last executing test programs:

4m10.948683482s ago: executing program 3 (id=233):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x2, 0x5505, &(0x7f000000cf00)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x47, 0xffffffffffffffff, 0x1, 0x9})

4m10.269267293s ago: executing program 3 (id=235):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000018}) (fail_nth: 1)

4m9.970333353s ago: executing program 3 (id=237):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x3f}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

4m6.827317061s ago: executing program 3 (id=242):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040), 0x4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3004006, &(0x7f0000000ac0)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@sb={'sb', 0x3d, 0xfffffffffffffffa}}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@noacl}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1, &(0x7f00000003c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x52, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xb5, &(0x7f0000000400)=""/177}, 0x94)

4m6.403118315s ago: executing program 3 (id=247):
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x2, 0x2001)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x1d, 0x10}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0xae, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210000, &(0x7f0000000400)=ANY=[@ANYBLOB="726f6469722c73686f72746e616d653d77696e39352c696f636861727365743d63703835372c757466383d312c6e6f6e756d7461696c2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c73686f72746e616d653d6d697865642c73686f72746e616d653df926907d068d33c777696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d655c6d697865642c756e695f786c6174653d302c6e66732c0097aaea43f9f83b4657bead00"/249], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==")
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r5, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r6, 0x200, 0x4, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5b37}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0xc051)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @volatile, @const={0xb, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96}, 0x28)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
r8 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x821\x9f?\r\xf5q\xb8d\x1ct\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\x15D\t\xab\xa4O\x9f\x12@\x18\xbb&\xad\xf5a\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\xafp]\x87fg\x9f\xdd', &(0x7f0000000100)='\xb0\xa2\xb0\xa9\xe6[\\1\\\x00\x00\x04\x1d\xc3', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ac00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03700000470000008400128009000100766c616e0000c8000074000280580004800500010004000000000000000c00010003000000060000000c00010007000000000000800c00010000000080000000000c00010000800000000000800c00010093a94e00090000000c0001000600000000002000100003800c000100dcffffffcf2c0000060005008100000008000500", @ANYRES32=0x0, @ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4054)

4m6.181079522s ago: executing program 3 (id=248):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x12, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x8000000000000001}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x2008001)
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r1, &(0x7f00000002c0)=[{&(0x7f00000019c0)="b0", 0x1}], 0x1)
setresuid(0x0, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x3ff, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x805, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000340)=@arm64={0x7, 0xe, 0x6, '\x00', 0x1259})
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8, 0x8, 0x10}, {0xffff1000, 0x8000000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3}, {0x2000, 0x5000, 0x0, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x2, 0x0, 0xfc}, {0x3000, 0xd000, 0x5, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x2, 0x6}, {0xeeee8000, 0xffff1000, 0x3, 0x9, 0x0, 0x2, 0x7, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x26000, 0x0, 0x0, 0x0, 0x5, 0xfe, 0x0, 0x26}, {0x80a0000}, {0x60000}, 0xddf8ffdb, 0x0, 0xffffffff, 0x50, 0x2, 0xf801, 0x0, [0x0, 0x0, 0x5]})

4m6.138771953s ago: executing program 32 (id=248):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x12, 0x0, [{0x400000b0, 0x0, 0x5}, {0x400000b1, 0x0, 0x8000000000000001}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x2008001)
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r1, &(0x7f00000002c0)=[{&(0x7f00000019c0)="b0", 0x1}], 0x1)
setresuid(0x0, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x3ff, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x805, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000340)=@arm64={0x7, 0xe, 0x6, '\x00', 0x1259})
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8, 0x8, 0x10}, {0xffff1000, 0x8000000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3}, {0x2000, 0x5000, 0x0, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x2, 0x0, 0xfc}, {0x3000, 0xd000, 0x5, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x2, 0x6}, {0xeeee8000, 0xffff1000, 0x3, 0x9, 0x0, 0x2, 0x7, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x26000, 0x0, 0x0, 0x0, 0x5, 0xfe, 0x0, 0x26}, {0x80a0000}, {0x60000}, 0xddf8ffdb, 0x0, 0xffffffff, 0x50, 0x2, 0xf801, 0x0, [0x0, 0x0, 0x5]})

4m4.689701669s ago: executing program 4 (id=254):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000440)="b9ff03316844268cb89914f00800", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m4.517227854s ago: executing program 4 (id=255):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x180, 0x0)
write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x20, 0x2}, 0x2b}}, 0x18)
syz_mount_image$f2fs(&(0x7f0000000a80), &(0x7f00000000c0)='./file0\x00', 0x410, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230", @ANYBLOB="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", @ANYRES32], 0x3, 0x105e3, &(0x7f0000020c40)="$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")
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffff9, 0x0)
sendto$unix(r1, &(0x7f0000000040)="c825ddd61b41927b5dd4dac8a063ff73bfdff92bbe9452c96ad3fcd376ec2a5469e2c5ff42d884847206ac38931e94d399b37c0a33dacd7b042ebaa68f2511a9", 0x40, 0x84, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)

4m3.033675641s ago: executing program 4 (id=261):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/psched\x00')
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x0, 0x80000000}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040880}, 0x24040084)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000180001003ebd7000fe02df25020030080001000100510000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8c4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m1.625516296s ago: executing program 4 (id=270):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000040)={[{@usrjquota}]}, 0x0, 0x570, &(0x7f00000000c0)="$eJzs3d9rZFcdAPDvvclskt3UTNWHWrAWW9mtupNN47bBh6ogvhUqFZ+EdUgmIewksySTdhMWm+qrIIhowRd98kXwDxCkL74XoVDfRUWRuqsPCm2v3Jmb3cl0JtnFmdxu8vnA3fvj3Jnv90z2ntwz9+TeAM6sJyPiUkRMRMQzETFXbE+LKfa7U77fndu3lvMpiSx7+d0kkmLbwXtNFfMLxcump4sNyYfjbu/uXa83m42tYn2+vZG8l2V7l9c36muNtcbm4uLCc0vPL11dujKSelYj4oWv//WnP/rVN1743Rdf/dO1v1/6Xp7Wf7Psteirxyh1q16J6Z5tkxGxNY5gJZns1LDrasm5AABwtPx8/+MR8dnO+f9cTHTO5gAAAIDTJPvKbLyXRGQAAADAqZVGxGwkaa0Y7ztbjFi9EBGfjPNps7Xd/sJqa2dzJS+LqEYlXV1vNq7EdGfsQDUqSb6+UIyxPVh/NmImetYXI+LRiPjJ3Exnvbbcaq6U/eUHAAAAnBEXIr7f2///91ya1mpF4f7d3ZIBf8ILAAAAPEyqZScAAAAAjJ3+PwAAAJx+1ey+hven488EAAAAGIOXXnwxXpqKiOL51yuv7O5cb71yeaWxfb22sbNcW25t3aittVprnXv2bRz3fs1W68aXYnPn5ny7sd2e397du7bR2tlsX1s/9AhsAAAA4AQ9+pk3/5hExP6XZzpT7lxRVonIJnp3niwjQ2BcHmhMz1/Glwdw8np/v8+UmAdw8pzSw9lVKTsBoHTH/QHQ0ME7b40+FwAAYDwufmr49f93V0tNDRiz4vq/53vCGTRRdgJAabrX/z7IusrOBjhJlaPOAI7qFJwbRzbASUuPu/5/1CDBt+5rryLCQZSpB8oPAAAYjdnOlKS1oh8wG2laq0U80nksYCVZXW82rkTExyLinbnKVL6+0HllcuyYYQAAAAAAAAAAAAAAAAAAAAAAAACgK8uSyAAAAIBTLSL928GTuS7OPT3b//3AueQ/c1E87u/Vn7/8s5v1dntrId/+z7vb228U258t4xsMAAAAoN/N+kynn37QjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUbpz+9bynSzLstu3lk8y7j++FhHVIn4xdUsmY7ozn45KRJz/VxKTPa9LImJiBPH3X4+IxwbFT/K0olpkcSj+uYg0ImZGFT8eMH50418YQXw4y97M25+vDjr+0niyMx98/E0W0/9rePuX3m3/Joa0f48Me9PK4dXH3/7N/ND4r0c8Pjm4/TmIn+TvNyD+U/dZx+9+a29vWFn2y4iLg9q/pNgh7c7m2xs35rd39y6vb9TXGmuNzcXFheeWnl+6unRlfnW92Sj+HRjjx5/+7Qf31t7/UP3PH9H+duo/5PN/+j7r//7bN29/orvY95OJSvwiyy49Nfjn/1g++/zg+Pn/ic8VH09enn+G6RvfHhj/iV//4YlhueX1XxlS/+m++k/11f/ScRUvfkE/880f/Pm4XQGAk7O9u3e93mw2tiz0LkT1I5HGR3chP+8sPY0kksgX3jlUVC8/se7Ca8UxVm8eHG3JaI643xedo3Emf6iVGNyvAgAAHi73Tvr7S5LhLxrFhW8AAAAAAAAAAAAAAAAAAADgrgF3/4reG5XFsDuEpRFxb8t3fnjE3cj6Y+6XUlMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKP9LwAA//8H8s5a")
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000300)='./bus\x00', 0x440, &(0x7f0000000a80)=ANY=[], 0x1, 0x5524, &(0x7f0000001600)="$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")
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setstatus(r2, 0x4, 0x2c00)
write(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101901, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) (async)
write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r5, 0x5403, &(0x7f00000000c0)={0xffffffff, 0x0, 0x8000, 0xbbd7, 0x85, "10120dfe0ef7f0220000ff490a0080002a0008"})
socket$netlink(0x10, 0x3, 0x8000000004) (async)
socket$netlink(0x10, 0x3, 0x8000000004)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
fchdir(r6)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000600), 0x4)
sendmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xffffffffffffffce}, 0x20000030)
sendmsg$inet(r8, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x28084)
r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0x555}) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0x555})
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0xdcd5cc4c599ac61, 0x0, @irqchip={0x6, 0x4}}]}) (async)
ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0xdcd5cc4c599ac61, 0x0, @irqchip={0x6, 0x4}}]})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400b225bd7000f5dbdf25000000000000000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000140012800c0001006d6163767461700004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400b225bd7000f5dbdf25000000000000000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000140012800c0001006d6163767461700004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000))

4m0.950870277s ago: executing program 4 (id=273):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/188, 0xbc}], 0x1)

3m59.920598299s ago: executing program 4 (id=278):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@lazytime}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4f4, &(0x7f0000000240)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x20)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x606940, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe)

3m59.865530081s ago: executing program 33 (id=278):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@lazytime}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4f4, &(0x7f0000000240)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x20)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x606940, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe)

3m28.505856171s ago: executing program 2 (id=438):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000180001003ebd7000fe02df25020030080001000100510000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8c4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m28.116135753s ago: executing program 2 (id=439):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="80", 0x1}], 0x1}, 0x240c0841)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)="ca", 0x1}], 0x1}, 0x48044)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4)
gettid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0xcc, 0x43, 0x1, 0x500, 0x25dfdbff, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x3}, @NDTA_PARMS={0x58, 0x6, 0x0, 0x1, [@NDTPA_UCAST_PROBES={0x8, 0xa, 0x9}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x3}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x4}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x9}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x7}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x80}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x8}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x401}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x80000000}]}, @NDTA_THRESH2={0x8, 0x3, 0x2}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xfffffffffffffbff}, @NDTA_NAME={0x7, 0x1, '-(\x00'}, @NDTA_THRESH1={0x8, 0x2, 0xfffffffb}, @NDTA_NAME={0x6, 0x1, '-\x00'}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_GC_STALETIME={0xc, 0x6, 0x7fff}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x66eb}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x7ff000}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0xffffffff}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040810}, 0x80)
socketpair(0x1e, 0x80005, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
r7 = inotify_init1(0x0)
r8 = inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x44000160)
r9 = dup(r7)
inotify_rm_watch(r9, r8)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x20048054)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r11=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x94, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20002001)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000)

3m27.829678302s ago: executing program 2 (id=441):
syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11f0, &(0x7f0000002440)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

3m27.512509432s ago: executing program 2 (id=444):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xa, "40103680"}, @local=@item_4={0x3, 0x2, 0x9, "5c54e99f"}, @local=@item_4={0x3, 0x2, 0x4, "c188d549"}, @main=@item_4={0x3, 0x0, 0xb, "2e348018"}, @main=@item_4={0x3, 0x0, 0xb, "140300"}, @main=@item_4={0x3, 0x0, 0x9, "f76100"}, @local=@item_012={0x0, 0x2, 0x1}]}}, 0x0}, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000240)='./file0\x00')
unlink(&(0x7f0000000580)='./file1\x00')
open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20)
getpid()
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
pwrite64(0xffffffffffffffff, &(0x7f00000002c0)="0000000000000006", 0x8, 0x9)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x4008004)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b95}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x4, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0xa, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x7fffffff, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x4, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x0, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000000, 0x6, 0x438, 0x2, 0x9, 0x92, 0x7ffdffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x4000006, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x6, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa774, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x4, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x5, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x3, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xffff7ff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00m'], 0x28}], 0x1}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="28000000120001010100"/20, @ANYRES32], 0x28}}, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

3m24.047771002s ago: executing program 2 (id=461):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xd, 0x43}]}, 0x2d)
listen(r0, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000003c0)="c49751936c4a9af2ee0283d5cb9f092671197ab206efc20d10346df8914bae6b73118f43fa3d8f550e9310e00465d69b41123829b4222526763f595fa68fffbbaea134b8b75b60", 0x47, 0x40850, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r2, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, 0x0, 0xff2e)
ioctl$TCSETS(r3, 0x40045431, 0x0)
syz_open_pts(r3, 0x400)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getdents64(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8)
close(r7)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close(0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)

3m23.434621361s ago: executing program 2 (id=465):
syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11f0, &(0x7f0000002440)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

3m23.434461521s ago: executing program 34 (id=465):
syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11f0, &(0x7f0000002440)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

7.353977964s ago: executing program 5 (id=1294):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1800000}}]}, 0x5, 0x596, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0xffa1)

6.565497669s ago: executing program 5 (id=1301):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
r3 = getpid()
prlimit64(r3, 0xe, &(0x7f0000000140)={0x80000001, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100cc7e3ad13850cf3fe5fe8bf54c29d8a3ccbc15"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)="308ce5b7e0d687120ec016a1d298c9112e2e15427d7689d83d3dc839cbb320460585f27b3734b3eda66d3c8e758a21621320f14e44a872ce00"/66, &(0x7f0000000240), 0x20000402, r4}, 0x38)
r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xac)
openat$incfs(r5, 0x0, 0x0, 0x1ae)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20)
r6 = epoll_create(0x20)
epoll_wait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x7)
close_range(r4, r4, 0x2)
syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="12010306000000086b1d01014000010203050902"], &(0x7f00000000c0)={0x0, 0x0, 0x23, &(0x7f0000000040)=ANY=[@ANYBLOB="150f2300020a1003000800e5520000158dc924767011"], 0x1, [{0x0, 0x0}]})

6.363869805s ago: executing program 0 (id=1305):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = fsopen(&(0x7f0000000180)='securityfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r1, 0x0, 0x86) (async)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000001c0)='\x8f$,-!+!\\-\x00', &(0x7f0000000200)='y', 0x1) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r2, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
accept4(r2, 0x0, 0x0, 0x0) (async)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) (async)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, r0, 0x0) (async)
ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0], 0x34}}, 0x800) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r7, 0x0, 0x0) (async)
ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) (async)
ioctl$VT_ACTIVATE(r6, 0x5606, 0x2) (async)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
creat(0x0, 0x4)
ioctl$TIOCL_BLANKSCREEN(r9, 0x541c, &(0x7f0000000000))

6.288060837s ago: executing program 0 (id=1306):
r0 = inotify_init1(0x800)
r1 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x84000151)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x12000e91)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8f37a5106ca69b0d, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=0x0], 0x1, 0x31c, &(0x7f0000000580)="$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")
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100003040000000000", @ANYBLOB="020000000000000014001280090001007665"], 0x48}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000100)={0x58000, 0x5000, 0x1})
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

6.163980832s ago: executing program 6 (id=1308):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)="ca", 0x1}], 0x1}, 0x48044)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000)

6.139435003s ago: executing program 0 (id=1309):
r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
pread64(r1, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x413, 0x70bd28, 0x40, {{@in=@remote, @in=@multicast1, 0x4620, 0x7, 0x4e23, 0x4, 0xa, 0x20, 0x20, 0x67}, {@in=@multicast2, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0xa, 0x1, 0xbe, 0x33}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "aae76c"}}]}, 0x140}}, 0x4000804)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00038f0000008f03"], 0x0, 0x0, 0x0}, 0x0)

6.120344803s ago: executing program 6 (id=1310):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r5, 0x0, 0x0, 0x20000054)
mknod(&(0x7f0000000100)='./bus\x00', 0x3060, 0x658)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x7fffffe, 0x4e0, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x208, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

4.016529101s ago: executing program 6 (id=1317):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x8, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[], 0x2e8}}], 0x2, 0x0)

4.003352991s ago: executing program 1 (id=1318):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@acl}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$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")
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121500, 0x38)
lseek(r1, 0x8000000000000000, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x5)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x37fffe, @loopback, 0x9}, 0x1c)

3.924514443s ago: executing program 6 (id=1319):
r0 = inotify_init1(0x800)
r1 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x84000151)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x12000e91)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8f37a5106ca69b0d, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=0x0], 0x1, 0x31c, &(0x7f0000000580)="$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")
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100003040000000000", @ANYBLOB="020000000000000014001280090001007665"], 0x48}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000100)={0x58000, 0x5000, 0x1})
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

3.872414285s ago: executing program 1 (id=1320):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)="ca", 0x1}], 0x1}, 0x48044)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000)

3.779734578s ago: executing program 1 (id=1321):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

3.672332762s ago: executing program 6 (id=1322):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
copy_file_range(r1, 0x0, r1, 0x0, 0x401, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="28010000170001000000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb0000000000000000000000007f0000010000000000000000000000004e210008000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000014e2100004e2300000200802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000f9fffeff00"/128], 0x128}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x3018802, &(0x7f0000000380)=ANY=[], 0x0, 0x2c8, &(0x7f00000042c0)="$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")
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r5=>0x0})
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={r5, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}, 0xc)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, &(0x7f0000000340), 0x0, 0x45833af92e4b38ff, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0xfffffffc, 0x1fffff9, {0x0, 0x0, 0x0, r5, {0x7}, {0x10, 0xd}, {0x1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000c930)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000002a40)={<r8=>0x0, <r9=>0x0})
recvmmsg(r7, &(0x7f00000029c0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000001480)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/192, 0xc0}, {&(0x7f00000013c0)=""/182, 0xb6}], 0x3, &(0x7f00000014c0)=""/125, 0x7d}, 0x1}, {{&(0x7f0000001540)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/137, 0x89}, {&(0x7f0000001680)=""/80, 0x50}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/131, 0x83}, {&(0x7f00000027c0)=""/151, 0x97}], 0x5, &(0x7f0000002900)=""/167, 0xa7}, 0x8}], 0x2, 0x10022, &(0x7f0000002a80)={r8, r9+10000000})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000180))
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r11, 0x0, 0x0)
recvmmsg$unix(r11, &(0x7f0000004540)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000002bc0)=""/172, 0xac}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/11, 0xb}], 0x4, &(0x7f0000003d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000004140)=[{&(0x7f0000003dc0)=""/109, 0x6d}, {&(0x7f0000003e40)=""/231, 0xe7}, {&(0x7f0000003f40)=""/223, 0xdf}, {&(0x7f0000004040)=""/195, 0xc3}], 0x4}}, {{&(0x7f0000004180)=@abs, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004200)=""/118, 0x76}, {&(0x7f0000004280)=""/233, 0xe9}, {&(0x7f0000004380)=""/184, 0xb8}], 0x3, &(0x7f0000004480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x3, 0x2122, &(0x7f0000004600))
read$rfkill(r10, 0x0, 0x0)

3.523293297s ago: executing program 1 (id=1323):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x503800, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1fb, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0xa, 0x7fff, 0xffffffc0}}]}]}}}]}, 0x6c}}, 0x0)
sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1010c10, &(0x7f0000000080)=ANY=[], 0x7, 0x150f, &(0x7f0000002ac0)="$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")
r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x4)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8)
symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r9 = io_uring_setup(0x1111, &(0x7f00000010c0)={0x0, 0x4075, 0x8, 0xffffffff, 0xffffffff})
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000100)=[{&(0x7f0000002700)=""/4092, 0xffc}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r9, 0x1, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c)
getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f00000001c0))
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080), 0x4)

3.441688579s ago: executing program 5 (id=1324):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x0, 0x80000000}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040880}, 0x24040084)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8c4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.126761559s ago: executing program 5 (id=1326):
r0 = socket(0x1, 0x5, 0x0)
close(r0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000040)={{0x75, 0x4}, {0xae, 0xf5}, 0x4})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x0, 0x1, 0x8ffff)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r2, 0x0, '\x00', 0x0, r2, 0x0, 0x400}, 0x50)
r3 = epoll_create1(0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000002580)={0x18, 0xfffffffffffffff5}, 0x18)
r4 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4)
sendmmsg$inet6(r4, &(0x7f0000000340)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000500)={0xe000200c})

3.09203797s ago: executing program 0 (id=1327):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r5, 0x0, 0x0, 0x20000054)
mknod(&(0x7f0000000100)='./bus\x00', 0x3060, 0x658)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x7fffffe, 0x4e0, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x208, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

3.053159642s ago: executing program 7 (id=1328):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'erspan0\x00', 0x0, 0xf847, 0x41, 0x3, 0xfd, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x66, 0x0, 0xa3, 0x29, 0x0, @remote, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xf0, 0x1, 0x8, [{@rand_addr=0x64010102, 0x7}, {@loopback, 0x1}, {@multicast2, 0x5}]}]}}}}})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x50, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xac}}, 0x24040084)

2.900459866s ago: executing program 5 (id=1329):
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x2, 0x3a)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@journal_dev={'journal_dev', 0x3d, 0x7fffffffffffffff}}, {@sysvgroups}, {@noacl}, {@noload}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf")
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f9, &(0x7f0000001040)="$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")
io_setup(0x9, &(0x7f00000001c0)=<r2=>0x0)
r3 = open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60)
io_submit(r2, 0x1, &(0x7f0000001000)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x18, 0x8, 0x5, r3, 0x0, 0x0, 0x1000000}])
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
pselect6(0x40, &(0x7f0000000040)={0x43, 0x23, 0x4000000000000, 0x6, 0x800, 0x4, 0x2, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0)

1.056489826s ago: executing program 7 (id=1330):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="2a001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000)

986.975748ms ago: executing program 7 (id=1331):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="80", 0x1}], 0x1}, 0x240c0841)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000100)="ca", 0x1}], 0x1}, 0x48044)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000)

870.905382ms ago: executing program 7 (id=1332):
r0 = inotify_init1(0x800)
r1 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x84000151)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x12000e91)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8f37a5106ca69b0d, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=0x0], 0x1, 0x31c, &(0x7f0000000580)="$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")
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100003040000000000", @ANYBLOB="020000000000000014001280090001007665"], 0x48}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x28)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000100)={0x58000, 0x5000, 0x1})
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

746.304145ms ago: executing program 1 (id=1333):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)
close(r0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x37fffe, @loopback, 0x9}, 0x1c)

610.60708ms ago: executing program 1 (id=1334):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000001340)={[{@quota}, {@abort}, {@nombcache}, {@noload}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0xc5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsold}, {@nobarrier}], [{@smackfstransmute}, {@obj_type={'obj_type', 0x3d, 'debug_want_extra_isize'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'resgid'}}, {@fsname={'fsname', 0x3d, ']-.'}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, 'noload'}}]}, 0xfa, 0x48d, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x8, &(0x7f0000000180)=[{0xff81, 0xc, 0x56, 0x4}, {0x9, 0x80, 0x8, 0x7f}, {0x5, 0x1, 0x10, 0xefe2}, {0x2, 0x9, 0x4, 0x6b}, {0xb, 0x24, 0x1, 0x5e}, {0x9, 0x4, 0x3b, 0xffffff00}, {0x3e, 0x7, 0x7, 0x10000}, {0x7, 0xc, 0x9, 0x8000}]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x4, &(0x7f0000000100)=[{0x400, 0x40, 0x94, 0x2}, {0x9, 0x3, 0x0, 0x3}, {0x74e3, 0x3, 0xf4, 0x8}, {0x9, 0x3, 0x9, 0x1}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000540))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
creat(&(0x7f0000000240)='./file0/file0\x00', 0x20)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001ec0)=@newqdisc={0x860, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0x7, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa3, 0x5, 0x10000000}}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x1, 0x8, 0x1, 0x9, 0x79e0, 0x0, 0x40, 0x5, 0x7, 0x9, 0x3, 0x4d03, 0x2000000, 0x7, 0xffffffb5, 0x33f0, 0x0, 0xd358, 0x7, 0x7, 0x0, 0xe82, 0x7, 0x3, 0x8, 0x8001, 0x792e, 0x4, 0xc, 0x2, 0x2, 0x9, 0x5, 0x8, 0x0, 0x5, 0x2, 0x2, 0x0, 0xeef, 0x8, 0xfffffffb, 0x10, 0x3e0, 0x100, 0x2, 0x5, 0x4, 0x9, 0xe, 0x4, 0xc4, 0x7, 0x8, 0x800, 0x2, 0x60, 0x9c, 0xff, 0x5, 0x8, 0x7, 0x0, 0x0, 0x8, 0x8, 0x8, 0x7, 0xffffffff, 0x101, 0x9, 0x118, 0x7a, 0x6400, 0x8, 0x1, 0x4, 0xfffffff3, 0xfffffffa, 0x3, 0x214, 0x6, 0xb362, 0x78a2, 0xde, 0x200, 0x3ff, 0xc6, 0x2, 0x8, 0x1, 0xbba6, 0x3, 0x3, 0x9, 0x3, 0x3, 0x10000, 0x100, 0x6, 0x6, 0x1, 0x463c, 0xf989, 0xe, 0xf, 0xe84a, 0x3, 0x6, 0x7, 0x3, 0x230, 0x5, 0x7, 0x8, 0x7, 0x9, 0x5, 0x8, 0xfffff801, 0x7, 0x0, 0x8b1, 0x9, 0x1000, 0x6, 0x4, 0x4d, 0x7, 0x59, 0x6, 0x7f, 0xfff, 0x1, 0x40, 0xa, 0x1, 0x0, 0x0, 0x200, 0x9, 0x6, 0x9, 0x5, 0x5, 0xad30, 0x5, 0x6, 0xfffffffb, 0x1, 0x4, 0x83, 0x1, 0x3, 0x5, 0x6, 0x3, 0xfb81, 0x5, 0x6, 0x800, 0x8, 0xfffffff7, 0x9, 0x1, 0x2, 0x9294, 0x6501ab23, 0x3, 0xfffff044, 0x8, 0x7, 0x7, 0x31, 0x9, 0xfff, 0x80000000, 0x5, 0x9, 0x6, 0xfffffffb, 0xe, 0x46, 0x100, 0x3, 0x81, 0x80000000, 0x3, 0x6, 0x0, 0x2, 0x3, 0xffff, 0x0, 0x8, 0x100, 0x2, 0x2, 0x4, 0x0, 0xca, 0x1, 0xad46, 0x101, 0x2, 0xfffffffc, 0x6, 0x0, 0xa3, 0x1, 0x6, 0xf, 0x3, 0xffffffff, 0x5, 0xff, 0x40, 0x6, 0xffff, 0x4, 0xffffffff, 0x4, 0x101, 0x75d4, 0x80000, 0xca4, 0x2, 0x6, 0x3, 0x8, 0x5000, 0x9, 0x0, 0xffff5000, 0xa951, 0x8281, 0xc, 0x6, 0x15f42967, 0x99, 0x6, 0xe75b, 0x140, 0x7940d482, 0xfffffff4, 0x5, 0x3, 0x1ff, 0xf5, 0x4, 0x8, 0x4, 0x8, 0xff, 0x5]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x9, 0x40, 0x7, 0x10000, 0x4, 0x8, 0x9, 0xfffffff2, 0xf, 0x9, 0x7, 0x0, 0x0, 0x7, 0xfffff000, 0x8, 0x2, 0x7, 0x2, 0x2, 0x8, 0x800, 0x2, 0xfffffeff, 0xfffffffc, 0xffff, 0xd45, 0xfd47, 0x2, 0x2, 0x9, 0xe5, 0x0, 0xcdc, 0x9, 0x0, 0x827, 0x6, 0xd, 0x9, 0x1000, 0x12, 0x8, 0x1, 0x7f, 0x8001, 0x97, 0x4f, 0x0, 0x9, 0x5, 0x848, 0xb2, 0xfffffff9, 0xbbf6, 0x5, 0x4, 0x2, 0xfff, 0xc6, 0x1, 0x2, 0x7b, 0x8, 0x525, 0x7ae, 0x7, 0x9, 0x6, 0x7, 0x9, 0xf, 0xffffffff, 0x52, 0x7, 0xb08e, 0x4, 0x8, 0x9, 0x0, 0x81, 0x4, 0x6, 0x9, 0xd, 0x0, 0x6, 0x0, 0x9, 0xfffffff0, 0xea8, 0x5, 0x9, 0x1, 0x4, 0x106, 0x8, 0x7cc2, 0x12, 0x10000, 0x1, 0x0, 0x401, 0xffff8001, 0x6, 0x2, 0x8, 0x3, 0x80, 0x7, 0x2, 0x1, 0x8, 0x0, 0x2, 0x9, 0x800, 0xca9, 0xfffffff0, 0x400, 0xf, 0x2, 0x2, 0x5f, 0x7fffffff, 0x5, 0xfffffffe, 0x88, 0x6, 0x8, 0xfffffff8, 0x9, 0x4, 0x0, 0x10001, 0x800, 0x8, 0xd, 0x4, 0xfff, 0x9, 0x5, 0x7f, 0x3, 0x24, 0x1, 0x8, 0x9, 0x8, 0x1000, 0xadc2, 0xdf, 0xee, 0xd08, 0xa, 0x8, 0xd, 0xffffffff, 0xe, 0xffff, 0x3, 0x3, 0xd, 0x9, 0x8001, 0x9, 0x4, 0x5, 0x1, 0x0, 0x5d38, 0x114, 0x8, 0x7fff, 0x1, 0xa8, 0x9, 0xfffffffb, 0x2, 0xdc0c, 0x3, 0x2, 0x10, 0x2, 0xfffffff8, 0x20, 0x8, 0x6, 0x4, 0x3, 0x10000, 0x81, 0x9, 0x8, 0x7, 0xfffffff8, 0x5, 0xfffffff7, 0x4, 0x5f, 0xe, 0x7, 0x80000000, 0xfffffd5f, 0x0, 0x401, 0x81, 0x9, 0xffffff7f, 0x10, 0x3, 0x4, 0xc016, 0x9, 0x101, 0x3, 0x10001, 0x2, 0x8, 0x6, 0xfffffff6, 0xffffffff, 0x9, 0x3ff, 0x5, 0x3, 0xb, 0x0, 0x1e9, 0xa, 0x1000, 0xa, 0x5, 0x4, 0x7, 0x7, 0x80000000, 0x8, 0x100, 0x6, 0x7, 0x32, 0xff73, 0x8, 0x9, 0x4, 0x0, 0x80000001, 0x7f, 0x9, 0x7, 0x1, 0x5d85, 0xfffffa08, 0x2]}]}}]}, 0x860}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x9, 0xa}, {0xe, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4008014)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

597.380011ms ago: executing program 7 (id=1335):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
symlink(0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f0000000000)=ANY=[], 0x7d, 0x1507, &(0x7f0000001800)="$eJzs3Au0TlX3MPA511qb4+TyJLnvuebmSS6LJAklqUiSJCT3hCRJkiRxyC0JScj1JLmH3NNJx/1+yT3p5JUkSUhIsr5xpOHf+77/v9733/vp+878jbHHWfPsPdee68yxn2fvZ4zzfNt5SNUG1arUZWb4d+jfBvjrjyQASACA/gCQAwACACibs2zO9P1ZNCb9WycR/yH1pl3pCsSVJP3P2KT/GZv0P2OT/mds0v+MTfqfsUn/MzbpvxAZ2ox8V8uWcTf5/P//cep/kyzv/xkC/nc7pP//v9H/0tHS/4xN+p+xSf8zNul/RhZc6QLEFSbXf8Ym/RciQ/vTP1Ned+ZKf6Yt27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/xec8ZcYAPhtfKXrEkIIIYQQQgghxJ/Hv3+lKxBCCCGEEEIIIcR/HoICDQYCyASZIQGyQCJcBVkhG2SHHBCDqyEnXAO54FrIDXkgL+SD/FAACkIIBBYYIigEhSEO10ERuB6KQjEoDiXAQUkoBTdAabgRysBNUBZuhnJwC5SHChfOme52qAwKqsCdcBfcDVWhGtwD1eFeqAH3QU24H2rBA1AbHoQ68BDUhXpQHx6GBvAINIRG0BiaQFNoBs0vk5+c45/lvwjd4CXoDj0gCXpCL3gZekMf6Av9oD+8AgPgVRgIr8EgGAxD4HUYCm/AMHgThsMIGAlvwSgYDWNgLIyD8ZAMb8MEeAcmwruPZIPJMAWmwjSYDjPgPZgJs2A2vA9zYC7Mg+QsC2AhLIIPYDF8CCnwESyBjyEVlsIyWA4rYCWsgtWwBtbCOlgPG2AjbILNsAU+ga2wDbbDDtgJu2A3fAp74DPYC59DGn7xL+af/n0+dEFAQIUKDRrMhJkwARMwERMxK2bF7JgdYxjDnJgTc2EuzI25MS/mxSTMjwWxIBISMjIWwkIYxzgWwSJYFIticSyODh2WwlJYGm/EMlgGy2JZLIflsDxWwAp4K96KlbASVsbKWAWr4F14F1bFqngP3oP3Yg2sgTWxJtbCWlgba2MdrIN1sS7Wx/rYABtgQ2yIjbExNsWm2BybYwtsgS2xJbbG1tgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AVfwBfwRXwRX8KXsAfepXpiL+yFvbE39sV+2A9fwQH4Kr6Kr+EgHIxD8HV8Hd/AYXgKh+MIHIkjsZIajWNwLLIaj8mYjJlhAk7EiTgJJ+NknIrTcDrOwBk4E2fhLHwf5+BcnIvzcT4uxEW4CBfjh5iCKbgET2MqLsVluBxX4EpcgatxDa7Gdbge1+FG3IibcTN+gp/gNtyGO3AH7sJd+Cl+ip/hZzgI0zAN9+E+3I/78QAewIN4EA/hITyMh/EIHsGjeBSP4XE8gcfxJJ7EU3gazwDAWTyL5/Acnsfz6Re/SmeUUZlUJpWgElSiSlRZVVaVXWVXMRVTOVVOlUvlUrlVbpVX5VX5VX5VUBVUpEixilQhVUjFVVwVUUVUUVVUFVfFlVNOlVKlVGlVWpVRZVRZdbMqp25R5VUF1crdqm5VlVRrV1ndoaqoKpkAQFVV1VQ1VV1VVzVUDVVT1VS1VC1VWz2o6qie2BfrqfTONFCDsaEago1VE9VUNVNv4KOqhRqGLVUr1Vo9rkbgcGyrWrh26inVXo3BDuoZNRafVZ3UeOysnldd1Auqq3pRdVMtXXfVQ03CnqqXmoq9VR/VV/VTM/Fuld6xquo19WLmwWqIel0txDfUMPWmGq5GqJHqLTVKjVZj1Fg1To1XyeptNUG9oyaqd9UkNVlNUVPVNDVdzVDvqZlqlpqt3ldz1Fw1T81XC9RCtUh9oBarD1WK+kgtUR+rVLVULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Rb1idqqtqntaofaqXap3epTtUd9pvaqz1Wa+kLtU39T+9WX6oD6Sh1UX6tD6ht1WH2rjqjv1FH1vTqmjqsT6gd1Uv2oTqnT6oz6SZ1VP6tz6hd1XnkFGrXSWhsd6Ew6s07QWXSivkpn1dl0dp1Dx/TVOqe+RufS1+rcOo/Oa/Lp/LqALqhDTdpq1pEupAvruL5OF9HX66K6mC6uS2inS+pS+gZdWt+oy+ibdFl9sy6nb9HldQVd0YO+TVfSt+vK+g5dRd+p79J366q6mr5HV9f36hr6Pl1T369r6Qd0bf2grqMf0nV1PV1fP6wb6Ed0Q91IN9ZNdFPdTDfXj+oW+jHdUrfSrfXjuo1+QrfVT+p2+indXj+tO+hndEf9rO6kn9Od9fO6i35Bd9W/6PPa6+66h07SPXUv/bLurfvovrqf7q9f0QP0q3qgfk0P0oP1EP26Hqrf0MP0m3q4HqFH6rf0KD1aj9Fj9Tg9Xifrt/UE/Y6eqN/Vk/RkPUVP1dP0dN334kyz/0D+O/8kf+CFs2/WW/QneqveprfrHXqn3qV36916j96j9+q9Ok2n6X16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+rj+Sf+gT+of9Sl9Wp/WP+mz+qw+d/FvAAaNMtoYE5hMJrNJMFlMornKZDXZTHaTw8TM1SanucbkMtea3CaPyWvymfymgCloQkPGGjaRKWQKm7i5zhQx15uippgpbkoYZ0qaUuaG/3X+5eprbpqbFqaFaWlamtamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpnOprPpYrqYrqar6Wa6me6mu0kySaaXedn0Nn1MX9PP9DevmAFmgBloBppBZpAZYoaYoWaoGWaGmeFmuBlpRppRZpQZY8aYcWacSfY5zAQzwUw0E80kM8lM6Z/DTDPTzAwzw8w0M81sM9vMMXPMPDPPLDALzCKzyCw2i02KSTFLzBKTapaapWa5WW5WmpVmtVlt1pq1Zr1ZbzaajSbVbDFbzFaz1Ww3281Os9PsNrvNHrPH7DV7TZpJM/vMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFzwpwwJ81Jc8qcMmfMGXPWnDXnzDlz3pxPv+0LVKACE5ggU5ApSAgSgsQgMcgaZA2yB9mDWBALcgY5g1zBtUHuIE+QN8gX5A8KBAWDMKDABhxEQaGgcBAPrguKBNcHRYNiQfGgROCCkkGp4IagdHBjUCa4KSgb3ByUC24JygcVgorBrcFtQaXg9qBycEdQJbgzuCu4O6gaVAvuCaoH9wY1gvuCmsH9Qa3ggaB28GBQJ3goqBvUC+oHDwcNgkeChkGjoHHQJGgaNAua/6nze38qz2Oue9gjTAp7hr3Cl8PeYZ+wb9gv7B++Eg4IXw0Hhq+Fg8LB4ZDw9XBo+EY4LHwzHB6OCEeGb4WjwtHhmHBsOC4cHyaHb4cTwnfCieG74aRwcjglmBpOC6eHM8L3wpnhrHB2+H44J5wbzgvnhwvChSH+eksMKeFH4ZLw4zA1XBouC5eHK8KV4apwdbgmXBuuC9eHG8KNZQf8emi4NdwWbg93hDvDXeHu8NNwT/hZuDf8PEwLvwj3hX8L94dfhgfCr8KD4dfhofCb8HD4bXgk/C48Gn4fHguPhyfCH8KT4Y/hqfB0eCb8KTwb/hyeC38Jz4c+/eY+/e2dDBnKRJkogRIokRIpK2Wl7JSdYhSjnJSTclEuyk25KS/lpfyUnwpSQUrHxFSIClGc4lSEilBRKkrFqTg5clSKSlFpKk1lqAyVpbJUjspReSpPFaki3Ua30e10O91Bd9CddCfdTXdTNapG1ak61aAaVJNqUi2qRbWpNtWhOlSX6lJ9qk8NqAE1pIbUmBpTU2pKzak5taAW1JJaUmtqTW2oDbWlttSO2lF7ak8dqAN1pI7UiTpRZ+pMXagLdaWu1I26UXfqTkmURL2oF/Wm3tSX+lJ/6k8DaAANpIE0iAbREBpCQ2koDaNhNJxG0Eh6i0bRaBpDY2kcjadkSqYJNIEm0kSaRJNoCk2haTSNZtAMmkkzaTbNpjk0h+bRPFpAC2gRLaLFtJhSKIWW0BJKpVRaRstoBa2gVbSK1tAaWkfraANtoE20ibbQFtpKW2k7baedtJN2027aQ3toL+2lNEqjfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIxO0Ak6SSfpFJ2iM3SGztLPdI5+ofPkKcFmsYn2KpvVZrPZbQ7793Fem8/mtwVsQRva3DbP72Ky1ha1xWxxW8I6W9KWsjf8Q1zeVrAV7a32NlvJ3m4r2/I2C/zXuLq919aw99ma9n5bzd7zu7iWfcDWto/YOraRrWub2Pq2mW1gH7ENbSPb2DaxTW0z28Y+YdvaJ207+5Rtb5/+h3ix/dCusWvtOrve7rGf2TP2J3vYfmvP2p9td9vD9rev2AH2VTvQvmYH2cG/jwHsSPuWHWVH2zF2rB1nx/9DPMVOtdPsdDvDvmdn2ln/EC+yH9g5NsXOs/PtArvwQpxeU4r9yC6xH9tUu9Qus8vtiouvC3Cx1uV2o91kN9vd9lO71W6z2+0Ou9PuuhCnr2Ov/dym2S/sIfuN3W+/tAfsEXvQfn0hTl/fEfudPWq/t8fscXvC/mBP2h/tKXv6wvrT1/6D/cWet94CIyvWbDjgTJyZEzgLJ/JVnJWzcXbOwTG+mnPyNZyLr+XcnIfzcj7OzwW4IIdMbJk54kJcmON8HRfh67koF+PiXIIdl+RSfAOX5hu5DN/EZflmLse3cHmuwBX5Vr6NK/HtXJnv4Cp8J9/Fd3NVrsb3cHW+l2vwfVyT7+da/ADX5ge5Dj/Edbke1+eHuQE/wg25ETfmJtyUm3FzfpRb8GPckltxa36c2/AT3Jaf5Hb8FLfnp7kDP8Md+VnuxM9xZ36eu/AL3JVf5G78EnfnHpzEPbkXv8y9uQ/35X7cn1/hAfwqD+TXeBAP5iH8Og/lN3gYv8nDeQSP5Ld4FI/mMTyWx/F4Tua3eQK/wxP5XZ7Ek3kKT+VpPJ1n8Hs8k2fxbH6f5/BcnsfzeQEv5EX8AS/mDzmFP+Il/DGn8lJexst5Ba/kVbya1/BaXsfreQNv5E28mbfwJ7yVt/F23sE7eRfv5k95D3/Ge/lzTuMveB//jffzl3yAv+KD/DUf4m/4MH/LR/g7Psrf8zE+zif4Bz7JP/IpPs1n+Cc+yz/zOf6Fz7NniDBSkY5MFESZosxRQpQlSoyuirJG2aLsUY4oFl0d5YyuiXJF10a5ozxR3ihflD8qEBWMwogiG3EURYWiwlE8ui4qEl2fDaJiUfGoROSiklGp6IaodHRjVCa6KSob3RyVi26JykcVoorRrdFtUaXo9qhydEdUJbozuiu6O6oaVYvuiapH90Y1ovuimtH9UZnogah29GBUJ3ooqhvVi+pHD0cNokeihlGjqHHUJGoaNYuaR49GLaLHopZRq6h19HjUJnoiahs9GbWLnoraR09f2l8s+PX6+rv9SVHPSF+89O7TC+IL44viH8QXxz+Mp8Q/ii+JfxxPjS+NL4svj6+Ir4yviq+Or4mvja+Lr49viG+Mb4pvjntfLTM4TH8QBuMCl8lldgkui0t0V7msLpvL7nK4mLva5XTXuFzuWpfb5XF5XT6X3xVwBV3oyFnHLnKFXGEXd9e5Iu56V9QVc8VdCedcSVfKNXPNXXPXwj3mWrpWrrV73D3unnBPuCcTLhbuOrhnXEf3rOvknnPPueddF/eC6+pedN3cS6676+GSXJLr5Xq53q636+v6uv6uvxvgBriBbqAb5Aa5IW6IG+qGumFumBvuhruRbqQb5Ua5MW6MG+fGuWSX7Ca4CW6im+gmuUluipviprlpboab4Wa6mW62m+3muDlunpvnFrgFbpFb5Ba7xS7FpbglbolLdalumVvmVrgVbpVb5da4NW6dW+c2uA1uk9vktrgtbqvb6ra77W6n2+l2u91uj9vj9rq9Ls2luX1un9vv9rsD7it30H3tDrlv3GH3rTvivnNH3ffumDvuTjivT7of3Sl32p1xP7mz7md3zv3izjvvkmNvxybE3olNjL0bmxSbHJsSmxqbFpsemxF7LzYzNis2O/Z+bE5sbmxebH5sQWxhbFHsg9ji2IexlNhHsSWxj2OpsaWxZbHlsRWxlTHvC2yNfCFf2Mf9db6Iv94X9cV8cV/CO1/Sl/I3+NL+Rl/G3+TL+pt9OX+LL+8r+Iq+kW/sm/imvplv7h/1LfxjvqVv5Vv7x30b/4Rv65/07fxTvr1/2nfwz/iO/lnfyT/nO/vn517ssu/mX/LdfQ+f5Hv6Xv5l39v38X19P9/fv+IH+Ff9QP+aH+QH+yH+dT/Uv+GH+Tf9cD/Cj/Rv+VF+tB/jx/pxfrxP9m/7Cf4dP9G/6yf5yX6Kn+qn+el+hn/Pz/Sz/Gz/vp/j5/p5fr5f4Bf6Rf4Dv9h/6FP8R36J/9in+qV+mV/uV/iVfpVf7df4tX6dX+83+I1+k9/st/hP/Fa/zW/3O/xOv8vv9p/6Pf4zv9d/7tP8F36f/5vf77/0B/xX/qD/2h/y3/jD/lt/xH/nj/rv/TF/3J/wP/iT/kd/yp/2Z/xP/qz/2Z/zv/jz8j9rQgghhBB/iL7M/p7/5Hfq4pauFwBk25bv4N/PuSH3r+M+ak/7GAA81aNzvd+2evWSkpIuHpuqISg8HwBil/IvfP/AxXgptIYnoB20gtL/tL4+quKF+77/af74zQCJAFl+y0l/PEqEv5//xkuL+938jT7gy80/H6Bo4Us56Sf6Lb40f5n/pv5dbS4zf5YvkwFa/pecrHApvjR/KXgMnoZ2vztSCCGEEEIIIYT4VR91tsvlnm/Tn8/zm0s5meFSfLnn88uo/GesQQghhBBCCCGEEP+zZ1/o+uSj7dq16niZAfyBY/6yg8x/jTL+AgMEgL9AGTL46w+u9CuTEEIIIYQQ4s926ab/SlcihBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEJkXP/+N4SpP3zwlV6jEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIcaX9nwAAAP//6kRQ4A==")
truncate(0x0, 0x6000)
connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
close(0x3)
syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0)
io_setup(0x58, &(0x7f00000001c0)=<r3=>0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20)
recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x2, 0x0)
io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x5af, r4, 0x0, 0x0, 0x1, 0x0, 0x2}])
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c406)

456.391035ms ago: executing program 6 (id=1336):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901)
close(r0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000002528a94def58daca1c0c79a55f000000000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000b60100007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r3, r2}, 0xc)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r4)
timerfd_create(0x7, 0x800)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
listen(r1, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061ee6d12553cba6cc0010000100000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000000c0), 0x4)
r6 = syz_open_dev$mouse(&(0x7f00000002c0), 0x8000, 0xb00)
ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f00000003c0)={0x7, 0xe, [{0x9, 0x0, 0x5}, {0x81, 0x0, 0x4}, {0xfffffff9, 0x0, 0x5}, {0x5, 0x0, 0x2}, {0x1, 0x0, 0x7}, {0x73, 0x0, 0x1}, {0x5, 0x0, 0x8001}, {0xfffffff8}, {0x4, 0x0, 0x7}, {0x7fffffff, 0x0, 0x2}, {0x457e, 0x0, 0x7a1}, {0x8, 0x0, 0x10001}, {0x5, 0x0, 0x4}, {0x5, 0x0, 0x6}, {0x7, 0x0, 0x10000}, {0xe0, 0x0, 0x401}]})
socket$tipc(0x1e, 0x5, 0x0)
poll(&(0x7f0000000280)=[{r1, 0x8000}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
flistxattr(r7, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000040)="8a05c6bc37f3f89abd1227", 0xb}], 0x1, 0x0, 0x0, 0x40}, 0x4040810)
accept4(r1, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x80)
setresuid(0xee00, 0xee00, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8001)
getpgid(r4)

410.363546ms ago: executing program 0 (id=1337):
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
truncate(&(0x7f0000000000)='./file3\x00', 0x80000000)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

51.481418ms ago: executing program 0 (id=1338):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000001340)={[{@quota}, {@abort}, {@nombcache}, {@noload}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0xc5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsold}, {@nobarrier}], [{@smackfstransmute}, {@obj_type={'obj_type', 0x3d, 'debug_want_extra_isize'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'resgid'}}, {@fsname={'fsname', 0x3d, ']-.'}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, 'noload'}}]}, 0xfa, 0x48d, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x0, &(0x7f0000000180)})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x4, &(0x7f0000000100)=[{0x400, 0x40, 0x94, 0x2}, {0x9, 0x3, 0x0, 0x3}, {0x74e3, 0x3, 0xf4, 0x8}, {0x9, 0x3, 0x9, 0x1}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000540))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
creat(&(0x7f0000000240)='./file0/file0\x00', 0x20)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001ec0)=@newqdisc={0x860, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0x7, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa3, 0x5, 0x10000000}}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x1, 0x8, 0x1, 0x9, 0x79e0, 0x0, 0x40, 0x5, 0x7, 0x9, 0x3, 0x4d03, 0x2000000, 0x7, 0xffffffb5, 0x33f0, 0x0, 0xd358, 0x7, 0x7, 0x0, 0xe82, 0x7, 0x3, 0x8, 0x8001, 0x792e, 0x4, 0xc, 0x2, 0x2, 0x9, 0x5, 0x8, 0x0, 0x5, 0x2, 0x2, 0x0, 0xeef, 0x8, 0xfffffffb, 0x10, 0x3e0, 0x100, 0x2, 0x5, 0x4, 0x9, 0xe, 0x4, 0xc4, 0x7, 0x8, 0x800, 0x2, 0x60, 0x9c, 0xff, 0x5, 0x8, 0x7, 0x0, 0x0, 0x8, 0x8, 0x8, 0x7, 0xffffffff, 0x101, 0x9, 0x118, 0x7a, 0x6400, 0x8, 0x1, 0x4, 0xfffffff3, 0xfffffffa, 0x3, 0x214, 0x6, 0xb362, 0x78a2, 0xde, 0x200, 0x3ff, 0xc6, 0x2, 0x8, 0x1, 0xbba6, 0x3, 0x3, 0x9, 0x3, 0x3, 0x10000, 0x100, 0x6, 0x6, 0x1, 0x463c, 0xf989, 0xe, 0xf, 0xe84a, 0x3, 0x6, 0x7, 0x3, 0x230, 0x5, 0x7, 0x8, 0x7, 0x9, 0x5, 0x8, 0xfffff801, 0x7, 0x0, 0x8b1, 0x9, 0x1000, 0x6, 0x4, 0x4d, 0x7, 0x59, 0x6, 0x7f, 0xfff, 0x1, 0x40, 0xa, 0x1, 0x0, 0x0, 0x200, 0x9, 0x6, 0x9, 0x5, 0x5, 0xad30, 0x5, 0x6, 0xfffffffb, 0x1, 0x4, 0x83, 0x1, 0x3, 0x5, 0x6, 0x3, 0xfb81, 0x5, 0x6, 0x800, 0x8, 0xfffffff7, 0x9, 0x1, 0x2, 0x9294, 0x6501ab23, 0x3, 0xfffff044, 0x8, 0x7, 0x7, 0x31, 0x9, 0xfff, 0x80000000, 0x5, 0x9, 0x6, 0xfffffffb, 0xe, 0x46, 0x100, 0x3, 0x81, 0x80000000, 0x3, 0x6, 0x0, 0x2, 0x3, 0xffff, 0x0, 0x8, 0x100, 0x2, 0x2, 0x4, 0x0, 0xca, 0x1, 0xad46, 0x101, 0x2, 0xfffffffc, 0x6, 0x0, 0xa3, 0x1, 0x6, 0xf, 0x3, 0xffffffff, 0x5, 0xff, 0x40, 0x6, 0xffff, 0x4, 0xffffffff, 0x4, 0x101, 0x75d4, 0x80000, 0xca4, 0x2, 0x6, 0x3, 0x8, 0x5000, 0x9, 0x0, 0xffff5000, 0xa951, 0x8281, 0xc, 0x6, 0x15f42967, 0x99, 0x6, 0xe75b, 0x140, 0x7940d482, 0xfffffff4, 0x5, 0x3, 0x1ff, 0xf5, 0x4, 0x8, 0x4, 0x8, 0xff, 0x5]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x9, 0x40, 0x7, 0x10000, 0x4, 0x8, 0x9, 0xfffffff2, 0xf, 0x9, 0x7, 0x0, 0x0, 0x7, 0xfffff000, 0x8, 0x2, 0x7, 0x2, 0x2, 0x8, 0x800, 0x2, 0xfffffeff, 0xfffffffc, 0xffff, 0xd45, 0xfd47, 0x2, 0x2, 0x9, 0xe5, 0x0, 0xcdc, 0x9, 0x0, 0x827, 0x6, 0xd, 0x9, 0x1000, 0x12, 0x8, 0x1, 0x7f, 0x8001, 0x97, 0x4f, 0x0, 0x9, 0x5, 0x848, 0xb2, 0xfffffff9, 0xbbf6, 0x5, 0x4, 0x2, 0xfff, 0xc6, 0x1, 0x2, 0x7b, 0x8, 0x525, 0x7ae, 0x7, 0x9, 0x6, 0x7, 0x9, 0xf, 0xffffffff, 0x52, 0x7, 0xb08e, 0x4, 0x8, 0x9, 0x0, 0x81, 0x4, 0x6, 0x9, 0xd, 0x0, 0x6, 0x0, 0x9, 0xfffffff0, 0xea8, 0x5, 0x9, 0x1, 0x4, 0x106, 0x8, 0x7cc2, 0x12, 0x10000, 0x1, 0x0, 0x401, 0xffff8001, 0x6, 0x2, 0x8, 0x3, 0x80, 0x7, 0x2, 0x1, 0x8, 0x0, 0x2, 0x9, 0x800, 0xca9, 0xfffffff0, 0x400, 0xf, 0x2, 0x2, 0x5f, 0x7fffffff, 0x5, 0xfffffffe, 0x88, 0x6, 0x8, 0xfffffff8, 0x9, 0x4, 0x0, 0x10001, 0x800, 0x8, 0xd, 0x4, 0xfff, 0x9, 0x5, 0x7f, 0x3, 0x24, 0x1, 0x8, 0x9, 0x8, 0x1000, 0xadc2, 0xdf, 0xee, 0xd08, 0xa, 0x8, 0xd, 0xffffffff, 0xe, 0xffff, 0x3, 0x3, 0xd, 0x9, 0x8001, 0x9, 0x4, 0x5, 0x1, 0x0, 0x5d38, 0x114, 0x8, 0x7fff, 0x1, 0xa8, 0x9, 0xfffffffb, 0x2, 0xdc0c, 0x3, 0x2, 0x10, 0x2, 0xfffffff8, 0x20, 0x8, 0x6, 0x4, 0x3, 0x10000, 0x81, 0x9, 0x8, 0x7, 0xfffffff8, 0x5, 0xfffffff7, 0x4, 0x5f, 0xe, 0x7, 0x80000000, 0xfffffd5f, 0x0, 0x401, 0x81, 0x9, 0xffffff7f, 0x10, 0x3, 0x4, 0xc016, 0x9, 0x101, 0x3, 0x10001, 0x2, 0x8, 0x6, 0xfffffff6, 0xffffffff, 0x9, 0x3ff, 0x5, 0x3, 0xb, 0x0, 0x1e9, 0xa, 0x1000, 0xa, 0x5, 0x4, 0x7, 0x7, 0x80000000, 0x8, 0x100, 0x6, 0x7, 0x32, 0xff73, 0x8, 0x9, 0x4, 0x0, 0x80000001, 0x7f, 0x9, 0x7, 0x1, 0x5d85, 0xfffffa08, 0x2]}]}}]}, 0x860}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0x9, 0xa}, {0xe, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4008014)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

2.096799ms ago: executing program 5 (id=1339):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x0, 0x80000000}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040880}, 0x24040084)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8c4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

0s ago: executing program 7 (id=1340):
r0 = socket$inet(0x2, 0xa, 0x262)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000027c0)={0x2020, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
fchown(r1, r3, r4)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @loopback}})
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @local}, 0x3a, {0x2, 0x2, @broadcast}, 'syz_tun\x00'})

kernel console output (not intermixed with test programs):

631): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  220.102661][ T3409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.872'.
[  220.343730][   T30] audit: type=1400 audit(1780071244.506:2632): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  220.365480][   T30] audit: type=1400 audit(1780071244.506:2633): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  220.444176][ T3416] loop6: detected capacity change from 0 to 256
[  220.474297][   T30] audit: type=1400 audit(1780071244.506:2634): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  220.503571][ T3416] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  220.694766][   T30] audit: type=1400 audit(1780071244.506:2635): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  220.717855][ T1518] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  220.718007][   T30] audit: type=1400 audit(1780071244.506:2636): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  220.747584][ T1518] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  220.787912][ T1518] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71
[  220.808064][ T1518] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  220.858162][ T1518] usb 8-1: USB disconnect, device number 6
[  220.973701][ T1518] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  220.999700][ T1518] ftdi_sio 8-1:0.0: device disconnected
[  221.138242][ T3428] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[  221.148365][ T3428] SELinux: failed to load policy
[  222.161458][ T3439] loop1: detected capacity change from 0 to 8192
[  223.007434][ T3469] loop1: detected capacity change from 0 to 512
[  223.055308][ T3469] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.891: invalid block
[  223.087128][ T3469] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.891: invalid indirect mapped block 10 (level 1)
[  223.137889][ T3469] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.891: invalid indirect mapped block 8 (level 1)
[  223.182016][ T3469] EXT4-fs (loop1): 1 truncate cleaned up
[  223.190980][ T3469] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  223.200956][ T3474] loop6: detected capacity change from 0 to 512
[  223.247560][ T3474] EXT4-fs (loop6): Ignoring removed bh option
[  223.310405][ T3474] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  223.327718][  T305] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  223.358940][ T3474] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  223.593805][ T3491] loop7: detected capacity change from 0 to 1024
[  223.630633][ T3491] EXT4-fs (loop7): Ignoring removed nobh option
[  223.637063][ T3491] EXT4-fs (loop7): Ignoring removed bh option
[  223.649315][ T3491] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  223.673093][  T305] usb 1-1: Using ep0 maxpacket: 8
[  223.737893][ T3495] loop5: detected capacity change from 0 to 256
[  223.747861][  T992] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  223.759707][ T3491] netlink: 12 bytes leftover after parsing attributes in process `syz.7.898'.
[  223.788651][ T3495] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  223.815068][  T305] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  223.842449][  T305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.921278][  T305] usb 1-1: config 0 has no interface number 0
[  224.149790][  T305] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  224.159071][  T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.167323][  T305] usb 1-1: Product: syz
[  224.171891][  T305] usb 1-1: Manufacturer: syz
[  224.176523][  T305] usb 1-1: SerialNumber: syz
[  224.182272][  T305] usb 1-1: config 0 descriptor??
[  224.223195][  T305] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  224.230259][  T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  224.256805][  T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  224.280879][  T305] usb 1-1: Failed to create links for entity 6
[  224.520581][  T305] usb 1-1: Failed to register entities (-22).
[  224.529069][  T305] usb 1-1: USB disconnect, device number 15
[  224.767775][  T992] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  224.786705][  T992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.802267][  T992] usb 7-1: Product: syz
[  224.814936][ T3517] loop1: detected capacity change from 0 to 256
[  224.821415][  T992] usb 7-1: Manufacturer: syz
[  224.826240][  T992] usb 7-1: SerialNumber: syz
[  224.833586][ T3516] loop7: detected capacity change from 0 to 512
[  224.849295][  T992] usb 7-1: config 0 descriptor??
[  224.854242][ T3517] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  224.870839][ T3516] EXT4-fs (loop7): Ignoring removed bh option
[  224.902323][ T3516] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  224.933239][ T3516] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  224.970874][  T992] usb 7-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  225.234823][   T30] audit: type=1326 audit(1780071249.956:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  225.448514][   T30] audit: type=1326 audit(1780071249.986:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  225.476161][   T30] audit: type=1326 audit(1780071249.986:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  225.502315][   T30] audit: type=1326 audit(1780071249.986:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  225.557708][   T30] audit: type=1326 audit(1780071249.986:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  225.588730][   T30] audit: type=1326 audit(1780071249.986:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  225.613876][  T326] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  225.621673][   T30] audit: type=1326 audit(1780071249.996:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  225.687717][   T30] audit: type=1326 audit(1780071249.996:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  225.717260][   T30] audit: type=1326 audit(1780071249.996:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  225.753284][   T30] audit: type=1326 audit(1780071249.996:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3473 comm="syz.6.893" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f13b61f968e code=0x7ffc0000
[  225.810600][  T992] usb 7-1: USB disconnect, device number 14
[  226.091017][ T3541] loop1: detected capacity change from 0 to 256
[  228.298251][ T3541] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  228.353127][ T2650] udevd[2650]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  228.447921][  T326] usb 8-1: device descriptor read/all, error -71
[  228.634259][ T3556] loop7: detected capacity change from 0 to 512
[  228.705997][ T3556] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  228.715187][ T3556] EXT4-fs (loop7): orphan cleanup on readonly fs
[  228.722326][ T3556] EXT4-fs warning (device loop7): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  228.737306][ T3556] EXT4-fs (loop7): Cannot turn on quotas: error -5
[  228.744632][ T3556] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.917: bg 0: block 64: padding at end of block bitmap is not set
[  228.759147][ T3556] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  228.768517][ T3556] EXT4-fs (loop7): 1 truncate cleaned up
[  228.774223][ T3556] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  229.092368][ T3566] loop1: detected capacity change from 0 to 512
[  229.470911][ T3566] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.918: invalid indirect mapped block 10 (level 1)
[  229.484812][ T3566] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.918: invalid indirect mapped block 8 (level 1)
[  229.498936][ T3566] EXT4-fs (loop1): 1 truncate cleaned up
[  229.504791][ T3566] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  229.607223][ T3580] loop5: detected capacity change from 0 to 256
[  229.683219][ T3580] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  231.521331][   T30] kauditd_printk_skb: 85 callbacks suppressed
[  231.521360][   T30] audit: type=1400 audit(1780071256.246:2731): avc:  denied  { write } for  pid=3594 comm="syz.5.926" name="vlan0" dev="proc" ino=4026532623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  231.671437][   T30] audit: type=1326 audit(1780071256.396:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3594 comm="syz.5.926" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bf89ae59 code=0x0
[  232.213976][ T3605] loop1: detected capacity change from 0 to 256
[  232.252821][ T3605] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  232.407081][   T30] audit: type=1400 audit(1780071257.126:2733): avc:  denied  { relabelfrom } for  pid=3612 comm="syz.5.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  232.487593][   T30] audit: type=1400 audit(1780071257.156:2734): avc:  denied  { relabelto } for  pid=3612 comm="syz.5.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  233.904745][ T3636] loop6: detected capacity change from 0 to 256
[  234.215614][ T3636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'.
[  234.277812][   T30] audit: type=1400 audit(1780071258.936:2735): avc:  denied  { unmount } for  pid=1924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  234.353970][ T3633] loop5: detected capacity change from 0 to 256
[  234.397208][ T3633] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  234.934567][ T3652] loop7: detected capacity change from 0 to 512
[  234.956106][ T3652] EXT4-fs (loop7): Ignoring removed bh option
[  235.024565][ T3648] loop6: detected capacity change from 0 to 128
[  235.043193][ T3652] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  235.082602][ T3652] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  235.159712][ T3648] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  235.192351][ T3648] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  235.437700][  T326] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  235.819739][  T326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  235.840460][  T326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  235.931146][ T3671] loop1: detected capacity change from 0 to 256
[  235.980291][ T3671] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  236.203273][ T3678] loop6: detected capacity change from 0 to 256
[  236.254629][ T3678] exfat: Deprecated parameter 'utf8'
[  236.260674][ T3678] exfat: Bad value for 'errors'
[  236.327903][  T326] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  236.368023][  T326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.381632][  T326] usb 8-1: Product: syz
[  236.390207][  T326] usb 8-1: Manufacturer: syz
[  237.290965][ T3695] loop5: detected capacity change from 0 to 256
[  237.324169][ T3695] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  237.458271][  T326] usb 8-1: SerialNumber: syz
[  237.478060][  T326] usb 8-1: config 0 descriptor??
[  237.519014][  T326] usb 8-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  237.743524][   T30] audit: type=1326 audit(1780071262.466:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  237.955829][   T30] audit: type=1326 audit(1780071262.496:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  237.980841][   T30] audit: type=1326 audit(1780071262.496:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  238.031436][   T30] audit: type=1326 audit(1780071262.496:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  238.083772][   T30] audit: type=1326 audit(1780071262.496:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  238.097708][ T2021] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  238.173757][   T30] audit: type=1326 audit(1780071262.496:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  238.226669][   T30] audit: type=1326 audit(1780071262.496:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  238.281864][   T30] audit: type=1326 audit(1780071262.496:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  238.307580][   T30] audit: type=1326 audit(1780071262.496:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  238.332643][   T30] audit: type=1326 audit(1780071262.496:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz.7.942" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe48331668e code=0x7ffc0000
[  238.416834][ T3652] EXT4-fs error (device loop7): ext4_do_update_inode:5260: inode #19: comm syz.7.942: corrupted inode contents
[  238.428859][ T2021] usb 7-1: Using ep0 maxpacket: 32
[  238.434552][ T3652] EXT4-fs error (device loop7): ext4_dirty_inode:6108: inode #19: comm syz.7.942: mark_inode_dirty error
[  238.455746][ T3652] EXT4-fs error (device loop7): ext4_do_update_inode:5260: inode #19: comm syz.7.942: corrupted inode contents
[  238.470340][ T3652] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #19: comm syz.7.942: mark_inode_dirty error
[  238.490948][ T3652] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #19: comm syz.7.942: mark inode dirty (error -117)
[  238.504142][ T3652] EXT4-fs warning (device loop7): ext4_evict_inode:305: xattr delete (err -117)
[  238.574665][ T3711] loop1: detected capacity change from 0 to 256
[  238.656877][ T3711] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  238.805095][  T326] usb 8-1: USB disconnect, device number 9
[  238.837813][ T2021] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 106, changing to 10
[  238.855354][ T2021] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57943, setting to 1024
[  239.189340][ T2650] udevd[2650]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  239.244932][ T2021] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  239.267682][ T2021] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  239.269439][ T3733] FAULT_INJECTION: forcing a failure.
[  239.269439][ T3733] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  239.276279][ T2021] usb 7-1: Product: syz
[  239.307875][ T2021] usb 7-1: can't set config #4, error -71
[  239.317571][ T2021] usb 7-1: USB disconnect, device number 15
[  239.349108][ T3734] mmap: syz.0.966 (3734) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  239.384350][ T3733] CPU: 0 PID: 3733 Comm: syz.6.965 Not tainted syzkaller #0
[  239.391706][ T3733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  239.402061][ T3733] Call Trace:
[  239.405452][ T3733]  <TASK>
[  239.408403][ T3733]  __dump_stack+0x21/0x30
[  239.412771][ T3733]  dump_stack_lvl+0x110/0x170
[  239.417487][ T3733]  ? show_regs_print_info+0x20/0x20
[  239.422712][ T3733]  ? __kernel_text_address+0xa0/0x100
[  239.428106][ T3733]  dump_stack+0x15/0x20
[  239.432289][ T3733]  should_fail+0x3c1/0x510
[  239.436819][ T3733]  should_fail_usercopy+0x1a/0x20
[  239.441880][ T3733]  _copy_from_user+0x20/0xd0
[  239.446505][ T3733]  __copy_msghdr_from_user+0xc9/0x630
[  239.451902][ T3733]  ? __stack_depot_save+0x34/0x480
[  239.457049][ T3733]  ? path_openat+0x280e/0x2f20
[  239.461841][ T3733]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[  239.467247][ T3733]  ? __kasan_slab_free+0x11/0x20
[  239.472329][ T3733]  ? slab_free_freelist_hook+0xc2/0x190
[  239.477900][ T3733]  ? kmem_cache_free+0x100/0x320
[  239.482991][ T3733]  ? putname+0x111/0x160
[  239.487265][ T3733]  ? do_sys_openat2+0x6df/0x7f0
[  239.492143][ T3733]  ___sys_sendmsg+0x19a/0x2e0
[  239.496957][ T3733]  ? _kstrtoull+0x3c0/0x4d0
[  239.501492][ T3733]  ? __sys_sendmsg+0x280/0x280
[  239.506379][ T3733]  __sys_sendmmsg+0x2ba/0x4e0
[  239.511102][ T3733]  ? __ia32_sys_sendmsg+0x2f0/0x2f0
[  239.516345][ T3733]  ? __ia32_sys_read+0x90/0x90
[  239.521152][ T3733]  __x64_sys_sendmmsg+0xa0/0xb0
[  239.526030][ T3733]  x64_sys_call+0x6c6/0x9a0
[  239.530561][ T3733]  do_syscall_64+0x4c/0xa0
[  239.535009][ T3733]  ? clear_bhb_loop+0x50/0xa0
[  239.539718][ T3733]  ? clear_bhb_loop+0x50/0xa0
[  239.544427][ T3733]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  239.550354][ T3733] RIP: 0033:0x7f13b6238e59
[  239.554796][ T3733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.574447][ T3733] RSP: 002b:00007f13b4c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  239.582888][ T3733] RAX: ffffffffffffffda RBX: 00007f13b64b1fa0 RCX: 00007f13b6238e59
[  239.590889][ T3733] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003
[  239.599065][ T3733] RBP: 00007f13b4c93090 R08: 0000000000000000 R09: 0000000000000000
[  239.607062][ T3733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.615064][ T3733] R13: 00007f13b64b2038 R14: 00007f13b64b1fa0 R15: 00007fff4ee30b58
[  239.623188][ T3733]  </TASK>
[  241.712824][ T3765] loop7: detected capacity change from 0 to 512
[  241.791850][ T3765] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  242.069041][ T3765] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.974: Invalid block bitmap block 0 in block_group 0
[  242.094324][ T3765] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  242.106301][ T3784] loop6: detected capacity change from 0 to 512
[  242.116693][ T3784] EXT4-fs (loop6): Unrecognized mount option "smackfstransmute=" or missing value
[  242.126039][ T3765] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.974: attempt to clear invalid blocks 983261 len 1
[  242.181312][ T3765] EXT4-fs error (device loop7): __ext4_get_inode_loc:4365: comm syz.7.974: Invalid inode table block 0 in block_group 0
[  242.196885][ T3765] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  242.223752][ T3765] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  242.300625][ T3784] loop6: detected capacity change from 0 to 1024
[  242.324370][ T3765] EXT4-fs error (device loop7): __ext4_get_inode_loc:4365: comm syz.7.974: Invalid inode table block 0 in block_group 0
[  242.338303][ T3765] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  242.349879][ T3765] EXT4-fs error (device loop7): ext4_truncate:4317: inode #11: comm syz.7.974: mark_inode_dirty error
[  242.361553][ T3765] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  242.371026][ T3765] EXT4-fs error (device loop7): __ext4_get_inode_loc:4365: comm syz.7.974: Invalid inode table block 0 in block_group 0
[  242.384277][ T3765] EXT4-fs (loop7): 1 truncate cleaned up
[  242.461647][ T3765] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  242.657848][ T3784] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  242.838506][ T3798] loop5: detected capacity change from 0 to 512
[  243.178950][ T3798] loop5: detected capacity change from 0 to 256
[  243.207068][ T3765] EXT4-fs (loop7): Ignoring removed bh option
[  243.238923][ T3798] FAT-fs (loop5): Directory bread(block 64) failed
[  243.267923][ T3765] EXT4-fs (loop7): changing journal_checksum during remount not supported; ignoring
[  243.283910][ T3798] FAT-fs (loop5): Directory bread(block 65) failed
[  243.295803][ T3798] FAT-fs (loop5): Directory bread(block 66) failed
[  243.300007][ T3802] loop1: detected capacity change from 0 to 128
[  243.302895][ T3798] FAT-fs (loop5): Directory bread(block 67) failed
[  243.315550][ T3798] FAT-fs (loop5): Directory bread(block 68) failed
[  243.336708][ T3798] FAT-fs (loop5): Directory bread(block 69) failed
[  243.343573][ T3798] FAT-fs (loop5): Directory bread(block 70) failed
[  243.350518][ T3798] FAT-fs (loop5): Directory bread(block 71) failed
[  243.357093][ T3798] FAT-fs (loop5): Directory bread(block 72) failed
[  243.377747][ T3798] FAT-fs (loop5): Directory bread(block 73) failed
[  243.401243][ T3798] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  243.453423][   T30] kauditd_printk_skb: 105 callbacks suppressed
[  243.453440][   T30] audit: type=1400 audit(1780071268.176:2851): avc:  denied  { create } for  pid=3807 comm="syz.6.988" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=dccp_socket permissive=1
[  243.527790][ T3811] tap0: tun_chr_ioctl cmd 1074025677
[  243.567720][ T3811] tap0: linktype set to 773
[  243.647139][ T3813] loop6: detected capacity change from 0 to 128
[  243.713144][ T3813] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none.
[  243.767830][   T20] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  243.775897][ T3813] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.913158][ T3825] loop7: detected capacity change from 0 to 256
[  243.998969][ T3825] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  244.311862][ T2021] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  244.320158][   T20] usb 6-1: device descriptor read/64, error -71
[  244.567777][ T2021] usb 1-1: Using ep0 maxpacket: 16
[  244.687814][ T2021] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  244.703933][ T2021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.257718][  T310] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  245.517716][  T310] usb 2-1: Using ep0 maxpacket: 32
[  245.637785][  T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.657705][  T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.695513][  T310] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  245.717161][ T3846] loop5: detected capacity change from 0 to 512
[  245.725165][  T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.748536][ T3846] EXT4-fs (loop5): Unrecognized mount option "smackfstransmute=" or missing value
[  245.767391][   T20] usb 6-1: device descriptor read/64, error -71
[  245.774852][ T2021] usb 1-1: config 0 descriptor??
[  245.780520][  T310] usb 2-1: config 0 descriptor??
[  245.819028][ T2021] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  245.873975][ T3846] loop5: detected capacity change from 0 to 1024
[  245.903800][ T3846] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  246.138558][ T3855] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  246.271382][  T310] savu 0003:1E7D:2D5A.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  246.287736][ T2021] usb 1-1: Detected FT8U232AM
[  246.294357][ T2021] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  246.308843][ T2021] usb 1-1: USB disconnect, device number 16
[  246.326585][ T2021] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  246.336394][ T2021] ftdi_sio 1-1:0.0: device disconnected
[  246.477747][ T3778] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum
[  246.623376][  T520] usb 2-1: USB disconnect, device number 12
[  246.639145][ T3863] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  247.062397][ T3879] set_capacity_and_notify: 2 callbacks suppressed
[  247.062415][ T3879] loop5: detected capacity change from 0 to 1024
[  247.108321][ T3879] EXT4-fs (loop5): Ignoring removed nobh option
[  247.114710][ T3879] EXT4-fs (loop5): Ignoring removed bh option
[  247.161811][ T3879] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  247.246904][ T3879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1008'.
[  247.450499][ T3892] loop1: detected capacity change from 0 to 256
[  247.550949][ T3892] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  247.963882][ T3905] loop6: detected capacity change from 0 to 256
[  248.315139][ T3905] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  248.825168][ T3927] loop6: detected capacity change from 0 to 256
[  248.981890][ T3927] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  249.248024][   T30] audit: type=1400 audit(1780071273.976:2852): avc:  denied  { connect } for  pid=3929 comm="syz.7.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  249.379745][ T3934] loop6: detected capacity change from 0 to 256
[  249.429464][ T3934] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  249.497960][   T30] audit: type=1326 audit(1780071274.226:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.6.1022" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  249.571126][   T30] audit: type=1326 audit(1780071274.256:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.6.1022" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  249.615974][  T305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  249.631812][ T3938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'.
[  249.649727][   T30] audit: type=1326 audit(1780071274.256:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.6.1022" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  249.677841][  T305] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  249.756075][   T30] audit: type=1326 audit(1780071274.256:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.6.1022" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  249.820506][   T30] audit: type=1326 audit(1780071274.256:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.6.1022" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  249.897836][   T30] audit: type=1326 audit(1780071274.256:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.6.1022" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  249.931738][   T30] audit: type=1326 audit(1780071274.256:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.6.1022" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  249.956854][   T30] audit: type=1326 audit(1780071274.256:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.6.1022" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  250.445778][ T3951] loop1: detected capacity change from 0 to 256
[  250.469593][   T30] audit: type=1326 audit(1780071274.256:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.6.1022" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b6238e59 code=0x7ffc0000
[  250.508636][ T3951] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  250.523187][ T3949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1026'.
[  250.597818][ T3945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1026'.
[  250.638120][ T3956] FAULT_INJECTION: forcing a failure.
[  250.638120][ T3956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.651966][ T3956] CPU: 0 PID: 3956 Comm: syz.7.1029 Not tainted syzkaller #0
[  250.659383][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  250.669460][ T3956] Call Trace:
[  250.672760][ T3956]  <TASK>
[  250.675711][ T3956]  __dump_stack+0x21/0x30
[  250.680169][ T3956]  dump_stack_lvl+0x110/0x170
[  250.684886][ T3956]  ? show_regs_print_info+0x20/0x20
[  250.690125][ T3956]  ? hrtimer_start_range_ns+0xac6/0xc00
[  250.695750][ T3956]  dump_stack+0x15/0x20
[  250.699936][ T3956]  should_fail+0x3c1/0x510
[  250.704451][ T3956]  should_fail_usercopy+0x1a/0x20
[  250.709676][ T3956]  copy_fpstate_to_sigframe+0x723/0xa30
[  250.715343][ T3956]  ? fpregs_set+0x5a0/0x5a0
[  250.719878][ T3956]  ? get_signal+0x13da/0x1480
[  250.724593][ T3956]  ? fpu__alloc_mathframe+0x88/0x150
[  250.729999][ T3956]  arch_do_signal_or_restart+0x613/0x11c0
[  250.735770][ T3956]  ? load_gs_index+0xc0/0xc0
[  250.740385][ T3956]  ? get_sigframe_size+0x10/0x10
[  250.745346][ T3956]  ? __kasan_check_read+0x11/0x20
[  250.750390][ T3956]  ? __fdget_pos+0x2d9/0x380
[  250.755007][ T3956]  ? __ia32_sys_read+0x90/0x90
[  250.759790][ T3956]  exit_to_user_mode_loop+0xa7/0xe0
[  250.765030][ T3956]  exit_to_user_mode_prepare+0x87/0xd0
[  250.770484][ T3956]  syscall_exit_to_user_mode+0x1a/0x30
[  250.775963][ T3956]  do_syscall_64+0x58/0xa0
[  250.780371][ T3956]  ? clear_bhb_loop+0x50/0xa0
[  250.785048][ T3956]  ? clear_bhb_loop+0x50/0xa0
[  250.789713][ T3956]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  250.795600][ T3956] RIP: 0033:0x7fe48331668e
[  250.800039][ T3956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  250.819647][ T3956] RSP: 002b:00007fe481daffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  250.828050][ T3956] RAX: 0000000000000001 RBX: 00007fe481db06c0 RCX: 00007fe48331668e
[  250.836010][ T3956] RDX: 0000000000000001 RSI: 00007fe481db0090 RDI: 0000000000000004
[  250.844140][ T3956] RBP: 00007fe481db0090 R08: 0000000000000000 R09: 0000000000000000
[  250.852212][ T3956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.860183][ T3956] R13: 00007fe4835cf038 R14: 00007fe4835cefa0 R15: 00007ffd836601f8
[  250.868149][ T3956]  </TASK>
[  251.760832][ T3971] loop7: detected capacity change from 0 to 256
[  251.806014][ T3971] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  252.447758][  T305] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  252.828002][  T305] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.888636][  T305] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.902257][ T3986] xt_hashlimit: size too large, truncated to 1048576
[  253.279660][ T4009] loop6: detected capacity change from 0 to 256
[  253.598020][  T305] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  253.612764][ T4009] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  253.836663][  T305] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.844973][  T305] usb 8-1: Product: syz
[  253.849439][  T305] usb 8-1: Manufacturer: syz
[  253.854055][  T305] usb 8-1: SerialNumber: syz
[  253.912917][ T4020] tap0: tun_chr_ioctl cmd 2147767517
[  253.925477][ T4024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'.
[  254.067753][   T20] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  254.103219][ T3987] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1040'.
[  254.119864][ T3987] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1040'.
[  254.139722][ T3987] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1040'.
[  254.302676][ T3987] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1040'.
[  254.425943][ T3987] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1040'.
[  254.490677][ T3987] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1040'.
[  254.500086][ T3987] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1040'.
[  254.511477][ T3987] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1040'.
[  254.522055][ T3987] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1040'.
[  254.597772][  T305] usb 8-1: cannot find UAC_HEADER
[  254.603073][  T305] snd-usb-audio: probe of 8-1:1.0 failed with error -22
[  254.784788][ T4053] loop6: detected capacity change from 0 to 512
[  254.797919][   T20] usb 2-1: unable to get BOS descriptor or descriptor too short
[  254.807843][  T520] usb 8-1: USB disconnect, device number 10
[  255.144496][ T4053] EXT4-fs (loop6): Ignoring removed bh option
[  255.186276][   T20] usb 2-1: not running at top speed; connect to a high speed hub
[  255.224187][ T4053] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  255.237380][ T4053] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  255.267772][   T20] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  255.322649][ T3987] syz.7.1040 (3987) used greatest stack depth: 20576 bytes left
[  255.427709][  T310] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  256.172095][   T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  256.181437][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.257730][ T1518] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  256.277709][  T310] usb 6-1: Using ep0 maxpacket: 16
[  256.298096][   T20] usb 2-1: Product: syz
[  256.302822][   T20] usb 2-1: Manufacturer: syz
[  256.307613][   T20] usb 2-1: SerialNumber: syz
[  256.337729][   T20] usb 2-1: can't set config #1, error -71
[  256.352000][   T20] usb 2-1: USB disconnect, device number 13
[  256.407760][  T310] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.617735][  T310] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  256.617747][ T1518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  256.617774][ T1518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  256.637966][  T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.689953][  T310] usb 6-1: Product: syz
[  256.703950][  T310] usb 6-1: Manufacturer: syz
[  256.718547][  T310] usb 6-1: SerialNumber: syz
[  256.804995][  T310] usb 6-1: config 0 descriptor??
[  256.997770][ T1518] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  257.245873][ T4097] loop1: detected capacity change from 0 to 256
[  257.437532][ T1518] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.442637][ T4097] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  257.810102][ T1518] usb 7-1: Product: syz
[  257.814332][ T1518] usb 7-1: Manufacturer: syz
[  257.819029][ T1518] usb 7-1: SerialNumber: syz
[  257.842653][ T4056] UDC core: couldn't find an available UDC or it's busy: -16
[  257.861661][ T4056] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  257.867575][ T1518] usb 7-1: config 0 descriptor??
[  257.897775][ T1518] usb 7-1: can't set config #0, error -71
[  257.905032][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  257.905048][   T30] audit: type=1400 audit(1780071282.626:2872): avc:  denied  { setcurrent } for  pid=4104 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  257.939057][  T925] usb 6-1: USB disconnect, device number 14
[  257.943934][ T4107] loop6: detected capacity change from 0 to 512
[  257.988261][   T30] audit: type=1401 audit(1780071282.666:2873): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  257.988616][ T1518] usb 7-1: USB disconnect, device number 16
[  258.019313][ T4107] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  258.030417][ T4107] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  258.079640][ T4107] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3894: comm syz.6.1072: Allocating blocks 41-42 which overlap fs metadata
[  258.094161][ T4107] Quota error (device loop6): write_blk: dquota write failed
[  258.102443][ T4107] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  258.112254][ T4107] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3894: comm syz.6.1072: Allocating blocks 41-42 which overlap fs metadata
[  258.126519][ T4107] Quota error (device loop6): write_blk: dquota write failed
[  258.134613][ T4107] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  258.145517][ T4107] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.1072: Failed to acquire dquot type 1
[  258.157211][ T4107] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  258.172216][ T4107] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #12: comm syz.6.1072: corrupted inode contents
[  258.184703][ T4107] EXT4-fs error (device loop6): ext4_dirty_inode:6108: inode #12: comm syz.6.1072: mark_inode_dirty error
[  258.199402][ T4107] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #12: comm syz.6.1072: corrupted inode contents
[  258.211688][ T4107] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #12: comm syz.6.1072: mark_inode_dirty error
[  258.223629][ T4107] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #12: comm syz.6.1072: corrupted inode contents
[  258.237307][ T4107] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  258.246309][ T4107] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #12: comm syz.6.1072: corrupted inode contents
[  258.266837][ T4107] EXT4-fs error (device loop6): ext4_truncate:4317: inode #12: comm syz.6.1072: mark_inode_dirty error
[  258.267710][  T310] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  258.278387][ T4107] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  258.295238][ T4107] EXT4-fs (loop6): 1 truncate cleaned up
[  258.301176][ T4107] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,mblk_io_submit,data_err=ignore,noinit_itable,min_batch_time=0x0000000000000003,max_batch_time=0x0000000000000007,max_dir_size_kb=0x0000000000000006,barrier=0x000000000,errors=continue. Quota mode: writeback.
[  258.747798][  T310] usb 2-1: unable to get BOS descriptor or descriptor too short
[  258.769968][ T4129] loop7: detected capacity change from 0 to 128
[  258.857730][  T310] usb 2-1: not running at top speed; connect to a high speed hub
[  258.957790][  T310] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  258.971079][  T310] usb 2-1: config 1 interface 0 has no altsetting 0
[  259.447100][ T4131] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3894: comm syz.6.1072: Allocating blocks 41-42 which overlap fs metadata
[  259.461579][ T4131] Quota error (device loop6): write_blk: dquota write failed
[  259.461643][ T4131] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  259.479584][ T4131] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.1072: Failed to acquire dquot type 1
[  259.577934][   T30] audit: type=1400 audit(1780071284.306:2874): avc:  denied  { bind } for  pid=4140 comm="syz.5.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  259.587790][  T310] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  259.657551][  T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.677697][  T310] usb 2-1: Product: syz
[  259.681984][  T310] usb 2-1: Manufacturer: syz
[  259.686627][  T310] usb 2-1: SerialNumber: syz
[  259.923078][ T4151] loop7: detected capacity change from 0 to 256
[  260.162757][ T4151] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  260.250586][  T310] usb 2-1: bad CDC descriptors
[  260.339287][  T310] usb 2-1: USB disconnect, device number 14
[  260.389988][   T30] audit: type=1400 audit(1780071285.116:2875): avc:  denied  { lock } for  pid=4153 comm="syz.0.1086" path="socket:[34228]" dev="sockfs" ino=34228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  261.780661][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  261.787956][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  262.367590][ T4197] __nla_validate_parse: 2 callbacks suppressed
[  262.367609][ T4197] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1098'.
[  262.469248][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  262.565064][ T1480] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  262.612921][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  262.667846][ T4205] SELinux:  Context ›Y7»ôj is not valid (left unmapped).
[  262.702403][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  262.720750][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  262.762026][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  262.800894][ T4216] loop6: detected capacity change from 0 to 256
[  262.890790][ T4216] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  262.927835][ T1480] usb 1-1: Using ep0 maxpacket: 16
[  262.995473][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  263.072666][ T1480] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.098872][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  263.107286][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  263.113345][ T1480] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  263.458391][ T1480] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  263.526408][ T1480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.609797][ T1480] usb 1-1: Product: syz
[  263.614064][ T1480] usb 1-1: Manufacturer: syz
[  263.618998][ T1480] usb 1-1: SerialNumber: syz
[  264.117786][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  264.117827][   T30] audit: type=1400 audit(1780071288.816:2877): avc:  denied  { create } for  pid=4182 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  269.897847][ T1480] usb 1-1: 0:2 : does not exist
[  269.947754][ T1480] usb 1-1: USB disconnect, device number 17
[  270.148135][ T2021] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  270.357683][ T1480] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  270.415156][ T4265] loop6: detected capacity change from 0 to 256
[  270.504599][ T4265] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  270.597727][ T1480] usb 1-1: Using ep0 maxpacket: 16
[  270.697696][ T2021] usb 6-1: Using ep0 maxpacket: 32
[  270.717741][ T1480] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  270.737686][ T1480] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  270.827831][ T2021] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 72, changing to 7
[  270.948035][ T1480] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  270.998628][ T1480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.044049][ T1480] usb 1-1: Product: syz
[  271.066955][ T1480] usb 1-1: Manufacturer: syz
[  271.097467][ T1480] usb 1-1: SerialNumber: syz
[  271.137546][ T4273] loop7: detected capacity change from 0 to 512
[  271.239575][ T4273] EXT4-fs (loop7): Ignoring removed bh option
[  271.259746][ T4273] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  271.272911][ T4273] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  271.287793][ T2021] usb 6-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice=96.40
[  271.298303][ T2021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.306335][ T2021] usb 6-1: Product: syz
[  271.317792][ T2021] usb 6-1: Manufacturer: syz
[  271.322548][ T2021] usb 6-1: SerialNumber: syz
[  271.432940][   T30] audit: type=1401 audit(1780071296.156:2878): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  271.460714][   T30] audit: type=1400 audit(1780071296.186:2879): avc:  denied  { write } for  pid=4283 comm="syz.1.1123" path="socket:[34505]" dev="sockfs" ino=34505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  271.484704][ T4284] loop1: detected capacity change from 0 to 512
[  271.517837][ T1480] usb 1-1: 0:2 : does not exist
[  271.518336][ T4284] EXT4-fs (loop1): Ignoring removed bh option
[  271.530155][ T1480] usb 1-1: USB disconnect, device number 18
[  271.548238][ T4284] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  271.559946][ T4284] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  271.570395][ T4284] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1123: Corrupt directory, running e2fsck is recommended
[  271.583532][  T520] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  271.584204][ T4284] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  271.599382][ T4284] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #15: comm syz.1.1123: corrupted in-inode xattr
[  271.611633][ T4284] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1123: couldn't read orphan inode 15 (err -117)
[  271.623810][ T4284] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,commit=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,bh,grpid,,,errors=continue. Quota mode: writeback.
[  271.808310][ T2667] udevd[2667]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  271.998110][  T520] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  272.109962][  T520] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  272.198015][ T2021] snd-usb-audio: probe of 6-1:1.0 failed with error -2
[  272.260629][ T2021] snd-usb-audio: probe of 6-1:1.1 failed with error -2
[  272.317859][ T2021] snd-usb-audio: probe of 6-1:1.2 failed with error -2
[  272.325724][ T2021] usb 6-1: USB disconnect, device number 15
[  272.735317][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  272.763501][ T4304] loop1: detected capacity change from 0 to 256
[  272.828421][ T4304] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  272.938230][  T520] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  272.957928][  T520] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.966223][  T520] usb 8-1: Product: syz
[  272.970829][  T520] usb 8-1: Manufacturer: syz
[  272.975443][  T520] usb 8-1: SerialNumber: syz
[  272.981159][  T520] usb 8-1: config 0 descriptor??
[  273.105005][  T520] usb 8-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  273.108656][ T4311] tipc: Started in network mode
[  273.118629][ T4311] tipc: Node identity , cluster identity 4711
[  273.144289][ T4315] loop1: detected capacity change from 0 to 512
[  273.168008][  T326] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  273.176611][ T4315] EXT4-fs (loop1): Ignoring removed bh option
[  273.199221][ T4315] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  273.213479][ T4315] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  273.227056][   T30] audit: type=1326 audit(1780071297.956:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.7.1120" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  273.256847][   T30] audit: type=1326 audit(1780071297.966:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.7.1120" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  273.285811][   T30] audit: type=1326 audit(1780071297.976:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.7.1120" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  273.311003][   T30] audit: type=1326 audit(1780071297.976:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.7.1120" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  273.336748][   T30] audit: type=1326 audit(1780071297.976:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.7.1120" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  273.362569][   T30] audit: type=1326 audit(1780071297.976:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.7.1120" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  273.388087][   T30] audit: type=1326 audit(1780071297.976:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.7.1120" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  273.413707][   T30] audit: type=1326 audit(1780071297.976:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.7.1120" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  273.497053][  T520] usb 8-1: USB disconnect, device number 11
[  273.517719][ T1480] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  273.587876][  T326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.599240][  T326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.609074][  T326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  273.622273][  T326] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  273.631434][  T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.652920][  T326] usb 1-1: config 0 descriptor??
[  273.973719][ T1480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  273.983492][ T1480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  274.147771][ T1480] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  274.157083][ T1480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.165320][ T1480] usb 2-1: Product: syz
[  274.169687][ T1480] usb 2-1: Manufacturer: syz
[  274.174291][ T1480] usb 2-1: SerialNumber: syz
[  274.183588][ T1480] usb 2-1: config 0 descriptor??
[  274.228771][  T326] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  274.235111][ T1480] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  274.240778][  T326] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  274.246511][ T4324] FAULT_INJECTION: forcing a failure.
[  274.246511][ T4324] name failslab, interval 1, probability 0, space 0, times 0
[  274.273161][ T4324] CPU: 0 PID: 4324 Comm: syz.6.1137 Not tainted syzkaller #0
[  274.280694][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  274.287705][  T992] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  274.290769][ T4324] Call Trace:
[  274.290780][ T4324]  <TASK>
[  274.304522][ T4324]  __dump_stack+0x21/0x30
[  274.308884][ T4324]  dump_stack_lvl+0x110/0x170
[  274.313572][ T4324]  ? show_regs_print_info+0x20/0x20
[  274.318863][ T4324]  ? __local_bh_enable_ip+0x58/0x80
[  274.324052][ T4324]  ? _raw_spin_unlock_bh+0x51/0x60
[  274.329160][ T4324]  dump_stack+0x15/0x20
[  274.333370][ T4324]  should_fail+0x3c1/0x510
[  274.337813][ T4324]  __should_failslab+0xa4/0xe0
[  274.342596][ T4324]  should_failslab+0x9/0x20
[  274.347096][ T4324]  slab_pre_alloc_hook+0x3b/0xe0
[  274.352056][ T4324]  ? __alloc_skb+0xe0/0x740
[  274.356556][ T4324]  kmem_cache_alloc+0x44/0x260
[  274.361391][ T4324]  __alloc_skb+0xe0/0x740
[  274.365745][ T4324]  netlink_sendmsg+0x611/0xb80
[  274.370519][ T4324]  ? netlink_getsockopt+0x530/0x530
[  274.375813][ T4324]  ? kasan_set_track+0x4a/0x70
[  274.380576][ T4324]  ? security_socket_sendmsg+0x82/0xa0
[  274.386025][ T4324]  ? netlink_getsockopt+0x530/0x530
[  274.391559][ T4324]  ____sys_sendmsg+0x5b7/0x8f0
[  274.396346][ T4324]  ? __sys_sendmsg_sock+0x40/0x40
[  274.401359][ T4324]  ? import_iovec+0x7c/0xb0
[  274.405874][ T4324]  ___sys_sendmsg+0x236/0x2e0
[  274.410562][ T4324]  ? __sys_sendmsg+0x280/0x280
[  274.415360][ T4324]  ? __fdget+0x1a1/0x230
[  274.419637][ T4324]  __x64_sys_sendmsg+0x206/0x2f0
[  274.424607][ T4324]  ? ___sys_sendmsg+0x2e0/0x2e0
[  274.429483][ T4324]  ? ksys_write+0x1f4/0x250
[  274.434014][ T4324]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  274.440122][ T4324]  x64_sys_call+0x4b/0x9a0
[  274.444555][ T4324]  do_syscall_64+0x4c/0xa0
[  274.448981][ T4324]  ? clear_bhb_loop+0x50/0xa0
[  274.453664][ T4324]  ? clear_bhb_loop+0x50/0xa0
[  274.458355][ T4324]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  274.464248][ T4324] RIP: 0033:0x7f13b6238e59
[  274.468657][ T4324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.488265][ T4324] RSP: 002b:00007f13b4c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  274.496807][ T4324] RAX: ffffffffffffffda RBX: 00007f13b64b1fa0 RCX: 00007f13b6238e59
[  274.504822][ T4324] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  274.512803][ T4324] RBP: 00007f13b4c93090 R08: 0000000000000000 R09: 0000000000000000
[  274.520777][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.528785][ T4324] R13: 00007f13b64b2038 R14: 00007f13b64b1fa0 R15: 00007fff4ee30b58
[  274.536853][ T4324]  </TASK>
[  274.586426][ T4331] loop7: detected capacity change from 0 to 512
[  274.606594][ T4331] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.1136: missing EA_INODE flag
[  274.630290][ T4331] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1136: error while reading EA inode 2 err=-117
[  274.668884][ T4331] EXT4-fs (loop7): 1 orphan inode deleted
[  274.676600][ T4315] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #19: comm syz.1.1132: corrupted inode contents
[  274.678346][ T4331] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  274.701393][ T4315] EXT4-fs error (device loop1): ext4_dirty_inode:6108: inode #19: comm syz.1.1132: mark_inode_dirty error
[  274.727845][  T992] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.731634][ T4315] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #19: comm syz.1.1132: corrupted inode contents
[  274.760029][ T4315] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #19: comm syz.1.1132: mark_inode_dirty error
[  274.773142][ T4315] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #19: comm syz.1.1132: mark inode dirty (error -117)
[  274.786618][ T4315] EXT4-fs warning (device loop1): ext4_evict_inode:305: xattr delete (err -117)
[  274.833046][ T1480] usb 2-1: USB disconnect, device number 15
[  274.844834][ T2650] udevd[2650]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  274.978171][  T992] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  274.991840][  T992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.001026][  T992] usb 6-1: Product: syz
[  275.005274][  T992] usb 6-1: Manufacturer: syz
[  275.026397][  T992] usb 6-1: SerialNumber: syz
[  275.315846][  T925] usb 1-1: USB disconnect, device number 19
[  275.331954][ T4346] loop7: detected capacity change from 0 to 256
[  275.430960][ T4346] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  275.756591][ T4359] loop6: detected capacity change from 0 to 4096
[  275.805641][ T4359] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  275.979189][ T4322] UDC core: couldn't find an available UDC or it's busy: -16
[  275.987323][ T4322] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  275.987674][  T925] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  276.019499][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1148'.
[  276.029365][ T4359] IPv6: Can't replace route, no match found
[  276.247925][  T925] usb 1-1: Using ep0 maxpacket: 32
[  276.247978][  T992] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  276.259979][  T992] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  276.268510][  T992] cdc_ncm 6-1:1.0: setting rx_max = 2048
[  276.387774][  T925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.567927][  T925] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  276.917693][  T326] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  277.049978][  T992] cdc_ncm 6-1:1.0: setting tx_max = 88
[  277.057278][  T992] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42
[  277.067456][  T925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.075865][  T925] usb 1-1: Product: syz
[  277.081871][  T925] usb 1-1: Manufacturer: syz
[  277.086546][  T925] usb 1-1: SerialNumber: syz
[  277.095047][   T30] kauditd_printk_skb: 112 callbacks suppressed
[  277.095063][   T30] audit: type=1400 audit(1780071301.826:3000): avc:  denied  { read } for  pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  277.124560][  T992] usb 6-1: USB disconnect, device number 16
[  277.130878][  T992] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM
[  277.139879][ T4370] loop7: detected capacity change from 0 to 4096
[  277.140229][  T925] usb 1-1: config 0 descriptor??
[  277.155090][   T30] audit: type=1400 audit(1780071301.826:3001): avc:  denied  { search } for  pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  277.176721][   T30] audit: type=1400 audit(1780071301.826:3002): avc:  denied  { read } for  pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=10248 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  277.199377][  T925] usb 1-1: bad CDC descriptors
[  277.204488][  T925] usb 1-1: unsupported MDLM descriptors
[  277.207724][  T326] usb 2-1: Using ep0 maxpacket: 8
[  277.214931][   T30] audit: type=1400 audit(1780071301.826:3003): avc:  denied  { open } for  pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=10248 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  277.239263][ T4370] EXT4-fs (loop7): dax option not supported
[  277.296567][   T30] audit: type=1400 audit(1780071301.826:3004): avc:  denied  { getattr } for  pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=10248 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  277.357735][  T326] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11
[  277.367481][   T30] audit: type=1400 audit(1780071301.886:3005): avc:  denied  { read } for  pid=4374 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  277.389590][ T4396] loop5: detected capacity change from 0 to 128
[  277.405688][  T326] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  277.446964][   T30] audit: type=1400 audit(1780071301.886:3006): avc:  denied  { open } for  pid=4374 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  277.448485][  T326] usb 2-1: config 0 interface 0 has no altsetting 0
[  277.480320][  T326] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  277.490597][  T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.501682][ T2021] usb 1-1: USB disconnect, device number 20
[  277.509595][   T30] audit: type=1400 audit(1780071301.886:3007): avc:  denied  { getattr } for  pid=4374 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  277.544116][ T4396] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  277.555887][  T326] usb 2-1: config 0 descriptor??
[  277.569981][   T30] audit: type=1400 audit(1780071301.946:3008): avc:  denied  { write } for  pid=4373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=485 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  277.663897][   T30] audit: type=1400 audit(1780071301.946:3009): avc:  denied  { add_name } for  pid=4373 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  277.954118][ T4370] loop7: detected capacity change from 0 to 40427
[  277.965716][ T4370] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  277.988158][ T4370] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  278.011899][ T4370] F2FS-fs (loop7): invalid crc value
[  278.254234][ T4370] F2FS-fs (loop7): Found nat_bits in checkpoint
[  278.256229][ T4368] device veth0_vlan left promiscuous mode
[  278.355902][ T4432] loop5: detected capacity change from 0 to 256
[  278.387078][ T4368] device veth0_vlan entered promiscuous mode
[  278.662851][ T4432] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  278.708665][ T4368] device veth1_macvtap left promiscuous mode
[  278.715394][ T4368] device veth1_macvtap entered promiscuous mode
[  278.725459][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  278.733355][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  278.742260][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  278.747817][ T4368] syz.1.1149 (4368) used greatest stack depth: 20480 bytes left
[  278.751539][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.765253][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.772908][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  278.781644][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  278.789965][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.797114][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.804708][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  278.813291][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  278.821610][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  278.830220][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  278.840312][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  278.848729][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  278.856862][ T4370] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  278.856954][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  278.872401][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  278.881332][ T4370] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  278.881729][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  278.897437][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  278.906137][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  278.914983][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  278.923639][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  278.936997][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  278.945355][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  278.971260][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  278.973889][ T4370] attempt to access beyond end of device
[  278.973889][ T4370] loop7: rw=10241, want=45104, limit=40427
[  278.981955][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  278.999530][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  279.008264][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  279.016659][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  279.025017][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  279.033930][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  279.041905][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  279.083978][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.0: link becomes ready
[  279.103592][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  279.128178][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  279.146866][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  279.170256][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  279.317738][  T326] usbhid 2-1:0.0: can't add hid device: -71
[  279.323875][  T326] usbhid: probe of 2-1:0.0 failed with error -71
[  279.361094][  T326] usb 2-1: USB disconnect, device number 16
[  279.386376][ T4450] kvm [4449]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  279.406902][ T4450] kvm [4449]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  279.418782][ T4450] kvm [4449]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  279.430086][ T4450] kvm [4449]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  279.460428][ T4450] kvm [4449]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  279.467684][ T1480] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  279.480608][ T4462] loop1: detected capacity change from 0 to 512
[  279.498011][ T4450] kvm [4449]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  279.520070][ T4450] kvm [4449]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  279.556432][ T4450] kvm [4449]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  279.575414][ T4462] EXT4-fs (loop1): Ignoring removed bh option
[  280.692582][ T4450] kvm [4449]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  280.730756][ T4462] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  280.744148][ T4462] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  280.917763][ T1480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.929312][ T1480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.939589][ T1480] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  280.953189][ T1480] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  280.962329][ T1480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.989593][ T4475] loop5: detected capacity change from 0 to 256
[  281.012309][ T1480] usb 1-1: config 0 descriptor??
[  281.037707][  T925] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  281.093158][ T4475] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  281.812147][ T4481] loop7: detected capacity change from 0 to 256
[  282.512730][ T4483] loop5: detected capacity change from 0 to 256
[  282.542188][ T1480] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  282.552903][ T1480] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  282.632977][ T4483] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  282.645078][ T4481] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  282.677715][  T925] usb 2-1: unable to read config index 0 descriptor/start: -71
[  282.687404][  T925] usb 2-1: can't read configurations, error -71
[  282.975374][ T4490] loop6: detected capacity change from 0 to 256
[  283.030776][ T4490] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  283.050152][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'.
[  283.112266][ T4457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  283.119646][ T4457] IPv6: NLM_F_CREATE should be set when creating new route
[  283.142873][ T4457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  283.150155][ T4457] IPv6: NLM_F_CREATE should be set when creating new route
[  283.255620][ T4496] loop1: detected capacity change from 0 to 256
[  283.357452][ T4496] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  283.706755][ T4502] loop6: detected capacity change from 0 to 128
[  283.720910][ T4494] loop7: detected capacity change from 0 to 40427
[  283.778198][ T4494] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  283.784857][ T4494] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  283.805946][ T4502] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  283.818557][ T4502] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  283.845280][ T4494] F2FS-fs (loop7): Found nat_bits in checkpoint
[  283.869519][ T4502] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)"
[  283.978239][ T4494] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  283.998287][ T4494] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  284.164594][ T4517] overlayfs: missing 'lowerdir'
[  284.204478][ T1518] usb 1-1: USB disconnect, device number 21
[  284.231616][ T1924] attempt to access beyond end of device
[  284.231616][ T1924] loop7: rw=2049, want=45112, limit=40427
[  284.455423][ T4523] loop5: detected capacity change from 0 to 1024
[  284.477663][  T925] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  284.503843][ T4528] loop7: detected capacity change from 0 to 512
[  284.548396][ T4528] EXT4-fs (loop7): Ignoring removed bh option
[  284.554967][ T4523] EXT4-fs (loop5): Ignoring removed nobh option
[  284.565339][ T4523] EXT4-fs (loop5): Ignoring removed bh option
[  284.604351][ T4528] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  284.618107][ T4523] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  284.666809][ T4528] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.717664][  T925] usb 7-1: Using ep0 maxpacket: 16
[  284.725028][ T4504] loop1: detected capacity change from 0 to 131072
[  284.777489][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'.
[  284.788866][ T4504] F2FS-fs (loop1): invalid crc value
[  284.795025][ T4504] F2FS-fs (loop1): invalid crc value
[  284.816066][ T4504] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  284.837965][  T925] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.874248][  T925] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.924352][  T925] usb 7-1: config 0 interface 0 has no altsetting 0
[  284.949566][  T925] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  284.968476][  T925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.993510][  T925] usb 7-1: config 0 descriptor??
[  285.157687][  T520] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  285.560971][  T925] usbhid 7-1:0.0: can't add hid device: -71
[  285.561012][  T520] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  285.577263][  T520] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  285.608391][ T4541] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  285.773048][  T925] usbhid: probe of 7-1:0.0 failed with error -71
[  285.798206][  T925] usb 7-1: USB disconnect, device number 17
[  285.898930][  T520] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  285.908183][  T520] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.916196][  T520] usb 8-1: Product: syz
[  285.938020][  T520] usb 8-1: Manufacturer: syz
[  285.942719][  T520] usb 8-1: SerialNumber: syz
[  285.971478][  T520] usb 8-1: config 0 descriptor??
[  286.038725][  T520] usb 8-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  286.210367][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  286.210384][   T30] audit: type=1326 audit(1780071310.936:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  286.278534][ T4528] EXT4-fs error (device loop7): ext4_do_update_inode:5260: inode #19: comm syz.7.1183: corrupted inode contents
[  286.308298][ T4528] EXT4-fs error (device loop7): ext4_dirty_inode:6108: inode #19: comm syz.7.1183: mark_inode_dirty error
[  286.333630][   T30] audit: type=1326 audit(1780071310.936:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  286.374179][ T4528] EXT4-fs error (device loop7): ext4_do_update_inode:5260: inode #19: comm syz.7.1183: corrupted inode contents
[  286.427371][ T4528] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #19: comm syz.7.1183: mark_inode_dirty error
[  286.457823][   T30] audit: type=1326 audit(1780071310.966:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  286.497818][ T4528] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #19: comm syz.7.1183: mark inode dirty (error -117)
[  286.525657][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  286.544906][ T4528] EXT4-fs warning (device loop7): ext4_evict_inode:305: xattr delete (err -117)
[  286.559062][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  286.577701][   T30] audit: type=1326 audit(1780071310.966:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  286.606996][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  286.629942][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  286.644335][   T30] audit: type=1326 audit(1780071310.966:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  286.682997][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  286.709745][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  286.722359][   T30] audit: type=1326 audit(1780071310.966:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  286.751273][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  286.768859][   T30] audit: type=1326 audit(1780071310.966:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  286.800809][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  286.821549][   T30] audit: type=1326 audit(1780071310.966:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  286.850116][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  286.873022][   T30] audit: type=1326 audit(1780071310.966:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483355e59 code=0x7ffc0000
[  286.899802][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  286.923714][   T30] audit: type=1326 audit(1780071310.966:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.7.1183" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe48331668e code=0x7ffc0000
[  286.949165][ T4549] kvm [4548]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111
[  287.296938][ T4557] set_capacity_and_notify: 1 callbacks suppressed
[  287.296956][ T4557] loop6: detected capacity change from 0 to 512
[  287.364555][ T4557] EXT4-fs (loop6): Ignoring removed bh option
[  287.380436][  T520] usb 8-1: USB disconnect, device number 12
[  287.399594][ T4557] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  287.433143][ T4557] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  288.077758][ T1518] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  288.457744][ T1518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  288.471981][ T1518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  288.550690][ T4582] loop1: detected capacity change from 0 to 256
[  288.696794][ T4582] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  288.850804][ T4585] loop7: detected capacity change from 0 to 512
[  288.877087][ T4585] EXT4-fs (loop7): Ignoring removed oldalloc option
[  288.884532][ T4585] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  288.961341][ T4585] EXT4-fs (loop7): 1 truncate cleaned up
[  288.967221][ T4585] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,errors=continue,inode_readahead_blks=0x0000000000080000,stripe=0x00000000000000c0,sysvgroups,oldalloc,,errors=continue. Quota mode: none.
[  289.007755][ T1518] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  289.029673][ T1518] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.038407][ T1518] usb 7-1: Product: syz
[  289.042623][ T1518] usb 7-1: Manufacturer: syz
[  289.062223][ T1518] usb 7-1: SerialNumber: syz
[  289.072212][ T1518] usb 7-1: config 0 descriptor??
[  289.120534][ T1518] usb 7-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  289.347671][ T2021] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  289.385027][ T4557] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #19: comm syz.6.1190: corrupted inode contents
[  289.397375][ T4557] EXT4-fs error (device loop6): ext4_dirty_inode:6108: inode #19: comm syz.6.1190: mark_inode_dirty error
[  289.409345][ T4557] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #19: comm syz.6.1190: corrupted inode contents
[  289.421691][ T4557] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #19: comm syz.6.1190: mark_inode_dirty error
[  289.447636][  T326] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  289.455684][ T4557] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #19: comm syz.6.1190: mark inode dirty (error -117)
[  289.469216][ T4557] EXT4-fs warning (device loop6): ext4_evict_inode:305: xattr delete (err -117)
[  289.515082][ T1518] usb 7-1: USB disconnect, device number 18
[  289.607810][ T2021] usb 8-1: Using ep0 maxpacket: 8
[  289.727817][ T2021] usb 8-1: config 0 has an invalid interface number: 31 but max is 0
[  289.750428][ T2021] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  289.761114][ T2021] usb 8-1: config 0 has no interface number 0
[  289.827828][  T326] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  289.836727][  T326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.847447][  T326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  289.858036][  T326] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  290.937788][ T2021] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  290.947035][ T2021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.957361][ T2021] usb 8-1: Product: syz
[  290.961752][ T2021] usb 8-1: Manufacturer: syz
[  290.966405][ T2021] usb 8-1: SerialNumber: syz
[  290.975901][ T2021] usb 8-1: config 0 descriptor??
[  291.027775][  T326] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  291.037018][  T326] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  291.046998][  T326] usb 2-1: Product: syz
[  291.051532][  T326] usb 2-1: Manufacturer: syz
[  291.100058][  T326] cdc_wdm 2-1:1.0: invalid descriptor buffer length
[  291.106722][  T326] cdc_wdm: probe of 2-1:1.0 failed with error -22
[  291.227820][ T2021] usb 8-1: Found UVC 0.04 device syz (046d:08c3)
[  291.234345][ T2021] usb 8-1: No valid video chain found.
[  291.301266][  T326] usb 2-1: USB disconnect, device number 19
[  292.534119][  T520] usb 8-1: USB disconnect, device number 13
[  293.449622][ T4632] loop7: detected capacity change from 0 to 256
[  293.735118][ T4632] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  293.828134][ T4640] loop6: detected capacity change from 0 to 512
[  293.851162][ T4640] EXT4-fs (loop6): Invalid log cluster size: 16777216
[  294.351086][ T4656] loop5: detected capacity change from 0 to 1024
[  294.378994][ T4656] EXT4-fs (loop5): Ignoring removed nobh option
[  294.397813][ T4656] EXT4-fs (loop5): Ignoring removed bh option
[  294.438315][ T4656] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  294.587661][ T1518] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  295.237746][ T1518] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  295.267771][ T1518] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  295.303147][ T1518] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  295.363797][ T1518] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  295.627776][ T1518] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  296.897250][ T1518] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.905583][ T1518] usb 8-1: Product: syz
[  296.909894][ T1518] usb 8-1: Manufacturer: syz
[  296.914587][ T1518] usb 8-1: SerialNumber: syz
[  296.951493][ T1518] usb 8-1: config 0 descriptor??
[  296.998682][ T1518] ums-isd200 8-1:0.0: USB Mass Storage device detected
[  297.779591][ T4688] loop6: detected capacity change from 0 to 256
[  298.310339][ T4688] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  298.405087][ T1518] scsi host1: usb-storage 8-1:0.0
[  298.426487][ T1518] usb 8-1: USB disconnect, device number 14
[  308.213921][ T4711] loop1: detected capacity change from 0 to 512
[  308.228671][ T4714] loop7: detected capacity change from 0 to 1024
[  308.312660][ T4711] EXT4-fs (loop1): Ignoring removed bh option
[  308.328770][ T4714] EXT4-fs (loop7): Ignoring removed nobh option
[  308.341028][ T4714] EXT4-fs (loop7): Ignoring removed bh option
[  308.369109][ T4714] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  309.287079][ T4730] loop5: detected capacity change from 0 to 256
[  309.334462][ T4711] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  309.358657][ T4730] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  309.558033][ T4711] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  309.676318][ T4738] loop6: detected capacity change from 0 to 1024
[  309.717743][ T4738] EXT4-fs (loop6): Ignoring removed nobh option
[  309.739151][ T4738] EXT4-fs (loop6): Ignoring removed bh option
[  309.787545][ T4738] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  309.917682][ T1518] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  311.357748][ T1518] usb 2-1: device descriptor read/all, error -71
[  311.620882][   T20] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  311.867715][   T20] usb 1-1: Using ep0 maxpacket: 16
[  311.989123][   T20] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  311.997452][   T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.008082][   T20] usb 1-1: config 0 has no interface number 0
[  312.167789][   T20] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  312.176976][   T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.185257][   T20] usb 1-1: Product: syz
[  312.189623][   T20] usb 1-1: Manufacturer: syz
[  312.194233][   T20] usb 1-1: SerialNumber: syz
[  312.206805][   T20] usb 1-1: config 0 descriptor??
[  312.255992][   T20] usb 1-1: Found UVC 0.00 device syz (046c:14e8)
[  312.264657][   T20] usb 1-1: No valid video chain found.
[  312.329576][   T30] kauditd_printk_skb: 139 callbacks suppressed
[  312.329597][   T30] audit: type=1400 audit(1780071337.026:3168): avc:  denied  { wake_alarm } for  pid=4764 comm="syz.1.1245" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  313.281696][  T992] usb 1-1: USB disconnect, device number 22
[  313.289314][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'.
[  313.543821][ T4774] loop5: detected capacity change from 0 to 40427
[  313.556673][ T4779] loop1: detected capacity change from 0 to 1024
[  313.648946][ T4779] EXT4-fs (loop1): Ignoring removed oldalloc option
[  313.655777][ T4779] EXT4-fs (loop1): Ignoring removed oldalloc option
[  313.663661][ T4779] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  313.676214][ T4774] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  313.688089][ T4774] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  313.714702][ T4774] F2FS-fs (loop5): invalid crc value
[  313.748156][ T4779] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000001000,bsddf,journal_ioprio=0x0000000000000007,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[  313.778488][ T4774] F2FS-fs (loop5): Found nat_bits in checkpoint
[  313.821793][   T30] audit: type=1400 audit(1780071338.546:3169): avc:  denied  { append } for  pid=4778 comm="syz.1.1251" path="/247/file1/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  313.867904][ T4774] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  313.875157][ T4774] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  313.904906][   T30] audit: type=1400 audit(1780071338.626:3170): avc:  denied  { execute } for  pid=4790 comm="syz.0.1253" path="/247/file1" dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  314.033467][ T4774] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  314.053453][   T30] audit: type=1400 audit(1780071338.776:3171): avc:  denied  { relabelto } for  pid=4773 comm="syz.5.1250" name="/" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  314.134694][ T4799] kvm [4798]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x6844
[  314.157867][ T4799] kvm [4798]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  314.227764][ T1518] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  314.371516][ T4803] loop5: detected capacity change from 0 to 1024
[  314.431760][ T4803] EXT4-fs (loop5): Ignoring removed nobh option
[  314.451593][ T4803] EXT4-fs (loop5): Ignoring removed bh option
[  314.500933][ T4803] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  314.637713][ T1518] usb 2-1: unable to get BOS descriptor or descriptor too short
[  314.661628][ T4809] loop6: detected capacity change from 0 to 512
[  314.726076][ T1518] usb 2-1: not running at top speed; connect to a high speed hub
[  314.962629][ T4809] EXT4-fs (loop6): Ignoring removed bh option
[  315.182306][ T4809] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  315.340824][ T4809] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  316.017743][ T1518] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.037654][ T1518] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  316.063937][ T1518] usb 2-1: config 1 interface 0 has no altsetting 0
[  316.145198][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'.
[  316.172750][   T30] audit: type=1400 audit(1780071340.896:3172): avc:  denied  { ioctl } for  pid=4796 comm="syz.0.1255" path="socket:[37614]" dev="sockfs" ino=37614 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  316.207825][  T310] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  316.227754][ T1518] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  316.236962][ T1518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.245787][ T1518] usb 2-1: Product: syz
[  316.250105][ T1518] usb 2-1: Manufacturer: syz
[  316.254729][ T1518] usb 2-1: SerialNumber: syz
[  316.326224][  T992] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  317.378618][ T4830] loop1: detected capacity change from 0 to 1024
[  317.417750][  T992] usb 8-1: Using ep0 maxpacket: 32
[  317.478482][ T4830] EXT4-fs (loop1): Mount option "dioread_nolock" incompatible with ext3
[  317.487775][  T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  317.503188][  T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  317.557739][  T992] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.569248][  T992] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.579403][  T992] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  317.588825][  T992] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.601544][  T992] usb 8-1: config 0 descriptor??
[  317.615661][ T4832] loop5: detected capacity change from 0 to 512
[  317.623969][ T4832] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22
[  317.639184][ T4832] EXT4-fs (loop5): Ignoring removed bh option
[  317.645312][ T4832] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  317.652949][ T4832] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  317.674617][ T4834] loop6: detected capacity change from 0 to 512
[  317.674651][ T1518] usb 2-1: bad CDC descriptors
[  317.689327][ T4834] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1265: missing EA_INODE flag
[  317.701633][ T4834] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1265: error while reading EA inode 2 err=-117
[  317.713802][ T1518] usb 2-1: USB disconnect, device number 22
[  317.720023][  T310] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  317.729358][ T4832] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,mblk_io_submit,nojournal_checksum,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback.
[  317.733792][  T310] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.752715][ T4832] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev loop5, type ext4) errno=-22
[  317.767870][ T4834] EXT4-fs (loop6): 1 orphan inode deleted
[  317.773836][ T4834] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  317.786852][  T310] usb 7-1: Product: syz
[  317.791285][ T4834] FAULT_INJECTION: forcing a failure.
[  317.791285][ T4834] name failslab, interval 1, probability 0, space 0, times 0
[  317.804062][ T4834] CPU: 0 PID: 4834 Comm: syz.6.1265 Not tainted syzkaller #0
[  317.804956][  T310] usb 7-1: config 0 descriptor??
[  317.811468][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  317.811484][ T4834] Call Trace:
[  317.811490][ T4834]  <TASK>
[  317.811498][ T4834]  __dump_stack+0x21/0x30
[  317.811524][ T4834]  dump_stack_lvl+0x110/0x170
[  317.811544][ T4834]  ? show_regs_print_info+0x20/0x20
[  317.847103][ T4834]  ? file_end_write+0x1b0/0x1b0
[  317.851959][ T4834]  dump_stack+0x15/0x20
[  317.856131][ T4834]  should_fail+0x3c1/0x510
[  317.860632][ T4834]  __should_failslab+0xa4/0xe0
[  317.865395][ T4834]  should_failslab+0x9/0x20
[  317.869895][ T4834]  slab_pre_alloc_hook+0x3b/0xe0
[  317.874833][ T4834]  ? getname_flags+0xb9/0x500
[  317.879507][ T4834]  kmem_cache_alloc+0x44/0x260
[  317.884267][ T4834]  getname_flags+0xb9/0x500
[  317.888768][ T4834]  ? debug_smp_processor_id+0x17/0x20
[  317.894137][ T4834]  __x64_sys_unlinkat+0xb0/0xf0
[  317.898992][ T4834]  x64_sys_call+0x4c0/0x9a0
[  317.903504][ T4834]  do_syscall_64+0x4c/0xa0
[  317.907924][ T4834]  ? clear_bhb_loop+0x50/0xa0
[  317.912601][ T4834]  ? clear_bhb_loop+0x50/0xa0
[  317.917718][ T4834]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  317.923613][ T4834] RIP: 0033:0x7f13b6238e59
[  317.928114][ T4834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.947818][ T4834] RSP: 002b:00007f13b4c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  317.956231][ T4834] RAX: ffffffffffffffda RBX: 00007f13b64b1fa0 RCX: 00007f13b6238e59
[  317.964204][ T4834] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  317.972178][ T4834] RBP: 00007f13b4c93090 R08: 0000000000000000 R09: 0000000000000000
[  317.980163][ T4834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.988131][ T4834] R13: 00007f13b64b2038 R14: 00007f13b64b1fa0 R15: 00007fff4ee30b58
[  317.996116][ T4834]  </TASK>
[  317.999291][  T310] usb 7-1: can't set config #0, error -71
[  318.007922][  T310] usb 7-1: USB disconnect, device number 19
[  318.102003][ T4832] device erspan0 entered promiscuous mode
[  318.108478][ T4832] device vlan0 entered promiscuous mode
[  318.121831][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1264'.
[  318.132770][ T4844] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1264'.
[  318.229868][ T4848] loop5: detected capacity change from 0 to 512
[  318.240553][  T992] savu 0003:1E7D:2D5A.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0
[  318.263031][ T4853] loop1: detected capacity change from 0 to 512
[  318.289491][ T4848] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.1267: missing EA_INODE flag
[  318.313942][ T4853] EXT4-fs (loop1): Unrecognized mount option "smackfstransmute=" or missing value
[  318.327821][ T4848] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1267: error while reading EA inode 2 err=-117
[  318.351348][ T4848] EXT4-fs (loop5): 1 orphan inode deleted
[  318.385765][ T4858] loop6: detected capacity change from 0 to 1024
[  318.387650][ T4848] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  318.435581][ T4858] EXT4-fs (loop6): Ignoring removed nobh option
[  318.487779][ T4858] EXT4-fs (loop6): Ignoring removed bh option
[  318.508739][ T1518] usb 8-1: USB disconnect, device number 15
[  318.542162][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  318.584936][ T4858] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  318.977754][  T310] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  319.308208][ T4875] set_capacity_and_notify: 1 callbacks suppressed
[  319.308226][ T4875] loop1: detected capacity change from 0 to 512
[  319.370419][ T4875] EXT4-fs (loop1): Unrecognized mount option "smackfstransmute=" or missing value
[  319.387785][  T310] usb 6-1: unable to get BOS descriptor or descriptor too short
[  319.437766][  T310] usb 6-1: not running at top speed; connect to a high speed hub
[  319.547704][  T310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.563089][  T310] usb 6-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  319.589634][  T310] usb 6-1: config 1 interface 0 has no altsetting 0
[  319.767738][  T310] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.781207][  T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.797518][  T310] usb 6-1: Product: syz
[  319.807025][  T310] usb 6-1: Manufacturer: syz
[  319.816949][  T310] usb 6-1: SerialNumber: syz
[  319.971669][ T4879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1279'.
[  320.078506][ T4867] loop5: detected capacity change from 0 to 256
[  320.183318][ T4867] FAT-fs (loop5): Directory bread(block 64) failed
[  320.198064][ T4867] FAT-fs (loop5): Directory bread(block 65) failed
[  320.215023][ T4867] FAT-fs (loop5): Directory bread(block 66) failed
[  320.221822][ T4867] FAT-fs (loop5): Directory bread(block 67) failed
[  320.229691][ T4867] FAT-fs (loop5): Directory bread(block 68) failed
[  320.236254][ T4867] FAT-fs (loop5): Directory bread(block 69) failed
[  320.243732][ T4867] FAT-fs (loop5): Directory bread(block 70) failed
[  320.250482][ T4867] FAT-fs (loop5): Directory bread(block 71) failed
[  320.257149][ T4867] FAT-fs (loop5): Directory bread(block 72) failed
[  320.264096][ T4867] FAT-fs (loop5): Directory bread(block 73) failed
[  320.340538][ T4889] loop6: detected capacity change from 0 to 512
[  320.498201][ T4875] loop1: detected capacity change from 0 to 1024
[  320.532294][ T4889] EXT4-fs (loop6): Ignoring removed bh option
[  320.567929][  T310] usb 6-1: bad CDC descriptors
[  320.574277][  T310] usb 6-1: USB disconnect, device number 17
[  320.627261][ T4875] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  320.652722][ T4889] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  320.666220][ T4889] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  321.677143][ T4909] loop7: detected capacity change from 0 to 256
[  321.736581][ T4909] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  321.913642][ T4914] loop5: detected capacity change from 0 to 256
[  321.967667][ T1518] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  321.970225][ T4914] FAT-fs (loop5): Directory bread(block 64) failed
[  321.986593][ T4917] loop1: detected capacity change from 0 to 1024
[  322.026445][ T4917] EXT4-fs (loop1): Ignoring removed nobh option
[  322.047987][ T4914] FAT-fs (loop5): Directory bread(block 65) failed
[  322.054032][ T4917] EXT4-fs (loop1): Ignoring removed bh option
[  322.054687][ T4914] FAT-fs (loop5): Directory bread(block 66) failed
[  322.067362][ T4914] FAT-fs (loop5): Directory bread(block 67) failed
[  322.074689][ T4914] FAT-fs (loop5): Directory bread(block 68) failed
[  322.081308][ T4914] FAT-fs (loop5): Directory bread(block 69) failed
[  322.088291][ T4914] FAT-fs (loop5): Directory bread(block 70) failed
[  322.094838][ T4914] FAT-fs (loop5): Directory bread(block 71) failed
[  322.124601][   T30] audit: type=1400 audit(1780071346.846:3173): avc:  denied  { create } for  pid=4919 comm="syz.7.1289" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  322.131365][ T4914] FAT-fs (loop5): Directory bread(block 72) failed
[  322.147110][ T4917] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  322.173781][ T4914] FAT-fs (loop5): Directory bread(block 73) failed
[  322.367775][ T1518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  322.377578][ T1518] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  322.589496][ T4922] loop7: detected capacity change from 0 to 40427
[  322.598001][ T1518] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  322.607905][   T30] audit: type=1400 audit(1780071347.336:3174): avc:  denied  { mounton } for  pid=4919 comm="syz.7.1289" path="/145/file1" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  322.610725][ T1518] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.668467][ T4922] F2FS-fs (loop7): invalid crc value
[  322.774601][ T4922] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  322.865635][ T4922] F2FS-fs (loop7): recover fsync data on readonly fs
[  322.889869][ T4922] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0
[  322.904041][ T4922] F2FS-fs (loop7): checkpoint=disable on readonly fs
[  323.113394][ T1518] usb 7-1: Product: syz
[  323.229365][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1286'.
[  324.159568][   T30] audit: type=1400 audit(1780071347.946:3175): avc:  denied  { setopt } for  pid=4912 comm="syz.5.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  324.195861][ T1518] usb 7-1: Manufacturer: syz
[  324.230833][ T1518] usb 7-1: SerialNumber: syz
[  324.252926][ T1518] usb 7-1: config 0 descriptor??
[  324.260131][ T4940] loop5: detected capacity change from 0 to 1024
[  324.277698][ T1518] usb 7-1: can't set config #0, error -71
[  324.296900][ T1518] usb 7-1: USB disconnect, device number 20
[  324.344293][ T4940] EXT4-fs (loop5): Ignoring removed orlov option
[  324.410678][ T4940] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  324.449198][ T4940] System zones: 0-1, 3-12
[  324.492743][ T4951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1293'.
[  324.503784][ T4940] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,auto_da_alloc=0x0000000001800000,,errors=continue. Quota mode: none.
[  324.567310][ T4955] FAULT_INJECTION: forcing a failure.
[  324.567310][ T4955] name failslab, interval 1, probability 0, space 0, times 0
[  324.588919][ T4951] IPv6: Can't replace route, no match found
[  324.629519][ T4955] CPU: 0 PID: 4955 Comm: syz.7.1299 Not tainted syzkaller #0
[  324.636960][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  324.647033][ T4955] Call Trace:
[  324.650333][ T4955]  <TASK>
[  324.653307][ T4955]  __dump_stack+0x21/0x30
[  324.657664][ T4955]  dump_stack_lvl+0x110/0x170
[  324.662385][ T4955]  ? show_regs_print_info+0x20/0x20
[  324.667687][ T4955]  ? unwind_get_return_address+0x4d/0x90
[  324.673857][ T4955]  ? stack_trace_save+0xf0/0xf0
[  324.678718][ T4955]  dump_stack+0x15/0x20
[  324.682921][ T4955]  should_fail+0x3c1/0x510
[  324.687366][ T4955]  __should_failslab+0xa4/0xe0
[  324.692159][ T4955]  should_failslab+0x9/0x20
[  324.696701][ T4955]  slab_pre_alloc_hook+0x3b/0xe0
[  324.701861][ T4955]  ? kvm_mmu_topup_memory_cache+0xe4/0x220
[  324.707883][ T4955]  kmem_cache_alloc+0x44/0x260
[  324.712682][ T4955]  kvm_mmu_topup_memory_cache+0xe4/0x220
[  324.718354][ T4955]  kvm_mmu_load+0x88/0x1fd0
[  324.722897][ T4955]  ? kvm_apic_accept_events+0x546/0x560
[  324.728475][ T4955]  ? kvm_apic_has_interrupt+0x78f/0x7a0
[  324.734315][ T4955]  ? kvm_lapic_enable_pv_eoi+0x150/0x150
[  324.739990][ T4955]  vcpu_enter_guest+0x4f79/0x66d0
[  324.745179][ T4955]  ? avc_has_perm+0x163/0x250
[  324.750018][ T4955]  ? local_bh_enable+0x30/0x30
[  324.754819][ T4955]  ? 0xffffffffa0028000
[  324.759001][ T4955]  ? is_bpf_text_address+0x177/0x190
[  324.764333][ T4955]  ? __kernel_text_address+0xa0/0x100
[  324.769770][ T4955]  ? unwind_get_return_address+0x4d/0x90
[  324.775437][ T4955]  ? stack_trace_save+0xf0/0xf0
[  324.780752][ T4955]  ? arch_stack_walk+0xee/0x140
[  324.785638][ T4955]  ? stack_trace_save+0xa6/0xf0
[  324.790529][ T4955]  ? __stack_depot_save+0x34/0x480
[  324.795776][ T4955]  ? path_openat+0x280e/0x2f20
[  324.800571][ T4955]  ? kasan_set_track+0x5b/0x70
[  324.805455][ T4955]  ? kasan_set_track+0x4a/0x70
[  324.810248][ T4955]  ? __kasan_check_read+0x11/0x20
[  324.815313][ T4955]  ? vmx_vcpu_pi_load+0xab/0x390
[  324.820455][ T4955]  ? __kasan_check_write+0x14/0x20
[  324.825595][ T4955]  ? kvm_arch_vcpu_load+0x58d/0x770
[  324.830826][ T4955]  ? __local_bh_enable_ip+0x58/0x80
[  324.836070][ T4955]  ? local_bh_enable+0x1f/0x30
[  324.840867][ T4955]  ? kvm_load_guest_fpu+0x12a/0x240
[  324.846235][ T4955]  kvm_arch_vcpu_ioctl_run+0xfab/0x2010
[  324.851820][ T4955]  kvm_vcpu_ioctl+0x8f2/0xc00
[  324.856531][ T4955]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[  324.862207][ T4955]  ? selinux_file_ioctl+0x3a0/0x4d0
[  324.867442][ T4955]  ? selinux_file_alloc_security+0x120/0x120
[  324.873456][ T4955]  ? mutex_unlock+0x8f/0x230
[  324.878092][ T4955]  ? __mutex_lock_slowpath+0x10/0x10
[  324.883418][ T4955]  ? __fget_files+0x2c4/0x320
[  324.888268][ T4955]  ? security_file_ioctl+0x84/0xa0
[  324.893426][ T4955]  ? kvm_clear_stat_per_vcpu+0x200/0x200
[  324.899193][ T4955]  __se_sys_ioctl+0x121/0x1a0
[  324.904010][ T4955]  __x64_sys_ioctl+0x7b/0x90
[  324.908637][ T4955]  x64_sys_call+0x2f/0x9a0
[  324.913090][ T4955]  do_syscall_64+0x4c/0xa0
[  324.917539][ T4955]  ? clear_bhb_loop+0x50/0xa0
[  324.922264][ T4955]  ? clear_bhb_loop+0x50/0xa0
[  324.926992][ T4955]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  324.932916][ T4955] RIP: 0033:0x7fe483355e59
[  324.937356][ T4955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.957511][ T4955] RSP: 002b:00007fe481db0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  324.966038][ T4955] RAX: ffffffffffffffda RBX: 00007fe4835cefa0 RCX: 00007fe483355e59
[  324.974129][ T4955] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  324.982121][ T4955] RBP: 00007fe481db0090 R08: 0000000000000000 R09: 0000000000000000
[  324.990198][ T4955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.998188][ T4955] R13: 00007fe4835cf038 R14: 00007fe4835cefa0 R15: 00007ffd836601f8
[  325.006179][ T4955]  </TASK>
[  325.100230][ T4971] loop1: detected capacity change from 0 to 1024
[  325.157734][ T4971] EXT4-fs (loop1): Ignoring removed nobh option
[  325.164168][ T4971] EXT4-fs (loop1): Ignoring removed bh option
[  325.208955][ T4971] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  325.302322][   T30] audit: type=1400 audit(1780071350.026:3176): avc:  denied  { validate_trans } for  pid=4983 comm="syz.6.1304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  325.369011][ T4987] loop7: detected capacity change from 0 to 128
[  325.487707][  T310] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  326.818150][ T4997] kvm [4996]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x6844
[  326.832097][ T4997] kvm [4996]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  326.974715][ T5004] loop7: detected capacity change from 0 to 512
[  327.049579][ T5004] EXT4-fs (loop7): Unrecognized mount option "audit" or missing value
[  327.523989][  T992] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  327.589110][ T5020] loop1: detected capacity change from 0 to 16
[  327.605108][ T5021] loop6: detected capacity change from 0 to 128
[  327.618164][ T5020] erofs: (device loop1): mounted with root inode @ nid 36.
[  327.640586][   T30] audit: type=1400 audit(1780071352.366:3177): avc:  denied  { mount } for  pid=5019 comm="syz.1.1318" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  327.672966][   T30] audit: type=1400 audit(1780071352.386:3178): avc:  denied  { ioctl } for  pid=4969 comm="syz.5.1301" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  327.698284][   T30] audit: type=1400 audit(1780071352.386:3179): avc:  denied  { mounton } for  pid=5019 comm="syz.1.1318" path="/258/file0/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  327.721759][  T310] usb 6-1: No LPM exit latency info found, disabling LPM.
[  327.733437][   T30] audit: type=1400 audit(1780071352.386:3180): avc:  denied  { read } for  pid=5019 comm="syz.1.1318" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  327.772331][   T30] audit: type=1400 audit(1780071352.386:3181): avc:  denied  { open } for  pid=5019 comm="syz.1.1318" path="/258/file0/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  327.839625][  T310] usb 6-1: config index 0 descriptor too short (expected 18619, got 95)
[  327.849970][  T310] usb 6-1: config 73 has too many interfaces: 200, using maximum allowed: 32
[  327.859346][  T310] usb 6-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config
[  327.874536][   T30] audit: type=1400 audit(1780071352.396:3182): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  327.892516][ T5029] loop6: detected capacity change from 0 to 512
[  327.895553][  T310] usb 6-1: config 73 has 0 interfaces, different from the descriptor's value: 200
[  327.910413][  T992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  327.920796][  T992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  328.007780][  T310] usb 6-1: config index 1 descriptor too short (expected 18619, got 95)
[  328.026542][  T310] usb 6-1: config 73 has too many interfaces: 200, using maximum allowed: 32
[  328.027101][ T5029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1322'.
[  328.055047][ T5031] loop1: detected capacity change from 0 to 1024
[  328.063088][  T310] usb 6-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config
[  328.064740][ T5031] EXT4-fs (loop1): Ignoring removed nobh option
[  328.080008][ T5031] EXT4-fs (loop1): Ignoring removed bh option
[  328.088238][  T992] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  328.115513][  T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.129633][  T310] usb 6-1: config 73 has 0 interfaces, different from the descriptor's value: 200
[  328.139476][  T992] usb 1-1: Product: syz
[  328.143745][  T992] usb 1-1: Manufacturer: syz
[  328.144165][ T5031] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  328.149420][  T992] usb 1-1: SerialNumber: syz
[  328.226220][  T310] usb 6-1: unable to read config index 2 descriptor/start: -71
[  328.248988][  T310] usb 6-1: can't read configurations, error -71
[  328.327576][ T5035] kvm [5032]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x6844
[  328.336694][ T5035] kvm [5032]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0
[  328.422460][ T5043] raw_sendmsg: syz.7.1325 forgot to set AF_INET. Fix it!
[  328.468249][   T30] audit: type=1400 audit(1780071353.196:3183): avc:  denied  { read } for  pid=5048 comm="syz.5.1326" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  328.657966][  T992] usb 1-1: cannot find UAC_HEADER
[  330.455282][  T992] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  330.470848][ T5058] loop5: detected capacity change from 0 to 512
[  330.477263][  T992] usb 1-1: USB disconnect, device number 23
[  330.666206][ T5064] loop7: detected capacity change from 0 to 128
[  330.679624][ T5058] loop5: detected capacity change from 0 to 128
[  330.740827][   T30] audit: type=1400 audit(1780071355.466:3184): avc:  denied  { mount } for  pid=5055 comm="syz.5.1329" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  330.867729][    C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96
[  330.961074][ T5070] loop1: detected capacity change from 0 to 512
[  331.071851][ T5070] EXT4-fs (loop1): Unrecognized mount option "smackfstransmute=" or missing value
[  331.235752][ T5075] loop7: detected capacity change from 0 to 256
[  331.308227][ T5075] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  331.436464][   T30] audit: type=1326 audit(1780071356.156:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5072 comm="syz.6.1336" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13b6238e59 code=0x0
[  331.482385][   T30] audit: type=1400 audit(1780071356.206:3186): avc:  denied  { accept } for  pid=5072 comm="syz.6.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  331.552196][ T5070] loop1: detected capacity change from 0 to 1024
[  331.579281][ T5090] syz.7.1340 uses obsolete (PF_INET,SOCK_PACKET)
[  331.586714][ T5070] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  331.616052][ T5090] loop7: detected capacity change from 0 to 512
[  331.646168][ T5090] ==================================================================
[  331.654280][ T5090] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e50
[  331.661336][ T5090] Read of size 8 at addr ffff88815b6a1128 by task syz.7.1340/5090
[  331.669163][ T5090] 
[  331.671506][ T5090] CPU: 0 PID: 5090 Comm: syz.7.1340 Not tainted syzkaller #0
[  331.678924][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  331.689242][ T5090] Call Trace:
[  331.692543][ T5090]  <TASK>
[  331.695493][ T5090]  __dump_stack+0x21/0x30
[  331.699851][ T5090]  dump_stack_lvl+0x110/0x170
[  331.704566][ T5090]  ? show_regs_print_info+0x20/0x20
[  331.709797][ T5090]  ? load_image+0x3e0/0x3e0
[  331.714331][ T5090]  ? _raw_spin_lock+0x94/0xf0
[  331.719042][ T5090]  print_address_description+0x7f/0x2c0
[  331.724621][ T5090]  ? __ext4_iget+0x2bb/0x3e50
[  331.729328][ T5090]  kasan_report+0xf1/0x140
[  331.733775][ T5090]  ? __ext4_iget+0x2bb/0x3e50
[  331.738479][ T5090]  __asan_report_load8_noabort+0x14/0x20
[  331.744143][ T5090]  __ext4_iget+0x2bb/0x3e50
[  331.748678][ T5090]  ? ext4_init_orphan_info+0x162/0x11e0
[  331.754254][ T5090]  ? __kasan_check_write+0x14/0x20
[  331.759489][ T5090]  ? _raw_write_trylock+0x150/0x150
[  331.764724][ T5090]  ? __proc_create+0x570/0x8e0
[  331.769527][ T5090]  ? _raw_write_trylock+0x150/0x150
[  331.774767][ T5090]  ? ext4_get_projid+0x140/0x140
[  331.779807][ T5090]  ? _raw_write_unlock+0x2b/0x60
[  331.784784][ T5090]  ? ext4_orphan_file_block_trigger+0x460/0x460
[  331.791058][ T5090]  ext4_enable_quotas+0x33c/0x6d0
[  331.796113][ T5090]  ? ext4_register_sysfs+0x297/0x2e0
[  331.801434][ T5090]  ext4_fill_super+0x8301/0x8bd0
[  331.806428][ T5090]  ? ext4_mount+0x40/0x40
[  331.810795][ T5090]  ? set_blocksize+0x1eb/0x370
[  331.815574][ T5090]  ? sb_set_blocksize+0xaa/0xf0
[  331.820439][ T5090]  ? ext4_mount+0x40/0x40
[  331.824781][ T5090]  mount_bdev+0x2ae/0x3e0
[  331.829209][ T5090]  ? ext4_mount+0x40/0x40
[  331.833548][ T5090]  ext4_mount+0x34/0x40
[  331.837703][ T5090]  legacy_get_tree+0xed/0x190
[  331.842389][ T5090]  ? ext4_errno_to_code+0x160/0x160
[  331.847591][ T5090]  vfs_get_tree+0x89/0x260
[  331.852018][ T5090]  do_new_mount+0x25a/0xa20
[  331.856526][ T5090]  path_mount+0x659/0xff0
[  331.860854][ T5090]  ? user_path_at_empty+0x161/0x1c0
[  331.866054][ T5090]  __se_sys_mount+0x320/0x390
[  331.870738][ T5090]  ? __x64_sys_mount+0xd0/0xd0
[  331.875507][ T5090]  __x64_sys_mount+0xbf/0xd0
[  331.880206][ T5090]  x64_sys_call+0x6bf/0x9a0
[  331.884734][ T5090]  do_syscall_64+0x4c/0xa0
[  331.889182][ T5090]  ? clear_bhb_loop+0x50/0xa0
[  331.894036][ T5090]  ? clear_bhb_loop+0x50/0xa0
[  331.898803][ T5090]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  331.904705][ T5090] RIP: 0033:0x7fe4833570ca
[  331.909122][ T5090] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.928739][ T5090] RSP: 002b:00007fe481dafe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  331.937158][ T5090] RAX: ffffffffffffffda RBX: 00007fe481dafee0 RCX: 00007fe4833570ca
[  331.945128][ T5090] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fe481dafea0
[  331.953097][ T5090] RBP: 0000200000000080 R08: 00007fe481dafee0 R09: 0000000002008042
[  331.961083][ T5090] R10: 0000000002008042 R11: 0000000000000246 R12: 0000200000000040
[  331.969239][ T5090] R13: 00007fe481dafea0 R14: 0000000000000571 R15: 00002000000000c0
[  331.977216][ T5090]  </TASK>
[  331.980234][ T5090] 
[  331.982555][ T5090] Allocated by task 1424:
[  331.986888][ T5090]  __kasan_slab_alloc+0xbd/0xf0
[  331.991762][ T5090]  slab_post_alloc_hook+0x4f/0x2b0
[  331.996889][ T5090]  kmem_cache_alloc+0xf7/0x260
[  332.001833][ T5090]  f2fs_alloc_inode+0x26/0x330
[  332.006595][ T5090]  iget_locked+0x16c/0x7e0
[  332.011010][ T5090]  f2fs_iget+0x55/0x5060
[  332.015251][ T5090]  f2fs_fill_super+0x4aef/0x6dc0
[  332.020275][ T5090]  mount_bdev+0x2ae/0x3e0
[  332.024604][ T5090]  f2fs_mount+0x34/0x40
[  332.028758][ T5090]  legacy_get_tree+0xed/0x190
[  332.033447][ T5090]  vfs_get_tree+0x89/0x260
[  332.037971][ T5090]  do_new_mount+0x25a/0xa20
[  332.042471][ T5090]  path_mount+0x659/0xff0
[  332.046798][ T5090]  __se_sys_mount+0x320/0x390
[  332.051475][ T5090]  __x64_sys_mount+0xbf/0xd0
[  332.056071][ T5090]  x64_sys_call+0x6bf/0x9a0
[  332.060584][ T5090]  do_syscall_64+0x4c/0xa0
[  332.065002][ T5090]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  332.070893][ T5090] 
[  332.073228][ T5090] Last potentially related work creation:
[  332.078955][ T5090]  kasan_save_stack+0x3a/0x60
[  332.083655][ T5090]  __kasan_record_aux_stack+0xd2/0x100
[  332.089122][ T5090]  kasan_record_aux_stack_noalloc+0xb/0x10
[  332.094931][ T5090]  call_rcu+0x10b/0xf80
[  332.099087][ T5090]  evict+0x834/0x8d0
[  332.102979][ T5090]  evict_inodes+0x5e6/0x660
[  332.107484][ T5090]  generic_shutdown_super+0x96/0x330
[  332.112796][ T5090]  kill_block_super+0x7f/0xf0
[  332.117472][ T5090]  kill_f2fs_super+0x303/0x3b0
[  332.122235][ T5090]  deactivate_locked_super+0xa0/0x100
[  332.127611][ T5090]  deactivate_super+0xaf/0xe0
[  332.132286][ T5090]  cleanup_mnt+0x45b/0x510
[  332.136727][ T5090]  __cleanup_mnt+0x19/0x20
[  332.141136][ T5090]  task_work_run+0x127/0x190
[  332.145723][ T5090]  exit_to_user_mode_loop+0xd0/0xe0
[  332.150946][ T5090]  exit_to_user_mode_prepare+0x87/0xd0
[  332.156405][ T5090]  syscall_exit_to_user_mode+0x1a/0x30
[  332.161860][ T5090]  do_syscall_64+0x58/0xa0
[  332.166276][ T5090]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  332.172169][ T5090] 
[  332.174493][ T5090] Second to last potentially related work creation:
[  332.181071][ T5090]  kasan_save_stack+0x3a/0x60
[  332.185751][ T5090]  __kasan_record_aux_stack+0xd2/0x100
[  332.191208][ T5090]  kasan_record_aux_stack_noalloc+0xb/0x10
[  332.197015][ T5090]  call_rcu+0x10b/0xf80
[  332.201169][ T5090]  evict+0x834/0x8d0
[  332.205067][ T5090]  evict_inodes+0x5e6/0x660
[  332.209568][ T5090]  generic_shutdown_super+0x96/0x330
[  332.214884][ T5090]  kill_block_super+0x7f/0xf0
[  332.219557][ T5090]  kill_f2fs_super+0x303/0x3b0
[  332.224322][ T5090]  deactivate_locked_super+0xa0/0x100
[  332.229775][ T5090]  deactivate_super+0xaf/0xe0
[  332.234448][ T5090]  cleanup_mnt+0x45b/0x510
[  332.238901][ T5090]  __cleanup_mnt+0x19/0x20
[  332.243345][ T5090]  task_work_run+0x127/0x190
[  332.247944][ T5090]  exit_to_user_mode_loop+0xd0/0xe0
[  332.253146][ T5090]  exit_to_user_mode_prepare+0x87/0xd0
[  332.258614][ T5090]  syscall_exit_to_user_mode+0x1a/0x30
[  332.264107][ T5090]  do_syscall_64+0x58/0xa0
[  332.268627][ T5090]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  332.274530][ T5090] 
[  332.276956][ T5090] The buggy address belongs to the object at ffff88815b6a0c20
[  332.276956][ T5090]  which belongs to the cache f2fs_inode_cache of size 1424
[  332.291529][ T5090] The buggy address is located 1288 bytes inside of
[  332.291529][ T5090]  1424-byte region [ffff88815b6a0c20, ffff88815b6a11b0)
[  332.304973][ T5090] The buggy address belongs to the page:
[  332.310603][ T5090] page:ffffea00056da800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88815b6a2a70 pfn:0x15b6a0
[  332.322141][ T5090] head:ffffea00056da800 order:3 compound_mapcount:0 compound_pincount:0
[  332.330456][ T5090] flags: 0x4000000000010200(slab|head|zone=1)
[  332.336525][ T5090] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881081fd980
[  332.345106][ T5090] raw: ffff88815b6a2a70 000000008015000a 00000001ffffffff 0000000000000000
[  332.353774][ T5090] page dumped because: kasan: bad access detected
[  332.360265][ T5090] page_owner tracks the page as allocated
[  332.365995][ T5090] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 981, ts 75520294005, free_ts 38708585117
[  332.387804][ T5090]  post_alloc_hook+0x192/0x1b0
[  332.392575][ T5090]  prep_new_page+0x1c/0x110
[  332.397167][ T5090]  get_page_from_freelist+0x2d3a/0x2dc0
[  332.402713][ T5090]  __alloc_pages+0x1a2/0x460
[  332.407311][ T5090]  new_slab+0xa1/0x4d0
[  332.411386][ T5090]  ___slab_alloc+0x381/0x810
[  332.415975][ T5090]  __slab_alloc+0x49/0x90
[  332.420302][ T5090]  kmem_cache_alloc+0x138/0x260
[  332.425150][ T5090]  f2fs_alloc_inode+0x26/0x330
[  332.429916][ T5090]  iget_locked+0x16c/0x7e0
[  332.434331][ T5090]  f2fs_iget+0x55/0x5060
[  332.438587][ T5090]  f2fs_fill_super+0x48c9/0x6dc0
[  332.443520][ T5090]  mount_bdev+0x2ae/0x3e0
[  332.447847][ T5090]  f2fs_mount+0x34/0x40
[  332.452001][ T5090]  legacy_get_tree+0xed/0x190
[  332.456676][ T5090]  vfs_get_tree+0x89/0x260
[  332.461127][ T5090] page last free stack trace:
[  332.465818][ T5090]  free_unref_page_prepare+0x542/0x550
[  332.471276][ T5090]  free_unref_page+0xae/0x540
[  332.476099][ T5090]  __free_pages+0x6c/0x100
[  332.480545][ T5090]  __vunmap+0x86d/0xa00
[  332.484707][ T5090]  vfree+0x8b/0xc0
[  332.488560][ T5090]  kvfree+0x26/0x40
[  332.492370][ T5090]  translate_table+0x1d45/0x2090
[  332.497307][ T5090]  do_ip6t_set_ctl+0x961/0xd80
[  332.502070][ T5090]  nf_setsockopt+0x272/0x2a0
[  332.506657][ T5090]  ipv6_setsockopt+0x283b/0x3600
[  332.511590][ T5090]  tcp_setsockopt+0x22b/0x1eb0
[  332.516357][ T5090]  sock_common_setsockopt+0xa0/0xb0
[  332.521557][ T5090]  __sys_setsockopt+0x2e9/0x470
[  332.526404][ T5090]  __x64_sys_setsockopt+0xbf/0xd0
[  332.531426][ T5090]  x64_sys_call+0x982/0x9a0
[  332.535946][ T5090]  do_syscall_64+0x4c/0xa0
[  332.540454][ T5090] 
[  332.542778][ T5090] Memory state around the buggy address:
[  332.548401][ T5090]  ffff88815b6a1000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  332.556460][ T5090]  ffff88815b6a1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  332.564563][ T5090] >ffff88815b6a1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  332.572619][ T5090]                                   ^
[  332.578069][ T5090]  ffff88815b6a1180: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
[  332.586177][ T5090]  ffff88815b6a1200: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00
[  332.594242][ T5090] ==================================================================
[  332.602294][ T5090] Disabling lock debugging due to kernel taint
[  332.616448][ T5090] EXT4-fs error (device loop7): ext4_quota_enable:6435: inode #3: comm syz.7.1340: unexpected EA_INODE flag
[  332.640230][ T5090] EXT4-fs error (device loop7): ext4_quota_enable:6438: comm syz.7.1340: Bad quota inode: 3, type: 0
[  332.651676][ T5090] EXT4-fs warning (device loop7): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  332.667804][ T5090] EXT4-fs (loop7): mount failed
[  332.676278][ T5085] kvm [5084]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x6844
[  332.690539][ T5085] kvm [5084]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0