last executing test programs: 27m29.078165369s ago: executing program 32 (id=908): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) 26m52.728384092s ago: executing program 33 (id=1042): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20e17e000000d6"], 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="20830200000081d9"], 0x0, 0x0}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, 0x0, 0x0) getrusage(0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000001180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0xcdf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x84, 0x2, '\x00\x00'}, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r10, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f00000010c0)={0x0, 0x5, 0x82, "65cbfb712f626d077f492a223ec2491f8e6ee0b8c7b93dc6a69eabe08c5ee9fa22b1337b2b889acf57dd01373b64db7833a32adbcdda679f80b5f607ec7d8ac17942fdd48efac74024ecac5e2deb3f5849a0ec5e46a93d3a48fe1a203bc2a1ecd2d499f659f8480e910409c879b3563df3a0e437eab56272a74a5996d4e2d67a4313"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26m14.379055016s ago: executing program 34 (id=1171): r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000180)='bpf_lsm_task_prlimit\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r6 = syz_open_dev$loop(&(0x7f0000000300), 0x1, 0x800) ioctl$BLKDISCARD(r6, 0x1277, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000380)={{}, {r8, r9+60000000}}, &(0x7f00000003c0)) 25m46.094144568s ago: executing program 35 (id=1247): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 24m59.629160207s ago: executing program 36 (id=1384): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000020018000009500000000000000000000000000000063910943d3469a9f8c937af6a63960cd83d21d214a1e33ffa9335f1a1c228ea32821b828642403290bff1441c8ad942fa2066d2d3bace44bcc3ea3d966831558faee54679bc8"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0xb3, &(0x7f0000000700)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) io_uring_setup(0x2654, &(0x7f0000000080)={0x0, 0xbb95, 0x0, 0x2, 0x1ad}) socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3, 0x0, 0x28b}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x149a01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000005c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) syz_clone(0x104080000, &(0x7f0000000300)="7f4ab940037a1758b9dd8c23f43b4ea47a6d6ec48fdbd082b1bca785770785", 0x1f, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)="0efead132f87cf35aa10e188a1e241842373c83c3f6d1e0551f3fcdfcb45f5ca90a2762326f5e1b1db27bd5fd9cdb6ef7864c4727e9000ae3ba68986a525cea14aa95294cc4834295f3238e6badaeed950050134d5a09d13c6802814ae76a8fdd2d29f8fa52daaaa3bc70ff3d3445567d53e45d434850b837085b57cb24cec29f5113575fca7241304daaa4132779e07ed5b3fe80b7738b97b34ecfe4bb6694835b894568fc5a096b8ad9d4d1c544d223746904585831068c628e72e73909fd72f88c7af3ffd10c9b01d197e11aa6c49e12c0101d23cc950af73ebcfd1c37f0840d7") openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 11m0.628425372s ago: executing program 37 (id=4475): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x561, &(0x7f0000000d00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffc, 0x6, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r5, 0x1, 0x4012, 0xffff) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m18.936259879s ago: executing program 5 (id=6272): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$bt_hci(r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000092000000100090f89500000080007709b6de9759006a0a26e42c0073309c7ef7b8e97d8a7e404c2f997b11f97d0ec2489447d7bb75b1261999c98c9f6e2573fb60a331eaa2b09db3e0822624b5751ccd07145d56eb087e858ecae85e1649af8a160ad26b68747c88745d914d6275bece81003ac8b2ce857f36832c03eb020c371a84904eaed93cd20dd7213f725840639fb980c5aa577fcc0aaeb481675642297945ebaaf9c5c8a0b03e31cc7b7e2a10b0455cbf2a5211acc7f1608078ceeb19a57b8d39ab67f46971c7b1"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2052}, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) readahead(r7, 0x8, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) 2m17.422385554s ago: executing program 5 (id=6278): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1}, 0xfffffffe}], 0x1, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) 2m17.04141127s ago: executing program 5 (id=6281): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x7, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x10d002) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@loopback, @local, 0x0}, &(0x7f0000000340)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0xfffffff9, 0x611b96bd, 0x9, 0x40, r3, 0xffff8889, '\x00', r4, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0xac, 0x1000, &(0x7f0000000400)="89c55b09f604e444cc9c3cf2919c0eba5d4839d53c645a7e76582096993e871885e7bbd4139a5ce0dcaba571fbb05b2a8ef27ad088e7ad8861f29f25c53420d3d045a4a04e6fa3be0d096acc518b5211bc794bd7ff0e5c8a689f63234e96ed8d780fa851070fd904551038ffc8f5e90a02c2cce5c395e03a90a819a68fcf23ae97d9075c44ae3ab0c1ff9f3ec610e2f033626538584bf47d9c9c64d5ea150a19771446ba3cae950ce2a807e0", &(0x7f0000000c00)=""/4096, 0x728, 0x0, 0x67, 0xe8, &(0x7f00000004c0)="9457538f05bdea26da3dbe7a75a254421b999a3765625f4430409d72fe2935e6402637fbd6e903b68b0803ffd2329d1c1ee97bb28741f5251d536b1b0971b9eeea53b92db6e8a19cd8c205a1a8aeb9900a6d23a7993409700a413c84a5b162748af661ee6f672d", &(0x7f0000000580)="0f4d11b50a2ef4daa6b8e2d94c8f129ffb7123ac348a33aa2451a9a4298c00ffc3c305051c336713734b2f3ebfd0ca91cabca1363c16f9f5e473798917dc7859db29c7bfa56b4680a2a58b7248b40f4b78d99772236ae63da0d321125b4f775108af061e6fcb6ee42cf54b65daab283f330c8be5f8180d7f85c2903ec015a5dd682e2d5b0a00d0b40d32671e8ffd234950f02908dbe92d79c46fbd8a2ac938d7f2c7fc1be32d9311fd1cea164420dec842808619b171fb2185f99f10a1a15618c6ece59aad51fd234485fcee2f4cb3f8a93e8ae5903d3b674c4ba88538e5c4c08c1367022bb3acfe", 0x4}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f00000008c0)=0x4) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x40, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {0x0, 0xffffff80}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@mcast2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2m16.979090316s ago: executing program 38 (id=6281): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x7, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x10d002) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@loopback, @local, 0x0}, &(0x7f0000000340)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0xfffffff9, 0x611b96bd, 0x9, 0x40, r3, 0xffff8889, '\x00', r4, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0xac, 0x1000, &(0x7f0000000400)="89c55b09f604e444cc9c3cf2919c0eba5d4839d53c645a7e76582096993e871885e7bbd4139a5ce0dcaba571fbb05b2a8ef27ad088e7ad8861f29f25c53420d3d045a4a04e6fa3be0d096acc518b5211bc794bd7ff0e5c8a689f63234e96ed8d780fa851070fd904551038ffc8f5e90a02c2cce5c395e03a90a819a68fcf23ae97d9075c44ae3ab0c1ff9f3ec610e2f033626538584bf47d9c9c64d5ea150a19771446ba3cae950ce2a807e0", &(0x7f0000000c00)=""/4096, 0x728, 0x0, 0x67, 0xe8, &(0x7f00000004c0)="9457538f05bdea26da3dbe7a75a254421b999a3765625f4430409d72fe2935e6402637fbd6e903b68b0803ffd2329d1c1ee97bb28741f5251d536b1b0971b9eeea53b92db6e8a19cd8c205a1a8aeb9900a6d23a7993409700a413c84a5b162748af661ee6f672d", &(0x7f0000000580)="0f4d11b50a2ef4daa6b8e2d94c8f129ffb7123ac348a33aa2451a9a4298c00ffc3c305051c336713734b2f3ebfd0ca91cabca1363c16f9f5e473798917dc7859db29c7bfa56b4680a2a58b7248b40f4b78d99772236ae63da0d321125b4f775108af061e6fcb6ee42cf54b65daab283f330c8be5f8180d7f85c2903ec015a5dd682e2d5b0a00d0b40d32671e8ffd234950f02908dbe92d79c46fbd8a2ac938d7f2c7fc1be32d9311fd1cea164420dec842808619b171fb2185f99f10a1a15618c6ece59aad51fd234485fcee2f4cb3f8a93e8ae5903d3b674c4ba88538e5c4c08c1367022bb3acfe", 0x4}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f00000008c0)=0x4) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x40, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {0x0, 0xffffff80}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@mcast2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 34.551784557s ago: executing program 1 (id=6662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000b001a007311a000000000009500008000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000140)={{0x3c, @private=0xa010102, 0x0, 0x12, 'sh\x00', 0x14, 0x4, 0x9}, {@loopback, 0x12, 0x2000, 0x7, 0x6, 0x2}}, 0x44) 32.705338743s ago: executing program 1 (id=6670): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x480, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@grpquota}]}, 0x2, 0x455, &(0x7f0000000580)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303010303130301030302c865a65725f69643d7678393280ec56a3d56930ff1b1f1492bcbb82f173e93e71e3aef8502adeb8feadb8a6b0f21eb5a037cd4a985c213860dd836e1b6978078bc0dbbf03965196ce0b270f5f69859fdcf70dbf6246f545d9c0dbd149eeb3b8a75263cab61330f6e951a40786e579d7d78534c61b0b8600cb12dafe8389a7b5c8e063097073ee5fbc75b140d094a2d34fd6e8e12a02225c6fa79ce2d6da9a5a1b481e9afd131d387e559325a603f4b1b328c203f9c22d7f", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000083c0)={0x2020}, 0x2020) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 31.735309876s ago: executing program 1 (id=6680): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$bt_hci(r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000092000000100090f89500000080007709b6de9759006a0a26e42c0073309c7ef7b8e97d8a7e404c2f997b11f97d0ec2489447d7bb75b1261999c98c9f6e2573fb60a331eaa2b09db3e0822624b5751ccd07145d56eb087e858ecae85e1649af8a160ad26b68747c88745d914d6275bece81003ac8b2ce857f36832c03eb020c371a84904eaed93cd20dd7213f725840639fb980c5aa577fcc0aaeb481675642297945ebaaf9c5c8a0b03e31cc7b7e2a10b0455cbf2a5211acc7f1608078ceeb19a57b8d39ab67f46971c7b1"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2052}, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) readahead(r6, 0x8, 0x7f) 31.192365568s ago: executing program 0 (id=6681): unshare(0x22020400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000008, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) 31.190892028s ago: executing program 0 (id=6682): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0xa6e6, 0x410583) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000eb95"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000003980)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='sys_tz,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp932,dmask=00000000000000000070707,umask=00000000000000000012530,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,keep_last_dots,dmask=00000000000000000000003,iocharset=cp852,uid=', @ANYRESDEC, @ANYRES16], 0x1, 0x1524, &(0x7f0000002280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5b, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 29.950093217s ago: executing program 1 (id=6683): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x53) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRbnc29770Id7u5fdne2PdDdJ6SYbsp8PnMyZMzP5nrPDzO6ZOcwE0LfOR8SFiHheq9UuRcRwVp5mKTabqb7e0ycPZuopiVrt1vtJRNIsq6829sr/PJltdiwifvi9iJ8kb8atrG8sTpdKxdVsvlBdWilU1jcuLyxNzxfni8uTkxPXpq5PXZ0a70o7hyLixnf+++tf/PG7N/761Xv/uv3/sZ8mWXnEy3Z0W7PpucZn0TIYEat7EawHBrL25FoFbfY1AAAHR+t3/pci4lIMx0Dj1xwAAABwmNS+MRQfJxE1AAAA4NBKG2NgkzSfjQMYijTN55tjeD8XJ9JSuVL9ylx5bXm2OVZ2JHLp3EKpOJ6NFR6JXFKfn2jkX85f2TI/GRGnI+JXw8cb8/mZcmm21xc/AAAAoE+c3NL//2i42f8HAAAADpmRXlcAAAAA2HP6/wAAAHD46f8DAADAofb9mzfrqdZ6//Xs3fW1xfLdy7PFymJ+aW0mP1NeXcnPl8vzjWf2Le30/0rl8srXYnntfqFarFQLlfWN20vlteXq7YXXXoENAAAA7KPTX3z0zyQiNr9+vJHqjvS6UsC+GHyblf+zd/UA9t9ArysA9Mxbff8Dh0qu1xUAei6JiN9vs7zj4J2/7U19AACA7hv9fPv7/+mO1wY2032qIrBHXP+D/uX+P/Qv9/+hf+ViIHTkob8lOyx/9/v/tdpbVQgAAOi6oUZK0nx2z38o0jSfjzjVeC1ALplbKBXHI+IzEfGP4dzR+vxEY8tkxz4DAAAAAAAAAAAAAAAAAAAAAAAAANBUqyVRAwAAAA61iPR/Sfb+r9Hhi0Nbrw8cSZ4NN6YRce93t35zf7paXZ2ol3/worz626z8Si+uYAAAAABbtfrprX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTT0ycPZlppP+O+962IGGkXfzCONabHIhcRJz5MYvCV7ZKIGOhC/M2HEfHtH7eJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+2O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffznQsf4DyPODrY//7TiJx3Ofxd2Gf/OjzY2Oi2r/SFitO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+OUX/vJ8u/af6BB/ZIf2X9xl+z95fP/JZ5vZXLv4Yxfa7/8zHeKn2f7/cpavLx9t5Teb+Ved+9Pfz23X/tkO7d9p/4/tsv2XfvDzf+9yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx2Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99GgAA///7fdEa") 29.866400685s ago: executing program 0 (id=6687): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x60) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000002c0)=0x30) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 29.637577137s ago: executing program 1 (id=6690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x25, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x8, 0xd, 0x7, 0x9, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x7, 0x0, 0x6, 0x1, 0x9, 0x30, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0xc7}}}, &(0x7f0000000180)='GPL\x00', 0x95, 0x0, 0x0, 0x41100, 0x48, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000380)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r4, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r5], &(0x7f00000008c0)=[{0x4, 0x3, 0x3, 0x1}, {0x3, 0x2, 0x5, 0x4}, {0x1, 0x1, 0xd, 0x8}, {0x3, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x6, 0xa}, {0x5, 0x2, 0xf, 0x7}, {0x0, 0x5, 0x6, 0x7}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x63) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = dup(r9) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) 29.534170576s ago: executing program 39 (id=6690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x25, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x8, 0xd, 0x7, 0x9, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x7, 0x0, 0x6, 0x1, 0x9, 0x30, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0xc7}}}, &(0x7f0000000180)='GPL\x00', 0x95, 0x0, 0x0, 0x41100, 0x48, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000380)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r4, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0, r5], &(0x7f00000008c0)=[{0x4, 0x3, 0x3, 0x1}, {0x3, 0x2, 0x5, 0x4}, {0x1, 0x1, 0xd, 0x8}, {0x3, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x6, 0xa}, {0x5, 0x2, 0xf, 0x7}, {0x0, 0x5, 0x6, 0x7}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x63) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = dup(r9) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) 28.636480262s ago: executing program 0 (id=6694): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$bt_hci(r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000092000000100090f89500000080007709b6de9759006a0a26e42c0073309c7ef7b8e97d8a7e404c2f997b11f97d0ec2489447d7bb75b1261999c98c9f6e2573fb60a331eaa2b09db3e0822624b5751ccd07145d56eb087e858ecae85e1649af8a160ad26b68747c88745d914d6275bece81003ac8b2ce857f36832c03eb020c371a84904eaed93cd20dd7213f725840639fb980c5aa577fcc0aaeb481675642297945ebaaf9c5c8a0b03e31cc7b7e2a10b0455cbf2a5211acc7f1608078ceeb19a57b8d39ab67f46971c7b1"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2052}, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) readahead(r6, 0x8, 0x7f) 27.341079566s ago: executing program 0 (id=6697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) 27.093755209s ago: executing program 0 (id=6699): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x23168400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000b700000085000000bc000000850000000800000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="fdc925cf01bfa9d188dd55ab7807", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 26.177273378s ago: executing program 40 (id=6699): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x23168400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000b700000085000000bc000000850000000800000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="fdc925cf01bfa9d188dd55ab7807", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 22.167443801s ago: executing program 9 (id=6718): socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x20}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 21.260668177s ago: executing program 9 (id=6721): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001001000000000000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @remote, 0x9}}, 0x0, 0x0, 0x4d, 0x0, "3023e519504254c1b5a34f91c57d8c79f12c8b32c21823a6be3126e5370ca14e54017a80a3d3e78f7a7b8c5895e68d01b9c347e864933b4b2dc1e00fd53b6ad9583f5dc3db99776f8d76917a816cc335"}, 0xd8) syz_usb_connect(0x0, 0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601010405"], 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x19, 0xc2, 0xa388, 0x0, 0x4, {[@md5sig={0x13, 0x12, "bb233372a509850c645129e213fe7442"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x2f}, @sack={0x5, 0x1a, [0x2d66, 0x0, 0x80000000, 0x5b, 0x6, 0xffffffff]}, @nop, @timestamp={0x8, 0xa, 0x7, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4}]}}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000185000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mprotect(&(0x7f0000a5c000/0x7000)=nil, 0x7000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x5) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 17.587326548s ago: executing program 9 (id=6735): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x60) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000002c0)=0x30) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 15.58229241s ago: executing program 9 (id=6744): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$bt_hci(r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000092000000100090f89500000080007709b6de9759006a0a26e42c0073309c7ef7b8e97d8a7e404c2f997b11f97d0ec2489447d7bb75b1261999c98c9f6e2573fb60a331eaa2b09db3e0822624b5751ccd07145d56eb087e858ecae85e1649af8a160ad26b68747c88745d914d6275bece81003ac8b2ce857f36832c03eb020c371a84904eaed93cd20dd7213f725840639fb980c5aa577fcc0aaeb481675642297945ebaaf9c5c8a0b03e31cc7b7e2a10b0455cbf2a5211acc7f1608078ceeb19a57b8d39ab67f46971c7b1"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2052}, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) readahead(r6, 0x8, 0x7f) 14.310985312s ago: executing program 9 (id=6749): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r2}, 0x38) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14.151874847s ago: executing program 9 (id=6750): r0 = socket$inet6(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000010000000000000009baa40c27ddba017685f662266e09305000000b7080000000000007b8af8ff00000000b708000093e000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000002000000182300002f171d96e8187e32095c6ae982c927952a862b07a6eeca019c923c32020847d6a29813ae121b146b30abf68d9fff468c2ad827b00de4557078eb43c479e5685c46300bff159a531cfa835c16bd819624e8db6dac17e0627eff2f30717b1dd332", @ANYRES64=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000200f000085000000060000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x100001, 0x7d, &(0x7f0000000340)=""/125, 0x0, 0x47, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r2, r2, r11, r13, r2, r2, r2, r13], &(0x7f0000000580)=[{0x1, 0x2, 0x9, 0x2}, {0x3, 0x4, 0xc, 0x9}, {0x10001, 0x5, 0x9, 0x9}], 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x61) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001000b66f000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) 13.991711352s ago: executing program 41 (id=6750): r0 = socket$inet6(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000010000000000000009baa40c27ddba017685f662266e09305000000b7080000000000007b8af8ff00000000b708000093e000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000002000000182300002f171d96e8187e32095c6ae982c927952a862b07a6eeca019c923c32020847d6a29813ae121b146b30abf68d9fff468c2ad827b00de4557078eb43c479e5685c46300bff159a531cfa835c16bd819624e8db6dac17e0627eff2f30717b1dd332", @ANYRES64=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000200f000085000000060000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x100001, 0x7d, &(0x7f0000000340)=""/125, 0x0, 0x47, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r2, r2, r11, r13, r2, r2, r2, r13], &(0x7f0000000580)=[{0x1, 0x2, 0x9, 0x2}, {0x3, 0x4, 0xc, 0x9}, {0x10001, 0x5, 0x9, 0x9}], 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x61) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001000b66f000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000c0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xac}}, 0x9}, 0x1c) 13.881236123s ago: executing program 4 (id=6753): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRESDEC, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) r6 = syz_io_uring_setup(0x7da5, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000040)=[r7], 0x1) r8 = dup2(r6, r7) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) 12.943181522s ago: executing program 4 (id=6758): r0 = io_uring_setup(0x19be, &(0x7f0000000440)={0x0, 0x709f, 0x8, 0x11, 0xef}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) 12.930070913s ago: executing program 4 (id=6759): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nodelalloc}, {@nojournal_checksum}]}, 0x1, 0x783, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 11.318234568s ago: executing program 4 (id=6761): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$bt_hci(r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000092000000100090f89500000080007709b6de9759006a0a26e42c0073309c7ef7b8e97d8a7e404c2f997b11f97d0ec2489447d7bb75b1261999c98c9f6e2573fb60a331eaa2b09db3e0822624b5751ccd07145d56eb087e858ecae85e1649af8a160ad26b68747c88745d914d6275bece81003ac8b2ce857f36832c03eb020c371a84904eaed93cd20dd7213f725840639fb980c5aa577fcc0aaeb481675642297945ebaaf9c5c8a0b03e31cc7b7e2a10b0455cbf2a5211acc7f1608078ceeb19a57b8d39ab67f46971c7b1"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2052}, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) readahead(r6, 0x8, 0x7f) 10.756115261s ago: executing program 7 (id=6751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x1, 0x0) readv(r3, &(0x7f0000000840)=[{&(0x7f0000000580)=""/102, 0x66}], 0x1) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYRES16=r4, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) 10.392302916s ago: executing program 4 (id=6765): r0 = socket$inet6(0xa, 0x80000, 0x9) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000140)="ae7a27f0183c2f50c91a08fd8cca3d11cc39b250a94a1dbf47366190991331704827c355361a10a4a5cb9d1a673b9393515339e2111ac5a1b26cbbd3b7fac10e8c38311cfc21a017c8a160da78295ca924764dd2edc8d3eaf2428d5ab9e65e351b08c7fc74e436519f9b3581c5d53dd653677c0bfb0bf1f4687e83ed3d77d14d5876109d4d0567239a7cf8e0dd8176812847272540156c52b2a6342001c5feba28ec042f69", 0xa5}, {&(0x7f0000000340)="782d5a26db022922822d81c941480081a9176163e858ac7c0ba924c5429946d47a22b3bbb97a2ee08e65d45e958d3c3c22125d4b754bf2a783d12b0f59efd4f7e1ffbf8d42ae5fe0b6c1e2b207e5dc69a5dd2dd1da1f37f554ed45c3", 0x5c}, {&(0x7f0000000500)="c3a1ec275a9c95425d8f85fdae3851f548131340b5d14c2efac7db5e88c692246a0fd7d28482b1fe6e5ed975554f8c89679f2e38711ce84e9abde0a7717547b90d6ab01e81cf755317581edb6016ecf152d33fcd62efd2f03138b1c3096a0d3c3dbde22512cffd4205933fd7105da0eccd799ac3234c864836005feceb143db380041a266b59cafcb788cf37ab7955e2161acfe7daafbed1c78fded71bee05c0bfeb782cf5eb10a61663df5c0c4f9d88", 0xb0}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="f72272c5feb1a57034011fd497ee5c5901dbd289b652fc99be978315b2eb9ed12e28500fcdaf3b3720670b714805b6291973e3103e5e6018029a35709df8f3710572f0620408a4", 0x47}, {&(0x7f0000000040)="2aca695a93f5508f49a2082f3e10c09a2cd1a6c450b3512a0d93", 0x1a}, {&(0x7f0000001640)="6b21bfcb5f5be844b86dabc89aee4536bbf8f17b7b6ba4be9fb49004110d880f4f1d2310ef7808848dd44c826029fde4d7a9600d0685b37c3a6466f3e35e87b1cb73cf34ef8790a590949b105c23f315530b0aaa05282263927a7578ef6b51d837dd02eefbaf710fb66da218a5a202f5256ebb120485c760ebd3638a4942bf9db3fec56a381400610084504ba70cb63bd3", 0x91}, {&(0x7f0000000200)="60b828042d9b157e3f137d87f06ff7fe38b9b51fa4954e10e3c912fd06d4dc4d8591ff4ad5fa4ed2db74fde482c3858ad8d9", 0x32}, {&(0x7f0000001700)="216750201c8e7a50107d94fc496c4c149d08e85e5d09307ffc53b46de015cde63db0c93fa65e6603861de74bb9a4daded96d815a62c6ee3666c1c9d804ad2c77b78fa334af8f668fca7870235458918416c396bc91", 0x55}], 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="600000000000000029000000008908f7ffffff000001066283725418161eba455bcdd3c40000000000000738000000000c0e8100020000000000000000000000000000000080feffffffffffa2000000000000003a0e3cf10000000000000100000000000000000000000000140000000000000029000000080000000800000000000000"], 0x78}, 0x4040890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_es_remove_extent\x00', 0xffffffffffffffff, 0x0, 0x35}, 0xfffffffffffffd15) syz_emit_ethernet(0x10e, &(0x7f0000001f00)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87abcd", 0xd8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@dstopts={0x3c, 0x1a, '\x00', [@generic={0xfa, 0xce, "036c2d887377412a32de4a8f76a8cb847921c27fc77e601e3b4fb71edc2910a6e7c5e9a8f15345e123ae956d29bfd8901afa21601998c237df4943297c38cd384b925faa423b69ff3a0db9cb70d530e08f292b506d09d969d25795fc994062121657c91abab4518a923a51f4f44b31f660b50f6614c00363e0f27fbbac8fa7ef46502950923134ec898fe1cffcf57a2950ad8ccb780e60d05500a0c7876beac824e0393aa4623ce67b9f471e36a8905b2986e7662d3113deb92e24fa55ea626c369d2c1121ff7ff56cfd8d6c781f"}]}]}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0xfffffffe, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xf49, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000040)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[], 0x1, 0x550f, &(0x7f00000087c0)="$eJzs3E1rY+UXAPCTdDrv//kXceFuLgxCC5PQ9GXQXdUZfMEOZdSFK02TNGQmyS1NmtauXLgUF34TUXDl0s/gwrU7caG4E5Tce6tTX0CmaWOnvx/cnPs8eXLuecIwcO4tCeDcmkt+/rEUN+JKRMxExPWI7LxUHJm1PDwXETcjohwxV35szXh+PJkdFyPiakTcGCfPc5aKtz69Pbq1+sMbP331zaUL1z778tvp7RqYtucjoredn+/18pi28/iwmK+POlnsrYyKmL/Re1SM0zzutTazDHv1w3X1LC638/Xp9u5gHLe69cY4tjtb2fx2P7/gYNQ+zJN94GF9Jxs3W5tZ7AzSLLYP8rr2D/L/2w4GwzxPs8j3QZY+hsPDmM+39lv5frYfZbHRHxbzed602dofx1ERi8tFI+02szo2j/NN/7e92env7iej1s6gk/aT1WrthWrtTqW2kzZbw9ZKpd5r3llJ5tvd8bLKsFXvrbXTtN1tVRtpbyGZbzcalVotmb/b2uzU+0mtVl2uLlZWF4qz28mr999Jus1kfhxf7vR3h53uINlKd5L8EwvJUnX5xYXkVi15a30j2Xhw7976xtvv3X33/kvrr79SLPpLWcn80uLSUqW2WFmqLZyj/X9UFD3B/cOxlKZdAMDZ84T9/++H/h94EifX/+88iDj5/j/0/xNxpvrf897/n8D+4Vj0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59Z3s5+/lp3M5eNrxfz/iqlninEpIsoR8evfmImLR3LOFHlm/2H97J9q+LoUWYbxNS4Vx9WIWCuOX/5/0t8CAAAAPL2++PDmJ3m3nr/MTbsgTlN+06Z8/f0J5StFxOzc9xPKVh6/PDuhZNm/7wuxP6Fs2Q2syxNKlt9yuzCpbP/KzJFw+bFQykP5VMsBAABOxdFO4HS7EAAAAE7Tx9MugOkoxeGjzMNnwdlf3v/xQPDKkREAAABwBpWmXQAAAABw4rL+3+//AQAAwNMt//0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDf2Lmf3LSBKA7AzwYX+k9FVfe9SndwjB6hyy4rDtBLcIAu6BVyAc5AdjkCggiPQwCxiOSxrUTfJzmTscyPNwgWMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL/3++/22bsz+0k2c0AAAAwC3bar2o/5ml/sfm/ufm1temX0REGRG35u6jeHeROWpyqufn/50/X13VcBdRJxzfY9JcHyLiR3PtvnT9KQAAAMDbtVmu5mm2nv7Mhi6IPqVFm/LTz0x5RURUs4dMaeUx71umsPr7PY7fmdLqBaxpprC05DbOlfYi9c/9tGo3PWuK1JQ3X3Yq8nrsu06qBAAA8hpdNP3OQgAAAOjTr6ELYBhFPG1lnrYCJ6lptvfeX/QAAACAV6gYugAAAACgc/X8v6fz/w7O/wMAAIBhpPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Wi82y9W8bc7+0E6e0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/vzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7NzPaxxVHADwNzM7W1sV1yh7iIiCB73Y7ba29iYelODBP0EI6bbGbv3R5mBLEXPxJjn3InoUEZR46//Qcwu91FsPe6jgWXmzM91pEnCJOrNJPh94874ZhnnfNwsh33kvCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZfLuLM7ioTeN0/Lc3Uc312J/b0cf3d66vxxbjJMmkz4YXq7/kPTbSwQAAICjI6vq+xDCg3x7JfZpr6j/8+qaWPN//+w0rur5nXV/1Ve1f2y//frwxccD9abjxJteXB+PTu1OpfP/zXKxPfePV3SKJ1+8e8mKDyT9YPOFSV48z+TbO3fe6xbhsSayBQD242TVl0H191Dsh20mBsCR0akV3lX9n/XazQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgCZPN8HQVJyGE5c4sju49urm2V3976/5y1c7durUVvp7dM94iDyFcXB+PTjU6m8V27fqNy6vj8ehq88ErIYS2Rn+nnP7lj+a4OIRWno/gPwrS8sNelHwORtDiLyUAAA6lvGyxrn+Qb6/Ec8lSCH/98GT9/3otDnPW/w8/Pne3Pla9/h82NsPFN9i48vng2vUbb65fWb00ujT69K3Tw7eHZ86fPXt+ULwrGXhjAgAAwL/TLVu9/k+Xdq//n6jFYc76/4vvhl/Vx8rU/3uaLfq1nQkAAMDR9vyrf/6R7DpbndnYuDr8cjUek243FNHp6bHxRPfhWNnq9X+21HZWAAAAQBMmm8kT6/8XanGYc/3/mR9f+rl+zyyEcLxc/z+59tn4QnPTWWhN/Dtx23MEAACgXcfLVl//z4v9/+njLQ9pCOGN16Zx+TWAc9X/2fvf/FQfq77//0xzU1xIaX/6PIq+H0Kn33ZGAAAAHGZPlS0W+7/n2yuf/HLiw679/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABN+zsAAP//q/0+uA==") r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x200080) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x1000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01005ffc0000000000000000000000000000020000000000640340d23bafa06a7a9b40caef332c53df296797aa9d06c71455868aa75cc408b076c8f04bcf9bdbb9abf737ad5e60ad00000000000000"], 0x0, 0xfc5f}, 0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r7, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 10.227712722s ago: executing program 8 (id=6766): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x561, &(0x7f0000000d00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffc, 0x6, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r6, 0x1, 0x4012, 0xffff) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") 10.227212402s ago: executing program 4 (id=6767): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='./file0\x00') 10.188988296s ago: executing program 42 (id=6767): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='./file0\x00') 8.921120437s ago: executing program 6 (id=6772): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x60) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000002c0)=0x30) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 7.500225962s ago: executing program 7 (id=6777): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000005c0), 0x53) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$eJzs3d9rHFsdAPDvTLL9mZoUfagFa7GVpGh3k8a2wYf6A9GnglqfbWOyCSGbbMhu2iYUTfEPEERUEASffBH8AwTpnyBCQd9FRbnc29770Id7u5fdne2PdDdJ6SYbsp8PnMyZMzP5nrPDzO6ZOcwE0LfOR8SFiHheq9UuRcRwVp5mKTabqb7e0ycPZuopiVrt1vtJRNIsq6829sr/PJltdiwifvi9iJ8kb8atrG8sTpdKxdVsvlBdWilU1jcuLyxNzxfni8uTkxPXpq5PXZ0a70o7hyLixnf+++tf/PG7N/761Xv/uv3/sZ8mWXnEy3Z0W7PpucZn0TIYEat7EawHBrL25FoFbfY1AAAHR+t3/pci4lIMx0Dj1xwAAABwmNS+MRQfJxE1AAAA4NBKG2NgkzSfjQMYijTN55tjeD8XJ9JSuVL9ylx5bXm2OVZ2JHLp3EKpOJ6NFR6JXFKfn2jkX85f2TI/GRGnI+JXw8cb8/mZcmm21xc/AAAAoE+c3NL//2i42f8HAAAADpmRXlcAAAAA2HP6/wAAAHD46f8DAADAofb9mzfrqdZ6//Xs3fW1xfLdy7PFymJ+aW0mP1NeXcnPl8vzjWf2Le30/0rl8srXYnntfqFarFQLlfWN20vlteXq7YXXXoENAAAA7KPTX3z0zyQiNr9+vJHqjvS6UsC+GHyblf+zd/UA9t9ArysA9Mxbff8Dh0qu1xUAei6JiN9vs7zj4J2/7U19AACA7hv9fPv7/+mO1wY2032qIrBHXP+D/uX+P/Qv9/+hf+ViIHTkob8lOyx/9/v/tdpbVQgAAOi6oUZK0nx2z38o0jSfjzjVeC1ALplbKBXHI+IzEfGP4dzR+vxEY8tkxz4DAAAAAAAAAAAAAAAAAAAAAAAAANBUqyVRAwAAAA61iPR/Sfb+r9Hhi0Nbrw8cSZ4NN6YRce93t35zf7paXZ2ol3/worz626z8Si+uYAAAAABbtfrprX48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTT0ycPZlppP+O+962IGGkXfzCONabHIhcRJz5MYvCV7ZKIGOhC/M2HEfHtH7eJn9SrFSNZLdrFP96t+GfatX/7+GlEnOxCfOhnj+rnn2+2O/7SON+Ybj3+jr7YdrAL8Tuf/9IX57+BNsd/vezULmOcffznQsf4DyPODrY//7TiJx3Ofxd2Gf/OjzY2Oi2r/SFitO33T/JarEJ1aaVQWd+4vLA0PV+cLy5PTk5cm7o+dXVqvDC3UCpmf9vG+OUX/vJ8u/af6BB/ZIf2X9xl+z95fP/JZ5vZXLv4Yxfa7/8zHeKn2f7/cpavLx9t5Teb+Ved+9Pfz23X/tkO7d9p/4/tsv2XfvDzf+9yVQBgH1TWNxanS6Xial9n3unTqP8sOhCtkNkpU8s6b62Snx2Uih3ATOuYeNabExMAANB1b/aBd+PO3lUIAAAAAAAAAAAAAAAAAAAA+lB3nhnWeib29k/Xa9lsTt54FjIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQC99GgAA///7fdEa") 7.21573419s ago: executing program 8 (id=6778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) syslog(0x3, &(0x7f00000007c0)=""/210, 0xd2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84020000100001042cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b130000018000003c0012800b00010062726964676500002c00028008001b00e709000008001b00ff03001005002c0005000000050016000000000008001a00"], 0x284}}, 0x20000844) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$PIO_UNIMAP(r5, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1c, 0x0, &(0x7f0000000840)={0xa1, 0x1, 0x400, "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"}, 0x0}) syz_usb_ep_write(r8, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='xen_mc_callback\x00', r10, 0x0, 0x80}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r9}, 0x10) 7.061768925s ago: executing program 3 (id=6780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='fscache_access_cache\x00', r7}, 0x18) io_setup(0x6, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x26, 0x336, &(0x7f00000001c0)="$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") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) 6.917686678s ago: executing program 7 (id=6781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000001380)="26c1570f73b86d3b858c0f23d80f21f835400000300f23f8673a2d660f2ce9c4e1c5ef16660f38810766baf80cb81ebf41831d1818bafc0c66ed2e0fc7a8fe8d0000c4e2c10862ff66ba4200ec", 0x4d}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.445812953s ago: executing program 2 (id=6782): sched_setscheduler(0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) (fail_nth: 1) 6.120554464s ago: executing program 7 (id=6783): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$bt_hci(r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000092000000100090f89500000080007709b6de9759006a0a26e42c0073309c7ef7b8e97d8a7e404c2f997b11f97d0ec2489447d7bb75b1261999c98c9f6e2573fb60a331eaa2b09db3e0822624b5751ccd07145d56eb087e858ecae85e1649af8a160ad26b68747c88745d914d6275bece81003ac8b2ce857f36832c03eb020c371a84904eaed93cd20dd7213f725840639fb980c5aa577fcc0aaeb481675642297945ebaaf9c5c8a0b03e31cc7b7e2a10b0455cbf2a5211acc7f1608078ceeb19a57b8d39ab67f46971c7b1"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2052}, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) readahead(r6, 0x8, 0x7f) 6.043432622s ago: executing program 3 (id=6784): unshare(0x60600) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440101fd00000009040000ff0202ffff052406000005240000000d240f0100000000000000000009ff00000000000000090582022000"], 0x0) 5.972169769s ago: executing program 2 (id=6785): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x60) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 5.63948057s ago: executing program 6 (id=6786): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x480, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@grpquota}]}, 0x2, 0x455, &(0x7f0000000580)="$eJzs282PU1UbAPDn3k6HlxdwquIHH+ooGid+zDCAysKFGkxcaGKiC11OZgaCFMYwYyKEKBiDK2NM3BuX/guudGOMKxO3ujckxLABXNXc9l5oS1uY0k6R/n7JZc6591zOeXrvac+5pw1gbE1n/yQRWyPij4iYamRbC0w3/ly5dGbx6qUzi0nUau/8ndTLXb50ZrEoWpy3Jc/MpBHp50ns6lDv6qnTxxaq1eWTeX5u7fiHc6unTj9/9PjCkeUjyyf2HTx4YP/8Sy/ue2EgcWZturzzk5XdO954/+u33vyyJf62OAZkutfBp2q1AVc3Wtua0snECBvCupQiIrtc5Xr/n4pSXL94U/H6ZyNtHDBUtVqttqX74bM14C6WRGu+S5dPNqQxwAYqPuiz+W+xFfvK+d9XhjsEGamLrzYmQFncV/KtcWQi0rxMuW1+O0jTEfHe2X++zbYYznMIAIAWP2bjn+c6jf/SeLCp3D352lAlIu6NiPsi4v6I2B4RD0TUyz4UEQ+vs/72RZIbxz/phb4Cu0XZ+O/lfG2rdfxXjP6iUspz2+rxl5PDR6vLe/PXZCbKm7L8fI86fjr0+1fdjjWP/7Itq78YC+btuDCxqfWcpYW1hduJudnFcxE7JzrFn1xbCUgiYkdE7OyzjqPPfL+727Gbx9/DANaZat9FPN24/mejLf5C0nt9cu5/UV3eO1fcFTf69bfzb3er/7biH4Ds+v+/4/1/Lf5K0rxeu7r+Os7/+UXXOU2/9/9k8m49PZnv+3hhbe3kfMRkcmglm9VWmvfvu35ukS/KZ/HP7GnEX5tqriWtv8cVr8SuiMhu4kci4tGIeCxv++MR8URE7OkR/y+vPflB//EPVxb/0rqu//XEZLTv6ZwoHfv5h5ZKKzfEf7X39T9QT83ke27l/e9W2tXf3QwAAAD/PWlEbI0knb2WTtPZ2cb35bdHpNWV1bVnD698dGKp8RuBSpTT4knXVNPz0Pl8Wt/In4uIxlcLiuP78+fG35Q21/OziyvVpVEHD2NuS5f+n/mrNOrWAUPn91owvvR/GF/6P4wv/R/GV4f+v3kU7QA2XqfP/09H0A5g47X1f8t+MEbM/2F86f8wvvR/GEurm+PmP5LvmSj+pz5Pv2sTUb4jmjG0RKR3RDMkhpQY7fsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoPwbAAD//0+W3b4=") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000a00)=ANY=[]) read$FUSE(r4, &(0x7f00000083c0)={0x2020}, 0x2020) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 5.259093957s ago: executing program 7 (id=6787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) (fail_nth: 1) 5.071720445s ago: executing program 7 (id=6788): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x561, &(0x7f0000000d00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffc, 0x6, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r6, 0x1, 0x4012, 0xffff) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") 5.036117458s ago: executing program 43 (id=6788): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x561, &(0x7f0000000d00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffc, 0x6, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r6, 0x1, 0x4012, 0xffff) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") 5.023195909s ago: executing program 2 (id=6790): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0x1, 0x263, &(0x7f0000010280)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, 0x0, 0x40000) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r4, r6, 0x0) setresuid(0xee00, 0xee00, 0x0) r9 = io_uring_setup(0x19be, &(0x7f0000000440)={0x0, 0x709f, 0x8, 0x11, 0xef}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r9, 0x17, 0x0, 0x1) 4.782336602s ago: executing program 6 (id=6791): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d60c94f327a06579a38452b61b10bc0b4630929fda218ac37999e5b848da3abeb3947814a0e9d1c5791ddd62d4d8472b2b6342c56c0b729a3bd9389d08cfd5ee7af5b34b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.699097371s ago: executing program 6 (id=6792): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x60) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000002c0)=0x30) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 4.602196449s ago: executing program 8 (id=6793): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nodelalloc}, {@nojournal_checksum}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 4.572873702s ago: executing program 3 (id=6794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000b001a007311a000000000009500008000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x800005, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000140)={{0x3c, @private=0xa010102, 0x0, 0x12, 'sh\x00', 0x14, 0x4, 0x9}, {@loopback, 0x12, 0x2000, 0x7, 0x6, 0x2}}, 0x44) 3.525376522s ago: executing program 8 (id=6795): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$bt_hci(r3, 0x0, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000092000000100090f89500000080007709b6de9759006a0a26e42c0073309c7ef7b8e97d8a7e404c2f997b11f97d0ec2489447d7bb75b1261999c98c9f6e2573fb60a331eaa2b09db3e0822624b5751ccd07145d56eb087e858ecae85e1649af8a160ad26b68747c88745d914d6275bece81003ac8b2ce857f36832c03eb020c371a84904eaed93cd20dd7213f725840639fb980c5aa577fcc0aaeb481675642297945ebaaf9c5c8a0b03e31cc7b7e2a10b0455cbf2a5211acc7f1608078ceeb19a57b8d39ab67f46971c7b1"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2052}, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.375899277s ago: executing program 3 (id=6796): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100000000090400000103000000092100000001220800cf058103"], 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000010000000c0000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000010000000100000180000000000010bbfec810698fa44017172ec9c610c48726331ced735871dae914f1f3b4f0a1ed4a65cb54634478f15c27c1d2dd9125d731e21c60594890fd9c8d603d5479ffe0661fecbecc8ed408cb5d213658e733148eacf64d1997f3cc7a163c3c8f2fa29b0bf7021b5d81f3adfbcebc0763fac416751bdde2d60bd9b2d8d906e9e7e612ab328f9c326d82cdaa4f5eaec85f2df7fc5a010f9b396f2ac9125f40d69f414138bf93dba716130783c74bae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) r5 = userfaultfd(0x80001) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000000000/0x4000)=nil, 0x4000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r2}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018d63047c4646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000000000060000008500000050000000000000000002acbc1f9e50d180799182edc1323bf68931e80e181651587f12a947b6d2fdf05fcb2461a7dddf00a9ad1347c38f409e5788d1b5611b9aa4e10778a88a29ffceb7a16d2a4748b855c696c3c80a3d51164bd3d679b363f83ef8c0fd573d4f59f0cdcea595", @ANYRES32=r4, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r10}, 0x10) socket$inet6(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) 3.362462448s ago: executing program 2 (id=6797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000006c0)=ANY=[], 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000600000001000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB="0000000000000053b8397f825b340a8979de4ad9", @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x41) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000300)="3ef20f01d9646736dc26baf80c66b8ddc0218b66efbafc0cec66650f009642babaa000b8ed00ef26660f380604baf80c66b84a73be8066efbafc0cb80400ef66b86e0000000f23c80f21f86635080090000f23f8660f38816320baf80c66b80c27bf8766efbafc0ced", 0x69}], 0x1, 0x43, 0x0, 0x0) 2.573600954s ago: executing program 8 (id=6798): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001001000000000000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @remote, 0x9}}, 0x0, 0x0, 0x4d, 0x0, "3023e519504254c1b5a34f91c57d8c79f12c8b32c21823a6be3126e5370ca14e54017a80a3d3e78f7a7b8c5895e68d01b9c347e864933b4b2dc1e00fd53b6ad9583f5dc3db99776f8d76917a816cc335"}, 0xd8) syz_usb_connect(0x0, 0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601010405"], 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x19, 0xc2, 0xa388, 0x0, 0x4, {[@md5sig={0x13, 0x12, "bb233372a509850c645129e213fe7442"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x2f}, @sack={0x5, 0x1a, [0x2d66, 0x0, 0x80000000, 0x5b, 0x6, 0xffffffff]}, @nop, @timestamp={0x8, 0xa, 0x7, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4}]}}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000185000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mprotect(&(0x7f0000a5c000/0x7000)=nil, 0x7000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x5) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.340056686s ago: executing program 8 (id=6799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) 2.268599503s ago: executing program 44 (id=6799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) 2.266617113s ago: executing program 2 (id=6801): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x480, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@grpquota}]}, 0x2, 0x455, &(0x7f0000000580)="$eJzs282PU1UbAPDn3k6HlxdwquIHH+ooGid+zDCAysKFGkxcaGKiC11OZgaCFMYwYyKEKBiDK2NM3BuX/guudGOMKxO3ujckxLABXNXc9l5oS1uY0k6R/n7JZc6591zOeXrvac+5pw1gbE1n/yQRWyPij4iYamRbC0w3/ly5dGbx6qUzi0nUau/8ndTLXb50ZrEoWpy3Jc/MpBHp50ns6lDv6qnTxxaq1eWTeX5u7fiHc6unTj9/9PjCkeUjyyf2HTx4YP/8Sy/ue2EgcWZturzzk5XdO954/+u33vyyJf62OAZkutfBp2q1AVc3Wtua0snECBvCupQiIrtc5Xr/n4pSXL94U/H6ZyNtHDBUtVqttqX74bM14C6WRGu+S5dPNqQxwAYqPuiz+W+xFfvK+d9XhjsEGamLrzYmQFncV/KtcWQi0rxMuW1+O0jTEfHe2X++zbYYznMIAIAWP2bjn+c6jf/SeLCp3D352lAlIu6NiPsi4v6I2B4RD0TUyz4UEQ+vs/72RZIbxz/phb4Cu0XZ+O/lfG2rdfxXjP6iUspz2+rxl5PDR6vLe/PXZCbKm7L8fI86fjr0+1fdjjWP/7Itq78YC+btuDCxqfWcpYW1hduJudnFcxE7JzrFn1xbCUgiYkdE7OyzjqPPfL+727Gbx9/DANaZat9FPN24/mejLf5C0nt9cu5/UV3eO1fcFTf69bfzb3er/7biH4Ds+v+/4/1/Lf5K0rxeu7r+Os7/+UXXOU2/9/9k8m49PZnv+3hhbe3kfMRkcmglm9VWmvfvu35ukS/KZ/HP7GnEX5tqriWtv8cVr8SuiMhu4kci4tGIeCxv++MR8URE7OkR/y+vPflB//EPVxb/0rqu//XEZLTv6ZwoHfv5h5ZKKzfEf7X39T9QT83ke27l/e9W2tXf3QwAAAD/PWlEbI0knb2WTtPZ2cb35bdHpNWV1bVnD698dGKp8RuBSpTT4knXVNPz0Pl8Wt/In4uIxlcLiuP78+fG35Q21/OziyvVpVEHD2NuS5f+n/mrNOrWAUPn91owvvR/GF/6P4wv/R/GV4f+v3kU7QA2XqfP/09H0A5g47X1f8t+MEbM/2F86f8wvvR/GEurm+PmP5LvmSj+pz5Pv2sTUb4jmjG0RKR3RDMkhpQY7fsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoPwbAAD//0+W3b4=") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000a00)=ANY=[]) read$FUSE(r4, &(0x7f00000083c0)={0x2020}, 0x2020) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 2.266205133s ago: executing program 5 (id=6789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000b001a007311a000000000009500008000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000140)={{0x3c, @private=0xa010102, 0x0, 0x12, 'sh\x00', 0x14, 0x4, 0x9}, {@loopback, 0x12, 0x2000, 0x7, 0x6, 0x2}}, 0x44) 1.6698269s ago: executing program 3 (id=6802): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0xa6e6, 0x410583) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000eb95"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000003980)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='sys_tz,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp932,dmask=00000000000000000070707,umask=00000000000000000012530,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,keep_last_dots,dmask=00000000000000000000003,iocharset=cp852,uid=', @ANYRESDEC, @ANYRES16], 0x1, 0x1524, &(0x7f0000002280)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5b, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 1.410823744s ago: executing program 2 (id=6803): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = dup2(r1, r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0xfbffffff, 0x2d42703a, 0x9, 0x90, "ff0800"}) r4 = syz_open_pts(r3, 0x54b001) r5 = gettid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}]) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffffffffffff"], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) r8 = accept$inet6(r2, &(0x7f0000000580)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f00000005c0)=0x1c) recvmmsg(r8, &(0x7f0000002180)=[{{&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=""/81, 0x51}, 0x6}, {{&(0x7f0000000740)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001d80)=[{&(0x7f00000007c0)=""/232, 0xe8}, {&(0x7f00000008c0)=""/110, 0x6e}, {&(0x7f0000000940)=""/142, 0x8e}, {&(0x7f0000000a00)=""/247, 0xf7}, {&(0x7f0000000b00)=""/236, 0xec}, {&(0x7f0000000c00)=""/29, 0x1d}, {&(0x7f0000000c40)=""/187, 0xbb}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/126, 0x7e}], 0x9, &(0x7f0000001e40)=""/92, 0x5c}, 0x699c}, {{&(0x7f0000001ec0)=@qipcrtr, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f40)=""/20, 0x14}, {&(0x7f0000001f80)=""/131, 0x83}, {&(0x7f0000002040)=""/19, 0x13}], 0x3, &(0x7f00000020c0)=""/140, 0x8c}, 0x4}], 0x3, 0x2000, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x400008, 0x3000, 0x2, 0x5, 0xf, "680c1acfa4a5000000070000faffffff000800"}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000002240)={0x0, 0x18, 0xb6, {0xb6, 0xd, "c8b6eca590f6cde583612a000bcb8b0d3a667ed123ab3371f41fb923549696e0895a42db3f87e04c20d1ba86f60772420eaf92cb5038180e0dd44cf0b5027b09e959796a3be6cb5b8c1670c7d17f9cf921bda6f30e9d0ae52e662a289ac05409bcb47145d7ffe127c9801e5918321b66120e7ac83aac6b459dadf54043f62ba4705fcefdeb823b9049564cea635c4f8f2bbf06a0da4ad5d0a4d0fc31e154ed0c1ba8624dc576b66f2e50fd1ce159c6e1cf1f688a"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x20, 0xf, 0xe7, "84503b7d9e5ee5d2b4a0949edc0972f9813b8e8070b3a552a1815b2e3124dc6e2c48e8e8a416d54659aaf03eec71236dfd1e21f481b4e21248bfe714115f4561b721623bc33b5f3c946ace6de048a59fe3ff7e413770fe4d661ede50f4ff5277c06e4616c583c6b8bfb65170933fd6c5781dfb01c414c5325ce9f8aa6866f55888398ff50bc91f62efbc594df5c6aee00341000c757bc1fdbc561ef7525a022795d5f1eea421bbd11c718e01e797f42c5983988170a5bbe229a2c66ae83eec5f788e53ee127c01914dd8cb7e6afe6e3b5d6c441ef7c2641396feaf680e92a94f0a3fd279516d9d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x0, 0xf7, {0xf5, "82771ea460ce8b924549af139ac13f535a88855044b7b3daf14e6bdfc59f881d68ce6183d96e73c9547f8da00057509e597ddc4be09a0a9897ea91b600bd8f4ef89f67a3d2eae52b5d958e19d5db33a5a69a3dbbc62971f0b4b88854ab6ad2662be00c9ab3ab827a1a94c2d0ea68446130fb67217c3d763320a5020e5116d5364dc489fb7cb93291648f5f2f1b2fa8780c2a6ab3b11158465f45900e207ad9e203ee992ba5a8feddec939463656b00174006cf3823d4f01afd8d731bb58f15433bb79c5b76b36a416e77414d2a3d1e787718fef0d83592bb2056fa6c4dda44a415f80a7aa75236ba51c9cac773dc0bef765f5e3453"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x40}, &(0x7f00000004c0)={0x20, 0x0, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x0, 0x6, 0x4, "6689b5ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.3554414s ago: executing program 6 (id=6804): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nodelalloc}, {@nojournal_checksum}]}, 0x1, 0x783, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.211325794s ago: executing program 5 (id=6805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB="646973636172642c6572726f72733d72656d6f756e742d726f2c74696d655f6f66667365743d3078303030303030303030306d655f6f66667365743d30783030301b0030303030303030303030352c6e616d656b6173653d312c646973636172642c616c6c6f775fa311696d653d30303030303030303030303030303030303030303030342c6572726f72733d72656d6f756e742d726f2c757466382c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030362c00"/203], 0x1, 0x153b, &(0x7f0000001f80)="$eJzs3AucTlXXAPC19t5nDImnSS7D3nsdnuSyTZLkkiSXJEmSJLeEpEleSUgMIUlDEpLLkMQQksvEpHG/3y8JSdIkSUhuyf5+E37qrb73/b73/fL+vln/3+/87DXnrH3WedZznuecg/m269BaTWpXb0RE8C/BC38kAUAsAAwEgLwAEABA+bjycYAB5JSY9K/thP17PZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/x1z/+Bn///x+Hv//9HMsuM/XJNmeu6AcT8sync/+yN+///VvDPbMT9z964/9lV7JUugP0H4PM/O8jxp2u4/9kb95+x7OxKP3++0gtE/sNegyM5LzTmrzp+xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsL3DaX6YA4NL4StfFGGOMMcYYY4yxfx+f40pXwBhjjDHGGGOMsf97CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgPGsD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv+r/OehJ7wAvaA3JEEf6AsvQj/oDwPgJRgIL8MgeAUGw6uQDENgKLwGw+B1GA5vwAgYCaPgTRgNb8EYGAvjYDykwASYCG/DJHgHJsO7MAWmQipMg+nwHsyAmTAL3ofZ8AHMgbkwD+ZDGnwIC2AhpMNHsAg+hgxYDEtgKSyD5bACVsIqWA1rYC2sg/WwATbCJtgMW2ArbIPtsAM+gZ3wKeyC3bAHPoO98Pmv8gGSfunnf5d/6u/yuyEgoECBChXGYAzGYizmwlyYG3NjHsyDEYxgHMZhPsyH+TE/FsSCGI/xWASLoEGDhIRFsShGMYrFsTiWwBJYCkuhQ4cJmIBl8SYsh+WwPJbHClgBK2IlrIRVsApWxapYDathdayONbAG1sJaeBfehX2wLtbFelgP62P9S4+nsBE2wsbYGJtgE2yKTbEZNsMW2AJbYStsja2xDbbBdtgO22N77IAdMBETsSN2xE7YCTtjZ+yCXbArdsVu2B27Zz6fA/AFfAF7Yw3RB/tiX+yHyTkG4Ev4Er6Mg/AVfAVfxWQcgkPxNXwNX8fheBJH4EgchaOwqngLx+BYJDEeUzAFJ+JEnISTMKvQd3EqpuI0nI7TcQbOxJn4Ps7GD/ADnItzcT6mYRouwIWYjum4CE9hBi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+gAsBPcTfuxmTci3txH+7D/bgfD+ABzMRMPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hs/NeNPym5OhlEFiWUiBExIlbEilwil8gtcos8Io+IiIiIE3Ein8gn8ov8oqAoKOJFvCgiiggjjCARxgCAiIqoKC6KixKihCglSgknnEgQCaKsKCvKiXKivLhFVBC3ioqikmjrqogqoqpo56qJO0R1UV3UEDVFLVFb1BZ1RB1RV9QV9UQ9UV/UFw3E/aKh6IMD8EGR1ZkmYgg2FUOxmWgu5MVPsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHx1r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZEL+6gha8pasra8SybB3bKuvEfWk/fK+vI+2UDeLxvKB2Qj+aBsLB+STeTDsql8RDaTzWUL2VK2ko/K1vIx2Ua2le3k47K9fEJ2kE/KRPmU7Cj9xbfIM7KLfFZ2lc/JbrK77CF/luell71kbwl9QPaVL8p+sr8cEAsA8mU5SL4iB8tXZbIcIofK1+Qw+bocLt+QI+RIOUq+KUfLt+QYOVaOk+NlipwgJ8q35ST5jpws35VT5FSZKqfJAXLgLzPNkvIf5r/9B/mDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tzF1wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvmFUKVVaOVVGJagb/yf5qri6QZVQJX+Tf6m+pD+pr5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezLvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBebHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1b/4vxZp/zl+b0/WeAx10v31km6j+6rX9T9dH89QL+kB+qX9SD9ih6sX9XJeogeql/Tw/Trerh+Q4/QI/Uo/aYerd/SY/RYPU6P1yl6gp6o39aT9Dt6sn5XT9FTdaqepqfr9/QMPVPP0u/r2foDPUfP1fP0fJ2mP9QL9EKdrj/Si/THOkMv1kv0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/Qneqf+VO/Su/Ue/Zneqz/X+/QXer/+Uh/QX+lM/bU+qL/Rh/S3+rD+Th/R3+uj+pg+rn/QJ/SP+qQ+pU/rM/qs/kmf0z/r89pnXdxnfb0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSafyWfym/ymoClo4k28KWKKmCxkyBQ1RU3URE1xU9yUMCVMKVPKOONMgkkwZU1ZU86UM+VNeVPBVDAVTUVT2VQ2t5nbzO3mdnOHucPcae40NU1NU9vUNnVMHVPX1DX1TD1T39Q3DUwD09A0NI1MI9PYNDZNTBPT1DQ1zUwz08K0MK1MK9PatDZtTBvTzrQz7U1708F0MIkm0XQ0HU0n08l0Np1NF9PFdDVdTTfTzfQwPUxP09P0Mr1MkkkyfU1f08/0MwPMADPQDDSDzCAz2Aw2ySbZDDVDzTAzzAw3w80IM9KMyrpQNW+ZMWasGWfGmxSTYiaaiWaSmWQmm8lmipliUk2qmW6mmxlmhpllZpnZZraZY+aYeWaeSTNpZoFZYNJNullkFpkMk2GWmCVmmVlmVpgVZpVZZdaYNWYdrDMbzAazyWwyW8wWs81sMzvMDrPT7DS7zC6zx+wxe81es8/sM/vNfnPAHDCZJtMcNAfNIXPIHDaHzRFzxBw1R81xc9ycMCfMSXPSnDanzVlT4OL3pTexNqfNZa+yue3VNo/Na/8+LmgL2Xhb2Bax2ua3BX4TG2ttCVvSlrKlrbNlbIK98XdxRVvJVrZV7G22qr3dVvtdXMfebevae2w9e6+tbe/6TVzf3mcb2IdtQ0QA29w2ti1tE/uwbWofsc1sc9vCtrTt7RO2g33SJtqnbEf79O/iBXahXWVX2zV2rd1ld9vT9ow9ZL+1Z+1PtpftbQfal+0g+4odbF+1yXbI7+JR9k072r5lx9ixdpwd/7t4ip1qU+00O92+Z2fYmb+L0+yHdrZNt3PsXDvPzv8lzqop3X5kF9mPbYYNYIldapfZ5XaFXXmpVp/Xrrcb7Ea7035qt9itdpvdbndcuhC2u+0e+5ndaz+3B+03dr/90h6wh22m/fqXOOv4Dtvv7BH7vT1qj9nj9gd7wv6oLmVnHfsP9md73noLhAQkSVFAMZSDYikn5aKrKDddTXkoL0XoGoqjaykfXUf5qQAVpEIUT4WpCGkyZIkopKJUjKJ0PV0qrxSVJkdlKIFupLJ0E5Wjm6k83UIV6FaqSJWoMlWh26gq3U7V6A6qTndSDapJtag23UV16G6qS/dQPbqX6tN91IDup4b0ADWiB6kxPURN6GFqSo9QM2pOLagltaJHqTU9Rm2oLbWjx6k9PUEd6ElKpKeoIz1Nnehv1JmeoS70LHWl56gbdace9Dz1pBeoF/WmJOpDfelF6kf9aQC9RAPpZRpEr9BgepWSaQgNpddoGL1Ow+kNGkEjaRS9SaPpLRpDY2kcjacUmkAT6W2aRO/QZHqXptBUSqVpNJ3eoxk0k2bR+zSbPqA5NJfm0XxKow9pAS2kdPqIFtHHlEGLaQktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtAntJM+pV20m/bQZ7SXPqd99AXtpy/pAH1FmfQ1HaRv6BB9S4fpO9+bvqejdIyO0w90gn6kk3SKTtMZOks/0Tn6mc6TJwgxFKEMVRiEMWGOMDbMGeYKrwpzh1eHecK8YSS8JowLrw3zhdeF+cMCYcGwUBgfFg6LhDo0oQ0pDMOiYbEwGl4fFg9vCEuEJcNSYenQhWXChPDGsGx4U1guvDksH94SVghvDSuGlcKH760S3hZWDW8Pq4V3hNXDO8MaYc2wVlg7vCusE94d1g3vCeuF94blwvvCBuH9YcPwgbBR+GDYOHwobBI+HDYNHwmbhc3DFmHLsFX4aNg6fCxsE7YN24WPh+3DJ8IO4ZNhYvhU2DF8+pf19y388/VJYZ+wb/hi+GLo/T1yXnR+NC36YXRBdGE0PfpRdFH042hGdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH10Q3Rj1PvaOcChE0465QIX43K4WJfT5XJXudzuapfH5XURd42Lc9e6fO46l98VcAVdIRfvCrsiTjvjrCMXuqKumIu6611xd4Mr4Uq6Uq60c66MS3AtXSvXyrV2j7k2rq1r5x53j7sn3BPuSfeke8p1dE+7Tu5vrrN7xnVxz7pn3XOum+vuerjnXU83Ic+FczLJ9XV9XT/Xzw1wA9xAN9ANcoPcYDfYJbtkN9QNdcPcMDfcDXcj3Ag3yo1yo91oN8aNcePcOJfiUtxEN9FNcpPcZDfZTXFTXKpLddPddDfDzXBVZ17Yyxw3x81z81yaS3MLXNY1Y7pb5Ba5DJfhlrglbplb5la4FW6VW+XWuDVunVvnNrgNbpPb5La4LW6b2+Z2uB1up9vpdvm8FyZ1e90+t8/td/vdAfeVy3Rfu4PuG3fIfesOu+/cEfe9O+qOuePuB3fC/ehOulPutDvjzrqf3Dn3szvvvEuJTIhMjLwdmRR5JzI58m5kSmRqJDUyLTI98l5kRmRmZFbk/cjsyAeROZG5kXmR+ZG0yIeRBZGFkfTIR5FFkY8jGZHFkSWRpZFlkeUR7wtvCX1RX8xH/fW+uL/Bl/AlfSlf2jtfxif4G31Zf5Mv52/25f0tvoK/1Vf0lXxl/4hv5pv7Fr6lb+Uf9a39Y76Nb+vb+cd9e/+E7+Cf9In+Kd/RP+07+b/5zv4Z38U/67v653w339338M/7nv4F38v39km+j+/rX/T9fH8/wL/kB/qX/SD/ih/sX/XJfogf6l/zw/zrfrh/w4/wI/2omDf96Eu3yDDep/gJfqJ/20/y7/jJ/l0/xU/1qX6an+7f8zP8TD/Lv+9n+w/8HD/Xz/PzfZr/0C/wC326/8gv8h/7DL/40kNlv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+k/9Lr/b7/Gf+b3+c7/Pf+H3+y/9Af+Vz/Rf+4P+G3/If+sP++/8Ef+9P+qP+eP+B3/C/+hP+lP+tD/jz/qf/Dn/sz/P/2eNMcYYY+yfMuHyUPx2zYXH+X3+IEf8auO+AHD11kKZv16fdUW5Lv+FcX8R3z4CAE/17vrgpaVGjaSkpIvbZkgIis0FuPQ3QVli4HK8GNrBE5AIbaHsH9bfX3Q/S/9g/ugtALl+lRMLl+PL838BgEl/MP+jj49aUCE8HfffzD8XoESxyzk54XK8GNr98nylLZT7k/oLtP6T+vHi/Dm/TAFo86uc3HA5vlx/AjwGT0Pib7ZkjDHGGGOMMcYu6C8qd750/3npX3z+0f15vLqckwMux//o/pwxxhhjjDHGGGNX3jPdezz5aGJi287/80G1/1XWPz1oCv9XM/PgDwfeA1z6iQKAf3FCgKyB/CuPYvNfsq/ki6fO369adsYH8J/Ryn/H4Ap/MDHGGGOMMcb+7S5f9P/25+pKFcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVDf8WvE7vSx8gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdaf8VAAD//3aq+3A=") r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sched_setscheduler(r1, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x80000000) 692.221783ms ago: executing program 3 (id=6806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000b001a007311a000000000009500008000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x800005, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000140)={{0x3c, @private=0xa010102, 0x0, 0x12, 'sh\x00', 0x14, 0x4, 0x9}, {@loopback, 0x12, 0x2000, 0x7, 0x6, 0x2}}, 0x44) 473.332115ms ago: executing program 6 (id=6807): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140), 0x0, 0x8000c61) r7 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1a, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES8=r7, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 94.251671ms ago: executing program 5 (id=6808): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x53) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$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") 0s ago: executing program 1 (id=6800): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 9025] EXT4-fs (loop0): unmounting filesystem. [ 1888.793377][T26639] loop0: detected capacity change from 0 to 512 [ 1888.811598][T26639] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1888.853272][T26639] EXT4-fs (loop0): 1 truncate cleaned up [ 1888.859011][T26639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1888.948803][T26596] loop8: detected capacity change from 0 to 1024 [ 1888.966101][T26596] EXT4-fs: Ignoring removed nobh option [ 1888.973630][T26596] EXT4-fs: Ignoring removed bh option [ 1888.989140][T26596] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1889.045994][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1889.163403][T26596] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1889.252943][T26596] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.6349: Allocating blocks 497-513 which overlap fs metadata [ 1889.336146][T26657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6360'. [ 1889.525832][T26596] EXT4-fs (loop8): pa ffff88813ede4888: logic 256, phys. 385, len 8 [ 1889.532739][ T24] uclogic 0003:256C:006D.017E: failed retrieving Huion firmware version: -22 [ 1889.533921][T26596] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1889.542736][ T24] uclogic 0003:256C:006D.017E: failed probing parameters: -22 [ 1889.560174][ T24] uclogic: probe of 0003:256C:006D.017E failed with error -22 [ 1889.630622][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1889.982028][T16969] usb 9-1: USB disconnect, device number 94 [ 1890.062213][T26669] loop2: detected capacity change from 0 to 2048 [ 1890.101520][T26673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6367'. [ 1890.114519][T26669] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1890.127849][T26673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26673 comm=syz.0.6367 [ 1890.149390][ T28] audit: type=1400 audit(1766688641.185:1811): avc: denied { ioctl } for pid=26672 comm="syz.0.6367" path="socket:[126964]" dev="sockfs" ino=126964 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1890.333401][ T28] audit: type=1400 audit(1766688641.375:1812): avc: denied { accept } for pid=26676 comm="syz.9.6368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1890.528104][T26683] incfs: Options parsing error. -22 [ 1890.533484][T26683] incfs: mount failed -22 [ 1890.564925][T18119] EXT4-fs (loop8): unmounting filesystem. [ 1890.666142][T26693] FAULT_INJECTION: forcing a failure. [ 1890.666142][T26693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1890.679336][T26693] CPU: 0 PID: 26693 Comm: syz.1.6370 Tainted: G W syzkaller #0 [ 1890.688265][T26693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1890.698308][T26693] Call Trace: [ 1890.701582][T26693] [ 1890.704503][T26693] __dump_stack+0x21/0x24 [ 1890.708832][T26693] dump_stack_lvl+0xee/0x150 [ 1890.713414][T26693] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1890.718431][T26693] dump_stack+0x15/0x24 [ 1890.722578][T26693] should_fail_ex+0x3d4/0x520 [ 1890.727252][T26693] should_fail+0xb/0x10 [ 1890.731399][T26693] should_fail_usercopy+0x1a/0x20 [ 1890.736419][T26693] _copy_from_user+0x1e/0xc0 [ 1890.741001][T26693] iovec_from_user+0x1aa/0x2e0 [ 1890.745762][T26693] ? _parse_integer+0x2a/0x40 [ 1890.750438][T26693] __import_iovec+0x71/0x470 [ 1890.755030][T26693] import_iovec+0x7c/0xb0 [ 1890.759365][T26693] ___sys_sendmsg+0x1e4/0x290 [ 1890.764039][T26693] ? __sys_sendmsg+0x270/0x270 [ 1890.768803][T26693] ? __kasan_check_write+0x14/0x20 [ 1890.773904][T26693] ? proc_fail_nth_write+0x17a/0x1f0 [ 1890.779186][T26693] ? __fdget+0x19c/0x220 [ 1890.783421][T26693] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1890.788352][T26693] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1890.793808][T26693] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1890.799877][T26693] x64_sys_call+0x171/0x9a0 [ 1890.804386][T26693] do_syscall_64+0x4c/0xa0 [ 1890.808800][T26693] ? clear_bhb_loop+0x30/0x80 [ 1890.813478][T26693] ? clear_bhb_loop+0x30/0x80 [ 1890.818155][T26693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1890.824048][T26693] RIP: 0033:0x7f3c5598f749 [ 1890.828459][T26693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1890.848064][T26693] RSP: 002b:00007f3c543d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1890.856479][T26693] RAX: ffffffffffffffda RBX: 00007f3c55be6180 RCX: 00007f3c5598f749 [ 1890.864442][T26693] RDX: 0000000000008000 RSI: 00002000000012c0 RDI: 0000000000000009 [ 1890.872406][T26693] RBP: 00007f3c543d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1890.880371][T26693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.888332][T26693] R13: 00007f3c55be6218 R14: 00007f3c55be6180 R15: 00007ffd19498208 [ 1890.896301][T26693] [ 1891.484267][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1891.566332][T26711] loop1: detected capacity change from 0 to 512 [ 1892.009834][T26715] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6375'. [ 1892.498747][T26722] FAULT_INJECTION: forcing a failure. [ 1892.498747][T26722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1892.513559][T26722] CPU: 1 PID: 26722 Comm: syz.8.6381 Tainted: G W syzkaller #0 [ 1892.522510][T26722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1892.532553][T26722] Call Trace: [ 1892.535817][T26722] [ 1892.538727][T26722] __dump_stack+0x21/0x24 [ 1892.543041][T26722] dump_stack_lvl+0xee/0x150 [ 1892.547611][T26722] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1892.552612][T26722] ? kernel_text_address+0xa0/0xd0 [ 1892.557711][T26722] ? unwind_get_return_address+0x4d/0x90 [ 1892.563326][T26722] dump_stack+0x15/0x24 [ 1892.567464][T26722] should_fail_ex+0x3d4/0x520 [ 1892.572122][T26722] should_fail+0xb/0x10 [ 1892.576259][T26722] should_fail_usercopy+0x1a/0x20 [ 1892.581268][T26722] _copy_from_user+0x1e/0xc0 [ 1892.585838][T26722] copy_from_sockptr+0x6f/0x90 [ 1892.590584][T26722] do_tcp_getsockopt+0xada/0x2290 [ 1892.595590][T26722] ? __cfi_do_tcp_getsockopt+0x10/0x10 [ 1892.601030][T26722] ? memcpy+0x56/0x70 [ 1892.604993][T26722] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1892.610348][T26722] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1892.616050][T26722] ? avc_has_perm+0x158/0x240 [ 1892.620709][T26722] ? __cfi_avc_has_perm+0x10/0x10 [ 1892.625717][T26722] ? __cfi_selinux_socket_getsockopt+0x10/0x10 [ 1892.631854][T26722] ? __kasan_check_write+0x14/0x20 [ 1892.636943][T26722] ? mutex_unlock+0x89/0x220 [ 1892.641515][T26722] tcp_getsockopt+0x73/0x130 [ 1892.646089][T26722] sock_common_getsockopt+0xaa/0xc0 [ 1892.651271][T26722] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 1892.657144][T26722] __sys_getsockopt+0x215/0x4a0 [ 1892.661984][T26722] __x64_sys_getsockopt+0xbf/0xd0 [ 1892.666989][T26722] x64_sys_call+0x3d/0x9a0 [ 1892.671385][T26722] do_syscall_64+0x4c/0xa0 [ 1892.675780][T26722] ? clear_bhb_loop+0x30/0x80 [ 1892.680440][T26722] ? clear_bhb_loop+0x30/0x80 [ 1892.685097][T26722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1892.690981][T26722] RIP: 0033:0x7f0dbd58f749 [ 1892.695377][T26722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1892.714964][T26722] RSP: 002b:00007f0dbe3b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1892.723360][T26722] RAX: ffffffffffffffda RBX: 00007f0dbd7e5fa0 RCX: 00007f0dbd58f749 [ 1892.731311][T26722] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 1892.739263][T26722] RBP: 00007f0dbe3b0090 R08: 0000200000000180 R09: 0000000000000000 [ 1892.747215][T26722] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1892.755171][T26722] R13: 00007f0dbd7e6038 R14: 00007f0dbd7e5fa0 R15: 00007fffa32a3e08 [ 1892.763131][T26722] [ 1892.785357][T26711] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.6379: inode has both inline data and extents flags [ 1892.805414][T26711] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.6379: couldn't read orphan inode 15 (err -117) [ 1892.822181][T26711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1893.557287][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1893.723979][T26747] loop1: detected capacity change from 0 to 2048 [ 1894.031205][T26747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1895.210068][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1895.388832][T26773] futex_wake_op: syz.2.6397 tries to shift op by -1; fix this program [ 1895.418064][ T28] audit: type=1326 audit(1766688646.455:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1895.527389][T26778] input: syz1 as /devices/virtual/input/input27 [ 1895.674180][ T28] audit: type=1326 audit(1766688646.605:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1895.740728][ T28] audit: type=1326 audit(1766688646.605:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1895.788820][ T28] audit: type=1326 audit(1766688646.605:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1895.833553][ T28] audit: type=1326 audit(1766688646.605:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1895.865020][ T28] audit: type=1326 audit(1766688646.605:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1895.920956][ T28] audit: type=1326 audit(1766688646.745:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1895.944745][ T28] audit: type=1326 audit(1766688646.745:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1895.968498][ T28] audit: type=1326 audit(1766688646.745:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1896.271892][ T28] audit: type=1326 audit(1766688646.745:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26771 comm="syz.2.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1897.767942][T26809] loop1: detected capacity change from 0 to 1024 [ 1897.776845][T26811] loop2: detected capacity change from 0 to 2048 [ 1897.923654][T26815] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6405'. [ 1899.089806][T26826] FAULT_INJECTION: forcing a failure. [ 1899.089806][T26826] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.102467][T26826] CPU: 0 PID: 26826 Comm: syz.9.6409 Tainted: G W syzkaller #0 [ 1899.111414][T26826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1899.121468][T26826] Call Trace: [ 1899.124743][T26826] [ 1899.127667][T26826] __dump_stack+0x21/0x24 [ 1899.131995][T26826] dump_stack_lvl+0xee/0x150 [ 1899.136579][T26826] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1899.141605][T26826] ? wake_up_process+0x10/0x20 [ 1899.146358][T26826] dump_stack+0x15/0x24 [ 1899.150508][T26826] should_fail_ex+0x3d4/0x520 [ 1899.155189][T26826] __should_failslab+0xac/0xf0 [ 1899.159963][T26826] should_failslab+0x9/0x20 [ 1899.164471][T26826] kmem_cache_alloc_node+0x42/0x340 [ 1899.169691][T26826] ? __alloc_skb+0xea/0x4b0 [ 1899.174199][T26826] __alloc_skb+0xea/0x4b0 [ 1899.178532][T26826] fdb_notify+0x78/0x130 [ 1899.182778][T26826] fdb_delete+0x8b9/0xb20 [ 1899.187113][T26826] fdb_delete_local+0x3c8/0x480 [ 1899.191967][T26826] br_fdb_changeaddr+0x1b3/0x1c0 [ 1899.196906][T26826] br_device_event+0x33c/0x770 [ 1899.201670][T26826] ? __cfi_br_device_event+0x10/0x10 [ 1899.206955][T26826] ? packet_notifier+0x8cf/0x8e0 [ 1899.211899][T26826] ? ip6mr_device_event+0x1e0/0x200 [ 1899.217103][T26826] raw_notifier_call_chain+0xa1/0x110 [ 1899.222485][T26826] dev_set_mac_address+0x329/0x430 [ 1899.227605][T26826] ? __cfi_dev_set_mac_address+0x10/0x10 [ 1899.233247][T26826] dev_set_mac_address_user+0x31/0x50 [ 1899.238625][T26826] dev_ifsioc+0x770/0xed0 [ 1899.242959][T26826] ? dev_ioctl+0xd10/0xd10 [ 1899.247374][T26826] ? __kasan_check_write+0x14/0x20 [ 1899.252478][T26826] ? mutex_lock+0x8d/0x1a0 [ 1899.256893][T26826] ? __cfi_mutex_lock+0x10/0x10 [ 1899.261746][T26826] ? dev_get_by_name_rcu+0xe5/0x130 [ 1899.266942][T26826] dev_ioctl+0x556/0xd10 [ 1899.271189][T26826] sock_do_ioctl+0x23f/0x310 [ 1899.275779][T26826] ? sock_show_fdinfo+0xb0/0xb0 [ 1899.280637][T26826] ? selinux_file_ioctl+0x377/0x480 [ 1899.285844][T26826] sock_ioctl+0x4d8/0x6e0 [ 1899.290174][T26826] ? __cfi_sock_ioctl+0x10/0x10 [ 1899.295026][T26826] ? __fget_files+0x2d5/0x330 [ 1899.299703][T26826] ? security_file_ioctl+0x95/0xc0 [ 1899.304825][T26826] ? __cfi_sock_ioctl+0x10/0x10 [ 1899.309679][T26826] __se_sys_ioctl+0x12f/0x1b0 [ 1899.314353][T26826] __x64_sys_ioctl+0x7b/0x90 [ 1899.318944][T26826] x64_sys_call+0x58b/0x9a0 [ 1899.323463][T26826] do_syscall_64+0x4c/0xa0 [ 1899.327888][T26826] ? clear_bhb_loop+0x30/0x80 [ 1899.332565][T26826] ? clear_bhb_loop+0x30/0x80 [ 1899.337099][T26811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1899.337241][T26826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1899.346050][T26809] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1899.351490][T26826] RIP: 0033:0x7fdd7078f749 [ 1899.364262][T26826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1899.383865][T26826] RSP: 002b:00007fdd71625038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1899.392277][T26826] RAX: ffffffffffffffda RBX: 00007fdd709e5fa0 RCX: 00007fdd7078f749 [ 1899.400250][T26826] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000006 [ 1899.408219][T26826] RBP: 00007fdd71625090 R08: 0000000000000000 R09: 0000000000000000 [ 1899.416187][T26826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1899.424156][T26826] R13: 00007fdd709e6038 R14: 00007fdd709e5fa0 R15: 00007ffc8b0e5a48 [ 1899.432144][T26826] [ 1899.473901][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1900.101246][T26856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6415'. [ 1900.536642][T26862] loop9: detected capacity change from 0 to 4096 [ 1900.552736][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 1900.552751][ T28] audit: type=1400 audit(1766688651.595:1866): avc: denied { mounton } for pid=26861 comm="syz.9.6417" path="/425/file0" dev="tmpfs" ino=2606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1900.861610][T26862] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1900.891403][ T28] audit: type=1400 audit(1766688651.695:1867): avc: denied { create } for pid=26859 comm="syz.8.6416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1900.928604][ T28] audit: type=1400 audit(1766688651.725:1868): avc: denied { setopt } for pid=26859 comm="syz.8.6416" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1900.949392][ T28] audit: type=1400 audit(1766688651.735:1869): avc: denied { write } for pid=26859 comm="syz.8.6416" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1900.970023][ T28] audit: type=1400 audit(1766688651.755:1870): avc: denied { unlink } for pid=26859 comm="syz.8.6416" name="#39b" dev="tmpfs" ino=2570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1901.002706][T26862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26862 comm=syz.9.6417 [ 1901.024449][ T28] audit: type=1400 audit(1766688651.915:1871): avc: denied { read } for pid=26866 comm="syz.1.6419" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1901.047410][ T28] audit: type=1400 audit(1766688651.915:1872): avc: denied { open } for pid=26866 comm="syz.1.6419" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1901.070651][ T28] audit: type=1400 audit(1766688651.915:1873): avc: denied { ioctl } for pid=26866 comm="syz.1.6419" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1901.369963][ T28] audit: type=1400 audit(1766688651.925:1874): avc: denied { read write } for pid=26861 comm="syz.9.6417" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1901.396998][ T28] audit: type=1400 audit(1766688651.925:1875): avc: denied { open } for pid=26861 comm="syz.9.6417" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1901.432008][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1901.465395][T26878] FAULT_INJECTION: forcing a failure. [ 1901.465395][T26878] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.490952][T26878] CPU: 0 PID: 26878 Comm: syz.9.6422 Tainted: G W syzkaller #0 [ 1901.499915][T26878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1901.509967][T26878] Call Trace: [ 1901.513248][T26878] [ 1901.516179][T26878] __dump_stack+0x21/0x24 [ 1901.520509][T26878] dump_stack_lvl+0xee/0x150 [ 1901.525100][T26878] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1901.530124][T26878] ? __kasan_check_write+0x14/0x20 [ 1901.535234][T26878] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1901.540694][T26878] dump_stack+0x15/0x24 [ 1901.544850][T26878] should_fail_ex+0x3d4/0x520 [ 1901.549528][T26878] __should_failslab+0xac/0xf0 [ 1901.554291][T26878] should_failslab+0x9/0x20 [ 1901.558786][T26878] kmem_cache_alloc_node+0x42/0x340 [ 1901.563981][T26878] ? __alloc_skb+0xea/0x4b0 [ 1901.568501][T26878] ? br_get_link_af_size_filtered+0xe0/0x180 [ 1901.574484][T26878] __alloc_skb+0xea/0x4b0 [ 1901.578814][T26878] rtmsg_ifinfo_build_skb+0x7c/0x190 [ 1901.584101][T26878] rtnetlink_event+0xd2/0x1a0 [ 1901.588785][T26878] raw_notifier_call_chain+0xa1/0x110 [ 1901.594164][T26878] call_netdevice_notifiers_mtu+0x12d/0x1b0 [ 1901.600065][T26878] ? dev_set_mtu_ext+0x640/0x640 [ 1901.605004][T26878] ? macsec_change_mtu+0xaf/0x130 [ 1901.610026][T26878] dev_set_mtu_ext+0x463/0x640 [ 1901.614798][T26878] ? __cfi_dev_set_mtu_ext+0x10/0x10 [ 1901.620080][T26878] dev_set_mtu+0x44/0xc0 [ 1901.624322][T26878] dev_ifsioc+0x490/0xed0 [ 1901.628652][T26878] ? dev_ioctl+0xd10/0xd10 [ 1901.633069][T26878] ? __kasan_check_write+0x14/0x20 [ 1901.638175][T26878] ? mutex_lock+0x8d/0x1a0 [ 1901.642591][T26878] ? __cfi_mutex_lock+0x10/0x10 [ 1901.647444][T26878] ? dev_get_by_name_rcu+0xe5/0x130 [ 1901.652636][T26878] dev_ioctl+0x556/0xd10 [ 1901.656879][T26878] sock_do_ioctl+0x23f/0x310 [ 1901.661469][T26878] ? sock_show_fdinfo+0xb0/0xb0 [ 1901.666330][T26878] ? selinux_file_ioctl+0x377/0x480 [ 1901.671533][T26878] sock_ioctl+0x4d8/0x6e0 [ 1901.675869][T26878] ? __cfi_sock_ioctl+0x10/0x10 [ 1901.680723][T26878] ? __fget_files+0x2d5/0x330 [ 1901.685399][T26878] ? security_file_ioctl+0x95/0xc0 [ 1901.690511][T26878] ? __cfi_sock_ioctl+0x10/0x10 [ 1901.695359][T26878] __se_sys_ioctl+0x12f/0x1b0 [ 1901.700036][T26878] __x64_sys_ioctl+0x7b/0x90 [ 1901.704618][T26878] x64_sys_call+0x58b/0x9a0 [ 1901.709115][T26878] do_syscall_64+0x4c/0xa0 [ 1901.713529][T26878] ? clear_bhb_loop+0x30/0x80 [ 1901.718207][T26878] ? clear_bhb_loop+0x30/0x80 [ 1901.722884][T26878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1901.728777][T26878] RIP: 0033:0x7fdd7078f749 [ 1901.733187][T26878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1901.752788][T26878] RSP: 002b:00007fdd71625038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.761205][T26878] RAX: ffffffffffffffda RBX: 00007fdd709e5fa0 RCX: 00007fdd7078f749 [ 1901.769173][T26878] RDX: 0000200000000500 RSI: 0000000000008922 RDI: 0000000000000005 [ 1901.777140][T26878] RBP: 00007fdd71625090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.785109][T26878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.793076][T26878] R13: 00007fdd709e6038 R14: 00007fdd709e5fa0 R15: 00007ffc8b0e5a48 [ 1901.801045][T26878] [ 1902.035135][T26886] loop8: detected capacity change from 0 to 256 [ 1902.796200][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1902.809783][T26887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6433'. [ 1903.007090][T26886] FAT-fs (loop8): Directory bread(block 64) failed [ 1903.013683][T26886] FAT-fs (loop8): Directory bread(block 65) failed [ 1903.020217][T26886] FAT-fs (loop8): Directory bread(block 66) failed [ 1903.026752][T26886] FAT-fs (loop8): Directory bread(block 67) failed [ 1903.033294][T26886] FAT-fs (loop8): Directory bread(block 68) failed [ 1903.039799][T26886] FAT-fs (loop8): Directory bread(block 69) failed [ 1903.046348][T26886] FAT-fs (loop8): Directory bread(block 70) failed [ 1903.052871][T26886] FAT-fs (loop8): Directory bread(block 71) failed [ 1903.059394][T26886] FAT-fs (loop8): Directory bread(block 72) failed [ 1903.065922][T26886] FAT-fs (loop8): Directory bread(block 73) failed [ 1903.327413][T26900] loop0: detected capacity change from 0 to 128 [ 1903.514194][T26901] loop9: detected capacity change from 0 to 256 [ 1903.762157][T26900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1903.771656][T26900] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1903.816745][T26898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1904.018655][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1904.138456][T26913] loop8: detected capacity change from 0 to 256 [ 1904.171213][T26913] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1904.300686][T26908] loop2: detected capacity change from 0 to 1024 [ 1904.423949][T26908] EXT4-fs: Ignoring removed nobh option [ 1904.447082][T26908] ext4: Unknown parameter 'smackfsdef' [ 1904.545988][T26919] loop0: detected capacity change from 0 to 256 [ 1904.555916][T26919] exfat: Deprecated parameter 'namecase' [ 1904.575559][T26919] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1905.452292][T26924] futex_wake_op: syz.1.6432 tries to shift op by -1; fix this program [ 1905.527144][T26928] loop8: detected capacity change from 0 to 256 [ 1905.545646][T26928] FAT-fs (loop8): Directory bread(block 64) failed [ 1905.552192][T26928] FAT-fs (loop8): Directory bread(block 65) failed [ 1905.558765][T26928] FAT-fs (loop8): Directory bread(block 66) failed [ 1905.565317][T26928] FAT-fs (loop8): Directory bread(block 67) failed [ 1905.571849][T26928] FAT-fs (loop8): Directory bread(block 68) failed [ 1905.578378][T26928] FAT-fs (loop8): Directory bread(block 69) failed [ 1905.584944][T26928] FAT-fs (loop8): Directory bread(block 70) failed [ 1905.591448][T26928] FAT-fs (loop8): Directory bread(block 71) failed [ 1905.598002][T26928] FAT-fs (loop8): Directory bread(block 72) failed [ 1905.604517][T26928] FAT-fs (loop8): Directory bread(block 73) failed [ 1905.973386][T26938] futex_wake_op: syz.2.6437 tries to shift op by -1; fix this program [ 1905.983362][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 1905.983375][ T28] audit: type=1326 audit(1766688657.025:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1906.050209][ T28] audit: type=1326 audit(1766688657.085:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1906.091095][ T28] audit: type=1326 audit(1766688657.085:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1906.406958][ T28] audit: type=1326 audit(1766688657.085:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1906.480855][ T28] audit: type=1326 audit(1766688657.085:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1906.649159][T26949] loop1: detected capacity change from 0 to 256 [ 1906.697355][T26949] FAT-fs (loop1): Directory bread(block 64) failed [ 1906.704047][T26949] FAT-fs (loop1): Directory bread(block 65) failed [ 1906.710823][T26949] FAT-fs (loop1): Directory bread(block 66) failed [ 1906.717493][T26949] FAT-fs (loop1): Directory bread(block 67) failed [ 1906.724332][T26949] FAT-fs (loop1): Directory bread(block 68) failed [ 1906.730949][T26949] FAT-fs (loop1): Directory bread(block 69) failed [ 1906.737760][T26949] FAT-fs (loop1): Directory bread(block 70) failed [ 1906.744406][T26949] FAT-fs (loop1): Directory bread(block 71) failed [ 1906.751180][T26949] FAT-fs (loop1): Directory bread(block 72) failed [ 1906.757793][T26949] FAT-fs (loop1): Directory bread(block 73) failed [ 1907.492269][T26951] loop9: detected capacity change from 0 to 2048 [ 1907.502974][ T28] audit: type=1326 audit(1766688657.085:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1907.540364][ T28] audit: type=1326 audit(1766688657.085:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1907.565117][ T28] audit: type=1326 audit(1766688657.085:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1907.772619][T26957] loop8: detected capacity change from 0 to 256 [ 1907.892826][T26951] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1907.904040][ T28] audit: type=1326 audit(1766688657.085:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1907.950828][ T28] audit: type=1326 audit(1766688657.085:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26937 comm="syz.2.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1908.016332][T26965] loop0: detected capacity change from 0 to 2048 [ 1908.064630][T26965] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1908.974869][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1909.136021][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1909.179118][T26982] loop8: detected capacity change from 0 to 512 [ 1909.215554][T26978] loop0: detected capacity change from 0 to 512 [ 1909.222698][T26982] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1909.251582][T26982] EXT4-fs (loop8): 1 truncate cleaned up [ 1909.265196][T26978] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.6448: inode has both inline data and extents flags [ 1909.282518][T26982] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1909.294452][T26978] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.6448: couldn't read orphan inode 15 (err -117) [ 1909.385713][T26978] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1910.088573][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1910.095752][T18119] EXT4-fs (loop8): unmounting filesystem. [ 1910.312064][T27000] loop0: detected capacity change from 0 to 256 [ 1910.340110][ T910] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1910.352928][T27000] FAT-fs (loop0): Directory bread(block 64) failed [ 1910.359463][T27000] FAT-fs (loop0): Directory bread(block 65) failed [ 1910.366025][T27000] FAT-fs (loop0): Directory bread(block 66) failed [ 1910.372538][T27000] FAT-fs (loop0): Directory bread(block 67) failed [ 1910.379058][T27000] FAT-fs (loop0): Directory bread(block 68) failed [ 1910.385580][T27000] FAT-fs (loop0): Directory bread(block 69) failed [ 1910.392101][T27000] FAT-fs (loop0): Directory bread(block 70) failed [ 1910.398621][T27000] FAT-fs (loop0): Directory bread(block 71) failed [ 1910.405179][T27000] FAT-fs (loop0): Directory bread(block 72) failed [ 1910.411677][T27000] FAT-fs (loop0): Directory bread(block 73) failed [ 1910.923472][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.934469][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1910.946374][ T910] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1910.955616][ T910] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1910.963989][ T910] usb 2-1: Manufacturer: syz [ 1910.977088][ T910] usb 2-1: config 0 descriptor?? [ 1911.109412][T27014] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6466'. [ 1911.499838][T27021] loop0: detected capacity change from 0 to 4096 [ 1911.512406][T24759] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1911.521212][T27021] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1911.529004][T27021] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1911.537223][T27021] System zones: 0-5 [ 1911.541973][T27021] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1911.560477][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1911.825252][T24759] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.832371][T26991] loop1: detected capacity change from 0 to 1024 [ 1911.850469][T24759] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1911.860818][T26991] EXT4-fs: Ignoring removed nobh option [ 1911.867115][T26991] EXT4-fs: Ignoring removed bh option [ 1911.873403][T26991] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1911.873886][T24759] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1911.894224][T24759] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1911.902385][T24759] usb 10-1: Manufacturer: syz [ 1911.907730][T24759] usb 10-1: config 0 descriptor?? [ 1911.924116][T26991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1911.939391][T27030] FAULT_INJECTION: forcing a failure. [ 1911.939391][T27030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1911.952546][T27030] CPU: 1 PID: 27030 Comm: syz.8.6460 Tainted: G W syzkaller #0 [ 1911.961483][T27030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1911.963644][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 1911.963657][ T28] audit: type=1400 audit(1766688662.985:2013): avc: denied { write } for pid=26989 comm="syz.1.6450" path=2F3131322F66696C65312F66696C65302F233138202864656C6574656429 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1911.971531][T27030] Call Trace: [ 1911.971539][T27030] [ 1911.971545][T27030] __dump_stack+0x21/0x24 [ 1912.000568][ T28] audit: type=1400 audit(1766688662.985:2014): avc: denied { ioctl } for pid=26989 comm="syz.1.6450" path=2F3131322F66696C65312F66696C65302F233138202864656C6574656429 dev="loop1" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1912.004041][T27030] dump_stack_lvl+0xee/0x150 [ 1912.004067][T27030] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1912.004086][T27030] dump_stack+0x15/0x24 [ 1912.031113][T26991] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.6450: Allocating blocks 497-513 which overlap fs metadata [ 1912.042399][T27030] should_fail_ex+0x3d4/0x520 [ 1912.042431][T27030] should_fail+0xb/0x10 [ 1912.042449][T27030] should_fail_usercopy+0x1a/0x20 [ 1912.042468][T27030] _copy_from_user+0x1e/0xc0 [ 1912.042487][T27030] bpf_test_init+0x106/0x160 [ 1912.047572][T26991] EXT4-fs (loop1): pa ffff88813ede47e0: logic 256, phys. 385, len 8 [ 1912.052056][T27030] bpf_prog_test_run_xdp+0x359/0xe50 [ 1912.052081][T27030] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 1912.056247][T26991] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, [ 1912.069970][T27030] ? __kasan_check_write+0x14/0x20 [ 1912.069989][T27030] ? __cfi_bpf_prog_test_run_xdp+0x10/0x10 [ 1912.070004][T27030] bpf_prog_test_run+0x3e3/0x630 [ 1912.070022][T27030] ? slab_free_freelist_hook+0xc2/0x190 [ 1912.074685][T26991] free 0, pa_free 1 [ 1912.078792][T27030] ? bpf_prog_query+0x270/0x270 [ 1912.078811][T27030] ? selinux_bpf+0xce/0xf0 [ 1912.154586][T27030] ? security_bpf+0x93/0xb0 [ 1912.159089][T27030] __sys_bpf+0x56d/0x780 [ 1912.163331][T27030] ? bpf_link_show_fdinfo+0x320/0x320 [ 1912.168695][T27030] ? __cfi_ksys_write+0x10/0x10 [ 1912.173538][T27030] ? debug_smp_processor_id+0x17/0x20 [ 1912.178905][T27030] __x64_sys_bpf+0x7c/0x90 [ 1912.183327][T27030] x64_sys_call+0x488/0x9a0 [ 1912.187815][T27030] do_syscall_64+0x4c/0xa0 [ 1912.192227][T27030] ? clear_bhb_loop+0x30/0x80 [ 1912.196912][T27030] ? clear_bhb_loop+0x30/0x80 [ 1912.201599][T27030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1912.207494][T27030] RIP: 0033:0x7f0dbd58f749 [ 1912.211903][T27030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1912.231511][T27030] RSP: 002b:00007f0dbe3b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1912.239927][T27030] RAX: ffffffffffffffda RBX: 00007f0dbd7e5fa0 RCX: 00007f0dbd58f749 [ 1912.247887][T27030] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1912.255853][T27030] RBP: 00007f0dbe3b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.263821][T27030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.271773][T27030] R13: 00007f0dbd7e6038 R14: 00007f0dbd7e5fa0 R15: 00007fffa32a3e08 [ 1912.279734][T27030] [ 1912.314654][ T910] uclogic 0003:256C:006D.017F: failed retrieving Huion firmware version: -22 [ 1912.323534][ T910] uclogic 0003:256C:006D.017F: failed probing parameters: -22 [ 1912.332706][ T910] uclogic: probe of 0003:256C:006D.017F failed with error -22 [ 1912.339510][T27010] loop9: detected capacity change from 0 to 1024 [ 1912.370755][T27010] EXT4-fs: Ignoring removed nobh option [ 1912.384200][T27010] EXT4-fs: Ignoring removed bh option [ 1912.390000][T27010] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1912.403953][T27010] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1912.450694][T24759] usbhid 10-1:0.0: can't add hid device: -71 [ 1912.461959][T24759] usbhid: probe of 10-1:0.0 failed with error -71 [ 1912.541472][T27041] loop8: detected capacity change from 0 to 256 [ 1912.567755][T27041] FAT-fs (loop8): Directory bread(block 64) failed [ 1912.574432][T27041] FAT-fs (loop8): Directory bread(block 65) failed [ 1912.581166][T27041] FAT-fs (loop8): Directory bread(block 66) failed [ 1912.587760][T27041] FAT-fs (loop8): Directory bread(block 67) failed [ 1912.594504][T27041] FAT-fs (loop8): Directory bread(block 68) failed [ 1912.601074][T27041] FAT-fs (loop8): Directory bread(block 69) failed [ 1912.607825][T27041] FAT-fs (loop8): Directory bread(block 70) failed [ 1912.614399][T27041] FAT-fs (loop8): Directory bread(block 71) failed [ 1912.621109][T27041] FAT-fs (loop8): Directory bread(block 72) failed [ 1912.627681][T27041] FAT-fs (loop8): Directory bread(block 73) failed [ 1913.104384][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1913.240768][T10424] usb 2-1: USB disconnect, device number 89 [ 1913.277567][T27044] futex_wake_op: syz.0.6465 tries to shift op by -1; fix this program [ 1913.296739][T24759] usb 10-1: USB disconnect, device number 97 [ 1913.302152][ T28] audit: type=1326 audit(1766688664.335:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27043 comm="syz.0.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1913.336367][ T28] audit: type=1326 audit(1766688664.375:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27043 comm="syz.0.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1913.432398][ T28] audit: type=1326 audit(1766688664.375:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27043 comm="syz.0.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1913.452410][T27051] loop8: detected capacity change from 0 to 1024 [ 1913.458193][ T28] audit: type=1326 audit(1766688664.375:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27043 comm="syz.0.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1913.464912][T27051] EXT4-fs: Ignoring removed bh option [ 1913.486179][ T28] audit: type=1326 audit(1766688664.375:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27043 comm="syz.0.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1913.519715][T27051] EXT4-fs: Ignoring removed nobh option [ 1913.529107][T27051] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1913.540525][ T28] audit: type=1326 audit(1766688664.375:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27043 comm="syz.0.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1913.641627][T27054] loop9: detected capacity change from 0 to 256 [ 1913.674756][T27054] FAT-fs (loop9): Directory bread(block 64) failed [ 1913.681377][T27054] FAT-fs (loop9): Directory bread(block 65) failed [ 1913.688089][T27054] FAT-fs (loop9): Directory bread(block 66) failed [ 1913.694674][T27054] FAT-fs (loop9): Directory bread(block 67) failed [ 1913.701385][T27054] FAT-fs (loop9): Directory bread(block 68) failed [ 1913.707955][T27054] FAT-fs (loop9): Directory bread(block 69) failed [ 1913.714708][T27054] FAT-fs (loop9): Directory bread(block 70) failed [ 1913.721264][T27054] FAT-fs (loop9): Directory bread(block 71) failed [ 1913.727977][T27054] FAT-fs (loop9): Directory bread(block 72) failed [ 1913.734554][T27054] FAT-fs (loop9): Directory bread(block 73) failed [ 1914.112867][ T28] audit: type=1326 audit(1766688664.455:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27043 comm="syz.0.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1914.448911][ T28] audit: type=1326 audit(1766688664.455:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27043 comm="syz.0.6465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1914.474178][T27051] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1914.513544][T27051] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.6468: Allocating blocks 497-513 which overlap fs metadata [ 1914.527712][T27051] EXT4-fs (loop8): pa ffff888116f72150: logic 256, phys. 385, len 8 [ 1914.535752][T27051] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1914.660309][T18119] EXT4-fs (loop8): unmounting filesystem. [ 1914.764897][T27062] loop2: detected capacity change from 0 to 128 [ 1914.892959][T27062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1914.902252][T27062] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1914.968483][T27060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6469'. [ 1914.981521][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1915.020873][T27069] device pim6reg1 entered promiscuous mode [ 1915.098850][T27071] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6473'. [ 1915.354146][T27073] loop1: detected capacity change from 0 to 512 [ 1915.410906][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1915.434311][T27073] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.6474: inode has both inline data and extents flags [ 1915.458172][T27073] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.6474: couldn't read orphan inode 15 (err -117) [ 1915.507719][T27073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1915.645780][T27078] loop2: detected capacity change from 0 to 256 [ 1915.652667][T27078] exfat: Deprecated parameter 'namecase' [ 1915.678742][T27078] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1916.361110][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1919.313337][T27091] loop2: detected capacity change from 0 to 256 [ 1919.360422][T27091] FAT-fs (loop2): Directory bread(block 64) failed [ 1919.367053][T27091] FAT-fs (loop2): Directory bread(block 65) failed [ 1919.373719][T27091] FAT-fs (loop2): Directory bread(block 66) failed [ 1919.380284][T27091] FAT-fs (loop2): Directory bread(block 67) failed [ 1919.387022][T27091] FAT-fs (loop2): Directory bread(block 68) failed [ 1919.393588][T27091] FAT-fs (loop2): Directory bread(block 69) failed [ 1919.400263][T27091] FAT-fs (loop2): Directory bread(block 70) failed [ 1919.406831][T27091] FAT-fs (loop2): Directory bread(block 71) failed [ 1919.413529][T27091] FAT-fs (loop2): Directory bread(block 72) failed [ 1919.420074][T27091] FAT-fs (loop2): Directory bread(block 73) failed [ 1919.874326][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1919.874339][ T28] audit: type=1400 audit(1766688670.915:2043): avc: denied { read } for pid=27092 comm="syz.8.6479" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1919.962242][ T28] audit: type=1400 audit(1766688670.945:2044): avc: denied { open } for pid=27092 comm="syz.8.6479" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1921.420573][T27093] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6479'. [ 1921.448221][ T28] audit: type=1400 audit(1766688672.005:2045): avc: denied { read write } for pid=27098 comm="syz.0.6482" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1921.551466][T27112] loop1: detected capacity change from 0 to 256 [ 1921.594950][T27112] FAT-fs (loop1): Directory bread(block 64) failed [ 1921.601642][T27112] FAT-fs (loop1): Directory bread(block 65) failed [ 1921.608323][T27112] FAT-fs (loop1): Directory bread(block 66) failed [ 1921.614917][T27112] FAT-fs (loop1): Directory bread(block 67) failed [ 1921.621601][T27112] FAT-fs (loop1): Directory bread(block 68) failed [ 1921.628221][T27112] FAT-fs (loop1): Directory bread(block 69) failed [ 1921.634924][T27112] FAT-fs (loop1): Directory bread(block 70) failed [ 1921.641498][T27112] FAT-fs (loop1): Directory bread(block 71) failed [ 1921.648223][T27112] FAT-fs (loop1): Directory bread(block 72) failed [ 1921.654805][T27112] FAT-fs (loop1): Directory bread(block 73) failed [ 1921.974926][ T28] audit: type=1400 audit(1766688672.015:2046): avc: denied { open } for pid=27098 comm="syz.0.6482" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1922.030074][T27111] futex_wake_op: syz.0.6487 tries to shift op by -1; fix this program [ 1922.333007][ T28] audit: type=1400 audit(1766688672.125:2047): avc: denied { ioctl } for pid=27098 comm="syz.0.6482" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1922.358395][T27114] loop2: detected capacity change from 0 to 512 [ 1922.433101][T27114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1922.496694][T27114] EXT4-fs (loop2): 1 truncate cleaned up [ 1922.507072][ T28] audit: type=1326 audit(1766688673.505:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27110 comm="syz.0.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1922.535508][T27114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1922.599864][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1922.612383][ T28] audit: type=1326 audit(1766688673.505:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27110 comm="syz.0.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1922.643867][T27120] futex_wake_op: syz.2.6488 tries to shift op by -1; fix this program [ 1922.653809][ T28] audit: type=1326 audit(1766688673.695:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27119 comm="syz.2.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1922.677484][ T28] audit: type=1326 audit(1766688673.695:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27119 comm="syz.2.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1922.711160][ T28] audit: type=1326 audit(1766688673.695:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27119 comm="syz.2.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1922.791177][T27123] loop1: detected capacity change from 0 to 512 [ 1922.814389][T27123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1922.826106][T27127] futex_wake_op: syz.9.6491 tries to shift op by -1; fix this program [ 1922.845650][T27123] EXT4-fs (loop1): 1 truncate cleaned up [ 1922.851314][T27123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1922.932755][T27131] futex_wake_op: syz.8.6492 tries to shift op by -1; fix this program [ 1923.525581][T27144] loop0: detected capacity change from 0 to 256 [ 1923.556624][T27144] FAT-fs (loop0): Directory bread(block 64) failed [ 1923.563243][T27144] FAT-fs (loop0): Directory bread(block 65) failed [ 1923.569871][T27144] FAT-fs (loop0): Directory bread(block 66) failed [ 1923.576450][T27144] FAT-fs (loop0): Directory bread(block 67) failed [ 1923.583149][T27144] FAT-fs (loop0): Directory bread(block 68) failed [ 1923.589690][T27144] FAT-fs (loop0): Directory bread(block 69) failed [ 1923.596452][T27144] FAT-fs (loop0): Directory bread(block 70) failed [ 1923.603186][T27144] FAT-fs (loop0): Directory bread(block 71) failed [ 1923.609861][T27144] FAT-fs (loop0): Directory bread(block 72) failed [ 1923.616427][T27144] FAT-fs (loop0): Directory bread(block 73) failed [ 1924.028619][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1924.383263][T27146] loop1: detected capacity change from 0 to 256 [ 1924.397140][T27146] FAT-fs (loop1): Directory bread(block 64) failed [ 1924.403714][T27146] FAT-fs (loop1): Directory bread(block 65) failed [ 1924.410236][T27146] FAT-fs (loop1): Directory bread(block 66) failed [ 1924.416772][T27146] FAT-fs (loop1): Directory bread(block 67) failed [ 1924.423307][T27146] FAT-fs (loop1): Directory bread(block 68) failed [ 1924.429807][T27146] FAT-fs (loop1): Directory bread(block 69) failed [ 1924.436841][T27146] FAT-fs (loop1): Directory bread(block 70) failed [ 1924.443359][T27146] FAT-fs (loop1): Directory bread(block 71) failed [ 1924.449887][T27146] FAT-fs (loop1): Directory bread(block 72) failed [ 1924.456418][T27146] FAT-fs (loop1): Directory bread(block 73) failed [ 1925.664017][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 1925.664033][ T28] audit: type=1400 audit(1766688676.705:2133): avc: denied { create } for pid=27160 comm="syz.1.6501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1925.722417][ T28] audit: type=1400 audit(1766688676.725:2134): avc: denied { write } for pid=27160 comm="syz.1.6501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1925.887394][T27165] futex_wake_op: syz.8.6503 tries to shift op by -1; fix this program [ 1925.913388][ T28] audit: type=1326 audit(1766688676.955:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27164 comm="syz.8.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbd58f749 code=0x7ffc0000 [ 1925.985895][T27169] loop9: detected capacity change from 0 to 2048 [ 1925.987448][ T28] audit: type=1326 audit(1766688676.985:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27164 comm="syz.8.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbd58f749 code=0x7ffc0000 [ 1926.047558][T27169] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1926.053302][ T28] audit: type=1326 audit(1766688676.985:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27164 comm="syz.8.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f0dbd58f749 code=0x7ffc0000 [ 1926.079692][ T28] audit: type=1326 audit(1766688676.985:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27164 comm="syz.8.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbd58f749 code=0x7ffc0000 [ 1926.105302][ T28] audit: type=1326 audit(1766688676.985:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27164 comm="syz.8.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbd58f749 code=0x7ffc0000 [ 1926.129083][ T28] audit: type=1326 audit(1766688676.985:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27164 comm="syz.8.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0dbd58f749 code=0x7ffc0000 [ 1926.152713][ T28] audit: type=1326 audit(1766688676.985:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27164 comm="syz.8.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbd58f749 code=0x7ffc0000 [ 1926.176249][ T28] audit: type=1326 audit(1766688676.985:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27164 comm="syz.8.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbd58f749 code=0x7ffc0000 [ 1926.249287][T27176] loop1: detected capacity change from 0 to 512 [ 1926.260562][T27176] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1926.275130][T27176] EXT4-fs (loop1): 1 truncate cleaned up [ 1926.280846][T27176] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1927.161960][T27183] loop2: detected capacity change from 0 to 256 [ 1927.247543][T27183] FAT-fs (loop2): Directory bread(block 64) failed [ 1927.254198][T27183] FAT-fs (loop2): Directory bread(block 65) failed [ 1927.260875][T27183] FAT-fs (loop2): Directory bread(block 66) failed [ 1927.267459][T27183] FAT-fs (loop2): Directory bread(block 67) failed [ 1927.274138][T27183] FAT-fs (loop2): Directory bread(block 68) failed [ 1927.280683][T27183] FAT-fs (loop2): Directory bread(block 69) failed [ 1927.287409][T27183] FAT-fs (loop2): Directory bread(block 70) failed [ 1927.293981][T27183] FAT-fs (loop2): Directory bread(block 71) failed [ 1927.300672][T27183] FAT-fs (loop2): Directory bread(block 72) failed [ 1927.307233][T27183] FAT-fs (loop2): Directory bread(block 73) failed [ 1927.416014][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1927.629199][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1928.637963][T27196] loop9: detected capacity change from 0 to 256 [ 1928.644548][T27196] exfat: Deprecated parameter 'namecase' [ 1928.653285][T27199] loop1: detected capacity change from 0 to 256 [ 1928.695941][T27196] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1928.744452][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1928.744490][ T910] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1928.786718][T27199] FAT-fs (loop1): Directory bread(block 64) failed [ 1928.793450][T27199] FAT-fs (loop1): Directory bread(block 65) failed [ 1928.800313][T27199] FAT-fs (loop1): Directory bread(block 66) failed [ 1928.806940][T27199] FAT-fs (loop1): Directory bread(block 67) failed [ 1928.813817][T27199] FAT-fs (loop1): Directory bread(block 68) failed [ 1928.820396][T27199] FAT-fs (loop1): Directory bread(block 69) failed [ 1928.827237][T27199] FAT-fs (loop1): Directory bread(block 70) failed [ 1928.833882][T27199] FAT-fs (loop1): Directory bread(block 71) failed [ 1928.840779][T27199] FAT-fs (loop1): Directory bread(block 72) failed [ 1928.847430][T27199] FAT-fs (loop1): Directory bread(block 73) failed [ 1929.336157][ T910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.349637][ T910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1929.362480][ T910] usb 9-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1929.371683][ T910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.382297][ T910] usb 9-1: config 0 descriptor?? [ 1929.526694][T27210] futex_wake_op: syz.9.6515 tries to shift op by -1; fix this program [ 1929.543530][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.567538][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1929.588384][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1929.612386][ T24] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1929.620842][ T24] usb 1-1: Manufacturer: syz [ 1929.629644][ T24] usb 1-1: config 0 descriptor?? [ 1929.750297][T27217] loop2: detected capacity change from 0 to 2048 [ 1929.812041][ T910] wacom 0003:056A:0016.0180: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 1929.876164][ T910] wacom 0003:056A:0016.0180: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.8-1/input0 [ 1930.011958][ T910] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0016.0180/input/input29 [ 1930.024774][T27217] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1930.036305][ T910] usb 9-1: USB disconnect, device number 95 [ 1930.086243][T27222] fido_id[27222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1930.376950][T27188] loop0: detected capacity change from 0 to 1024 [ 1930.425445][T27188] EXT4-fs: Ignoring removed nobh option [ 1930.431073][T27188] EXT4-fs: Ignoring removed bh option [ 1930.455450][T27188] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1930.644731][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1930.645021][T27188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1930.674464][T27232] loop2: detected capacity change from 0 to 512 [ 1931.209463][T27232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1931.254857][T27232] EXT4-fs (loop2): 1 truncate cleaned up [ 1931.260546][T27232] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1931.310762][ T24] uclogic 0003:256C:006D.0181: failed retrieving Huion firmware version: -71 [ 1931.323162][ T24] uclogic 0003:256C:006D.0181: failed probing parameters: -71 [ 1931.342374][ T24] uclogic: probe of 0003:256C:006D.0181 failed with error -71 [ 1931.367641][ T24] usb 1-1: USB disconnect, device number 52 [ 1931.513658][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1931.816158][T27244] loop2: detected capacity change from 0 to 2048 [ 1931.873936][T27244] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1931.950602][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1932.338879][T27254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6527'. [ 1932.660490][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1932.855275][T27263] loop8: detected capacity change from 0 to 2048 [ 1932.954730][T27263] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1933.658417][T27278] loop1: detected capacity change from 0 to 256 [ 1934.258238][T27282] loop9: detected capacity change from 0 to 256 [ 1934.289091][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 1934.289114][ T28] audit: type=1400 audit(1766688685.255:2211): avc: denied { write } for pid=27275 comm="syz.2.6533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1934.337116][T27282] FAT-fs (loop9): Directory bread(block 64) failed [ 1934.343771][T27282] FAT-fs (loop9): Directory bread(block 65) failed [ 1934.350385][T27282] FAT-fs (loop9): Directory bread(block 66) failed [ 1934.356976][T27282] FAT-fs (loop9): Directory bread(block 67) failed [ 1934.363528][T27282] FAT-fs (loop9): Directory bread(block 68) failed [ 1934.370034][T27282] FAT-fs (loop9): Directory bread(block 69) failed [ 1934.376595][T27282] FAT-fs (loop9): Directory bread(block 70) failed [ 1934.411832][T27282] FAT-fs (loop9): Directory bread(block 71) failed [ 1934.418574][T27282] FAT-fs (loop9): Directory bread(block 72) failed [ 1934.425150][T27282] FAT-fs (loop9): Directory bread(block 73) failed [ 1934.452906][T27278] FAT-fs (loop1): Directory bread(block 64) failed [ 1934.459456][T27278] FAT-fs (loop1): Directory bread(block 65) failed [ 1934.466024][T27278] FAT-fs (loop1): Directory bread(block 66) failed [ 1934.472554][T27278] FAT-fs (loop1): Directory bread(block 67) failed [ 1934.479077][T27278] FAT-fs (loop1): Directory bread(block 68) failed [ 1934.485600][T27278] FAT-fs (loop1): Directory bread(block 69) failed [ 1934.492151][T27278] FAT-fs (loop1): Directory bread(block 70) failed [ 1934.498676][T27278] FAT-fs (loop1): Directory bread(block 71) failed [ 1934.505234][T27278] FAT-fs (loop1): Directory bread(block 72) failed [ 1934.511731][T27278] FAT-fs (loop1): Directory bread(block 73) failed [ 1935.059267][T18119] EXT4-fs (loop8): unmounting filesystem. [ 1935.142762][T27287] loop0: detected capacity change from 0 to 256 [ 1935.195276][T27287] FAT-fs (loop0): Directory bread(block 64) failed [ 1935.201826][T27287] FAT-fs (loop0): Directory bread(block 65) failed [ 1935.208498][T27287] FAT-fs (loop0): Directory bread(block 66) failed [ 1935.215051][T27287] FAT-fs (loop0): Directory bread(block 67) failed [ 1935.221583][T27287] FAT-fs (loop0): Directory bread(block 68) failed [ 1935.228275][T27287] FAT-fs (loop0): Directory bread(block 69) failed [ 1935.234903][T27287] FAT-fs (loop0): Directory bread(block 70) failed [ 1935.241461][T27287] FAT-fs (loop0): Directory bread(block 71) failed [ 1935.248120][T27287] FAT-fs (loop0): Directory bread(block 72) failed [ 1935.254693][T27287] FAT-fs (loop0): Directory bread(block 73) failed [ 1936.250942][T27305] futex_wake_op: syz.1.6541 tries to shift op by -1; fix this program [ 1936.260135][ T28] audit: type=1326 audit(1766688687.295:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5598f749 code=0x7ffc0000 [ 1936.293779][ T28] audit: type=1326 audit(1766688687.325:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3c5598f749 code=0x7ffc0000 [ 1936.317515][ T28] audit: type=1326 audit(1766688687.325:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5598f749 code=0x7ffc0000 [ 1936.347796][ T28] audit: type=1326 audit(1766688687.325:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c5598f749 code=0x7ffc0000 [ 1936.382746][ T28] audit: type=1326 audit(1766688687.325:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5598f749 code=0x7ffc0000 [ 1936.408537][ T28] audit: type=1326 audit(1766688687.325:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c5598f749 code=0x7ffc0000 [ 1936.528800][ T28] audit: type=1326 audit(1766688687.415:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5598f749 code=0x7ffc0000 [ 1936.552554][ T335] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1936.623574][T27317] loop0: detected capacity change from 0 to 256 [ 1936.691193][T27317] FAT-fs (loop0): Directory bread(block 64) failed [ 1936.697847][T27317] FAT-fs (loop0): Directory bread(block 65) failed [ 1936.704585][T27317] FAT-fs (loop0): Directory bread(block 66) failed [ 1936.711147][T27317] FAT-fs (loop0): Directory bread(block 67) failed [ 1936.717851][T27317] FAT-fs (loop0): Directory bread(block 68) failed [ 1936.724421][T27317] FAT-fs (loop0): Directory bread(block 69) failed [ 1936.731105][T27317] FAT-fs (loop0): Directory bread(block 70) failed [ 1936.737671][T27317] FAT-fs (loop0): Directory bread(block 71) failed [ 1936.744382][T27317] FAT-fs (loop0): Directory bread(block 72) failed [ 1936.750926][T27317] FAT-fs (loop0): Directory bread(block 73) failed [ 1936.845776][ T335] usb 3-1: config 0 has an invalid interface number: 71 but max is 0 [ 1936.932066][ T335] usb 3-1: config 0 has no interface number 0 [ 1936.995136][ T335] usb 3-1: config 0 interface 71 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1937.033321][ T28] audit: type=1326 audit(1766688687.415:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5598f749 code=0x7ffc0000 [ 1937.159898][ T335] usb 3-1: config 0 interface 71 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1937.325363][ T28] audit: type=1326 audit(1766688687.445:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27304 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c5598f749 code=0x7ffc0000 [ 1937.362286][ T335] usb 3-1: config 0 interface 71 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1937.484269][T27330] FAULT_INJECTION: forcing a failure. [ 1937.484269][T27330] name failslab, interval 1, probability 0, space 0, times 0 [ 1937.496930][T27330] CPU: 1 PID: 27330 Comm: syz.1.6548 Tainted: G W syzkaller #0 [ 1937.505857][T27330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1937.515890][T27330] Call Trace: [ 1937.519148][T27330] [ 1937.522056][T27330] __dump_stack+0x21/0x24 [ 1937.526371][T27330] dump_stack_lvl+0xee/0x150 [ 1937.530940][T27330] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1937.535946][T27330] dump_stack+0x15/0x24 [ 1937.540080][T27330] should_fail_ex+0x3d4/0x520 [ 1937.544743][T27330] ? security_inode_alloc+0x33/0x120 [ 1937.550007][T27330] __should_failslab+0xac/0xf0 [ 1937.554751][T27330] should_failslab+0x9/0x20 [ 1937.559230][T27330] kmem_cache_alloc+0x3b/0x330 [ 1937.563972][T27330] ? slab_pre_alloc_hook+0x30/0x1e0 [ 1937.569153][T27330] security_inode_alloc+0x33/0x120 [ 1937.574245][T27330] inode_init_always+0x6fc/0x960 [ 1937.579161][T27330] new_inode_pseudo+0xa2/0x1f0 [ 1937.583904][T27330] new_inode+0x28/0x1e0 [ 1937.588037][T27330] ? _raw_spin_lock+0x8e/0xe0 [ 1937.592695][T27330] shmem_get_inode+0x349/0xc20 [ 1937.597441][T27330] __shmem_file_setup+0x113/0x2b0 [ 1937.602444][T27330] shmem_file_setup+0x2f/0x40 [ 1937.607100][T27330] __se_sys_memfd_create+0x1e6/0x3b0 [ 1937.612366][T27330] __x64_sys_memfd_create+0x5b/0x70 [ 1937.617542][T27330] x64_sys_call+0x235/0x9a0 [ 1937.622025][T27330] do_syscall_64+0x4c/0xa0 [ 1937.626429][T27330] ? clear_bhb_loop+0x30/0x80 [ 1937.631101][T27330] ? clear_bhb_loop+0x30/0x80 [ 1937.635764][T27330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1937.641644][T27330] RIP: 0033:0x7f3c5598f749 [ 1937.646040][T27330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1937.665628][T27330] RSP: 002b:00007f3c543d5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1937.674025][T27330] RAX: ffffffffffffffda RBX: 0000000000000571 RCX: 00007f3c5598f749 [ 1937.681976][T27330] RDX: 00007f3c543d5ef0 RSI: 0000000000000000 RDI: 00007f3c55a14960 [ 1937.689934][T27330] RBP: 0000200000000780 R08: 00007f3c543d5bb7 R09: 00007f3c543d5e40 [ 1937.697882][T27330] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 1937.705834][T27330] R13: 00007f3c543d5ef0 R14: 00007f3c543d5eb0 R15: 00002000000000c0 [ 1937.713788][T27330] [ 1938.335334][T27334] loop8: detected capacity change from 0 to 256 [ 1938.352399][ T335] usb 3-1: config 0 interface 71 altsetting 0 endpoint 0x3 has invalid maxpacket 128, setting to 64 [ 1938.363240][ T335] usb 3-1: config 0 interface 71 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 1938.393879][T27334] exfat: Deprecated parameter 'namecase' [ 1938.422504][T27334] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1938.425724][ T335] usb 3-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice=d1.a6 [ 1938.452357][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.464847][T27334] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1938.472824][ T335] usb 3-1: config 0 descriptor?? [ 1938.486714][ T335] usb 3-1: can't set config #0, error -71 [ 1938.501658][ T335] usb 3-1: USB disconnect, device number 13 [ 1938.575302][T27351] loop1: detected capacity change from 0 to 256 [ 1938.645563][T27351] FAT-fs (loop1): Directory bread(block 64) failed [ 1938.670560][T27351] FAT-fs (loop1): Directory bread(block 65) failed [ 1938.677271][T27351] FAT-fs (loop1): Directory bread(block 66) failed [ 1938.697245][T27351] FAT-fs (loop1): Directory bread(block 67) failed [ 1938.835433][T27360] loop2: detected capacity change from 0 to 512 [ 1938.845119][T27351] FAT-fs (loop1): Directory bread(block 68) failed [ 1938.851707][T27351] FAT-fs (loop1): Directory bread(block 69) failed [ 1938.859389][T27360] EXT4-fs (loop2): fragment/cluster size (2048) != block size (1024) [ 1939.320849][T27351] FAT-fs (loop1): Directory bread(block 70) failed [ 1939.339764][ T4141] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1939.349446][ T335] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1939.365581][T27351] FAT-fs (loop1): Directory bread(block 71) failed [ 1939.402412][T27351] FAT-fs (loop1): Directory bread(block 72) failed [ 1939.409023][T27351] FAT-fs (loop1): Directory bread(block 73) failed [ 1939.458598][T27366] netlink: 'syz.8.6561': attribute type 12 has an invalid length. [ 1939.543393][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.590490][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.630869][T27370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6562'. [ 1939.684816][ T335] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1939.763299][ T335] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1939.801522][ T335] usb 1-1: Manufacturer: syz [ 1939.810311][ T335] usb 1-1: config 0 descriptor?? [ 1940.082359][ T910] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1940.137181][T27374] loop1: detected capacity change from 0 to 512 [ 1940.146420][T27374] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1940.156437][T27374] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1940.163414][T27374] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.6564: Allocating blocks 41-42 which overlap fs metadata [ 1940.177377][T27374] __quota_error: 25 callbacks suppressed [ 1940.177391][T27374] Quota error (device loop1): write_blk: dquota write failed [ 1940.190641][T27374] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1940.200695][T27374] EXT4-fs error (device loop1): ext4_acquire_dquot:6796: comm syz.1.6564: Failed to acquire dquot type 0 [ 1940.212178][T27374] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1940.226737][T27374] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #12: comm syz.1.6564: corrupted inode contents [ 1940.238700][T27374] EXT4-fs error (device loop1): ext4_dirty_inode:6135: inode #12: comm syz.1.6564: mark_inode_dirty error [ 1940.250268][T27374] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #12: comm syz.1.6564: corrupted inode contents [ 1940.262256][T27374] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.6564: mark_inode_dirty error [ 1940.273708][T27374] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #12: comm syz.1.6564: corrupted inode contents [ 1940.274549][ T910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.285876][T27374] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 1940.296541][ T910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1940.317770][T27374] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #12: comm syz.1.6564: corrupted inode contents [ 1940.330002][T27374] EXT4-fs error (device loop1): ext4_truncate:4320: inode #12: comm syz.1.6564: mark_inode_dirty error [ 1940.330705][ T910] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1940.341299][T27374] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 1940.350489][ T910] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1940.367403][ T910] usb 10-1: Manufacturer: syz [ 1940.373085][ T910] usb 10-1: config 0 descriptor?? [ 1940.772901][T27379] loop8: detected capacity change from 0 to 8192 [ 1940.780832][ T28] audit: type=1400 audit(1766688691.495:2246): avc: denied { create } for pid=27376 comm="syz.8.6565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1940.811167][ T28] audit: type=1400 audit(1766688691.505:2247): avc: denied { setopt } for pid=27376 comm="syz.8.6565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1940.812660][T27374] EXT4-fs (loop1): 1 truncate cleaned up [ 1940.835157][T27353] loop0: detected capacity change from 0 to 1024 [ 1940.847789][T27353] EXT4-fs: Ignoring removed nobh option [ 1940.853599][T27353] EXT4-fs: Ignoring removed bh option [ 1940.859416][T27374] EXT4-fs (loop1): pa ffff88813ede4d20: logic 1, phys. 41, len 23 [ 1940.867347][T27374] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 1940.877775][T27379] loop8: p1 p2 p4 [ 1940.881539][T27379] loop8: p1 size 65536 extends beyond EOD, truncated [ 1940.882447][T27353] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1940.898631][T27374] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1940.904512][T27353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1940.908538][T27379] loop8: p2 start 861536256 is beyond EOD, truncated [ 1940.923614][T27379] loop8: p4 size 65536 extends beyond EOD, truncated [ 1941.486106][T27385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6566'. [ 1941.526311][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1941.569636][T27353] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.6558: Allocating blocks 497-513 which overlap fs metadata [ 1941.583970][T27353] EXT4-fs (loop0): pa ffff88813ede4000: logic 256, phys. 385, len 8 [ 1941.591994][T27353] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1941.614311][ T335] uclogic 0003:256C:006D.0182: failed retrieving Huion firmware version: -22 [ 1941.623191][ T335] uclogic 0003:256C:006D.0182: failed probing parameters: -22 [ 1941.630790][ T335] uclogic: probe of 0003:256C:006D.0182 failed with error -22 [ 1941.876889][T27372] loop9: detected capacity change from 0 to 1024 [ 1941.912571][T27372] EXT4-fs: Ignoring removed nobh option [ 1941.918161][T27372] EXT4-fs: Ignoring removed bh option [ 1941.928333][ T60] usb 1-1: USB disconnect, device number 53 [ 1941.934560][T27372] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1941.973812][T27372] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1942.041069][T27372] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3836: comm syz.9.6563: Allocating blocks 497-513 which overlap fs metadata [ 1942.113171][T27372] EXT4-fs (loop9): pa ffff888116f721f8: logic 256, phys. 385, len 8 [ 1942.121242][T27372] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1942.160271][ T910] uclogic 0003:256C:006D.0183: failed retrieving Huion firmware version: -22 [ 1942.169969][ T910] uclogic 0003:256C:006D.0183: failed probing parameters: -22 [ 1942.199543][ T910] uclogic: probe of 0003:256C:006D.0183 failed with error -22 [ 1942.219192][T27404] loop2: detected capacity change from 0 to 512 [ 1942.228151][T27404] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1942.245904][T27404] EXT4-fs (loop2): 1 truncate cleaned up [ 1942.251614][T27404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1942.468268][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1942.509438][ T910] usb 10-1: USB disconnect, device number 98 [ 1942.715370][T27420] loop1: detected capacity change from 0 to 128 [ 1943.101656][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1943.109247][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1943.142941][T27426] loop9: detected capacity change from 0 to 2048 [ 1943.231148][T27426] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1943.232817][T27430] loop8: detected capacity change from 0 to 256 [ 1943.257013][T27430] FAT-fs (loop8): Directory bread(block 64) failed [ 1943.263885][T27430] FAT-fs (loop8): Directory bread(block 65) failed [ 1943.270465][T27430] FAT-fs (loop8): Directory bread(block 66) failed [ 1943.277108][T27430] FAT-fs (loop8): Directory bread(block 67) failed [ 1943.283692][T27430] FAT-fs (loop8): Directory bread(block 68) failed [ 1943.290311][T27430] FAT-fs (loop8): Directory bread(block 69) failed [ 1943.296878][T27430] FAT-fs (loop8): Directory bread(block 70) failed [ 1943.309318][T27430] FAT-fs (loop8): Directory bread(block 71) failed [ 1943.315964][T27430] FAT-fs (loop8): Directory bread(block 72) failed [ 1943.322672][T27430] FAT-fs (loop8): Directory bread(block 73) failed [ 1944.082704][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1944.692384][ T335] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1944.903468][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1944.914420][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1944.926925][T27447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1944.936017][ T335] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1944.945152][ T335] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1944.953243][ T335] usb 2-1: Manufacturer: syz [ 1945.010114][ T335] usb 2-1: config 0 descriptor?? [ 1945.130658][T27458] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6586'. [ 1946.034190][T27445] loop1: detected capacity change from 0 to 1024 [ 1946.048548][T27445] EXT4-fs: Ignoring removed nobh option [ 1946.054370][T27445] EXT4-fs: Ignoring removed bh option [ 1946.060844][T27445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1946.083520][T27445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1946.857762][T27476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6591'. [ 1947.100310][T27477] loop0: detected capacity change from 0 to 1024 [ 1947.128472][T27477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1947.155438][T27445] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.6582: Allocating blocks 497-513 which overlap fs metadata [ 1947.169696][T27445] EXT4-fs (loop1): pa ffff888116f72738: logic 256, phys. 385, len 8 [ 1947.177808][T27445] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1947.196641][ T335] uclogic 0003:256C:006D.0184: failed retrieving Huion firmware version: -22 [ 1947.205610][ T335] uclogic 0003:256C:006D.0184: failed probing parameters: -22 [ 1947.214952][T27481] loop8: detected capacity change from 0 to 2048 [ 1947.218552][ T335] uclogic: probe of 0003:256C:006D.0184 failed with error -22 [ 1947.246481][ T28] audit: type=1400 audit(1766688698.285:2248): avc: denied { read } for pid=27483 comm="syz.2.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1947.250942][T27481] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1947.274552][ T351] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1947.324693][T27486] netlink: 'syz.2.6593': attribute type 12 has an invalid length. [ 1947.333906][ T28] audit: type=1400 audit(1766688698.375:2249): avc: denied { connect } for pid=27483 comm="syz.2.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1947.354035][ T28] audit: type=1400 audit(1766688698.375:2250): avc: denied { getopt } for pid=27483 comm="syz.2.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1948.188843][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1948.228045][T18119] EXT4-fs (loop8): unmounting filesystem. [ 1948.238824][ T351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1948.250893][ T351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1948.255661][T16969] usb 2-1: USB disconnect, device number 90 [ 1948.270878][ T351] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1948.296020][ T351] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1948.304773][ T351] usb 10-1: Manufacturer: syz [ 1948.375183][ T351] usb 10-1: config 0 descriptor?? [ 1948.552363][T14775] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1948.743407][T14775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1948.754439][T14775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1948.765177][T14775] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1948.774388][T14775] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1948.787428][T14775] usb 1-1: Manufacturer: syz [ 1948.798457][T14775] usb 1-1: config 0 descriptor?? [ 1948.806559][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1948.850135][T27505] loop1: detected capacity change from 0 to 2048 [ 1948.874412][T27505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1949.001968][T27468] loop9: detected capacity change from 0 to 1024 [ 1949.011166][T27468] EXT4-fs: Ignoring removed nobh option [ 1949.016783][T27468] EXT4-fs: Ignoring removed bh option [ 1949.022764][T27468] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1949.179606][T27468] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1949.379029][T27468] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3836: comm syz.9.6590: Allocating blocks 497-513 which overlap fs metadata [ 1949.400547][T27468] EXT4-fs (loop9): pa ffff88813ede41f8: logic 256, phys. 385, len 8 [ 1949.408690][T27468] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1949.438016][ T351] uclogic 0003:256C:006D.0185: failed retrieving Huion firmware version: -22 [ 1949.446874][ T351] uclogic 0003:256C:006D.0185: failed probing parameters: -22 [ 1949.454437][ T351] uclogic: probe of 0003:256C:006D.0185 failed with error -22 [ 1950.139040][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1950.424549][T27497] loop0: detected capacity change from 0 to 1024 [ 1950.432233][T27497] EXT4-fs: Ignoring removed nobh option [ 1950.437848][T27497] EXT4-fs: Ignoring removed bh option [ 1950.472503][T27497] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1950.485853][ T351] usb 10-1: USB disconnect, device number 99 [ 1950.513951][T27497] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1950.738942][T27536] loop2: detected capacity change from 0 to 256 [ 1950.748396][T27536] exfat: Deprecated parameter 'namecase' [ 1953.085517][T27537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6601'. [ 1953.366234][T27536] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1953.428037][T14775] uclogic 0003:256C:006D.0186: failed retrieving Huion firmware version: -71 [ 1953.446864][T14775] uclogic 0003:256C:006D.0186: failed probing parameters: -71 [ 1953.454455][T14775] uclogic: probe of 0003:256C:006D.0186 failed with error -71 [ 1953.469030][T14775] usb 1-1: USB disconnect, device number 54 [ 1953.482871][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1953.498288][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1953.618390][T27546] loop8: detected capacity change from 0 to 2048 [ 1953.780307][T27546] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1955.693723][T27560] loop2: detected capacity change from 0 to 1024 [ 1955.758902][T27561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6608'. [ 1955.822290][T18119] EXT4-fs (loop8): unmounting filesystem. [ 1955.961526][T27560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1956.322185][T27575] loop9: detected capacity change from 0 to 512 [ 1956.486037][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1956.497071][T27575] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1956.512838][T27575] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1956.524564][T27575] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3836: comm syz.9.6613: Allocating blocks 41-42 which overlap fs metadata [ 1956.538719][T27575] Quota error (device loop9): write_blk: dquota write failed [ 1956.887981][T27575] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1956.904218][T27575] EXT4-fs error (device loop9): ext4_acquire_dquot:6796: comm syz.9.6613: Failed to acquire dquot type 0 [ 1956.949566][T27575] EXT4-fs error (device loop9): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1957.350106][T27575] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #12: comm syz.9.6613: corrupted inode contents [ 1957.374932][T27575] EXT4-fs error (device loop9): ext4_dirty_inode:6135: inode #12: comm syz.9.6613: mark_inode_dirty error [ 1957.386617][T27575] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #12: comm syz.9.6613: corrupted inode contents [ 1957.398938][T27575] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #12: comm syz.9.6613: mark_inode_dirty error [ 1957.410501][T27575] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #12: comm syz.9.6613: corrupted inode contents [ 1957.422670][T27575] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 1957.431747][T27575] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #12: comm syz.9.6613: corrupted inode contents [ 1957.445866][T27575] EXT4-fs error (device loop9): ext4_truncate:4320: inode #12: comm syz.9.6613: mark_inode_dirty error [ 1957.508465][T27591] loop2: detected capacity change from 0 to 256 [ 1957.515023][T27591] exfat: Deprecated parameter 'namecase' [ 1957.542383][T27591] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1957.742501][ T24] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1957.778906][T27575] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 1958.387248][T27575] EXT4-fs (loop9): 1 truncate cleaned up [ 1958.399254][T27575] EXT4-fs (loop9): pa ffff88813ede4a80: logic 1, phys. 41, len 23 [ 1958.407154][T27575] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 1958.419946][T27575] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1958.450596][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1958.604863][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1958.637865][T27606] loop1: detected capacity change from 0 to 256 [ 1958.646758][T27606] exfat: Deprecated parameter 'namecase' [ 1958.824437][T27606] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1958.972676][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1959.074737][ T24] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1959.145280][ T24] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1959.204932][ T24] usb 9-1: Manufacturer: syz [ 1959.340370][ T24] usb 9-1: config 0 descriptor?? [ 1959.462386][ T28] audit: type=1400 audit(1766688710.475:2251): avc: denied { ioctl } for pid=27608 comm="syz.1.6623" path="socket:[131589]" dev="sockfs" ino=131589 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1959.519119][ T19] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1959.536436][ T28] audit: type=1400 audit(1766688710.575:2252): avc: denied { accept } for pid=27608 comm="syz.1.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1959.660264][T27614] loop9: detected capacity change from 0 to 256 [ 1959.686059][T27614] FAT-fs (loop9): Directory bread(block 64) failed [ 1959.692848][T27614] FAT-fs (loop9): Directory bread(block 65) failed [ 1959.699541][T27614] FAT-fs (loop9): Directory bread(block 66) failed [ 1959.706131][T27614] FAT-fs (loop9): Directory bread(block 67) failed [ 1959.712862][T27614] FAT-fs (loop9): Directory bread(block 68) failed [ 1959.719428][T27614] FAT-fs (loop9): Directory bread(block 69) failed [ 1959.726141][T27614] FAT-fs (loop9): Directory bread(block 70) failed [ 1959.732736][T27614] FAT-fs (loop9): Directory bread(block 71) failed [ 1959.739496][T27614] FAT-fs (loop9): Directory bread(block 72) failed [ 1959.746081][T27614] FAT-fs (loop9): Directory bread(block 73) failed [ 1960.381358][ T28] audit: type=1400 audit(1766688711.415:2253): avc: denied { create } for pid=27616 comm="syz.1.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1960.382408][T27617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1960.406020][T27588] loop8: detected capacity change from 0 to 1024 [ 1960.419096][T27588] EXT4-fs: Ignoring removed nobh option [ 1960.433422][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1960.437891][T27588] EXT4-fs: Ignoring removed bh option [ 1960.450254][T27588] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1960.475059][T27617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27617 comm=syz.1.6626 [ 1960.484703][ T19] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1960.498984][ T28] audit: type=1400 audit(1766688711.545:2254): avc: denied { connect } for pid=27616 comm="syz.1.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1960.521964][T27588] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1960.548371][T27624] loop9: detected capacity change from 0 to 1024 [ 1960.572380][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.599554][ T28] audit: type=1400 audit(1766688711.545:2255): avc: denied { ioctl } for pid=27616 comm="syz.1.6626" path="socket:[130828]" dev="sockfs" ino=130828 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1960.634679][ T19] usb 3-1: config 0 descriptor?? [ 1960.646556][T27624] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1960.714140][T27588] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.6617: Allocating blocks 497-513 which overlap fs metadata [ 1960.729135][T27588] EXT4-fs (loop8): pa ffff88813ede4bd0: logic 256, phys. 385, len 8 [ 1960.737308][T27588] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1960.762052][ T24] uclogic 0003:256C:006D.0187: failed retrieving Huion firmware version: -22 [ 1960.781023][ T24] uclogic 0003:256C:006D.0187: failed probing parameters: -22 [ 1960.788659][ T24] uclogic: probe of 0003:256C:006D.0187 failed with error -22 [ 1960.923843][ T28] audit: type=1400 audit(1766688711.965:2256): avc: denied { mounton } for pid=27623 comm="syz.9.6627" path="/460/file0/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1960.947289][ T28] audit: type=1400 audit(1766688711.965:2257): avc: denied { mount } for pid=27623 comm="syz.9.6627" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1960.983370][ T28] audit: type=1400 audit(1766688712.025:2258): avc: denied { mounton } for pid=27623 comm="syz.9.6627" path="/460/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1961.011871][T14775] usb 9-1: USB disconnect, device number 96 [ 1961.122389][ T60] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1961.303461][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.319563][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.330211][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1961.339266][ T60] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1961.347284][ T60] usb 1-1: Manufacturer: syz [ 1961.352425][ T60] usb 1-1: config 0 descriptor?? [ 1961.421189][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1961.547366][T18119] EXT4-fs (loop8): unmounting filesystem. [ 1961.964936][T27629] loop0: detected capacity change from 0 to 1024 [ 1961.971650][T27629] EXT4-fs: Ignoring removed nobh option [ 1961.977328][T27629] EXT4-fs: Ignoring removed bh option [ 1961.983097][T27629] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1962.003448][T27629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1962.012810][T14775] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1962.058947][T27629] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.6628: Allocating blocks 497-513 which overlap fs metadata [ 1962.073290][T27629] EXT4-fs (loop0): pa ffff88813ede49d8: logic 256, phys. 385, len 8 [ 1962.081287][T27629] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1962.104069][ T19] usbhid 3-1:0.0: can't add hid device: -71 [ 1962.116537][T27649] loop2: detected capacity change from 0 to 512 [ 1962.123145][ T19] usbhid: probe of 3-1:0.0 failed with error -71 [ 1962.129914][ T60] uclogic 0003:256C:006D.0188: failed retrieving Huion firmware version: -22 [ 1962.149257][ T19] usb 3-1: USB disconnect, device number 14 [ 1962.155757][T27649] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1962.175791][ T60] uclogic 0003:256C:006D.0188: failed probing parameters: -22 [ 1962.187292][ T60] uclogic: probe of 0003:256C:006D.0188 failed with error -22 [ 1962.196092][T14775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.201476][T27649] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1962.214767][T27649] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.6633: Allocating blocks 41-42 which overlap fs metadata [ 1962.216496][T14775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1962.228883][T27649] __quota_error: 1 callbacks suppressed [ 1962.228895][T27649] Quota error (device loop2): write_blk: dquota write failed [ 1962.240361][T14775] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1962.244029][T27649] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1962.251212][T14775] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1962.260271][T27649] EXT4-fs error (device loop2): ext4_acquire_dquot:6796: comm syz.2.6633: Failed to acquire dquot type 0 [ 1962.270632][T14775] usb 9-1: Manufacturer: syz [ 1962.348716][T27654] loop1: detected capacity change from 0 to 256 [ 1962.357434][T27654] exfat: Deprecated parameter 'namecase' [ 1962.482983][T27649] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1962.519993][T27654] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1962.737081][T27649] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.6633: corrupted inode contents [ 1963.292585][T27649] EXT4-fs error (device loop2): ext4_dirty_inode:6135: inode #12: comm syz.2.6633: mark_inode_dirty error [ 1963.308211][ T351] usb 1-1: USB disconnect, device number 55 [ 1963.322758][T27649] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.6633: corrupted inode contents [ 1963.334978][T27649] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.6633: mark_inode_dirty error [ 1963.347154][T27649] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.6633: corrupted inode contents [ 1963.359348][T27649] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 1963.368577][T27649] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.6633: corrupted inode contents [ 1963.381058][T27649] EXT4-fs error (device loop2): ext4_truncate:4320: inode #12: comm syz.2.6633: mark_inode_dirty error [ 1963.392512][T27649] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 1963.401578][T27649] EXT4-fs (loop2): 1 truncate cleaned up [ 1963.415640][T27649] EXT4-fs (loop2): pa ffff888116f72d20: logic 1, phys. 41, len 23 [ 1963.423567][T27649] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 1963.427133][T14775] usb 9-1: config 0 descriptor?? [ 1963.436542][T27649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1963.465914][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1964.685443][ T28] audit: type=1400 audit(1766688715.725:2260): avc: denied { mount } for pid=27673 comm="syz.1.6640" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1964.717097][ T28] audit: type=1400 audit(1766688715.755:2261): avc: denied { create } for pid=27675 comm="syz.1.6641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1964.824059][T27680] loop2: detected capacity change from 0 to 256 [ 1964.983343][T27643] loop8: detected capacity change from 0 to 1024 [ 1965.013215][T27643] EXT4-fs: Ignoring removed nobh option [ 1965.019014][T27643] EXT4-fs: Ignoring removed bh option [ 1965.024903][T27643] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1965.065678][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1965.072702][T27643] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1965.228120][T27643] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.6630: Allocating blocks 497-513 which overlap fs metadata [ 1965.242879][T27643] EXT4-fs (loop8): pa ffff88813ee0db28: logic 256, phys. 385, len 8 [ 1965.250898][T27643] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1965.467509][T14775] usbhid 9-1:0.0: can't add hid device: -71 [ 1965.501848][T14775] usbhid: probe of 9-1:0.0 failed with error -71 [ 1965.521222][T14775] usb 9-1: USB disconnect, device number 97 [ 1965.569662][ T28] audit: type=1400 audit(1766688716.605:2262): avc: denied { create } for pid=27701 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1965.590541][ T28] audit: type=1400 audit(1766688716.635:2263): avc: denied { bind } for pid=27701 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1966.005498][T27706] loop2: detected capacity change from 0 to 256 [ 1966.012168][T27706] exfat: Deprecated parameter 'namecase' [ 1966.018393][ T28] audit: type=1400 audit(1766688716.825:2264): avc: denied { connect } for pid=27701 comm="syz.9.6647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1966.062172][T27706] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1966.498798][T18119] EXT4-fs (loop8): unmounting filesystem. [ 1966.526102][T27710] loop1: detected capacity change from 0 to 512 [ 1966.547882][T27710] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1966.624968][T27710] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1966.994659][T27710] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.6648: Allocating blocks 41-42 which overlap fs metadata [ 1967.146522][T27710] Quota error (device loop1): write_blk: dquota write failed [ 1967.380454][T27710] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1967.390714][T27710] EXT4-fs error (device loop1): ext4_acquire_dquot:6796: comm syz.1.6648: Failed to acquire dquot type 0 [ 1967.402619][T27710] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1967.417168][T27710] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #12: comm syz.1.6648: corrupted inode contents [ 1967.429162][T27710] EXT4-fs error (device loop1): ext4_dirty_inode:6135: inode #12: comm syz.1.6648: mark_inode_dirty error [ 1967.440683][T27710] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #12: comm syz.1.6648: corrupted inode contents [ 1967.452733][T27710] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.6648: mark_inode_dirty error [ 1967.464303][T27710] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #12: comm syz.1.6648: corrupted inode contents [ 1967.481678][T27710] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 1967.490679][T27710] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #12: comm syz.1.6648: corrupted inode contents [ 1967.507368][T27710] EXT4-fs error (device loop1): ext4_truncate:4320: inode #12: comm syz.1.6648: mark_inode_dirty error [ 1967.526909][T27732] loop9: detected capacity change from 0 to 512 [ 1967.534434][T27710] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 1967.535589][T27733] loop0: detected capacity change from 0 to 512 [ 1967.544385][T27732] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1967.559503][T27733] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1967.561453][T27710] EXT4-fs (loop1): 1 truncate cleaned up [ 1967.582396][T27732] EXT4-fs (loop9): 1 truncate cleaned up [ 1967.588134][T27732] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1967.590471][T27710] EXT4-fs (loop1): pa ffff888116f72b28: logic 1, phys. 41, len 23 [ 1967.604913][T27710] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 1967.615235][T27710] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1967.618736][T27733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1967.636586][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1967.640586][T27733] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1967.658775][T27733] FAULT_INJECTION: forcing a failure. [ 1967.658775][T27733] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.677594][T27733] CPU: 1 PID: 27733 Comm: syz.0.6654 Tainted: G W syzkaller #0 [ 1967.686540][T27733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1967.696589][T27733] Call Trace: [ 1967.699862][T27733] [ 1967.702788][T27733] __dump_stack+0x21/0x24 [ 1967.707123][T27733] dump_stack_lvl+0xee/0x150 [ 1967.711714][T27733] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1967.716736][T27733] ? memset+0x35/0x40 [ 1967.720717][T27733] dump_stack+0x15/0x24 [ 1967.724871][T27733] should_fail_ex+0x3d4/0x520 [ 1967.729553][T27733] __should_failslab+0xac/0xf0 [ 1967.734321][T27733] should_failslab+0x9/0x20 [ 1967.738834][T27733] slab_pre_alloc_hook+0x30/0x1e0 [ 1967.743855][T27733] kmem_cache_alloc_lru+0x49/0x280 [ 1967.748958][T27733] ? __d_alloc+0x34/0x6c0 [ 1967.753276][T27733] __d_alloc+0x34/0x6c0 [ 1967.757418][T27733] ? rwsem_write_trylock+0x130/0x300 [ 1967.762688][T27733] d_alloc+0x4b/0x260 [ 1967.766661][T27733] lookup_one_qstr_excl+0xcb/0x270 [ 1967.771767][T27733] filename_create+0x219/0x450 [ 1967.776517][T27733] ? kasan_save_alloc_info+0x25/0x30 [ 1967.781792][T27733] ? kern_path_create+0x1b0/0x1b0 [ 1967.786806][T27733] do_mkdirat+0x5c/0x4c0 [ 1967.791030][T27733] ? getname_flags+0x206/0x500 [ 1967.795776][T27733] __x64_sys_mkdirat+0x89/0xa0 [ 1967.800523][T27733] x64_sys_call+0x73d/0x9a0 [ 1967.805007][T27733] do_syscall_64+0x4c/0xa0 [ 1967.809409][T27733] ? clear_bhb_loop+0x30/0x80 [ 1967.814070][T27733] ? clear_bhb_loop+0x30/0x80 [ 1967.818741][T27733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1967.824629][T27733] RIP: 0033:0x7fb01478de97 [ 1967.829041][T27733] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1967.848636][T27733] RSP: 002b:00007fb015676e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1967.857037][T27733] RAX: ffffffffffffffda RBX: 00007fb015676ef0 RCX: 00007fb01478de97 [ 1967.864998][T27733] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 1967.872954][T27733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1967.880907][T27733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1967.888863][T27733] R13: 00007fb015676eb0 R14: 0000000000000000 R15: 0000000000000000 [ 1967.896825][T27733] [ 1967.954376][ T60] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1967.962680][ T28] audit: type=1400 audit(1766688718.955:2265): avc: denied { sqpoll } for pid=27741 comm="syz.1.6657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1968.033981][T27733] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.6654: corrupted inode contents [ 1968.073486][T27733] EXT4-fs error (device loop0): ext4_dirty_inode:6135: inode #2: comm syz.0.6654: mark_inode_dirty error [ 1968.160896][T27733] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.6654: corrupted inode contents [ 1968.174666][T27733] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.6654: mark_inode_dirty error [ 1968.326313][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1968.355279][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1968.372720][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1968.380940][ T28] audit: type=1400 audit(1766688719.415:2266): avc: denied { bind } for pid=27923 comm="syz.0.6659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1968.393281][ T60] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1968.406047][ T28] audit: type=1400 audit(1766688719.415:2267): avc: denied { connect } for pid=27923 comm="syz.0.6659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1968.437805][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1968.452368][ T60] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1968.470517][ T60] usb 3-1: Manufacturer: syz [ 1968.495007][ T60] usb 3-1: config 0 descriptor?? [ 1968.509560][ T28] audit: type=1400 audit(1766688719.545:2268): avc: denied { relabelfrom } for pid=27930 comm="syz.9.6660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1968.530071][ T28] audit: type=1400 audit(1766688719.575:2269): avc: denied { relabelto } for pid=27930 comm="syz.9.6660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1968.559187][ T28] audit: type=1400 audit(1766688719.595:2270): avc: denied { connect } for pid=27930 comm="syz.9.6660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1969.706885][T27954] loop0: detected capacity change from 0 to 256 [ 1969.746062][T27962] loop8: detected capacity change from 0 to 512 [ 1969.815367][T27962] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1969.833673][T27729] loop2: detected capacity change from 0 to 1024 [ 1969.996200][T27729] EXT4-fs: Ignoring removed nobh option [ 1970.001850][T27729] EXT4-fs: Ignoring removed bh option [ 1970.008040][T27962] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1970.014920][T27729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1970.026616][T27962] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.6667: Allocating blocks 41-42 which overlap fs metadata [ 1970.057026][T27962] Quota error (device loop8): write_blk: dquota write failed [ 1970.066713][T27729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1970.081485][T27962] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1970.118071][T27962] EXT4-fs error (device loop8): ext4_acquire_dquot:6796: comm syz.8.6667: Failed to acquire dquot type 0 [ 1970.156176][T27962] EXT4-fs error (device loop8): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1970.207472][T27962] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #12: comm syz.8.6667: corrupted inode contents [ 1970.233901][T27962] EXT4-fs error (device loop8): ext4_dirty_inode:6135: inode #12: comm syz.8.6667: mark_inode_dirty error [ 1970.265911][T27962] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #12: comm syz.8.6667: corrupted inode contents [ 1970.280287][T27729] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.6653: Allocating blocks 497-513 which overlap fs metadata [ 1970.294322][T27962] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #12: comm syz.8.6667: mark_inode_dirty error [ 1970.306077][T27729] EXT4-fs (loop2): pa ffff88813ee0d690: logic 256, phys. 385, len 8 [ 1970.314135][T27729] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1970.324545][T27962] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #12: comm syz.8.6667: corrupted inode contents [ 1970.336605][T27962] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 1970.345438][T27962] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #12: comm syz.8.6667: corrupted inode contents [ 1970.357532][ T60] uclogic 0003:256C:006D.0189: failed retrieving Huion firmware version: -22 [ 1970.366542][ T60] uclogic 0003:256C:006D.0189: failed probing parameters: -22 [ 1970.374267][T27962] EXT4-fs error (device loop8): ext4_truncate:4320: inode #12: comm syz.8.6667: mark_inode_dirty error [ 1970.385468][ T60] uclogic: probe of 0003:256C:006D.0189 failed with error -22 [ 1970.393153][T27962] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 1970.396611][T27975] loop1: detected capacity change from 0 to 512 [ 1970.411468][T27962] EXT4-fs (loop8): 1 truncate cleaned up [ 1970.417256][T27962] EXT4-fs (loop8): pa ffff888116f72000: logic 1, phys. 41, len 23 [ 1970.425125][T27962] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 1970.437367][T27975] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1970.441079][T27962] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1970.449170][T27975] EXT4-fs (loop1): 1 truncate cleaned up [ 1970.462632][T27975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1970.483203][T27968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6669'. [ 1970.524147][T18119] EXT4-fs (loop8): unmounting filesystem. [ 1970.544663][T27980] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6672'. [ 1970.562747][T27980] device gretap0 entered promiscuous mode [ 1970.576718][T27986] device pim6reg1 entered promiscuous mode [ 1970.583733][T27980] netlink: 5 bytes leftover after parsing attributes in process `syz.8.6672'. [ 1970.593661][T27980] 0ªî{X¹¦: renamed from gretap0 [ 1970.599415][T27980] device 30ªî{X¹¦ left promiscuous mode [ 1970.613296][T27980] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1970.613565][ T351] usb 3-1: USB disconnect, device number 15 [ 1970.632809][T27980] loop8: detected capacity change from 0 to 256 [ 1970.646478][T27980] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1970.658641][T27980] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1970.930047][T27989] loop9: detected capacity change from 0 to 131072 [ 1970.954774][T27989] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1970.972384][ T449] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1970.984881][T27989] F2FS-fs (loop9): Mounted with checkpoint version = 753bd00b [ 1971.002608][T27989] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1971.011008][T27989] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1971.019102][ T28] audit: type=1400 audit(1766688722.065:2271): avc: denied { remount } for pid=27988 comm="syz.9.6675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1971.019117][T27989] binder: Binderfs stats mode cannot be changed during a remount [ 1971.153462][ T449] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1971.169915][ T449] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1971.180513][ T449] usb 9-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 1971.197158][ T449] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.227100][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1971.307578][ T449] usb 9-1: config 0 descriptor?? [ 1971.406063][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1971.441745][T28005] loop1: detected capacity change from 0 to 512 [ 1971.485291][T28005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1971.521353][T28007] loop2: detected capacity change from 0 to 256 [ 1971.542225][T27991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.673285][T27991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.676771][T28005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1971.690187][T28005] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1971.807278][T28014] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #2: comm syz.1.6680: corrupted inode contents [ 1971.821778][T28014] EXT4-fs error (device loop1): ext4_dirty_inode:6135: inode #2: comm syz.1.6680: mark_inode_dirty error [ 1971.843738][T28014] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #2: comm syz.1.6680: corrupted inode contents [ 1971.858135][T28014] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.6680: mark_inode_dirty error [ 1971.892141][ T449] wacom 0003:056A:030C.018A: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.8-1/input0 [ 1972.118368][T28023] loop0: detected capacity change from 0 to 256 [ 1972.128002][T28023] exfat: Deprecated parameter 'namecase' [ 1972.181857][T28023] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1973.156206][T24402] EXT4-fs error (device loop1): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1973.170386][ T449] usb 9-1: USB disconnect, device number 98 [ 1973.177585][T24402] EXT4-fs error (device loop1): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1973.289947][T28032] futex_wake_op: syz.0.6687 tries to shift op by -1; fix this program [ 1973.298062][T28035] futex_wake_op: syz.9.6688 tries to shift op by -1; fix this program [ 1973.307321][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1973.307334][ T28] audit: type=1326 audit(1766688724.345:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28034 comm="syz.9.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1973.337536][ T28] audit: type=1326 audit(1766688724.355:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28031 comm="syz.0.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1973.352696][T24402] EXT4-fs (loop1): unmounting filesystem. [ 1973.361107][ T28] audit: type=1326 audit(1766688724.355:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28031 comm="syz.0.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1973.400470][ T28] audit: type=1326 audit(1766688724.355:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28031 comm="syz.0.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1973.424091][ T28] audit: type=1326 audit(1766688724.355:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28031 comm="syz.0.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1973.447705][ T28] audit: type=1326 audit(1766688724.355:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28031 comm="syz.0.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1973.471271][ T28] audit: type=1326 audit(1766688724.355:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28031 comm="syz.0.6687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb01478f749 code=0x7ffc0000 [ 1973.514045][ T28] audit: type=1326 audit(1766688724.375:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28034 comm="syz.9.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1973.542279][ T28] audit: type=1326 audit(1766688724.375:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28034 comm="syz.9.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1973.606757][ T28] audit: type=1326 audit(1766688724.375:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28034 comm="syz.9.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1973.825533][T28043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.834982][T28043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.040831][T28043] device bridge_slave_0 entered promiscuous mode [ 1974.077830][T28043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1974.097671][T28043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.114115][T28043] device bridge_slave_1 entered promiscuous mode [ 1974.235417][T28043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1974.242494][T28043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1974.249770][T28043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.256814][T28043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1974.303618][T27928] device bridge_slave_1 left promiscuous mode [ 1974.313923][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.337169][T27928] device bridge_slave_0 left promiscuous mode [ 1974.349606][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.369219][T27928] device veth1_macvtap left promiscuous mode [ 1974.380424][T27928] device veth0_vlan left promiscuous mode [ 1974.597487][ T1611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1974.599541][T28064] loop0: detected capacity change from 0 to 512 [ 1974.611025][ T1611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1974.636542][T28064] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1974.689164][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1974.697171][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1974.709807][T28064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1974.732671][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1974.733036][T28064] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1974.752740][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1974.791191][T27814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.798273][T27814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1974.917323][T28069] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.6694: corrupted inode contents [ 1974.929296][T28069] EXT4-fs error (device loop0): ext4_dirty_inode:6135: inode #2: comm syz.0.6694: mark_inode_dirty error [ 1974.935123][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1974.940759][T28069] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.6694: corrupted inode contents [ 1974.960489][T28069] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.6694: mark_inode_dirty error [ 1974.980331][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1974.988574][T27814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1974.995624][T27814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1975.003447][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1975.011584][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1975.019630][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1975.027749][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1975.035968][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1975.044464][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1975.055516][T28043] device veth0_vlan entered promiscuous mode [ 1975.064841][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1975.073807][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1975.087013][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1975.098564][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1975.120806][T28043] device veth1_macvtap entered promiscuous mode [ 1975.137711][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1975.148091][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1975.162715][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1975.179210][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1975.189584][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1975.203961][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1975.215298][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1975.707371][T28078] loop2: detected capacity change from 0 to 256 [ 1975.806426][T19025] EXT4-fs error (device loop0): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1975.900665][T19025] EXT4-fs error (device loop0): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1976.036531][T19025] EXT4-fs (loop0): unmounting filesystem. [ 1976.155597][T28084] loop8: detected capacity change from 0 to 256 [ 1976.164604][T28084] exfat: Deprecated parameter 'namecase' [ 1976.452945][T28084] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1977.122813][T28096] device pim6reg1 entered promiscuous mode [ 1977.231649][T28104] loop2: detected capacity change from 0 to 256 [ 1977.252640][ T449] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1977.273580][T28104] FAT-fs (loop2): Directory bread(block 64) failed [ 1977.280164][T28104] FAT-fs (loop2): Directory bread(block 65) failed [ 1977.286875][T28104] FAT-fs (loop2): Directory bread(block 66) failed [ 1977.293461][T28104] FAT-fs (loop2): Directory bread(block 67) failed [ 1977.300124][T28104] FAT-fs (loop2): Directory bread(block 68) failed [ 1977.306687][T28104] FAT-fs (loop2): Directory bread(block 69) failed [ 1977.313367][T28104] FAT-fs (loop2): Directory bread(block 70) failed [ 1977.319893][T28104] FAT-fs (loop2): Directory bread(block 71) failed [ 1977.326577][T28104] FAT-fs (loop2): Directory bread(block 72) failed [ 1977.333148][T28104] FAT-fs (loop2): Directory bread(block 73) failed [ 1977.454328][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1977.583616][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1977.680582][T28098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.758807][ T449] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1977.773603][T28098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.808746][T28106] loop8: detected capacity change from 0 to 512 [ 1977.831950][T28098] device bridge_slave_0 entered promiscuous mode [ 1977.842931][ T449] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1977.888849][T28106] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1977.959174][T28098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.966575][ T449] usb 5-1: Manufacturer: syz [ 1977.975470][ T449] usb 5-1: config 0 descriptor?? [ 1977.980501][T28098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.990200][T28098] device bridge_slave_1 entered promiscuous mode [ 1978.026522][T28106] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1978.040736][T28106] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1978.075069][T28111] loop9: detected capacity change from 0 to 512 [ 1978.139470][T28113] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6707: corrupted inode contents [ 1978.147423][T28111] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.6706: inode #1: comm syz.9.6706: iget: illegal inode # [ 1978.152202][T28113] EXT4-fs error (device loop8): ext4_dirty_inode:6135: inode #2: comm syz.8.6707: mark_inode_dirty error [ 1978.176082][T28113] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6707: corrupted inode contents [ 1978.188066][T28113] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.6707: mark_inode_dirty error [ 1978.227088][T27928] device bridge_slave_1 left promiscuous mode [ 1978.233613][T28111] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.6706: error while reading EA inode 1 err=-117 [ 1978.245914][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.253612][T27928] device bridge_slave_0 left promiscuous mode [ 1978.259775][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.267571][T28111] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.6706: inode #1: comm syz.9.6706: iget: illegal inode # [ 1978.281363][T27928] device veth1_macvtap left promiscuous mode [ 1978.302084][T28111] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.6706: error while reading EA inode 1 err=-117 [ 1978.318574][T28111] EXT4-fs (loop9): 1 orphan inode deleted [ 1978.324775][T28111] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1978.597939][T18119] EXT4-fs error (device loop8): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1978.613109][T18119] EXT4-fs error (device loop8): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1978.614695][T28088] loop4: detected capacity change from 0 to 1024 [ 1978.656557][T28088] EXT4-fs: Ignoring removed nobh option [ 1978.669358][T28088] EXT4-fs: Ignoring removed bh option [ 1978.676908][T27846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1978.684654][T27846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1978.692204][T28088] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1978.706000][T27846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1978.714659][T27846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1978.723280][T27846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.730332][T27846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1978.738134][T27846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1978.747024][T27846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1978.756325][T28088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1978.782670][T27846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.789726][T27846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1978.816981][T27846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1978.845681][T27846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1978.860846][T27846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1978.891230][T28088] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.6702: Allocating blocks 497-513 which overlap fs metadata [ 1978.905785][T19665] EXT4-fs (loop8): unmounting filesystem. [ 1978.914756][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1978.934854][T28088] EXT4-fs (loop4): pa ffff88813ee0dc78: logic 256, phys. 385, len 8 [ 1978.942982][T28088] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1978.958771][T28098] device veth0_vlan entered promiscuous mode [ 1978.973267][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1978.988786][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1979.009706][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1979.026278][ T449] uclogic 0003:256C:006D.018B: failed retrieving Huion firmware version: -22 [ 1979.041348][ T449] uclogic 0003:256C:006D.018B: failed probing parameters: -22 [ 1979.042936][T28098] device veth1_macvtap entered promiscuous mode [ 1979.056260][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1979.060152][ T449] uclogic: probe of 0003:256C:006D.018B failed with error -22 [ 1979.076406][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1979.084963][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1979.099094][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1979.115440][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1979.138932][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1979.151228][T28130] loop6: detected capacity change from 0 to 512 [ 1979.167219][T28130] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1979.242810][T28130] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1979.252278][T28130] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3836: comm syz.6.6700: Allocating blocks 41-42 which overlap fs metadata [ 1980.046018][T28130] __quota_error: 50 callbacks suppressed [ 1980.046034][T28130] Quota error (device loop6): write_blk: dquota write failed [ 1980.059989][T28130] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1980.070387][T28130] EXT4-fs error (device loop6): ext4_acquire_dquot:6796: comm syz.6.6700: Failed to acquire dquot type 0 [ 1980.079084][ T735] usb 5-1: USB disconnect, device number 18 [ 1980.085432][T28130] EXT4-fs error (device loop6): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1980.102150][T28130] EXT4-fs error (device loop6): ext4_do_update_inode:5270: inode #12: comm syz.6.6700: corrupted inode contents [ 1980.114745][T28130] EXT4-fs error (device loop6): ext4_dirty_inode:6135: inode #12: comm syz.6.6700: mark_inode_dirty error [ 1980.129602][T28135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.315978][T28135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1980.339325][T28130] EXT4-fs error (device loop6): ext4_do_update_inode:5270: inode #12: comm syz.6.6700: corrupted inode contents [ 1980.353103][T28135] device bridge_slave_0 entered promiscuous mode [ 1980.360697][T28135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1980.368113][T28130] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.6700: mark_inode_dirty error [ 1980.379777][T28135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.389941][T28130] EXT4-fs error (device loop6): ext4_do_update_inode:5270: inode #12: comm syz.6.6700: corrupted inode contents [ 1980.403082][T28135] device bridge_slave_1 entered promiscuous mode [ 1980.412982][T28130] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 1980.423466][T28130] EXT4-fs error (device loop6): ext4_do_update_inode:5270: inode #12: comm syz.6.6700: corrupted inode contents [ 1980.435498][T28130] EXT4-fs error (device loop6): ext4_truncate:4320: inode #12: comm syz.6.6700: mark_inode_dirty error [ 1980.448614][T28130] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 1980.457815][T28130] EXT4-fs (loop6): 1 truncate cleaned up [ 1980.463972][T28130] EXT4-fs (loop6): pa ffff88813ee0de70: logic 1, phys. 41, len 23 [ 1980.471797][T28130] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 1980.482160][T28130] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1980.532183][T28098] EXT4-fs (loop6): unmounting filesystem. [ 1980.579887][T28151] loop9: detected capacity change from 0 to 512 [ 1980.588357][T28151] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1980.605932][T28151] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1980.616226][T28151] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1980.636637][T28151] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #2: comm syz.9.6714: corrupted inode contents [ 1980.648689][T28151] EXT4-fs error (device loop9): ext4_dirty_inode:6135: inode #2: comm syz.9.6714: mark_inode_dirty error [ 1980.661128][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1980.668798][T28151] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #2: comm syz.9.6714: corrupted inode contents [ 1980.681223][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1980.684420][T28151] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.6714: mark_inode_dirty error [ 1980.692601][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1980.736071][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1980.746279][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.750109][T28043] EXT4-fs (loop4): unmounting filesystem. [ 1980.753337][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1980.755112][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1980.774006][ T28] audit: type=1400 audit(1766688731.805:2338): avc: denied { rename } for pid=28150 comm="syz.9.6714" name="file0" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1980.829165][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1980.837696][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1980.848643][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1980.855711][ T1611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1980.863157][ T449] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1980.865105][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1980.880106][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1980.925393][T18679] EXT4-fs (loop9): unmounting filesystem. [ 1980.935069][T28135] device veth0_vlan entered promiscuous mode [ 1980.977665][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1980.986173][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1981.019975][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1981.029433][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1981.067509][T28170] FAULT_INJECTION: forcing a failure. [ 1981.067509][T28170] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.080351][T28170] CPU: 1 PID: 28170 Comm: syz.4.6716 Tainted: G W syzkaller #0 [ 1981.089296][T28170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1981.099348][T28170] Call Trace: [ 1981.102620][T28170] [ 1981.105541][T28170] __dump_stack+0x21/0x24 [ 1981.109866][T28170] dump_stack_lvl+0xee/0x150 [ 1981.114449][T28170] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1981.119471][T28170] ? __stack_depot_save+0x36/0x480 [ 1981.124573][T28170] dump_stack+0x15/0x24 [ 1981.128719][T28170] should_fail_ex+0x3d4/0x520 [ 1981.133392][T28170] __should_failslab+0xac/0xf0 [ 1981.138159][T28170] should_failslab+0x9/0x20 [ 1981.142650][T28170] slab_pre_alloc_hook+0x30/0x1e0 [ 1981.147668][T28170] kmem_cache_alloc_lru+0x49/0x280 [ 1981.152773][T28170] ? shmem_alloc_inode+0x28/0x40 [ 1981.157708][T28170] shmem_alloc_inode+0x28/0x40 [ 1981.162465][T28170] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 1981.167918][T28170] new_inode_pseudo+0x70/0x1f0 [ 1981.172676][T28170] new_inode+0x28/0x1e0 [ 1981.176828][T28170] ? _raw_spin_lock+0x8e/0xe0 [ 1981.181499][T28170] shmem_get_inode+0x349/0xc20 [ 1981.186267][T28170] __shmem_file_setup+0x113/0x2b0 [ 1981.191291][T28170] shmem_file_setup+0x2f/0x40 [ 1981.195995][T28170] __se_sys_memfd_create+0x1e6/0x3b0 [ 1981.201286][T28170] __x64_sys_memfd_create+0x5b/0x70 [ 1981.206489][T28170] x64_sys_call+0x235/0x9a0 [ 1981.211000][T28170] do_syscall_64+0x4c/0xa0 [ 1981.215422][T28170] ? clear_bhb_loop+0x30/0x80 [ 1981.220106][T28170] ? clear_bhb_loop+0x30/0x80 [ 1981.224788][T28170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1981.230679][T28170] RIP: 0033:0x7f974898f749 [ 1981.235087][T28170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1981.254690][T28170] RSP: 002b:00007f9749750e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1981.263109][T28170] RAX: ffffffffffffffda RBX: 0000000000000336 RCX: 00007f974898f749 [ 1981.271078][T28170] RDX: 00007f9749750ef0 RSI: 0000000000000000 RDI: 00007f9748a14960 [ 1981.279046][T28170] RBP: 0000200000000880 R08: 00007f9749750bb7 R09: 00007f9749750e40 [ 1981.287012][T28170] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 1981.294980][T28170] R13: 00007f9749750ef0 R14: 00007f9749750eb0 R15: 0000200000000380 [ 1981.302954][T28170] [ 1981.435444][T27928] device bridge_slave_1 left promiscuous mode [ 1981.442350][ T449] usb 7-1: Using ep0 maxpacket: 32 [ 1981.466680][ T449] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1981.491582][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.573225][ T449] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1981.590647][T27928] device bridge_slave_0 left promiscuous mode [ 1981.624930][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.643922][ T449] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1981.674265][T27928] device veth1_macvtap left promiscuous mode [ 1981.697359][ T449] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1981.720217][ T28] audit: type=1400 audit(1766688732.755:2339): avc: denied { lock } for pid=28174 comm="syz.9.6718" path="socket:[132757]" dev="sockfs" ino=132757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1981.869851][ T449] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.882371][T28178] loop2: detected capacity change from 0 to 512 [ 1981.888188][ T449] usb 7-1: Product: syz [ 1981.895561][T28178] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1981.905463][ T449] usb 7-1: Manufacturer: syz [ 1981.910069][ T449] usb 7-1: SerialNumber: syz [ 1981.916083][ T449] usb 7-1: config 0 descriptor?? [ 1981.925402][T28178] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1981.932850][T28178] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.6720: Allocating blocks 41-42 which overlap fs metadata [ 1981.946899][T28178] Quota error (device loop2): write_blk: dquota write failed [ 1981.954463][T28178] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1981.964517][T28178] EXT4-fs error (device loop2): ext4_acquire_dquot:6796: comm syz.2.6720: Failed to acquire dquot type 0 [ 1981.976086][T28178] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1981.983872][T28135] device veth1_macvtap entered promiscuous mode [ 1981.997372][T28178] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.6720: corrupted inode contents [ 1982.014333][T28178] EXT4-fs error (device loop2): ext4_dirty_inode:6135: inode #12: comm syz.2.6720: mark_inode_dirty error [ 1982.033268][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1982.041582][T28178] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.6720: corrupted inode contents [ 1982.058234][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1982.059246][T28178] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.6720: mark_inode_dirty error [ 1982.066539][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1982.079085][T28184] futex_wake_op: syz.4.6722 tries to shift op by -1; fix this program [ 1982.085367][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1982.093644][T28178] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.6720: corrupted inode contents [ 1982.101396][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1982.115749][ T28] audit: type=1326 audit(1766688733.155:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28183 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974898f749 code=0x7ffc0000 [ 1982.121762][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1982.145586][T28178] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 1982.154205][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1982.171239][ T28] audit: type=1326 audit(1766688733.195:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28183 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f974898f749 code=0x7ffc0000 [ 1982.172418][T14775] usb 7-1: USB disconnect, device number 2 [ 1982.198668][ T28] audit: type=1326 audit(1766688733.195:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28183 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974898f749 code=0x7ffc0000 [ 1982.226807][T28178] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #12: comm syz.2.6720: corrupted inode contents [ 1982.243458][ T28] audit: type=1326 audit(1766688733.195:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28183 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f974898f749 code=0x7ffc0000 [ 1982.252193][T28178] EXT4-fs error (device loop2): ext4_truncate:4320: inode #12: comm syz.2.6720: mark_inode_dirty error [ 1982.278535][ T19] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1982.317509][T28178] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 1982.326848][T28178] EXT4-fs (loop2): 1 truncate cleaned up [ 1982.332603][T28178] EXT4-fs (loop2): pa ffff888111a65348: logic 1, phys. 41, len 23 [ 1982.340427][T28178] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 1982.350662][T28178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1982.648539][T28197] loop4: detected capacity change from 0 to 512 [ 1982.658163][T28197] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1982.668649][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1982.668924][T28197] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1982.681579][T28197] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.6724: Allocating blocks 41-42 which overlap fs metadata [ 1982.696345][T28200] loop8: detected capacity change from 0 to 512 [ 1982.696497][T28197] EXT4-fs error (device loop4): ext4_acquire_dquot:6796: comm syz.4.6724: Failed to acquire dquot type 0 [ 1982.716186][T28197] EXT4-fs error (device loop4): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1982.730808][T28197] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #12: comm syz.4.6724: corrupted inode contents [ 1982.743353][T28200] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1982.751193][T28202] loop2: detected capacity change from 0 to 2048 [ 1982.755164][ T19] usb 10-1: Using ep0 maxpacket: 8 [ 1982.761042][T28197] EXT4-fs error (device loop4): ext4_dirty_inode:6135: inode #12: comm syz.4.6724: mark_inode_dirty error [ 1982.772185][ T19] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1982.785903][T28197] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #12: comm syz.4.6724: corrupted inode contents [ 1982.792707][ T19] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.799769][T28197] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.6724: mark_inode_dirty error [ 1982.808998][T28200] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1982.825795][T28202] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1982.828697][ T19] usb 10-1: config 0 has no interface number 0 [ 1982.836754][T28197] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #12: comm syz.4.6724: corrupted inode contents [ 1982.843371][T28200] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1982.868029][T28197] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 1982.877236][ T19] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1982.882559][T28200] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6725: corrupted inode contents [ 1982.886566][T28197] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #12: comm syz.4.6724: corrupted inode contents [ 1982.898338][T28200] EXT4-fs error (device loop8): ext4_dirty_inode:6135: inode #2: comm syz.8.6725: mark_inode_dirty error [ 1982.909937][ T19] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.922451][T28197] EXT4-fs error (device loop4): ext4_truncate:4320: inode #12: comm syz.4.6724: mark_inode_dirty error [ 1982.929525][ T19] usb 10-1: Product: syz [ 1982.944523][ T19] usb 10-1: Manufacturer: syz [ 1982.949250][ T19] usb 10-1: SerialNumber: syz [ 1982.963374][T28197] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 1982.973376][T28200] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6725: corrupted inode contents [ 1982.985454][T28197] EXT4-fs (loop4): 1 truncate cleaned up [ 1982.995378][T28200] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.6725: mark_inode_dirty error [ 1982.997452][ T19] usb 10-1: config 0 descriptor?? [ 1983.007138][T28197] EXT4-fs (loop4): pa ffff888111a650a8: logic 1, phys. 41, len 23 [ 1983.013305][ T19] usb 10-1: Found UVC 0.04 device syz (046d:08c3) [ 1983.019332][T28197] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 1983.031084][ T19] usb 10-1: No valid video chain found. [ 1983.043435][T28197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1983.071939][T28043] EXT4-fs (loop4): unmounting filesystem. [ 1983.487441][T28182] xt_hashlimit: size too large, truncated to 1048576 [ 1983.668028][T28213] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 1983.694520][T28135] EXT4-fs (loop8): unmounting filesystem. [ 1983.701245][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1983.718786][T28218] futex_wake_op: syz.8.6729 tries to shift op by -1; fix this program [ 1983.727049][T10424] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1983.936586][T10424] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1983.943343][T28227] FAULT_INJECTION: forcing a failure. [ 1983.943343][T28227] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.947756][T10424] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1983.960236][T28227] CPU: 0 PID: 28227 Comm: syz.8.6731 Tainted: G W syzkaller #0 [ 1983.970982][T10424] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1983.978745][T28227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1983.978758][T28227] Call Trace: [ 1983.978769][T28227] [ 1983.978776][T28227] __dump_stack+0x21/0x24 [ 1983.978798][T28227] dump_stack_lvl+0xee/0x150 [ 1984.012849][T28227] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1984.017861][T28227] dump_stack+0x15/0x24 [ 1984.022001][T28227] should_fail_ex+0x3d4/0x520 [ 1984.026660][T28227] ? __alloc_file+0x28/0x2a0 [ 1984.031228][T28227] __should_failslab+0xac/0xf0 [ 1984.035977][T28227] should_failslab+0x9/0x20 [ 1984.040457][T28227] kmem_cache_alloc+0x3b/0x330 [ 1984.045202][T28227] ? __cfi__raw_spin_lock+0x10/0x10 [ 1984.050382][T28227] __alloc_file+0x28/0x2a0 [ 1984.054782][T28227] alloc_empty_file+0x97/0x180 [ 1984.059528][T28227] alloc_file+0x59/0x640 [ 1984.063752][T28227] alloc_file_pseudo+0x17a/0x1f0 [ 1984.068673][T28227] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 1984.074114][T28227] ? _raw_spin_lock_bh+0x8e/0xe0 [ 1984.079042][T28227] anon_inode_getfile+0xa6/0x180 [ 1984.083963][T28227] bpf_link_prime+0xf0/0x250 [ 1984.088537][T28227] bpf_raw_tp_link_attach+0x273/0x550 [ 1984.093888][T28227] ? bpf_insn_prepare_dump+0x840/0x840 [ 1984.099330][T28227] ? __kasan_check_write+0x14/0x20 [ 1984.104419][T28227] bpf_raw_tracepoint_open+0x258/0x480 [ 1984.109867][T28227] ? slab_free_freelist_hook+0xc2/0x190 [ 1984.115395][T28227] ? bpf_obj_get_info_by_fd+0x2b10/0x2b10 [ 1984.121092][T28227] ? selinux_bpf+0xce/0xf0 [ 1984.125487][T28227] ? security_bpf+0x93/0xb0 [ 1984.129973][T28227] __sys_bpf+0x4d1/0x780 [ 1984.134192][T28227] ? bpf_link_show_fdinfo+0x320/0x320 [ 1984.139542][T28227] ? __cfi_ksys_write+0x10/0x10 [ 1984.144371][T28227] ? debug_smp_processor_id+0x17/0x20 [ 1984.149729][T28227] __x64_sys_bpf+0x7c/0x90 [ 1984.154137][T28227] x64_sys_call+0x488/0x9a0 [ 1984.158619][T28227] do_syscall_64+0x4c/0xa0 [ 1984.163013][T28227] ? clear_bhb_loop+0x30/0x80 [ 1984.167676][T28227] ? clear_bhb_loop+0x30/0x80 [ 1984.172346][T28227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1984.178222][T28227] RIP: 0033:0x7f021eb8f749 [ 1984.182613][T28227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1984.202199][T28227] RSP: 002b:00007f021f96a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1984.210589][T28227] RAX: ffffffffffffffda RBX: 00007f021ede5fa0 RCX: 00007f021eb8f749 [ 1984.218537][T28227] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000011 [ 1984.226486][T28227] RBP: 00007f021f96a090 R08: 0000000000000000 R09: 0000000000000000 [ 1984.234435][T28227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1984.242381][T28227] R13: 00007f021ede6038 R14: 00007f021ede5fa0 R15: 00007ffe6c20d228 [ 1984.250337][T28227] [ 1984.253557][T10424] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1984.263463][T10424] usb 7-1: Manufacturer: syz [ 1984.264276][T28227] device pim6reg1 entered promiscuous mode [ 1984.271284][T10424] usb 7-1: config 0 descriptor?? [ 1985.427150][T28212] loop6: detected capacity change from 0 to 1024 [ 1985.463708][T28212] EXT4-fs: Ignoring removed nobh option [ 1985.483988][T16928] usb 10-1: USB disconnect, device number 100 [ 1985.493369][T28212] EXT4-fs: Ignoring removed bh option [ 1985.536957][T28212] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1985.563658][T28239] futex_wake_op: syz.9.6735 tries to shift op by -1; fix this program [ 1985.593299][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1985.593314][ T28] audit: type=1326 audit(1766688736.635:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1985.601736][T28246] loop8: detected capacity change from 0 to 512 [ 1985.623647][ T28] audit: type=1326 audit(1766688736.635:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1985.653272][ T28] audit: type=1326 audit(1766688736.635:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1985.677181][ T28] audit: type=1326 audit(1766688736.635:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1985.734630][T28246] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1985.735268][ T28] audit: type=1326 audit(1766688736.635:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1985.749397][T28212] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1985.769814][ T28] audit: type=1326 audit(1766688736.635:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1985.814493][T28246] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1985.823881][ T28] audit: type=1326 audit(1766688736.765:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1985.847746][T28251] device pim6reg1 entered promiscuous mode [ 1985.856992][T28246] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1985.863649][ T28] audit: type=1326 audit(1766688736.765:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1985.919860][T28246] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6737: corrupted inode contents [ 1985.942978][ T28] audit: type=1326 audit(1766688736.765:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1985.960940][T28246] EXT4-fs error (device loop8): ext4_dirty_inode:6135: inode #2: comm syz.8.6737: mark_inode_dirty error [ 1985.998278][T28257] loop2: detected capacity change from 0 to 256 [ 1986.025483][T28257] FAT-fs (loop2): Directory bread(block 64) failed [ 1986.033092][T28246] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6737: corrupted inode contents [ 1986.041135][ T28] audit: type=1326 audit(1766688736.765:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28238 comm="syz.9.6735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7078f749 code=0x7ffc0000 [ 1986.052388][T28257] FAT-fs (loop2): Directory bread(block 65) failed [ 1986.082620][T28246] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.6737: mark_inode_dirty error [ 1986.101041][T28212] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3836: comm syz.6.6727: Allocating blocks 497-513 which overlap fs metadata [ 1986.117469][T28257] FAT-fs (loop2): Directory bread(block 66) failed [ 1986.131694][T28212] EXT4-fs (loop6): pa ffff888116f72bd0: logic 256, phys. 385, len 8 [ 1986.139747][T28212] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1986.140540][T28257] FAT-fs (loop2): Directory bread(block 67) failed [ 1986.157557][T28135] EXT4-fs (loop8): unmounting filesystem. [ 1986.185464][T28261] loop8: detected capacity change from 0 to 512 [ 1986.191956][T28257] FAT-fs (loop2): Directory bread(block 68) failed [ 1986.205802][T28257] FAT-fs (loop2): Directory bread(block 69) failed [ 1986.212862][T28261] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1986.222470][T28257] FAT-fs (loop2): Directory bread(block 70) failed [ 1986.231108][T10424] uclogic 0003:256C:006D.018C: failed retrieving Huion firmware version: -22 [ 1986.245075][T10424] uclogic 0003:256C:006D.018C: failed probing parameters: -22 [ 1986.252693][T28257] FAT-fs (loop2): Directory bread(block 71) failed [ 1986.262379][T28257] FAT-fs (loop2): Directory bread(block 72) failed [ 1986.272366][T10424] uclogic: probe of 0003:256C:006D.018C failed with error -22 [ 1986.279951][T28261] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1986.289528][T28261] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1986.299760][T28257] FAT-fs (loop2): Directory bread(block 73) failed [ 1986.308179][T28261] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6740: corrupted inode contents [ 1986.327814][T28261] EXT4-fs error (device loop8): ext4_dirty_inode:6135: inode #2: comm syz.8.6740: mark_inode_dirty error [ 1986.339861][T28261] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6740: corrupted inode contents [ 1986.352277][T28261] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.6740: mark_inode_dirty error [ 1986.393320][T28135] EXT4-fs (loop8): unmounting filesystem. [ 1986.657713][T28274] loop8: detected capacity change from 0 to 256 [ 1986.666863][T28274] exfat: Deprecated parameter 'namecase' [ 1986.713147][T28274] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1987.544312][T16928] usb 7-1: USB disconnect, device number 3 [ 1987.560067][T28267] syz.2.6739: attempt to access beyond end of device [ 1987.560067][T28267] loop2: rw=2049, sector=1224, nr_sectors = 256 limit=256 [ 1987.575360][T28280] loop9: detected capacity change from 0 to 512 [ 1987.582029][T28267] syz.2.6739: attempt to access beyond end of device [ 1987.582029][T28267] loop2: rw=2049, sector=1512, nr_sectors = 320 limit=256 [ 1987.598406][T28267] syz.2.6739: attempt to access beyond end of device [ 1987.598406][T28267] loop2: rw=2049, sector=1864, nr_sectors = 3384 limit=256 [ 1987.613902][T28280] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1987.632922][T28267] syz.2.6739: attempt to access beyond end of device [ 1987.632922][T28267] loop2: rw=2049, sector=5248, nr_sectors = 2784 limit=256 [ 1987.650003][T28267] syz.2.6739: attempt to access beyond end of device [ 1987.650003][T28267] loop2: rw=2049, sector=8032, nr_sectors = 3112 limit=256 [ 1987.665480][T28282] loop4: detected capacity change from 0 to 256 [ 1987.667467][T28267] syz.2.6739: attempt to access beyond end of device [ 1987.667467][T28267] loop2: rw=2049, sector=11144, nr_sectors = 4096 limit=256 [ 1987.689364][T28267] syz.2.6739: attempt to access beyond end of device [ 1987.689364][T28267] loop2: rw=2049, sector=15240, nr_sectors = 3712 limit=256 [ 1987.704515][T28280] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1987.713541][T28280] ext4 filesystem being mounted at /485/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1987.727870][T28282] FAT-fs (loop4): Directory bread(block 64) failed [ 1987.748290][T28282] FAT-fs (loop4): Directory bread(block 65) failed [ 1987.759240][T28267] syz.2.6739: attempt to access beyond end of device [ 1987.759240][T28267] loop2: rw=2049, sector=18952, nr_sectors = 1944 limit=256 [ 1987.767170][T28282] FAT-fs (loop4): Directory bread(block 66) failed [ 1987.779790][T28282] FAT-fs (loop4): Directory bread(block 67) failed [ 1987.786572][T28282] FAT-fs (loop4): Directory bread(block 68) failed [ 1987.793172][T28282] FAT-fs (loop4): Directory bread(block 69) failed [ 1987.799706][T28282] FAT-fs (loop4): Directory bread(block 70) failed [ 1987.807425][T28282] FAT-fs (loop4): Directory bread(block 71) failed [ 1987.814000][T28282] FAT-fs (loop4): Directory bread(block 72) failed [ 1987.820581][T28282] FAT-fs (loop4): Directory bread(block 73) failed [ 1987.840579][T28285] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #2: comm syz.9.6744: corrupted inode contents [ 1987.854192][ T449] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1987.862169][T28285] EXT4-fs error (device loop9): ext4_dirty_inode:6135: inode #2: comm syz.9.6744: mark_inode_dirty error [ 1987.873883][T28285] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #2: comm syz.9.6744: corrupted inode contents [ 1987.885933][T28285] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.6744: mark_inode_dirty error [ 1987.932964][T28290] loop2: detected capacity change from 0 to 512 [ 1987.953693][T28290] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1987.973930][T28290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1987.983026][T28290] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1988.003123][T28290] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.6746: corrupted inode contents [ 1988.017431][T28290] EXT4-fs error (device loop2): ext4_dirty_inode:6135: inode #2: comm syz.2.6746: mark_inode_dirty error [ 1988.029573][T28290] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.6746: corrupted inode contents [ 1988.041677][T28290] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.6746: mark_inode_dirty error [ 1988.073655][ T449] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1988.086160][ T449] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.089885][T28098] EXT4-fs (loop6): unmounting filesystem. [ 1988.103162][ T449] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1988.112371][ T449] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1988.120394][ T449] usb 9-1: Manufacturer: syz [ 1988.127729][ T449] usb 9-1: config 0 descriptor?? [ 1988.226976][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1988.604224][T18679] EXT4-fs error (device loop9): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1988.711061][T18679] EXT4-fs error (device loop9): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1988.831868][T28281] loop8: detected capacity change from 0 to 1024 [ 1988.852690][T28281] EXT4-fs: Ignoring removed nobh option [ 1988.868324][T28281] EXT4-fs: Ignoring removed bh option [ 1988.874707][T28281] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1988.903791][T28281] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1988.936357][T18968] EXT4-fs (loop9): unmounting filesystem. [ 1989.081690][T28281] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.6754: Allocating blocks 497-513 which overlap fs metadata [ 1989.102864][T28281] EXT4-fs (loop8): pa ffff88813ee0d888: logic 256, phys. 385, len 8 [ 1989.110874][T28281] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1989.145524][ T449] uclogic 0003:256C:006D.018D: failed retrieving Huion firmware version: -22 [ 1989.159042][ T449] uclogic 0003:256C:006D.018D: failed probing parameters: -22 [ 1989.166744][ T449] uclogic: probe of 0003:256C:006D.018D failed with error -22 [ 1989.250438][T28307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1989.257566][T28307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.265525][T28307] device bridge_slave_0 entered promiscuous mode [ 1989.272580][T28307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1989.279603][T28307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1989.287271][T28307] device bridge_slave_1 entered promiscuous mode [ 1989.323714][ T1611] bridge0: port 3(gretap0) entered disabled state [ 1989.330981][ T1611] device gretap0 left promiscuous mode [ 1989.336624][ T1611] bridge0: port 3(gretap0) entered disabled state [ 1989.350288][T28314] futex_wake_op: syz.6.6755 tries to shift op by -1; fix this program [ 1989.404378][ T19] usb 9-1: USB disconnect, device number 99 [ 1989.730020][ T1611] device bridge_slave_1 left promiscuous mode [ 1989.740658][ T1611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1989.750746][ T1611] device bridge_slave_0 left promiscuous mode [ 1989.760423][ T1611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.770020][T28325] loop2: detected capacity change from 0 to 2048 [ 1989.777130][ T1611] device veth1_macvtap left promiscuous mode [ 1989.804131][T28325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1990.066343][T28307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.073436][T28307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1990.080694][T28307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.087731][T28307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1990.145958][T27814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.157304][T28135] EXT4-fs (loop8): unmounting filesystem. [ 1990.183724][T27814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1990.235202][T28334] loop4: detected capacity change from 0 to 2048 [ 1990.241602][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1990.249942][T28335] loop8: detected capacity change from 0 to 2048 [ 1990.256756][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1990.265563][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1990.274192][T28335] EXT4-fs: Ignoring removed i_version option [ 1990.280659][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1990.289711][T27928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.296774][T27928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1990.306565][T28334] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1990.318936][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1990.329445][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1990.338013][T27814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.345155][T27814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1990.406705][T28335] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1990.415292][T28335] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1990.441538][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1991.357449][T28345] fs-verity: sha512 using implementation "sha512-avx2" [ 1991.749700][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 1991.749718][ T28] audit: type=1400 audit(1766688742.395:2422): avc: denied { ioctl } for pid=28333 comm="syz.8.6757" path="/10/file0/file0/file0" dev="loop8" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1991.781066][T28345] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.6757: bg 0: block 321: padding at end of block bitmap is not set [ 1991.783301][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1991.803549][T28345] fs-verity (loop8, inode 13): ext4_end_enable_verity() failed with err -117 [ 1991.804652][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1991.820367][T28043] EXT4-fs (loop4): unmounting filesystem. [ 1991.840774][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1991.860080][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1991.869837][T28349] loop2: detected capacity change from 0 to 1024 [ 1991.887799][T28351] loop4: detected capacity change from 0 to 512 [ 1991.901760][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1991.911197][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1991.942127][T28307] device veth0_vlan entered promiscuous mode [ 1991.949247][T28351] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1991.962350][T28135] EXT4-fs (loop8): unmounting filesystem. [ 1991.969936][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1991.985204][T28349] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1991.999995][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1992.013500][ T28] audit: type=1400 audit(1766688743.055:2423): avc: denied { append } for pid=28348 comm="syz.2.6760" path="/94/file1/memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1992.030490][T28349] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.6760: Allocating blocks 497-513 which overlap fs metadata [ 1992.052701][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1992.060977][T28351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1992.070214][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1992.077628][T28351] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1992.104484][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1992.108678][T28349] EXT4-fs (loop2): pa ffff88813ede4a80: logic 256, phys. 385, len 8 [ 1992.120562][T28349] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1992.131579][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1992.141236][T28307] device veth1_macvtap entered promiscuous mode [ 1992.214883][T28362] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #2: comm syz.4.6761: corrupted inode contents [ 1992.227180][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1992.235371][T28362] EXT4-fs error (device loop4): ext4_dirty_inode:6135: inode #2: comm syz.4.6761: mark_inode_dirty error [ 1992.247839][T28362] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #2: comm syz.4.6761: corrupted inode contents [ 1992.264444][T28362] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.6761: mark_inode_dirty error [ 1992.322748][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1992.333629][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1992.342410][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1992.350954][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1992.351383][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1992.659991][T28372] loop6: detected capacity change from 0 to 256 [ 1992.678957][T28372] FAT-fs (loop6): Directory bread(block 64) failed [ 1992.686719][T28372] FAT-fs (loop6): Directory bread(block 65) failed [ 1992.693794][T28372] FAT-fs (loop6): Directory bread(block 66) failed [ 1992.700448][T28372] FAT-fs (loop6): Directory bread(block 67) failed [ 1992.707536][T28372] FAT-fs (loop6): Directory bread(block 68) failed [ 1992.715266][T28372] FAT-fs (loop6): Directory bread(block 69) failed [ 1992.721934][T28372] FAT-fs (loop6): Directory bread(block 70) failed [ 1992.729591][T28372] FAT-fs (loop6): Directory bread(block 71) failed [ 1992.743874][T28043] EXT4-fs error (device loop4): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1992.755740][T28372] FAT-fs (loop6): Directory bread(block 72) failed [ 1992.762531][T28372] FAT-fs (loop6): Directory bread(block 73) failed [ 1992.769441][T28043] EXT4-fs error (device loop4): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1992.884968][T28043] EXT4-fs (loop4): unmounting filesystem. [ 1993.072137][T28379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.079298][T28379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.086931][T28379] device bridge_slave_0 entered promiscuous mode [ 1993.096245][T28379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.103417][T28379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.110887][T28379] device bridge_slave_1 entered promiscuous mode [ 1993.132363][ T910] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 1993.164771][T28379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.171803][T28379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1993.179041][T28379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.186059][T28379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1993.205935][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1993.213709][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.221257][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.293193][T28379] device veth0_vlan entered promiscuous mode [ 1993.309471][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1993.318714][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1993.329553][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1993.337462][ T910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1993.339837][T28392] loop6: detected capacity change from 0 to 512 [ 1993.348404][ T910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1993.349137][ T910] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1993.374823][T28392] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1993.383338][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1993.394654][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1993.404452][T27928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.411483][T27928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1993.419183][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1993.428154][T28392] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1993.431431][ T910] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1993.437255][T28392] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1993.445529][T27928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.462180][T27928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1993.473139][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1993.481290][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1993.498320][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1993.499641][ T910] usb 9-1: Manufacturer: syz [ 1993.507485][T28379] device veth1_macvtap entered promiscuous mode [ 1993.524674][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1993.527129][ T910] usb 9-1: config 0 descriptor?? [ 1993.539830][T27928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1993.562488][T28397] EXT4-fs error (device loop6): ext4_do_update_inode:5270: inode #2: comm syz.6.6770: corrupted inode contents [ 1993.571813][T28399] loop3: detected capacity change from 0 to 512 [ 1993.581246][T28397] EXT4-fs error (device loop6): ext4_dirty_inode:6135: inode #2: comm syz.6.6770: mark_inode_dirty error [ 1993.592710][T28399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1993.605637][ T1611] device bridge_slave_1 left promiscuous mode [ 1993.605663][T28397] EXT4-fs error (device loop6): ext4_do_update_inode:5270: inode #2: comm syz.6.6770: corrupted inode contents [ 1993.623815][T28397] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.6770: mark_inode_dirty error [ 1993.626318][ T1611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.647878][ T1611] device bridge_slave_0 left promiscuous mode [ 1993.655215][T28399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1993.664366][ T1611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.671622][T28399] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1993.683137][ T1611] device veth1_macvtap left promiscuous mode [ 1993.703273][ T1611] device veth0_vlan left promiscuous mode [ 1993.709450][T28399] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #2: comm syz.3.6768: corrupted inode contents [ 1993.727684][T28399] EXT4-fs error (device loop3): ext4_dirty_inode:6135: inode #2: comm syz.3.6768: mark_inode_dirty error [ 1993.752773][T28399] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #2: comm syz.3.6768: corrupted inode contents [ 1993.774540][T28403] FAULT_INJECTION: forcing a failure. [ 1993.774540][T28403] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.774798][T28399] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.6768: mark_inode_dirty error [ 1993.827817][T28403] CPU: 1 PID: 28403 Comm: syz.3.6768 Tainted: G W syzkaller #0 [ 1993.836788][T28403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1993.846833][T28403] Call Trace: [ 1993.850096][T28403] [ 1993.853017][T28403] __dump_stack+0x21/0x24 [ 1993.857328][T28403] dump_stack_lvl+0xee/0x150 [ 1993.861904][T28403] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1993.866908][T28403] ? kvm_sched_clock_read+0x18/0x40 [ 1993.872087][T28403] ? sched_clock+0x9/0x10 [ 1993.876396][T28403] dump_stack+0x15/0x24 [ 1993.880530][T28403] should_fail_ex+0x3d4/0x520 [ 1993.885203][T28403] ? getname_flags+0xb9/0x500 [ 1993.889865][T28403] __should_failslab+0xac/0xf0 [ 1993.894605][T28403] should_failslab+0x9/0x20 [ 1993.899083][T28403] kmem_cache_alloc+0x3b/0x330 [ 1993.903829][T28403] getname_flags+0xb9/0x500 [ 1993.908308][T28403] __x64_sys_symlink+0x5f/0x90 [ 1993.913049][T28403] x64_sys_call+0x369/0x9a0 [ 1993.917528][T28403] do_syscall_64+0x4c/0xa0 [ 1993.921925][T28403] ? clear_bhb_loop+0x30/0x80 [ 1993.926592][T28403] ? clear_bhb_loop+0x30/0x80 [ 1993.931251][T28403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1993.937126][T28403] RIP: 0033:0x7f9b0a58f749 [ 1993.941522][T28403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1993.961107][T28403] RSP: 002b:00007f9b0b3c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1993.969504][T28403] RAX: ffffffffffffffda RBX: 00007f9b0a7e6090 RCX: 00007f9b0a58f749 [ 1993.977461][T28403] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000240 [ 1993.985423][T28403] RBP: 00007f9b0b3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.993382][T28403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.001333][T28403] R13: 00007f9b0a7e6128 R14: 00007f9b0a7e6090 R15: 00007ffc41738218 [ 1994.009287][T28403] [ 1994.043644][T28379] EXT4-fs (loop3): unmounting filesystem. [ 1994.093625][T28405] loop3: detected capacity change from 0 to 2048 [ 1994.124823][T28405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1994.221349][T28377] loop8: detected capacity change from 0 to 1024 [ 1994.230832][T28098] EXT4-fs (loop6): unmounting filesystem. [ 1994.231732][T28377] EXT4-fs: Ignoring removed nobh option [ 1994.248148][T28377] EXT4-fs: Ignoring removed bh option [ 1994.257198][T28377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1994.472127][T28414] futex_wake_op: syz.6.6772 tries to shift op by -1; fix this program [ 1994.500314][ T28] audit: type=1326 audit(1766688745.535:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28411 comm="syz.6.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae86b8f749 code=0x7ffc0000 [ 1994.525434][ T28] audit: type=1326 audit(1766688745.565:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28411 comm="syz.6.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fae86b8f749 code=0x7ffc0000 [ 1994.533050][T28377] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1994.550219][ T28] audit: type=1326 audit(1766688745.565:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28411 comm="syz.6.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae86b8f749 code=0x7ffc0000 [ 1994.581180][ T28] audit: type=1326 audit(1766688745.565:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28411 comm="syz.6.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae86b8f749 code=0x7ffc0000 [ 1994.662483][ T28] audit: type=1326 audit(1766688745.565:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28411 comm="syz.6.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae86b8f749 code=0x7ffc0000 [ 1994.679739][T28377] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.6766: Allocating blocks 497-513 which overlap fs metadata [ 1994.686112][ T28] audit: type=1326 audit(1766688745.565:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28411 comm="syz.6.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae86b8f749 code=0x7ffc0000 [ 1994.724270][ T28] audit: type=1326 audit(1766688745.615:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28411 comm="syz.6.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae86b8f749 code=0x7ffc0000 [ 1994.724940][T28377] EXT4-fs (loop8): pa ffff88813ede40a8: logic 256, phys. 385, len 8 [ 1994.752338][ T28] audit: type=1326 audit(1766688745.615:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28411 comm="syz.6.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae86b8f749 code=0x7ffc0000 [ 1994.755765][T28377] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 1994.883379][ T910] uclogic 0003:256C:006D.018E: failed retrieving Huion firmware version: -22 [ 1994.905981][ T910] uclogic 0003:256C:006D.018E: failed probing parameters: -22 [ 1995.036147][ T910] uclogic: probe of 0003:256C:006D.018E failed with error -22 [ 1995.063509][T28379] EXT4-fs (loop3): unmounting filesystem. [ 1995.137612][T16969] usb 9-1: USB disconnect, device number 100 [ 1995.665719][T28433] loop7: detected capacity change from 0 to 512 [ 1995.674745][T28433] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1995.696106][T28433] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1995.713033][T28433] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3836: comm syz.7.6777: Allocating blocks 41-42 which overlap fs metadata [ 1995.792709][T28433] EXT4-fs error (device loop7): ext4_acquire_dquot:6796: comm syz.7.6777: Failed to acquire dquot type 0 [ 1995.815979][T28433] EXT4-fs error (device loop7): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1995.859543][T28433] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #12: comm syz.7.6777: corrupted inode contents [ 1995.909745][T28433] EXT4-fs error (device loop7): ext4_dirty_inode:6135: inode #12: comm syz.7.6777: mark_inode_dirty error [ 1995.927404][T28433] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #12: comm syz.7.6777: corrupted inode contents [ 1995.951944][T28433] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #12: comm syz.7.6777: mark_inode_dirty error [ 1996.002515][T28433] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #12: comm syz.7.6777: corrupted inode contents [ 1996.031143][T28433] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 1996.034691][T28135] EXT4-fs (loop8): unmounting filesystem. [ 1996.050073][T28433] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #12: comm syz.7.6777: corrupted inode contents [ 1996.083809][T28433] EXT4-fs error (device loop7): ext4_truncate:4320: inode #12: comm syz.7.6777: mark_inode_dirty error [ 1996.105115][T28433] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 1996.122667][T28433] EXT4-fs (loop7): 1 truncate cleaned up [ 1996.130911][T28443] netlink: 552 bytes leftover after parsing attributes in process `syz.8.6778'. [ 1996.144354][T28443] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1996.150298][T28433] EXT4-fs (loop7): pa ffff88813ede4d20: logic 1, phys. 41, len 23 [ 1996.160805][T28433] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 1996.190759][T28433] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1996.219539][T28307] EXT4-fs (loop7): unmounting filesystem. [ 1996.281171][T28448] loop3: detected capacity change from 0 to 256 [ 1996.294630][T28448] FAT-fs (loop3): Directory bread(block 64) failed [ 1996.301182][T28448] FAT-fs (loop3): Directory bread(block 65) failed [ 1996.308365][T28448] FAT-fs (loop3): Directory bread(block 66) failed [ 1996.315430][T28448] FAT-fs (loop3): Directory bread(block 67) failed [ 1996.322259][T28448] FAT-fs (loop3): Directory bread(block 68) failed [ 1996.328796][T28448] FAT-fs (loop3): Directory bread(block 69) failed [ 1996.335341][T28448] FAT-fs (loop3): Directory bread(block 70) failed [ 1996.341838][T28448] FAT-fs (loop3): Directory bread(block 71) failed [ 1996.348376][T28448] FAT-fs (loop3): Directory bread(block 72) failed [ 1996.354887][T28448] FAT-fs (loop3): Directory bread(block 73) failed [ 1996.542364][ T910] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1996.654160][T28451] FAULT_INJECTION: forcing a failure. [ 1996.654160][T28451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1996.694965][T28451] CPU: 1 PID: 28451 Comm: syz.2.6782 Tainted: G W syzkaller #0 [ 1996.703930][T28451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1996.713978][T28451] Call Trace: [ 1996.717250][T28451] [ 1996.720169][T28451] __dump_stack+0x21/0x24 [ 1996.724495][T28451] dump_stack_lvl+0xee/0x150 [ 1996.729083][T28451] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1996.734105][T28451] dump_stack+0x15/0x24 [ 1996.738260][T28451] should_fail_ex+0x3d4/0x520 [ 1996.742934][T28451] should_fail+0xb/0x10 [ 1996.747081][T28451] should_fail_usercopy+0x1a/0x20 [ 1996.752101][T28451] _copy_to_user+0x1e/0x90 [ 1996.756512][T28451] simple_read_from_buffer+0xe9/0x160 [ 1996.761874][T28451] proc_fail_nth_read+0x19a/0x210 [ 1996.766888][T28451] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1996.772451][T28451] ? security_file_permission+0x94/0xb0 [ 1996.777988][T28451] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1996.783521][T28451] vfs_read+0x26e/0x8c0 [ 1996.787677][T28451] ? __cfi_vfs_read+0x10/0x10 [ 1996.792343][T28451] ? __kasan_check_write+0x14/0x20 [ 1996.797441][T28451] ? mutex_lock+0x8d/0x1a0 [ 1996.801856][T28451] ? __cfi_mutex_lock+0x10/0x10 [ 1996.806700][T28451] ? __fdget_pos+0x2cd/0x380 [ 1996.811279][T28451] ? ksys_read+0x71/0x240 [ 1996.815595][T28451] ksys_read+0x140/0x240 [ 1996.819834][T28451] ? __cfi_ksys_read+0x10/0x10 [ 1996.824601][T28451] ? fpregs_restore_userregs+0x128/0x260 [ 1996.830235][T28451] __x64_sys_read+0x7b/0x90 [ 1996.834730][T28451] x64_sys_call+0x2f/0x9a0 [ 1996.839145][T28451] do_syscall_64+0x4c/0xa0 [ 1996.843552][T28451] ? clear_bhb_loop+0x30/0x80 [ 1996.848220][T28451] ? clear_bhb_loop+0x30/0x80 [ 1996.852883][T28451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1996.858761][T28451] RIP: 0033:0x7ff64b38e15c [ 1996.863158][T28451] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1996.882741][T28451] RSP: 002b:00007ff64c2aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1996.891134][T28451] RAX: ffffffffffffffda RBX: 00007ff64b5e5fa0 RCX: 00007ff64b38e15c [ 1996.899085][T28451] RDX: 000000000000000f RSI: 00007ff64c2aa0a0 RDI: 0000000000000005 [ 1996.907035][T28451] RBP: 00007ff64c2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1996.914985][T28451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1996.922935][T28451] R13: 00007ff64b5e6038 R14: 00007ff64b5e5fa0 R15: 00007ffd8afc4268 [ 1996.930888][T28451] [ 1996.973401][ T910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1996.992354][ T910] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1997.001497][ T910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.022722][ T910] usb 9-1: config 0 descriptor?? [ 1997.036233][T28454] loop7: detected capacity change from 0 to 512 [ 1997.082229][T28454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1997.130245][T28458] futex_wake_op: syz.2.6785 tries to shift op by -1; fix this program [ 1997.139045][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1997.139058][ T28] audit: type=1326 audit(1766688748.175:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.170128][ T28] audit: type=1326 audit(1766688748.175:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.171011][T28454] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1997.212335][ T28] audit: type=1326 audit(1766688748.175:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.262354][ T28] audit: type=1326 audit(1766688748.175:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.296152][T28454] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1997.350204][ T28] audit: type=1326 audit(1766688748.175:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.392362][ T19] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1997.420194][ T28] audit: type=1326 audit(1766688748.175:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.436538][ T910] keytouch 0003:0926:3333.018F: fixing up Keytouch IEC report descriptor [ 1997.461871][ T910] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.018F/input/input35 [ 1997.464230][ T28] audit: type=1326 audit(1766688748.245:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.501676][ T28] audit: type=1326 audit(1766688748.245:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.502059][T28463] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #2: comm syz.7.6783: corrupted inode contents [ 1997.530342][ T28] audit: type=1326 audit(1766688748.275:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.537999][T28465] loop6: detected capacity change from 0 to 512 [ 1997.561139][ T28] audit: type=1326 audit(1766688748.275:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28457 comm="syz.2.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64b38f749 code=0x7ffc0000 [ 1997.566802][T28463] EXT4-fs error (device loop7): ext4_dirty_inode:6135: inode #2: comm syz.7.6783: mark_inode_dirty error [ 1997.604282][T28463] EXT4-fs error (device loop7): ext4_do_update_inode:5270: inode #2: comm syz.7.6783: corrupted inode contents [ 1997.616329][T28463] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #2: comm syz.7.6783: mark_inode_dirty error [ 1997.623030][T28465] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1997.638815][ T910] keytouch 0003:0926:3333.018F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1997.643344][ T19] usb 4-1: config index 0 descriptor too short (expected 324, got 68) [ 1997.714693][ T19] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1997.725978][T28465] EXT4-fs (loop6): 1 truncate cleaned up [ 1997.752624][T28465] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1997.768782][ T19] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1997.795169][ T19] usb 4-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1997.818776][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1997.828070][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1997.837431][ T19] usb 4-1: SerialNumber: syz [ 1997.878376][T28307] EXT4-fs error (device loop7): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1997.902646][T28307] EXT4-fs error (device loop7): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 1997.964969][ T910] usb 9-1: USB disconnect, device number 101 [ 1997.965011][ C1] keytouch 0003:0926:3333.018F: usb_submit_urb(ctrl) failed: -19 [ 1997.984361][T28307] EXT4-fs (loop7): unmounting filesystem. Stopping sshd: [ 1998.132516][T28477] loop2: detected capacity change from 0 to 128 [ 1998.162519][T28477] EXT4-fs: Ignoring removed nobh option [ 1998.180367][T28477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. stopped /usr/sbin/sshd (pid 196) OK Stopping crond: [ 1998.205361][T28477] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) stopped /usr/sbin/crond (pid 187) OK [ 1998.230324][T28477] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.6790: No space for directory leaf checksum. Please run e2fsck -D. [ 1998.260086][T28477] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.6790: checksumming directory block 0 [ 1998.276088][T28477] xt_l2tp: wrong L2TP version: 0 Stopping dhcpcd... [ 1998.304593][T28482] bridge0: port 1(bridge_slave_0) entered blocking state stopped /sbin/dh[ 1998.311847][T28482] bridge0: port 1(bridge_slave_0) entered disabled state cpcd (pid 141) [ 1998.321001][T28482] device bridge_slave_0 entered promiscuous mode [ 1998.328687][T28482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.342938][T28482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1998.355422][T28098] EXT4-fs (loop6): unmounting filesystem. [ 1998.360323][T28482] device bridge_slave_1 entered promiscuous mode Stopping network: [ 1998.448494][T28502] futex_wake_op: syz.6.6792 tries to shift op by -1; fix this program [ 1998.529142][T28508] loop8: detected capacity change from 0 to 2048 [ 1998.558107][ T19] rndis_host 4-1:253.0: skipping garbage [ 1998.573888][ T19] rndis_host: probe of 4-1:253.0 failed with error -22 [ 1998.596772][ T19] usb 4-1: USB disconnect, device number 58 [ 1998.605756][T28508] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1998.682532][T28482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.689597][T28482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1998.696888][T28482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.703928][T28482] bridge0: port 1(bridge_slave_0) entered forwarding state OK [ 1999.666433][T28135] EXT4-fs (loop8): unmounting filesystem. Stopping iptables: [ 1999.721613][T28529] loop8: detected capacity change from 0 to 512 OK Stopping system message bus: [ 1999.776568][T26300] EXT4-fs (loop2): unmounting filesystem. [ 1999.793591][T28529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1999.811203][T14933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.824202][T14933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.883276][T28529] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1999.903372][T28529] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1999.952772][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1999.960507][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1999.971969][T28539] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6795: corrupted inode contents [ 2000.002480][T28539] EXT4-fs error (device loop8): ext4_dirty_inode:6135: inode #2: comm syz.8.6795: mark_inode_dirty error [ 2000.014690][T28539] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.6795: corrupted inode contents [ 2000.045617][T28539] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.6795: mark_inode_dirty error [ 2000.141962][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2000.184503][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready done [ 2000.194214][T14933] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.201252][T14933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2000.208661][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2000.217234][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2000.225959][T14933] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.233006][T14933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2000.240555][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2000.248920][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2000.269633][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2000.293426][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2000.302491][T27928] device bridge_slave_1 left promiscuous mode [ 2000.309697][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.328581][T27928] device bridge_slave_0 left promiscuous mode [ 2000.342374][ T19] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2000.351067][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.364468][T27928] device veth1_macvtap left promiscuous mode [ 2000.372569][T27928] device veth0_vlan left promiscuous mode killall: can't kill pid 12751: No such process Stopping klogd: [ 2000.516868][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2000.528405][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2000.542369][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 2000.554903][T28482] device veth0_vlan entered promiscuous mode [ 2000.561622][T28135] EXT4-fs error (device loop8): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 2000.573992][ T19] usb 4-1: config 0 has an invalid descriptor of length 207, skipping remainder of the config [ 2000.575179][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2000.591943][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 OK [ 2000.605689][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2000.611337][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2000.622662][T28135] EXT4-fs error (device loop8): ext4_lookup:1855: inode #19: comm syz-executor: 'bus' linked to parent dir [ 2000.632151][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2000.643785][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready Stopping acpid: [ 2000.652125][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.664686][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2000.677981][ T19] usb 4-1: config 0 descriptor?? [ 2000.681170][T27814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2000.702769][ T19] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2000.717671][T28482] device veth1_macvtap entered promiscuous mode [ 2000.735494][T28135] EXT4-fs (loop8): unmounting filesystem. [ 2000.746349][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2000.757036][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2000.772964][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2000.797117][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2000.815605][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2000.885760][T28559] loop2: detected capacity change from 0 to 512 [ 2000.927181][T28559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2000.944546][T14775] usb 4-1: USB disconnect, device number 59 [ 2000.961707][T28559] EXT4-fs (loop2): 1 truncate cleaned up [ 2000.967429][T28559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2001.069449][T28563] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.076768][T28563] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.087174][T28563] device bridge_slave_0 entered promiscuous mode [ 2001.096442][T28563] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.103625][T28563] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.111102][T28563] device bridge_slave_1 entered promiscuous mode [ 2001.255729][T28563] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.262811][T28563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2001.270071][T28563] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.277096][T28563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2001.345576][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2001.355616][T14933] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.373292][T14933] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.412052][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2001.420896][T14933] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.427952][T14933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2001.452438][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2001.473527][T14933] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.480588][T14933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2001.496874][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2001.530210][T28563] device veth0_vlan entered promiscuous mode [ 2001.552964][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2001.565639][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2001.582083][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2001.596489][T28577] loop3: detected capacity change from 0 to 256 [ 2001.603063][T28577] exfat: Deprecated parameter 'namecase' [ 2001.611867][T28577] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 2001.630741][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2001.643362][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2001.666018][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2001.679777][T28563] device veth1_macvtap entered promiscuous mode [ 2001.693847][T14933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2001.707047][T27928] device bridge_slave_1 left promiscuous mode [ 2001.713931][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.726977][T26300] EXT4-fs (loop2): unmounting filesystem. OK [ 2001.738389][T27928] device bridge_slave_0 left promiscuous mode Stopping syslogd: [ 2001.759624][T27928] bridge0: port 1(bridge_slave_0) entered disabled state stopped /sbin/syslogd (pid 85) OK [ 2001.781029][T27928] device veth1_macvtap left promiscuous mode [ 2001.789940][T27928] device veth0_vlan left promiscuous mode [ 2001.796430][T28585] loop6: detected capacity change from 0 to 2048 [ 2001.832075][T28585] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2002.416212][T28593] loop5: detected capacity change from 0 to 256 [ 2002.423026][T28593] exfat: Bad value for 'time_offset' [ 2002.509040][ T735] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2002.808019][ T735] usb 3-1: Using ep0 maxpacket: 32 [ 2002.849914][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2002.884705][T28098] EXT4-fs (loop6): unmounting filesystem. [ 2002.890640][ T735] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2002.964619][T28600] loop5: detected capacity change from 0 to 512 [ 2002.973291][ T735] usb 3-1: config 0 has no interface number 0 umount: can't remount debugfs read-only [ 2003.009108][ T735] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2003.021980][T28600] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 2003.071918][ T735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.097553][ T735] usb 3-1: Product: syz [ 2003.106078][T28600] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2003.114561][ T735] usb 3-1: Manufacturer: syz [ 2003.121630][T28600] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.6808: Allocating blocks 41-42 which overlap fs metadata [ 2003.139586][ T735] usb 3-1: SerialNumber: syz [ 2003.166842][T28600] __quota_error: 59 callbacks suppressed [ 2003.166859][T28600] Quota error (device loop5): write_blk: dquota write failed [ 2003.167083][ T735] usb 3-1: config 0 descriptor?? [ 2003.182439][T28600] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 2003.202593][T28600] EXT4-fs error (device loop5): ext4_acquire_dquot:6796: comm syz.5.6808: Failed to acquire dquot type 0 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.9 closed by remote host. [ 2003.285680][ T28] audit: type=1400 audit(1766688754.305:2517): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[14264]" dev="pipefs" ino=14264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Sent SIGTERM to all processes [ 2003.334849][T28600] EXT4-fs error (device loop5): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 2003.383495][T28600] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #12: comm syz.5.6808: corrupted inode contents [ 2003.463381][T28600] EXT4-fs error (device loop5): ext4_dirty_inode:6135: inode #12: comm syz.5.6808: mark_inode_dirty error [ 2003.509893][T28600] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #12: comm syz.5.6808: corrupted inode contents [ 2003.524524][T28600] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.6808: mark_inode_dirty error [ 2003.536008][T28600] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #12: comm syz.5.6808: corrupted inode contents [ 2003.547956][T28600] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 2003.556602][T28600] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #12: comm syz.5.6808: corrupted inode contents [ 2003.568658][T28600] EXT4-fs error (device loop5): ext4_truncate:4320: inode #12: comm syz.5.6808: mark_inode_dirty error [ 2003.579834][T28600] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 2003.589028][T28600] EXT4-fs (loop5): 1 truncate cleaned up [ 2003.594808][T28600] EXT4-fs (loop5): pa ffff88813ee0d150: logic 1, phys. 41, len 23 [ 2003.602677][T28600] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 2003.612849][ T735] usb 3-1: can't set config #0, error -71 [ 2003.613821][T28600] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2003.624892][ T735] usb 3-1: USB disconnect, device number 16 [ 2003.635211][T28600] EXT4-fs (loop5): unmounting filesystem. [ 2004.653220][T27928] device bridge_slave_1 left promiscuous mode [ 2004.659322][T27928] bridge0: port 2(bridge_slave_1) entered disabled state Sent SIGKILL to[ 2004.667290][T27928] device bridge_slave_0 left promiscuous mode all processes [ 2004.674577][T27928] bridge0: port 1(bridge_slave_0) entered disabled state Requesting syst[ 2004.683544][T27928] device bridge_slave_1 left promiscuous mode em poweroff [ 2004.690376][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.698922][T27928] device bridge_slave_0 left promiscuous mode [ 2004.705067][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.712829][T27928] device bridge_slave_1 left promiscuous mode [ 2004.718903][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.726227][T27928] device bridge_slave_0 left promiscuous mode [ 2004.732382][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.740007][T27928] device bridge_slave_1 left promiscuous mode [ 2004.746138][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.753460][T27928] device bridge_slave_0 left promiscuous mode [ 2004.759529][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.767258][T27928] device bridge_slave_1 left promiscuous mode [ 2004.773382][T27928] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.780692][T27928] device bridge_slave_0 left promiscuous mode [ 2004.786849][T27928] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.795081][T27928] device veth1_macvtap left promiscuous mode [ 2004.801066][T27928] device veth0_vlan left promiscuous mode [ 2004.807068][T27928] device veth1_macvtap left promiscuous mode [ 2004.813107][T27928] device veth0_vlan left promiscuous mode [ 2004.818999][T27928] device veth1_macvtap left promiscuous mode [ 2004.825003][T27928] device veth0_vlan left promiscuous mode [ 2004.830864][T27928] device veth1_macvtap left promiscuous mode [ 2004.836888][T27928] device veth0_vlan left promiscuous mode [ 2004.842836][T27928] device veth1_macvtap left promiscuous mode [ 2004.848820][T27928] device veth0_vlan left promiscuous mode [ 2005.684050][T28606] kvm: exiting hardware virtualization [ 2005.691430][T28606] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2005.698316][T28606] ACPI: PM: Preparing to enter system sleep state S5 [ 2005.705170][T28606] reboot: Power down serialport: VM disconnected.