fs (loop2): 1 truncate cleaned up [ 231.968671][ T7297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.107958][ T5744] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 232.389016][ T5744] usb 7-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 232.525018][ T5744] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 232.525172][ T5744] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 232.525636][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.895264][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.103446][ T7291] loop6: detected capacity change from 0 to 1024 [ 233.229346][ T7291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.541965][ T7315] loop2: detected capacity change from 0 to 256 [ 235.879403][ T5744] pegasus 7-1:1.0: can't reset MAC [ 235.894879][ T5744] pegasus 7-1:1.0: probe with driver pegasus failed with error -5 [ 236.304084][ T5744] usb 7-1: USB disconnect, device number 2 [ 237.381302][ T6544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.824284][ T7342] loop1: detected capacity change from 0 to 512 [ 241.958388][ T7342] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.328: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 241.958414][ T7342] loop1: lost filesystem error report for type 5 error -117 [ 241.958624][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 241.958642][ C0] EXT4-fs (loop1): initial error at time 1789333749: ext4_xattr_inode_iget:473 [ 241.958665][ C0] EXT4-fs (loop1): last error at time 1789333749: ext4_xattr_inode_iget:473 [ 241.959471][ T7342] EXT4-fs (loop1): 1 orphan inode deleted [ 241.961242][ T7342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.297528][ T5807] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 242.379662][ T7337] loop6: detected capacity change from 0 to 4096 [ 242.448695][ T5807] usb 2-1: device descriptor read/64, error -71 [ 242.706540][ T5807] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 242.848657][ T5807] usb 2-1: device descriptor read/64, error -71 [ 242.961233][ T5807] usb usb2-port1: attempt power cycle [ 242.977183][ T7337] ntfs3(loop6): Failed to load $Extend (-22). [ 242.977205][ T7337] ntfs3(loop6): Failed to initialize $Extend. [ 243.233532][ T33] audit: type=1800 audit(1789333751.203:78): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.323" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 243.318648][ T5807] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 243.415538][ T5807] usb 2-1: device descriptor read/8, error -71 [ 243.508859][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.914621][ T7365] FAULT_INJECTION: forcing a failure. [ 243.914621][ T7365] name failslab, interval 1, probability 0, space 0, times 0 [ 243.914649][ T7365] CPU: 1 UID: 0 PID: 7365 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(full) [ 243.914671][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.914683][ T7365] Call Trace: [ 243.914691][ T7365] [ 243.914700][ T7365] dump_stack_lvl+0xe8/0x150 [ 243.914732][ T7365] should_fail_ex+0x3eb/0x540 [ 243.914765][ T7365] should_failslab+0xa8/0x100 [ 243.914796][ T7365] __kmalloc_cache_noprof+0x9e/0x600 [ 243.914823][ T7365] ? ceph_auth_init+0x5d/0x350 [ 243.914848][ T7365] ? ceph_auth_init+0x5d/0x350 [ 243.914879][ T7365] ceph_auth_init+0x5d/0x350 [ 243.914910][ T7365] ceph_monc_init+0x52f/0xb10 [ 243.914946][ T7365] ceph_create_client+0x225/0x310 [ 243.914977][ T7365] ceph_get_tree+0x1ca/0x1a40 [ 243.915004][ T7365] ? apparmor_capable+0x126/0x170 [ 243.915041][ T7365] vfs_get_tree+0x92/0x2a0 [ 243.915066][ T7365] vfs_cmd_create+0xa2/0x200 [ 243.915097][ T7365] __se_sys_fsconfig+0x6b9/0x810 [ 243.915130][ T7365] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 243.915157][ T7365] ? ksys_write+0x242/0x270 [ 243.915182][ T7365] ? __pfx_ksys_write+0x10/0x10 [ 243.915210][ T7365] ? __x64_sys_fsconfig+0x20/0xc0 [ 243.915240][ T7365] do_syscall_64+0x166/0x520 [ 243.915259][ T7365] ? trace_irq_disable+0x3b/0x140 [ 243.915280][ T7365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.915300][ T7365] ? clear_bhb_loop+0x70/0xc0 [ 243.915323][ T7365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.915342][ T7365] RIP: 0033:0x7fd9cd59e159 [ 243.915360][ T7365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.915376][ T7365] RSP: 002b:00007fd9ce4e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 243.915397][ T7365] RAX: ffffffffffffffda RBX: 00007fd9cd825fa0 RCX: 00007fd9cd59e159 [ 243.915411][ T7365] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 243.915423][ T7365] RBP: 00007fd9ce4e5090 R08: 0000000000000000 R09: 0000000000000000 [ 243.915435][ T7365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.915446][ T7365] R13: 00007fd9cd826038 R14: 00007fd9cd825fa0 R15: 00007ffc0c098e08 [ 243.915476][ T7365] [ 244.769543][ T7375] loop2: detected capacity change from 0 to 256 [ 247.778716][ T7381] program syz.3.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.358666][ T5744] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 252.661382][ T5744] usb 3-1: Using ep0 maxpacket: 32 [ 252.663685][ T5744] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 252.667445][ T5744] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 252.667467][ T5744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.667485][ T5744] usb 3-1: config 0 has no interface number 0 [ 252.744949][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.744975][ T5744] usb 3-1: Product: syz [ 252.744990][ T5744] usb 3-1: Manufacturer: syz [ 252.745004][ T5744] usb 3-1: SerialNumber: syz [ 252.934317][ T5744] usb 3-1: config 0 descriptor?? [ 253.131565][ T5744] f81534 3-1:0.12: required endpoints missing [ 253.457814][ T5744] usb 3-1: USB disconnect, device number 10 [ 253.774918][ T7416] loop6: detected capacity change from 0 to 24 [ 253.880383][ T7416] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 254.161172][ T7416] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 254.593889][ T7422] 9p: Bad value for 'rfdno' [ 254.635794][ T7422] loop3: detected capacity change from 0 to 4096 [ 254.717245][ T7426] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.872779][ T7427] 9p: Bad value for 'rfdno' [ 255.089159][ T7423] loop5: detected capacity change from 0 to 4096 [ 255.114248][ T7428] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.515945][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.516010][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.597140][ T4936] Bluetooth: hci1: command 0x0406 tx timeout [ 261.694796][ T7447] program syz.5.351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.424345][ T4936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.473958][ T4936] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.478610][ T4936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.479647][ T4936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.487864][ T4936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.788871][ T54] Bluetooth: hci5: command tx timeout [ 268.868686][ T54] Bluetooth: hci5: command tx timeout [ 270.995903][ T54] Bluetooth: hci5: command tx timeout [ 273.330886][ T54] Bluetooth: hci5: command tx timeout [ 277.199963][ T7482] program syz.6.362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.132075][ T7491] loop5: detected capacity change from 0 to 256 [ 281.858588][ C0] sched: DL replenish lagged too much [ 283.886734][ T4936] Bluetooth: hci2: command 0x0406 tx timeout [ 291.353024][ T7510] loop5: detected capacity change from 0 to 512 [ 293.171136][ T7510] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 293.919720][ T7510] EXT4-fs (loop5): invalid journal inode [ 293.919800][ T7510] EXT4-fs (loop5): can't get journal size [ 293.920072][ T7510] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 294.030155][ T7510] EXT4-fs: failed to create workqueue [ 294.030185][ T7510] EXT4-fs (loop5): mount failed [ 297.109180][ T5744] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 297.238911][ T5744] usb 3-1: device descriptor read/64, error -71 [ 297.740204][ T5744] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 298.978625][ T5744] usb 3-1: device descriptor read/64, error -71 [ 299.089184][ T5744] usb usb3-port1: attempt power cycle [ 299.349646][ T4936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.368982][ T4936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.372890][ T4936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.377320][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.402984][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.718614][ T5744] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 303.066614][ T4936] Bluetooth: hci3: command tx timeout [ 303.109900][ T5744] usb 3-1: device descriptor read/8, error -71 [ 303.828386][ T33] audit: type=1326 audit(1789333811.793:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 303.828438][ T33] audit: type=1326 audit(1789333811.793:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 303.829045][ T33] audit: type=1326 audit(1789333811.803:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 303.938980][ T33] audit: type=1326 audit(1789333811.913:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 303.975680][ T33] audit: type=1326 audit(1789333811.943:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 303.975727][ T33] audit: type=1326 audit(1789333811.943:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 303.975768][ T33] audit: type=1326 audit(1789333811.943:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 304.068230][ T33] audit: type=1326 audit(1789333812.033:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 304.068279][ T33] audit: type=1326 audit(1789333812.033:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 304.147979][ T33] audit: type=1326 audit(1789333812.113:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.6.374" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906419e159 code=0x7ffc0000 [ 304.254429][ T7537] Illegal XDP return value 4294967294 on prog (id 18) dev N/A, expect packet loss! [ 304.321371][ T7537] netlink: 44 bytes leftover after parsing attributes in process `syz.6.374'. [ 305.120349][ T4936] Bluetooth: hci3: command tx timeout [ 308.823039][ T4936] Bluetooth: hci3: command tx timeout [ 311.118799][ T54] Bluetooth: hci3: command tx timeout [ 318.328864][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.344200][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.502688][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.510686][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.947235][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 427.791537][ T4936] Bluetooth: hci3: command 0x0406 tx timeout [ 439.943150][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.950677][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 486.038003][ T34] INFO: task kworker/R-netns:8 blocked for more than 145 seconds. [ 486.038031][ T34] Tainted: G L syzkaller #0 [ 486.038043][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.038052][ T34] task:kworker/R-netns state:D stack:27024 pid:8 tgid:8 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 486.038113][ T34] Workqueue: netns cleanup_net [ 486.038205][ T34] Call Trace: [ 486.038241][ T34] [ 486.038254][ T34] __schedule+0x17dd/0x5940 [ 486.038313][ T34] ? __pfx___schedule+0x10/0x10 [ 486.038352][ T34] ? schedule+0x90/0x2b0 [ 486.038383][ T34] schedule+0x164/0x2b0 [ 486.057944][ T34] schedule_preempt_disabled+0x13/0x30 [ 486.057983][ T34] __mutex_lock+0x7c4/0x15a0 [ 486.058011][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 486.058038][ T34] ? rtnl_net_dev_lock+0x257/0x2f0 [ 486.058071][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 486.058103][ T34] ? rtnl_net_dev_lock+0x36/0x2f0 [ 486.058125][ T34] ? rtnl_net_dev_lock+0x36/0x2f0 [ 486.058144][ T34] rtnl_net_dev_lock+0x257/0x2f0 [ 486.058168][ T34] unregister_netdevice_notifier_dev_net+0x2f/0x1a0 [ 486.058189][ T34] ? nsim_destroy+0xe4/0x800 [ 486.058219][ T34] nsim_destroy+0x105/0x800 [ 486.058253][ T34] __nsim_dev_port_del+0x14e/0x200 [ 486.058278][ T34] nsim_dev_reload_destroy+0x288/0x490 [ 486.058306][ T34] nsim_dev_reload_down+0x8a/0xc0 [ 486.058329][ T34] devlink_reload+0x1c5/0x890 [ 486.058358][ T34] ? __pfx_devlink_reload+0x10/0x10 [ 486.058394][ T34] devlink_pernet_pre_exit+0x1ff/0x420 [ 486.076993][ T34] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 486.077021][ T34] ? _raw_spin_unlock+0x28/0x50 [ 486.077050][ T34] ? iput+0xb7f/0xf00 [ 486.077079][ T34] ops_undo_list+0x17d/0x8f0 [ 486.077106][ T34] ? __pfx_ops_undo_list+0x10/0x10 [ 486.077130][ T34] ? idr_destroy+0x218/0x290 [ 486.077147][ T34] ? do_raw_spin_unlock+0xf5/0x200 [ 486.077181][ T34] cleanup_net+0x572/0x810 [ 486.077205][ T34] ? __pfx_cleanup_net+0x10/0x10 [ 486.077231][ T34] ? rcu_is_watching+0x16/0xb0 [ 486.077259][ T34] ? process_scheduled_works+0x97a/0x1630 [ 486.077288][ T34] process_scheduled_works+0xc3d/0x1630 [ 486.077345][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 486.077380][ T34] ? assign_work+0x3af/0x5d0 [ 486.077412][ T34] rescuer_thread+0x84a/0x12a0 [ 486.077437][ T34] ? rescuer_thread+0xb8/0x12a0 [ 486.077473][ T34] kthread+0x38b/0x480 [ 486.077495][ T34] ? __pfx_rescuer_thread+0x10/0x10 [ 486.077512][ T34] ? __pfx_kthread+0x10/0x10 [ 486.077533][ T34] ret_from_fork+0x514/0xb70 [ 486.077555][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 486.077574][ T34] ? __switch_to+0xc89/0x1420 [ 486.077604][ T34] ? __pfx_kthread+0x10/0x10