last executing test programs: 1m3.580462309s ago: executing program 32 (id=432): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x749}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) pselect6(0x40, &(0x7f00000000c0)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00001a6000/0x400000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x54, 0x5, {0x7, 0x2, 0x4, 0x0, 0x4, 0x0, 0x3, 0xc2d, [{0x5, 0x5, 0x1, 0x5}, {0xfdd, 0x9, 0x6, 0x3}, {0x8, 0x1000, 0x75, 0x402}, {0x400, 0x2658, 0x40000, 0x1}]}}]}}]}, 0x8c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@deltaction={0x74, 0x31, 0x111, 0x70bd2d, 0x25dddbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x6e, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x10000}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44014}, 0x4024004) 52.733562564s ago: executing program 5 (id=494): r0 = open(&(0x7f0000000280)='./bus\x00', 0x103143, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x3018000, &(0x7f0000000480)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f00000004c0)="$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") openat$kvm(0x0, 0x0, 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000b00)={0x0, &(0x7f0000000b40)=[@in_dx={0x69, 0x20, {0x123, 0x2}}, @out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000c40)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000c80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000d80), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) creat(&(0x7f0000000e40)='./bus\x00', 0xd4) io_setup(0x1bf9, &(0x7f0000000e80)) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000001200)=[@uexit={0x0, 0x18, 0x5}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x4, 0x6f}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x4, 0x69}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x600c, 0x800000000000, 0x4, 0x5ac069eb}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0xd8, 0x6, 0x2}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x1e, @gpa=0x4000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc02, 0x0, 0x8, 0xe1fa}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x82e6, 0x4, 0xd}}, @nested_load_code={0x12e, 0x58, {0x3, "b90f0400000f3226450f01c966b8fe008ec0653e0f01c50f06b8010000000f01c167660f519603000000b8010000000f01c166b8c2008ee8f33636410f0053b0"}}, @in_dx={0x69, 0x20, {0xf29d}}, @wrmsr={0x65, 0x20, {0x1c9, 0x4}}], 0x270}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)='syzkaller\x00'}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000021c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x46}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x80) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000002200)={[0xfff, 0x400, 0x4, 0x101, 0xffff8001, 0x43b0, 0x5, 0x0, 0x6, 0x5, 0x400, 0x2, 0x1, 0x2, 0x8, 0xb, 0x2, 0x7ffb, 0xe9, 0x1, 0x9, 0x9, 0x6, 0x6, 0x1, 0x3, 0x46, 0x1ff, 0x1000, 0x0, 0x5, 0x2892990c, 0xd0, 0xb, 0xfff, 0x7fff, 0xe, 0x7, 0x4, 0x2, 0x20d, 0x5, 0x3, 0x9, 0x7, 0x9, 0xff, 0x5, 0x3, 0xc, 0x5, 0x1, 0x10000, 0x9f00000, 0x80000000, 0x1, 0x80000000, 0x30000, 0xfffffffb, 0x2, 0x0, 0x0, 0x3, 0x40, 0x10001, 0x7fffffff, 0x7e6, 0x5, 0x91, 0x4, 0x5, 0xe, 0x2a, 0x8, 0x1, 0xd95, 0x2, 0x4, 0x8, 0x2, 0xec77, 0x0, 0x5, 0x4, 0x7, 0x2, 0x3, 0x8000, 0x3, 0x657, 0x4, 0x1, 0x400, 0x1, 0x10001, 0x1, 0x2, 0x7, 0xa012, 0x1000, 0x9, 0x9, 0xdbef, 0x7, 0x63c, 0x6, 0x10000, 0xffff, 0x4fc4366, 0x0, 0x7, 0x1b4e, 0xb, 0xe, 0x1fd, 0x93b1, 0x7ff, 0x1, 0x6, 0x80a8, 0x5, 0x81, 0x3, 0xb, 0x7a, 0x80, 0x72cd, 0x1, 0x8, 0xcc6e, 0x8, 0x9, 0x223a, 0x3, 0x3, 0x0, 0x4, 0x4, 0x1, 0x299, 0x2, 0x3, 0x8001, 0x4, 0x1, 0xb, 0x4, 0x259, 0x6, 0x2, 0x0, 0xc4, 0x2, 0x80, 0x4, 0x4, 0x7, 0xe29, 0x6, 0xfffffff8, 0x4, 0x8, 0x1f, 0x4, 0x95, 0x9, 0x5, 0x401, 0x0, 0x4, 0x7fffffff, 0x5, 0xff, 0xfff, 0x8d6, 0xb00, 0x200, 0x4, 0xc8, 0x170380fd, 0x12bd, 0x7f6, 0x8c, 0x5, 0x80, 0x1, 0x3, 0x9, 0x2, 0x5, 0xff, 0x9, 0x5, 0xb7, 0x10, 0x80000001, 0xfffffff8, 0x0, 0x6, 0x800, 0x2, 0x3, 0xfffffffb, 0xe, 0x5, 0xfff, 0x0, 0x2, 0xffffffff, 0x1, 0xfffffffb, 0x10001, 0x6, 0xc09, 0x5, 0x1000, 0x9, 0x0, 0x8, 0x9, 0x9, 0xb68, 0xfff, 0x5, 0xffffffff, 0x4, 0x5d, 0x7fff, 0x2, 0x7fff, 0x9, 0x0, 0xe000000, 0x0, 0x6, 0x81, 0x5a82c482, 0x10, 0x8, 0x2, 0x5, 0x3, 0x4, 0x6, 0x81, 0x200, 0x81, 0x4, 0x140, 0x5, 0x5, 0x1, 0x6, 0x4, 0xffff, 0x0, 0x3, 0x5782, 0x9, 0xfffffffe, 0x3, 0x4, 0x9, 0xfe63, 0x7d4, 0x1, 0x20000000, 0x6, 0x3, 0x3e7, 0x5, 0xd8e, 0xe, 0xfffffffc, 0xfffffffc, 0xfff, 0x7, 0x7, 0xe2, 0x3, 0x5, 0x8, 0x2, 0x3, 0x100, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8, 0x8000, 0xfffffc00, 0x3, 0xfff, 0x4290, 0x10001, 0x3, 0xcb191c2, 0x8, 0x8, 0x8, 0x3, 0x2, 0x8001, 0xe, 0x5, 0x69d, 0x101, 0x4, 0x8, 0xd51, 0x4800000, 0x5, 0x101, 0x3, 0xffffffdf, 0x3, 0x1ff00000, 0x7, 0x80, 0x2, 0x2, 0x1, 0x10000, 0xfffffff8, 0x639, 0x3ff, 0x8, 0x8e2, 0x99, 0x6, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffc, 0xffffff81, 0x4, 0xe1, 0xb, 0xfffff3c0, 0x7, 0x1c000, 0x9, 0x10001, 0x10000, 0x9, 0x5, 0x9, 0x7, 0x1, 0xfffffffd, 0xf00, 0x1, 0xffffffff, 0xfffffff8, 0x67, 0x7, 0xe1c1, 0x9, 0x7fff, 0x9, 0x8, 0x8, 0xfffffffe, 0x6, 0x8, 0xfffffff1, 0x4, 0x6, 0x3, 0x9, 0xe, 0x4082, 0xfffffffe, 0x0, 0x7, 0x8, 0xba90, 0xb, 0x3, 0x5, 0x2, 0x4, 0x8, 0xff, 0xfffffff0, 0x5, 0x2, 0x2, 0xfffffff7, 0x0, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0xe, 0x2, 0x80, 0x9, 0xd, 0xfffffffe, 0xd0, 0xfffff000, 0xa7a6, 0xa27a, 0x4, 0x5, 0x3, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x2, 0x200, 0xa4, 0x3ff, 0x3, 0x8, 0xb, 0x2, 0xb, 0x7ff, 0x4, 0x2, 0x1, 0x78b, 0x0, 0xa, 0x5, 0x81, 0x1, 0x8d4, 0x8, 0x2, 0x8, 0x6, 0x2b4, 0x2c8, 0x3, 0x7, 0x4, 0x8, 0x0, 0x2, 0x1, 0x189a, 0x3, 0x9, 0xffffffff, 0x401, 0x4, 0x1, 0x0, 0xf7, 0x7, 0x4, 0x8001, 0x5, 0x5, 0x514a, 0xfffffffa, 0x9, 0x5, 0x5, 0x1ff, 0xa2f, 0x3, 0x2, 0xb109, 0xfffffff8, 0xb17adbc, 0x337a, 0xe, 0xfca7, 0x6, 0x7, 0x7f, 0xffff0000, 0xd76, 0x5e, 0xffff, 0x4, 0x7, 0x8, 0x10000, 0x9, 0x2, 0xd62, 0x4, 0x9, 0xd, 0x0, 0x2, 0x2, 0x0, 0xbaa, 0x5, 0x80000000, 0x400, 0x81, 0x1000, 0x7fffffff, 0x7, 0x54cb, 0x40, 0x7e4f1400, 0xd, 0x9, 0x5, 0x5, 0x65f, 0xbd, 0xc, 0x4, 0x3, 0x7, 0x1, 0x2, 0x8001, 0xfd, 0x401, 0x1, 0x5, 0x335, 0x0, 0xc, 0x8, 0x2, 0xd7, 0x1, 0x4, 0x7f, 0x2c, 0xfffffff8, 0x9, 0x3, 0x9, 0x29b9, 0x3, 0x1, 0x6, 0x3, 0x8, 0x332c7d27, 0x1, 0x100, 0x80, 0x0, 0x1, 0x8, 0x8, 0x300000, 0x0, 0x7ff, 0x5, 0xfffffffb, 0xf2a1, 0x5, 0xe45c, 0x7f, 0x7f, 0x6, 0x80000000, 0x30000, 0x0, 0x80000001, 0xffff, 0x3, 0x0, 0x903d, 0x0, 0x4, 0xfffffff8, 0x9, 0x3, 0x4, 0xca9, 0x7ff, 0x6, 0x5, 0x2, 0x6, 0x40, 0x2, 0x80, 0x3, 0x7, 0x5f8f, 0x4, 0x8, 0x84e, 0x5, 0x1, 0x0, 0x80, 0x0, 0x7fff, 0x1, 0xcd77, 0x5, 0x80000001, 0x10000, 0x0, 0x8000, 0x2, 0x80000001, 0x4, 0x7484, 0x9, 0x8000, 0x2, 0x40, 0xaec6, 0x8, 0x233, 0x5, 0x3, 0x6, 0x7ff, 0x2, 0xb, 0x8, 0x4, 0x9, 0x3, 0xfb8, 0xfffffffb, 0x7f, 0xfffffe01, 0x0, 0x6, 0x8000, 0x4f30, 0x7fffffff, 0x0, 0x2, 0x1, 0x101, 0x66, 0x8000, 0x2, 0x5, 0xfffffff8, 0x4, 0x4, 0x0, 0x4, 0x2, 0x5, 0x3, 0x8001, 0x9, 0x3, 0x9, 0x0, 0x8, 0x7, 0x8, 0x6, 0x8, 0x0, 0x10, 0x1, 0xffffff47, 0x8, 0x0, 0x990, 0x3ff, 0x80000000, 0xfffffff2, 0x44f9c564, 0xfffffffa, 0x80000, 0xfe, 0xff, 0x8, 0x2, 0x1ffc, 0xad3, 0x2, 0x7, 0x5, 0x80000000, 0x749747b, 0x5, 0x1, 0x6, 0x23c7, 0x4, 0x10001, 0x0, 0x9, 0x5, 0x2, 0x9, 0x305a, 0x7, 0x4, 0x9, 0xffff, 0x90, 0x7c8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x1, 0x2, 0x2, 0xc7, 0x9, 0xfffffffd, 0x0, 0x36d3, 0x407, 0x7, 0x612, 0x3, 0x7, 0xb37, 0x77f3, 0xf, 0xfffffffd, 0xa, 0x8, 0x3, 0x6, 0xb, 0x5, 0xffff5490, 0x6e0f75ea, 0xd6e7, 0x400, 0xe64, 0xc8f1, 0x7e05, 0x1, 0x80, 0xc4b, 0x328dd9dc, 0x0, 0x3, 0x2, 0xffffffff, 0x1, 0xb, 0x7, 0x1, 0x3, 0x100, 0x0, 0x1f, 0x0, 0x3, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0xe, 0x101, 0xd, 0x98a9, 0x8, 0x40, 0x7ff, 0xff, 0x0, 0x2, 0x162, 0x9, 0x2, 0x8, 0x2, 0x8001, 0x1576, 0xfffff800, 0x2, 0x1, 0x3, 0x9, 0x2, 0x100, 0x200, 0x8, 0x0, 0x0, 0x4, 0x8, 0x5, 0x2, 0x7, 0x10000, 0x8c, 0x5, 0x2, 0xf2, 0xb1, 0x5, 0x200, 0xb, 0x8000, 0x7, 0x5, 0x80000001, 0x8, 0x9, 0x3, 0x8000, 0x7, 0x6, 0x9, 0x4, 0x8, 0x0, 0x9, 0xffffa3f4, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0x9, 0x7, 0x9, 0x7a5, 0x2, 0x7cd, 0x0, 0x7, 0x9, 0x6, 0x1, 0xd, 0xa6, 0x1000, 0x3, 0x0, 0x7, 0x9, 0xd, 0x40, 0x5, 0x5, 0x5, 0x3, 0x80, 0x4, 0xffffc000, 0x6, 0x10, 0x8, 0xfffffffe, 0x4, 0x81, 0xfffffff9, 0xffff, 0x9, 0x7, 0x8, 0x6, 0x4, 0x8, 0x1, 0x5, 0xffffffff, 0x2, 0x8, 0x80000000, 0x9, 0xc000000, 0x400, 0x6, 0x10001, 0x7, 0x3, 0x6, 0x0, 0x9, 0x10, 0x7, 0x8, 0x924a, 0x4, 0x9, 0xfff, 0x689, 0x4800000, 0x6, 0x1, 0x3, 0x80, 0x6, 0x8, 0xfff, 0x7, 0x2, 0x2, 0x9, 0xdcd, 0x0, 0x8, 0xffff6cb5, 0x1, 0x9b6c, 0x7, 0x7, 0x40, 0x26034831, 0x9, 0x1d, 0x80, 0x6, 0x8, 0x6, 0x3, 0x2, 0x6f81bf4f, 0x6, 0x5, 0x3, 0x3e, 0x16, 0x6, 0x8e89, 0x5, 0x7, 0xb2bdbd5, 0x5, 0x2, 0x7, 0x0, 0x8d, 0x4, 0x401, 0x7, 0x1, 0xa0, 0x4, 0x2c, 0x1, 0x3, 0x3, 0x9, 0x2, 0x9, 0x200, 0xb, 0x11a5, 0x8, 0xe00, 0x3, 0xbb08, 0x1, 0x2, 0x7, 0x1000, 0xb04, 0x7fffffff, 0xbd, 0xffffffff, 0x42, 0x0, 0x3, 0x94, 0x7ff, 0x8000, 0x8, 0x2, 0x85e, 0x5c9, 0x8001, 0x7, 0x480d, 0x0, 0x2, 0xffff7fff, 0x0, 0x0, 0x6, 0x5, 0x8, 0x4, 0x7, 0x3, 0xfffffffa, 0x7, 0x0, 0x80000000, 0x2, 0x33, 0x6, 0x3, 0x1, 0x5, 0x8, 0x2b4, 0x1, 0x7, 0x39, 0xfffffffa, 0xf, 0xa, 0xe, 0x5, 0x2, 0x0, 0x703d127c, 0x0, 0x9c37, 0x9, 0xfffffffb, 0x5, 0x3, 0x3, 0x7fffffff, 0x4]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x74, 0xa3, &(0x7f0000003200)) 51.481484141s ago: executing program 5 (id=498): mount$overlay(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@metacopy_off}, {@redirect_dir_nofollow, 0x5c}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8000d0, &(0x7f0000000000)={[], [{@subj_role={'subj_role', 0x3d, '\\\\-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x64, 0x35, 0x62, 0x0, 0x35, 0x39, 0x65], 0x2d, [0x66, 0x64, 0x38, 0x31], 0x2d, [0x38, 0x63, 0x36, 0x31], 0x2d, [0x37, 0x38, 0x61, 0x65], 0x2d, [0x36, 0x63, 0x64, 0x37, 0x0, 0x63, 0x63]}}}]}, 0x1, 0x586, &(0x7f0000000300)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000200)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) close_range(r0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000006d80)='./file0\x00', 0x0, 0x0) unlinkat(r3, &(0x7f0000006e80)='./file0\x00', 0x0) 50.629540138s ago: executing program 5 (id=501): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8001, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x9) sendto$inet6(r2, &(0x7f00000000c0)="e02a7bb6e7da72697b2cdbbcff42a02b238bb691348acb814839e600969dac7c83d004000000e536bc54e8ba122e63c7063ab3697ca58e7d", 0x38, 0x4040804, &(0x7f0000000140)={0x1d, 0x4e22, 0xd008000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x36}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001) sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b800000013000104000000000000000000000000000000000000000000000001000000000000000000000000000000011234ffff000000000a00808011020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, &(0x7f00000001c0), 0x0, 0x400000, &(0x7f00000004c0)={0xa, 0x1234, 0x0, @remote}, 0x1c) close(r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000015000000080000000200000000b28e39c1b874dcd57d63bed5eedf49dbe5e231981cbe6c2754cecf9d72c5", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1000, r8, 0x1000000}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001000370400"/18, @ANYRES32=0x0, @ANYBLOB="830405000100000018006ae60629265f9779a2bfb1cefecc61c78c1ad32a010069703665727370616e00000004000280"], 0x38}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(r5, 0x0, 0x0) dup(r0) open(&(0x7f00000006c0)='./file1\x00', 0x109cc2, 0x158) 47.371550139s ago: executing program 5 (id=521): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8000d0, &(0x7f00000000c0), 0x1, 0x586, &(0x7f0000000300)="$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") r0 = open(&(0x7f0000006d80)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000180)={0x18}, 0x18) bind$bt_rfcomm(r3, &(0x7f0000000cc0)={0x1f, @any, 0x4}, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000c00)="d510c490f913672b5ae413", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000c80), 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000009c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a00)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a40)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ac0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_PIT2(r10, 0x8070ae9f, &(0x7f0000000b00)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000900)={'veth1_to_bond\x00', &(0x7f0000000940)=@ethtool_modinfo={0x14, 0x2, 0x7}}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000001c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f00000002c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000006e80)='./file0\x00', 0x0) 47.140871742s ago: executing program 5 (id=524): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0xa, &(0x7f0000000080)=""/188, &(0x7f0000000140)=0xbc) (async) r1 = socket$inet6(0xa, 0x2, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000000), 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x80, 0x0, 0x10, @mcast1, @mcast2, 0x0, 0x1, 0xfffffff6, 0x1004}}) 47.007442167s ago: executing program 5 (id=525): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f0200ff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000340)=""/38, 0x26}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f0000000600)=""/65, 0x41}], 0x6, &(0x7f0000000700)=""/101, 0x65}, 0x40000001) clock_adjtime(0x0, &(0x7f00000009c0)={0x1dab25c8, 0x9, 0x3, 0x6, 0x7ffe, 0x6, 0x662731bc, 0xe8, 0xfffffffffffffffa, 0x0, 0x3, 0x63, 0x5, 0xa33, 0x7, 0x3, 0xd93d, 0x7, 0xf, 0x7, 0x100000001, 0x5, 0x3, 0xc2f8b7e, 0x2, 0x7f}) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0xa80185, r3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f00000007c0), 0x560c89bb) r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x8042, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x16, 0xb, &(0x7f0000001e40)=ANY=[@ANYRES32=r4], &(0x7f0000001ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001f00)={r8, 0x3, 0x11, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x0, 0xffe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000900)=0x10) mkdirat(r1, &(0x7f0000000500)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x1214040, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001f80), r7) mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000d00)='./file0\x00') r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d40)='.\x00', 0x0, 0x80) getdents64(r9, &(0x7f0000000d80)=""/4096, 0x1000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000980)='./file1\x00'}, 0x18) io_setup(0x1, &(0x7f0000000800)=0x0) io_submit(r10, 0x1, &(0x7f0000000840)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x4}]) r11 = creat(&(0x7f0000001fc0)='./file0\x00', 0x0) splice(r5, 0x0, r11, 0x0, 0x8000, 0x0) pipe(&(0x7f00000000c0)) 47.004668476s ago: executing program 33 (id=525): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f0200ff000000010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) recvmsg(r0, &(0x7f0000000780)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000340)=""/38, 0x26}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f0000000600)=""/65, 0x41}], 0x6, &(0x7f0000000700)=""/101, 0x65}, 0x40000001) clock_adjtime(0x0, &(0x7f00000009c0)={0x1dab25c8, 0x9, 0x3, 0x6, 0x7ffe, 0x6, 0x662731bc, 0xe8, 0xfffffffffffffffa, 0x0, 0x3, 0x63, 0x5, 0xa33, 0x7, 0x3, 0xd93d, 0x7, 0xf, 0x7, 0x100000001, 0x5, 0x3, 0xc2f8b7e, 0x2, 0x7f}) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0xa80185, r3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f00000007c0), 0x560c89bb) r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x8042, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x16, 0xb, &(0x7f0000001e40)=ANY=[@ANYRES32=r4], &(0x7f0000001ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001f00)={r8, 0x3, 0x11, 0xfffffffffffffffb, 0x0, 0x0, 0x8, 0x0, 0xffe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000900)=0x10) mkdirat(r1, &(0x7f0000000500)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x1214040, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001f80), r7) mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000d00)='./file0\x00') r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d40)='.\x00', 0x0, 0x80) getdents64(r9, &(0x7f0000000d80)=""/4096, 0x1000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000980)='./file1\x00'}, 0x18) io_setup(0x1, &(0x7f0000000800)=0x0) io_submit(r10, 0x1, &(0x7f0000000840)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x4}]) r11 = creat(&(0x7f0000001fc0)='./file0\x00', 0x0) splice(r5, 0x0, r11, 0x0, 0x8000, 0x0) pipe(&(0x7f00000000c0)) 45.270796273s ago: executing program 3 (id=538): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003580)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000) 45.19962823s ago: executing program 3 (id=539): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x44, &(0x7f0000000c00), 0x1, 0x777, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000001400)={@id={0x2, 0x0, @d}}) fstat(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) 44.948593346s ago: executing program 3 (id=541): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x100, 0x0, 0x0, 0x9}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="0c81040080070000500012800e0001006970366772657461700000003c00028014000700"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x24008004) syz_clone3(&(0x7f0000000140)={0x4bbc93bf99dba1ed, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) 44.942604346s ago: executing program 3 (id=542): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3010018, &(0x7f0000000100), 0x5, 0x4d0, &(0x7f0000000140)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20220000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000700)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000740)='syzkaller\x00'}, 0x94) write$binfmt_script(r0, &(0x7f0000000dc0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3010018, &(0x7f0000000100), 0x5, 0x4d0, &(0x7f0000000140)="$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") (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_clone(0x20220000, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='memory.events.local\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000700)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000740)='syzkaller\x00'}, 0x94) (async) write$binfmt_script(r0, &(0x7f0000000dc0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) fdatasync(r0) (async) 44.819651699s ago: executing program 3 (id=543): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4040881) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2004800, &(0x7f0000000180)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001a80)='./proc\x00', 0x1ff) 44.8045732s ago: executing program 3 (id=544): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f00000007c0)="$eJzs3V1PZGcdAPD/GZgtr0KjF7VJa+PWANEdQOyWeFFrYvSqiVrvK8JACANDYGgXUpXGD2BijDXxqlfemPgBTEw/gjFpovdGjS/RXb3YRHfHnDMvy7JnFtgdZhB+v+RwnvOc58z/+c+Eh/PGmQCurJci4npE3K/X6zMRMdGsLzSnOGxMabs7t99dTqck6vU3/5FEJI26tNn0kdccbW42FBHf/FrEd5JH4+7uH2wsVSrlnebybG1ze3Z3/+DG+ubSWnmtvLWwMH9z8dXFVxbnupLnWES89pU//+SHP//qa7/+3Dt/eOuv099LmvURD/Lotkbqxey9aBmMiJ3zCNYng1mGAAD8P2jt5386ImZiIgayvTkAAADgMql/aSz+m0TUT2XodM0AAACAC6WQ3QObFErN+wDG4oX3S6XGPbyfiJFCpbpb++xqdW9rpXGv7GQUC6vrlfJc817hySgm6fJ8Vm4vR8Tdo8vlhYh4NiJ+PDGcLZeWq5WVfp/8AAAAgCti9Njx/78fbfKffvQLAAAA6LLJfncAAAAAOHeO/wEAAODyc/wPAAAAl9rX33gjneqt779eeXt/b6P69o2V8u5GaXNvubRc3dkurVWra9kz+zZPer1Ktbr9hdjauzVbK/9tvFFX3duqvbX+0FdgAwAAAD307Kc+/H0SEYdfHM6m1LV+dwroicGzNP7T+fUD6L2BfncA6Jsz/f0HLpVivzsA9F1ywvqhD76bv+I3HTfxX0UAAHDBTH0y//r/wInnBg4LPeoicE6c/4Ory/V/uLrOev3f/gJcHsUYCAfycLW1L9YPP1w/2px3fHhH5+v/x9TrT9QxAACga8ayKSmUIrLzAGNRKJRKEePZMUExWV2vlOci4mMR8buJ4jPp8ny2ZRLJSTcNAwAAAAAAAAAAAAAAAAAAAAAAAACZej2J+hksnqk1AAAAcBFEFP6SZE/zj5iaeHns+PmBa8ndiWweEe/87M33by3Vajvzaf0/2/W1nzbrP9+PMxgAAADAca3j9Gw+3O/eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDZ3Ln97nJr6mXcv385Iibz4g/GUDYfimJEjPwricEj2yURMdCF+IfvRcRzefGTtFsx2exFXvzhPscf7UJ8uMo+TMef1/N+/wrxUjbP//27mY1QT6/z+Fdoj38DOfHTuvF26fGe/+iXsx3jvxfx/GD++NOKn8T4w/EPG+PP9VPm+O1vHRx0Wlf/IGIq9+9P0m6TlmZrm9uzu/sHN9Y3l9bKa+WthYX5m4uvLr6yODe7ul4pN3/mxvjRC7+6/7j8RzrEn2znnz/+vnzK/O99dOv2xxvFYnvz5EH86ev5n/9zHeIXmp/6Z5rldP1Uq3zYKB/14i9++2Kr/HpO/ivH85+JY59/fv7Tp8x/5hs/+OMpmwIAPbC7f7CxVKmUd3pVKETvYp268FTvRrpb1KwZuRjpPEnh2oMsuvvK6ft6ERLMK3z/STdPd387rBrovOpCFYZOaBPxTF9HJgAAoNsePQYGAAAAAAAAAAAAAAAAAAAAeu2cnzR2Ly0Uj8U8zH524+n5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd878AAAD//+w2y28=") r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000011c0)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000050000000000000000000000ffe9ffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff"]) 44.775069823s ago: executing program 34 (id=544): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000011c0)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000012000000000000000000000000050000000000000000000000ffe9ffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff"]) 44.289396093s ago: executing program 7 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x201899, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f00000008c0)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xe, 0x4, 0x4, 0xfd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018010000756c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r3, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000dc0)=r6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r7}, &(0x7f0000000e40), &(0x7f0000000e80)=r5}, 0x20) sendmsg$inet(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x80) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x100000, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @float={0x5, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) 44.230662749s ago: executing program 7 (id=551): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000b00)='./file0\x00', 0x104c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="757466383d312c73684f72746e616d653d77696e6e742c757466383d312c696f636861727365743d63703836352c756e695f786c6174653d302c726f6469722c757466383d302c756e695f786c6174653d302c756d61736b3d30303030303030303030303030303030303030303030352c726f806ee20000000000746e616e39352c646d61736b3d30303030303030303030303030303030303030303030322c73686f6d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c735d6f72746e616d653d77696e6e742c696f6368617273658a743d6e6f6e652c5bb04dec0b31deadc463336b886c9f6c42f1e2dbdc06a675af6264411d4c38491cd350f0d502a1b37e840500001332c746abe518461e0945e8826dca8f0a2872e7cbf5e2c1a6adf0993b1b795c927df7ffcb06c94f1442870caa56b935e64d8e34572c01c73b303903b6f45eca0e070f8004c61927642a7eef86c2ea842c4a00000000"], 0x7, 0x2d2, &(0x7f0000000c40)="$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") syz_mount_image$f2fs(&(0x7f0000000b40), &(0x7f0000000300)='./cgroup.cpu/cpuset.cpus\x00', 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x3, 0x5534, &(0x7f0000001480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000069c0)='./file1\x00', 0x183341, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) write$selinux_create(r1, &(0x7f0000006a00)=@access={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'unconfined', 0x20, 0x8000000000000001}, 0x45) r2 = openat(0xffffffffffffff9c, &(0x7f0000006a80)='./file0\x00', 0x8642, 0x14) pwrite64(r2, &(0x7f0000006ac0)='2', 0x1, 0x8080c61) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000c00)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000006b00)={0x0, 0x1, 0x0, &(0x7f0000006b40), 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000006b80)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000006bc0)={0x1, 0x1, 0x0, &(0x7f0000006c00), 0x0, 0xa000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000006c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000006c80)=0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x4008af04, &(0x7f0000006cc0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) syz_clone3(&(0x7f0000000540)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 44.22012536s ago: executing program 7 (id=553): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/63, 0x3f}], 0x1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = gettid() r3 = getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/failslab/space\x00', 0x1, 0x0) r6 = getpgid(r2) rt_tgsigqueueinfo(r6, r6, 0x21, &(0x7f0000000240)={0x1f, 0x37c, 0x8001}) r7 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_pid(r7, &(0x7f0000000200), 0x12) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) 44.186839303s ago: executing program 35 (id=553): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/63, 0x3f}], 0x1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = gettid() r3 = getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/failslab/space\x00', 0x1, 0x0) r6 = getpgid(r2) rt_tgsigqueueinfo(r6, r6, 0x21, &(0x7f0000000240)={0x1f, 0x37c, 0x8001}) r7 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_pid(r7, &(0x7f0000000200), 0x12) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) 17.540003295s ago: executing program 2 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, &(0x7f0000000740)="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", 0x559, 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 17.538791456s ago: executing program 2 (id=803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc0000001b00010000000000fddbdf25fe80000000000000000000000000002a64010102000000000000000000000000ffb8a113009299022f00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b96b6e00000003010000000000000000000000000a00100001"], 0xcc}}, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x802, &(0x7f0000000400)=ANY=[], 0x1, 0x2b0, &(0x7f0000000440)="$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") (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000700)='\x00', 0x81800) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x104) (async) syz_mount_image$msdos(&(0x7f0000000840), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a469, &(0x7f00000009c0)=ANY=[], 0x1, 0x0, &(0x7f0000000a00)) (async) renameat2(r1, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x4, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x4, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000000d80)='GPL\x00', 0x5, 0xc3, &(0x7f0000000dc0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000003c0)=0x800, 0x4) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001040)={[{@usrjquota}, {@data_err_ignore}, {@mblk_io_submit}, {@init_itable}, {@abort}]}, 0xfe, 0x28f, &(0x7f0000001080)="$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") (async) r5 = creat(&(0x7f0000001340)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0), 0x0, 0x0, 0x0) (async) write$binfmt_elf32(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="7f454c4605069e0cffffffffffffffff0200030009000000ca020000380000007501000006040000fbff2000010003001e04000cf2000006000000e69c000006000000030000000800"/87], 0x58) close(r5) (async) execve(&(0x7f0000001480)='./file0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000009c0)={0x73622a85, 0x0, 0x8000000000002}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000140)) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000000)="31b5221919b8ce49f9a20f23d00f21f866353000000b0f23f8672ef30f5d6df466b8370000000f23c00f21f8663502000e000f23f866b9800000c00f326635008000000f300f20e06635004000000f22e00f20e06635020000000f22e02ef2a29420c4c261cf438d64fd", 0x6a}], 0x1, 0x37, 0x0, 0x0) 17.419017298s ago: executing program 2 (id=805): r0 = open(&(0x7f0000000280)='./bus\x00', 0x103143, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x3018000, &(0x7f0000000480)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f00000004c0)="$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") openat$kvm(0x0, 0x0, 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000b00)={0x0, &(0x7f0000000b40)=[@in_dx={0x69, 0x20, {0x123, 0x2}}, @out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000c80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000d80), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) creat(&(0x7f0000000e40)='./bus\x00', 0xd4) io_setup(0x1bf9, &(0x7f0000000e80)) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000001200)=[@uexit={0x0, 0x18, 0x5}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x4, 0x6f}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x4, 0x69}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x600c, 0x800000000000, 0x4, 0x5ac069eb}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0xd8, 0x6, 0x2}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x1e, @gpa=0x4000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc02, 0x0, 0x8, 0xe1fa}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x82e6, 0x4, 0xd}}, @nested_load_code={0x12e, 0x58, {0x3, "b90f0400000f3226450f01c966b8fe008ec0653e0f01c50f06b8010000000f01c167660f519603000000b8010000000f01c166b8c2008ee8f33636410f0053b0"}}, @in_dx={0x69, 0x20, {0xf29d}}, @wrmsr={0x65, 0x20, {0x1c9, 0x4}}], 0x270}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)='syzkaller\x00'}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000021c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x46}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x80) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000002200)={[0xfff, 0x400, 0x4, 0x101, 0xffff8001, 0x43b0, 0x5, 0x0, 0x6, 0x5, 0x400, 0x2, 0x1, 0x2, 0x8, 0xb, 0x2, 0x7ffb, 0xe9, 0x1, 0x9, 0x9, 0x6, 0x6, 0x1, 0x3, 0x46, 0x1ff, 0x1000, 0x0, 0x5, 0x2892990c, 0xd0, 0xb, 0xfff, 0x7fff, 0xe, 0x7, 0x4, 0x2, 0x20d, 0x5, 0x3, 0x9, 0x7, 0x9, 0xff, 0x5, 0x3, 0xc, 0x5, 0x1, 0x10000, 0x9f00000, 0x80000000, 0x1, 0x80000000, 0x30000, 0xfffffffb, 0x2, 0x0, 0x0, 0x3, 0x40, 0x10001, 0x7fffffff, 0x7e6, 0x5, 0x91, 0x4, 0x5, 0xe, 0x2a, 0x8, 0x1, 0xd95, 0x2, 0x4, 0x8, 0x2, 0xec77, 0x0, 0x5, 0x4, 0x7, 0x2, 0x3, 0x8000, 0x3, 0x657, 0x4, 0x1, 0x400, 0x1, 0x10001, 0x1, 0x2, 0x7, 0xa012, 0x1000, 0x9, 0x9, 0xdbef, 0x7, 0x63c, 0x6, 0x10000, 0xffff, 0x4fc4366, 0x0, 0x7, 0x1b4e, 0xb, 0xe, 0x1fd, 0x93b1, 0x7ff, 0x1, 0x6, 0x80a8, 0x5, 0x81, 0x3, 0xb, 0x7a, 0x80, 0x72cd, 0x1, 0x8, 0xcc6e, 0x8, 0x9, 0x223a, 0x3, 0x3, 0x0, 0x4, 0x4, 0x1, 0x299, 0x2, 0x3, 0x8001, 0x4, 0x1, 0xb, 0x4, 0x259, 0x6, 0x2, 0x0, 0xc4, 0x2, 0x80, 0x4, 0x4, 0x7, 0xe29, 0x6, 0xfffffff8, 0x4, 0x8, 0x1f, 0x4, 0x95, 0x9, 0x5, 0x401, 0x0, 0x4, 0x7fffffff, 0x5, 0xff, 0xfff, 0x8d6, 0xb00, 0x200, 0x4, 0xc8, 0x170380fd, 0x12bd, 0x7f6, 0x8c, 0x5, 0x80, 0x1, 0x3, 0x9, 0x2, 0x5, 0xff, 0x9, 0x5, 0xb7, 0x10, 0x80000001, 0xfffffff8, 0x0, 0x6, 0x800, 0x2, 0x3, 0xfffffffb, 0xe, 0x5, 0xfff, 0x0, 0x2, 0xffffffff, 0x1, 0xfffffffb, 0x10001, 0x6, 0xc09, 0x5, 0x1000, 0x9, 0x0, 0x8, 0x9, 0x9, 0xb68, 0xfff, 0x5, 0xffffffff, 0x4, 0x5d, 0x7fff, 0x2, 0x7fff, 0x9, 0x0, 0xe000000, 0x0, 0x6, 0x81, 0x5a82c482, 0x10, 0x8, 0x2, 0x5, 0x3, 0x4, 0x6, 0x81, 0x200, 0x81, 0x4, 0x140, 0x5, 0x5, 0x1, 0x6, 0x4, 0xffff, 0x0, 0x3, 0x5782, 0x9, 0xfffffffe, 0x3, 0x4, 0x9, 0xfe63, 0x7d4, 0x1, 0x20000000, 0x6, 0x3, 0x3e7, 0x5, 0xd8e, 0xe, 0xfffffffc, 0xfffffffc, 0xfff, 0x7, 0x7, 0xe2, 0x3, 0x5, 0x8, 0x2, 0x3, 0x100, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8, 0x8000, 0xfffffc00, 0x3, 0xfff, 0x4290, 0x10001, 0x3, 0xcb191c2, 0x8, 0x8, 0x8, 0x3, 0x2, 0x8001, 0xe, 0x5, 0x69d, 0x101, 0x4, 0x8, 0xd51, 0x4800000, 0x5, 0x101, 0x3, 0xffffffdf, 0x3, 0x1ff00000, 0x7, 0x80, 0x2, 0x2, 0x1, 0x10000, 0xfffffff8, 0x639, 0x3ff, 0x8, 0x8e2, 0x99, 0x6, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffc, 0xffffff81, 0x4, 0xe1, 0xb, 0xfffff3c0, 0x7, 0x1c000, 0x9, 0x10001, 0x10000, 0x9, 0x5, 0x9, 0x7, 0x1, 0xfffffffd, 0xf00, 0x1, 0xffffffff, 0xfffffff8, 0x67, 0x7, 0xe1c1, 0x9, 0x7fff, 0x9, 0x8, 0x8, 0xfffffffe, 0x6, 0x8, 0xfffffff1, 0x4, 0x6, 0x3, 0x9, 0xe, 0x4082, 0xfffffffe, 0x0, 0x7, 0x8, 0xba90, 0xb, 0x3, 0x5, 0x2, 0x4, 0x8, 0xff, 0xfffffff0, 0x5, 0x2, 0x2, 0xfffffff7, 0x0, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0xe, 0x2, 0x80, 0x9, 0xd, 0xfffffffe, 0xd0, 0xfffff000, 0xa7a6, 0xa27a, 0x4, 0x5, 0x3, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x2, 0x200, 0xa4, 0x3ff, 0x3, 0x8, 0xb, 0x2, 0xb, 0x7ff, 0x4, 0x2, 0x1, 0x78b, 0x0, 0xa, 0x5, 0x81, 0x1, 0x8d4, 0x8, 0x2, 0x8, 0x6, 0x2b4, 0x2c8, 0x3, 0x7, 0x4, 0x8, 0x0, 0x2, 0x1, 0x189a, 0x3, 0x9, 0xffffffff, 0x401, 0x4, 0x1, 0x0, 0xf7, 0x7, 0x4, 0x8001, 0x5, 0x5, 0x514a, 0xfffffffa, 0x9, 0x5, 0x5, 0x1ff, 0xa2f, 0x3, 0x2, 0xb109, 0xfffffff8, 0xb17adbc, 0x337a, 0xe, 0xfca7, 0x6, 0x7, 0x7f, 0xffff0000, 0xd76, 0x5e, 0xffff, 0x4, 0x7, 0x8, 0x10000, 0x9, 0x2, 0xd62, 0x4, 0x9, 0xd, 0x0, 0x2, 0x2, 0x0, 0xbaa, 0x5, 0x80000000, 0x400, 0x81, 0x1000, 0x7fffffff, 0x7, 0x54cb, 0x40, 0x7e4f1400, 0xd, 0x9, 0x5, 0x5, 0x65f, 0xbd, 0xc, 0x4, 0x3, 0x7, 0x1, 0x2, 0x8001, 0xfd, 0x401, 0x1, 0x5, 0x335, 0x0, 0xc, 0x8, 0x2, 0xd7, 0x1, 0x4, 0x7f, 0x2c, 0xfffffff8, 0x9, 0x3, 0x9, 0x29b9, 0x3, 0x1, 0x6, 0x3, 0x8, 0x332c7d27, 0x1, 0x100, 0x80, 0x0, 0x1, 0x8, 0x8, 0x300000, 0x0, 0x7ff, 0x5, 0xfffffffb, 0xf2a1, 0x5, 0xe45c, 0x7f, 0x7f, 0x6, 0x80000000, 0x30000, 0x0, 0x80000001, 0xffff, 0x3, 0x0, 0x903d, 0x0, 0x4, 0xfffffff8, 0x9, 0x3, 0x4, 0xca9, 0x7ff, 0x6, 0x5, 0x2, 0x6, 0x40, 0x2, 0x80, 0x3, 0x7, 0x5f8f, 0x4, 0x8, 0x84e, 0x5, 0x1, 0x0, 0x80, 0x0, 0x7fff, 0x1, 0xcd77, 0x5, 0x80000001, 0x10000, 0x0, 0x8000, 0x2, 0x80000001, 0x4, 0x7484, 0x9, 0x8000, 0x2, 0x40, 0xaec6, 0x8, 0x233, 0x5, 0x3, 0x6, 0x7ff, 0x2, 0xb, 0x8, 0x4, 0x9, 0x3, 0xfb8, 0xfffffffb, 0x7f, 0xfffffe01, 0x0, 0x6, 0x8000, 0x4f30, 0x7fffffff, 0x0, 0x2, 0x1, 0x101, 0x66, 0x8000, 0x2, 0x5, 0xfffffff8, 0x4, 0x4, 0x0, 0x4, 0x2, 0x5, 0x3, 0x8001, 0x9, 0x3, 0x9, 0x0, 0x8, 0x7, 0x8, 0x6, 0x8, 0x0, 0x10, 0x1, 0xffffff47, 0x8, 0x0, 0x990, 0x3ff, 0x80000000, 0xfffffff2, 0x44f9c564, 0xfffffffa, 0x80000, 0xfe, 0xff, 0x8, 0x2, 0x1ffc, 0xad3, 0x2, 0x7, 0x5, 0x80000000, 0x749747b, 0x5, 0x1, 0x6, 0x23c7, 0x4, 0x10001, 0x0, 0x9, 0x5, 0x2, 0x9, 0x305a, 0x7, 0x4, 0x9, 0xffff, 0x90, 0x7c8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x1, 0x2, 0x2, 0xc7, 0x9, 0xfffffffd, 0x0, 0x36d3, 0x407, 0x7, 0x612, 0x3, 0x7, 0xb37, 0x77f3, 0xf, 0xfffffffd, 0xa, 0x8, 0x3, 0x6, 0xb, 0x5, 0xffff5490, 0x6e0f75ea, 0xd6e7, 0x400, 0xe64, 0xc8f1, 0x7e05, 0x1, 0x80, 0xc4b, 0x328dd9dc, 0x0, 0x3, 0x2, 0xffffffff, 0x1, 0xb, 0x7, 0x1, 0x3, 0x100, 0x0, 0x1f, 0x0, 0x3, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0xe, 0x101, 0xd, 0x98a9, 0x8, 0x40, 0x7ff, 0xff, 0x0, 0x2, 0x162, 0x9, 0x2, 0x8, 0x2, 0x8001, 0x1576, 0xfffff800, 0x2, 0x1, 0x3, 0x9, 0x2, 0x100, 0x200, 0x8, 0x0, 0x0, 0x4, 0x8, 0x5, 0x2, 0x7, 0x10000, 0x8c, 0x5, 0x2, 0xf2, 0xb1, 0x5, 0x200, 0xb, 0x8000, 0x7, 0x5, 0x80000001, 0x8, 0x9, 0x3, 0x8000, 0x7, 0x6, 0x9, 0x4, 0x8, 0x0, 0x9, 0xffffa3f4, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0x9, 0x7, 0x9, 0x7a5, 0x2, 0x7cd, 0x0, 0x7, 0x9, 0x6, 0x1, 0xd, 0xa6, 0x1000, 0x3, 0x0, 0x7, 0x9, 0xd, 0x40, 0x5, 0x5, 0x5, 0x3, 0x80, 0x4, 0xffffc000, 0x6, 0x10, 0x8, 0xfffffffe, 0x4, 0x81, 0xfffffff9, 0xffff, 0x9, 0x7, 0x8, 0x6, 0x4, 0x8, 0x1, 0x5, 0xffffffff, 0x2, 0x8, 0x80000000, 0x9, 0xc000000, 0x400, 0x6, 0x10001, 0x7, 0x3, 0x6, 0x0, 0x9, 0x10, 0x7, 0x8, 0x924a, 0x4, 0x9, 0xfff, 0x689, 0x4800000, 0x6, 0x1, 0x3, 0x80, 0x6, 0x8, 0xfff, 0x7, 0x2, 0x2, 0x9, 0xdcd, 0x0, 0x8, 0xffff6cb5, 0x1, 0x9b6c, 0x7, 0x7, 0x40, 0x26034831, 0x9, 0x1d, 0x80, 0x6, 0x8, 0x6, 0x3, 0x2, 0x6f81bf4f, 0x6, 0x5, 0x3, 0x3e, 0x16, 0x6, 0x8e89, 0x5, 0x7, 0xb2bdbd5, 0x5, 0x2, 0x7, 0x0, 0x8d, 0x4, 0x401, 0x7, 0x1, 0xa0, 0x4, 0x2c, 0x1, 0x3, 0x3, 0x9, 0x2, 0x9, 0x200, 0xb, 0x11a5, 0x8, 0xe00, 0x3, 0xbb08, 0x1, 0x2, 0x7, 0x1000, 0xb04, 0x7fffffff, 0xbd, 0xffffffff, 0x42, 0x0, 0x3, 0x94, 0x7ff, 0x8000, 0x8, 0x2, 0x85e, 0x5c9, 0x8001, 0x7, 0x480d, 0x0, 0x2, 0xffff7fff, 0x0, 0x0, 0x6, 0x5, 0x8, 0x4, 0x7, 0x3, 0xfffffffa, 0x7, 0x0, 0x80000000, 0x2, 0x33, 0x6, 0x3, 0x1, 0x5, 0x8, 0x2b4, 0x1, 0x7, 0x39, 0xfffffffa, 0xf, 0xa, 0xe, 0x5, 0x2, 0x0, 0x703d127c, 0x0, 0x9c37, 0x9, 0xfffffffb, 0x5, 0x3, 0x3, 0x7fffffff, 0x4]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x74, 0xa3, &(0x7f0000003200)) 16.393163122s ago: executing program 2 (id=815): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x109852, 0x0, 0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000059c0)='./file0\x00', 0x93888, 0x0, 0x81, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000005a00)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000005a40)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000005a80)='./file0\x00', &(0x7f0000005ac0), 0x0, &(0x7f0000005b00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) unlinkat(0xffffffffffffff9c, &(0x7f0000005b40)='./file0/file1\x00', 0x200) 15.801395572s ago: executing program 2 (id=820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2806416, &(0x7f0000000700), 0x21, 0xbd7, &(0x7f0000000740)="$eJzs3M1rHOcZAPBnRqsvW67kUkrdi1VKsaF0LbvI1KZQu7j00kOhvRYs5JURXn8gqbiSBV21/0Bp+w/kkkNiEnzx2ZcEcs0lca4xOQRMUOyEhOAozO6sJEu7kmXtahT594NX837MzPs8GmlnXtjdAF5Zo9mPNOJYRFxOIobz/jQi+uq1gYhaY7+ny4uTXy4vTiaxsvKXz5JIIuLJ8uJk81xJvj2cNwYi4v3fJ/HDf2+c9auVhmplJu85NXf91qnZ+YVfTV+fuFq5Wrlx+uxvxs+Mnx07N96xXL/++ML9L372x09q37zx7O7n/3s9iQsxlI+tzyPPetdGY3T1d7JeKSImOnD+/aAnz2d9nklpm4PSLgcFAEBb6bpnuB/HcPTE2sPbcLzzQaHBAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WV6cbJZi35Gwtx5fjIiRRv5P89IYKUWtvh2I3og49CSJ9R9rTRqH7dpoRDz66NzbWYkWn0PuttpSRPyk1fVP6vmP5J+E3ph/GhFjHZh/dEP7+5T/hQ7MX3T+ALyaHlxs3Mg23//S1eefaHH/K7W4d72Mou9/zee/p5ue/9by72nz/PfnF5zjTilutxvL8v/t/T+81SzZ/Nl2V0ntwOOliJ+WWuWfrOaftMn/8jbnTqJxiuFvb1fa7VN0/iuvRZyI1vk3JVt/P9GpqelqZazxs+UcS++Nv9lu/qLzz67/oTb5b3H9B7K+W8+dqf2X+vzt0qV7mzrz3bfPP/20L/lrvdaX9/xjYm5u5nREX/Knzf1nts63uU/zHFn+J3++9f9/q7//7DWhlv9tZKks5dus/a8Nc/7u7p2edvE0139FXv8rO7/+9b7/vOAcv3j3vyc39jW/X2v9+jcr2fyPksZaGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa0ogYiiQtR0RSr6dpuRxxOCJ+FIfS6s3ZuV9O3fz7jSvZWMRI9KZT09XKWEQMN9pJ1j5dr6+1z2xo/zoijkbE/4cH6+3y5M3qlaKTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNXhiBiKJC1HxGDeVy4XHBQAAADQeSNFBwAAAAB0nfU/AAAAHHzW/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTZ0eMPHiYRUTs/WC+Zvnyst9DIgG5Liw4AKExP0QEAhSkVHQBQmB2u8T0uwAGUbDM+0LI3e/Xo70o8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxPJ449eJhERO38YL1k+vKx3pZHHN/D6IBuSosOAChMz1aDpb2LA9h7L/0vfqSzcQB7r/UaH3iVJNuMD6ztU3t+pD/fPutKXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsL0P1kqTliEjr9TQtlyOORMRI9CZT09XKWET8ICI+HO7tz9r9RQcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAx83OL1ybqFYrMy9TSXZ3uIpKu8o/90cYe1tJ6pWBosNoVIp+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAiz8wvXJqrVysxs0ZEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARZudX7g2Ua1WZl6gcm8nO6+rFJ0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADF+S4AAP//TzcQ1A==") r2 = syz_mount_image$ext4(&(0x7f0000001500)='ext4\x00', &(0x7f0000001540)='./file3\x00', 0x0, &(0x7f0000000440)={[{@jqfmt_vfsold}, {@resuid={'resuid', 0x3d, 0xee01}}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x004\xfe\xad@'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@permit_directio}]}, 0xfd, 0x4aa, &(0x7f0000002040)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./bus\x00', 0x1a7a01, 0xc9) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) mount$incfs(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80), 0x80, 0x0) openat(0xffffffffffffffff, &(0x7f0000001e40)='./file1\x00', 0x4001, 0x8c) r4 = openat$incfs(r3, &(0x7f00000000c0)='.pending_reads\x00', 0x22000, 0x15) pread64(r4, 0x0, 0x0, 0x8) mkdir(&(0x7f0000001ac0)='./bus\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x183042, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_register(r3, &(0x7f0000001c00)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3, 0x3a, '-\x95,&$-', 0x3a, '[(@=-)', 0x3a, './file0'}, 0x33) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b00)={@cgroup, 0x10, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pwrite64(r5, &(0x7f0000001380)='2', 0xfdef, 0xe7c) syz_mount_image$fuse(0x0, &(0x7f00000013c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000001b40)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x56, &(0x7f0000001dc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000203a00fe80000000000000007f0000000000bbff02000000000000000000000000000000000000000000008400907800"/86], 0x0) mount$overlay(0x0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x0, &(0x7f0000001480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) truncate(&(0x7f00000014c0)='./file0/file1\x00', 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x4, 0xc8, &(0x7f0000001f40)=""/200, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001ec0)=ANY=[@ANYRES64=r2, @ANYRES32=r7, @ANYBLOB="000900002537a940240012800b000100677265746170000014000280060002002200000008000100", @ANYRES32=0x0, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x408e0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001c80)={'filter\x00', 0x4}, 0x68) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818858, &(0x7f0000000500)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c73686f72746e616d653d77696e6e742c636f6465706167653d3836322c6e6e6f6e756d7461696c3d312c757404383d312c757466383d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c696f636861727365743d6b6f69382d722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c757466383d302c726f6469722c00"], 0x1, 0x371, &(0x7f0000002980)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14.775669297s ago: executing program 2 (id=827): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400021202060000052406"], 0x0) 14.74437165s ago: executing program 36 (id=827): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400021202060000052406"], 0x0) 6.027296517s ago: executing program 0 (id=899): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x8}}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe92, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x36c2, &(0x7f0000000100)={0x0, 0x764f, 0x1, 0x1, 0x383}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x20000, &(0x7f0000002480)=""/131072, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000022480)=@generic={&(0x7f00000224c0)='./file0\x00', r3}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000022500)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r0}, 0x18) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) 6.014374548s ago: executing program 0 (id=900): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x44, &(0x7f0000000c00), 0x1, 0x777, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='.\x00', 0x100, 0x52) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fallocate(r2, 0x3, 0x10003, 0x2d22) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000001400)={@id={0x2, 0x0, @d}}) fstat(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fspick$ext4(r1, &(0x7f0000000340), 0x4) fsconfig$ext4_reconfigure(r4, 0x7, 0x0, 0x0, 0x0) setreuid(0x0, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x5387cf8b}]}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000200)={'geneve1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109a42, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'rose0\x00', 0x112}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r2) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80080}, 0x20000800) r9 = io_uring_setup(0x220c, &(0x7f0000000040)={0x0, 0xfffffffa, 0x40, 0x0, 0x6f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op={0x0, 0x8}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r9, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002680)={{0x0, 0x9, 0x3, 0x8, 0xe306, 0x101, 0x5, 0x1, 0x163d, 0x8000, 0x3, 0x7, 0x40, 0x4, 0x4}}) 5.931653837s ago: executing program 0 (id=901): r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x4410, &(0x7f0000000580)=ANY=[], 0x1, 0x22e, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x80) openat(r0, &(0x7f0000000000)='./file1\x00', 0x161882, 0x101) getdents64(r1, &(0x7f0000000400)=""/48, 0x30) getdents64(r1, 0xfffffffffffffffe, 0x29) 5.931476347s ago: executing program 0 (id=902): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000018000902000000000000000002080000000000006c4a521280000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000904}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40202, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) move_mount(r3, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xf) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/features/freeze_notification\x00', 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000400)="498cec04e385a221bae72a39aa6187a17a4a013facbaa39f7ea7900200e1cc0331e4388c3a61373836d3fe7859ffcca29b0f4957eb30c2d36762440c5c10581c61934f00eb8da2365215f0d2b543608834d85ea1a797714da51a2ea9319558f3881b12d4d4d8741a65bdd2ce3b00"/130) 5.927428237s ago: executing program 0 (id=903): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000011c0)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000050000000000000000000000ffe9ffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff"]) 5.882336782s ago: executing program 0 (id=904): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006b0ae0ff0000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791440080000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006b0ae0ff0000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000440)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791440080000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) (async) 5.853036225s ago: executing program 37 (id=904): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006b0ae0ff0000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791440080000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006b0ae0ff0000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000440)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791440080000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) (async) 4.639680559s ago: executing program 1 (id=918): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000140)='27', 0x2) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = add_key(0x0, 0x0, &(0x7f0000000740)="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", 0x559, 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 4.631389209s ago: executing program 1 (id=919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000380)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) syz_mount_image$fuse(0x0, &(0x7f0000001b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000001b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000001b80), &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)='9p\x00', 0x0, &(0x7f0000001c40)='trans=tcp,') r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001a00)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0xa, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) (async) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001a00)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0xa, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3506, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x5}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000019c0)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0x96}, 0x20) r6 = open(&(0x7f0000000600)='./dev/sda\x00', 0x14f840, 0xde) preadv2(r6, &(0x7f0000000640)=[{&(0x7f0000000680)=""/4083, 0xff3}], 0x1, 0xfffffffd, 0x0, 0x1c) (async) preadv2(r6, &(0x7f0000000640)=[{&(0x7f0000000680)=""/4083, 0xff3}], 0x1, 0xfffffffd, 0x0, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1000, 0x13}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) syz_create_resource$futex(&(0x7f0000001680)=0x2) (async) r7 = syz_create_resource$futex(&(0x7f0000001680)=0x2) clock_gettime(0x0, &(0x7f00000016c0)={0x0, 0x0}) r10 = syz_create_resource$futex(&(0x7f0000001740)=0x1) futex(r10, 0xd, 0x2, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r11 = syz_open_procfs(0x0, &(0x7f0000001780)='maps\x00') preadv(r11, &(0x7f00000017c0)=[{&(0x7f0000001800)=""/182, 0xb6}, {&(0x7f00000018c0)=""/238, 0xee}], 0x2, 0x800, 0x8) (async) preadv(r11, &(0x7f00000017c0)=[{&(0x7f0000001800)=""/182, 0xb6}, {&(0x7f00000018c0)=""/238, 0xee}], 0x2, 0x800, 0x8) futex(r10, 0xd, 0x2, 0x0, 0x0, 0x2) futex(r7, 0x5, 0x1, &(0x7f0000001700)={r8, r9+60000000}, r10, 0x0) syz_usb_connect$uac2(0x0, 0xa2, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1], &(0x7f0000000080)={0xffffffffffffff8b, 0x0, 0x0, 0x0}) 3.409842014s ago: executing program 4 (id=928): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x16, {[@global, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_4={0x3, 0x0, 0xa, "8c612454"}, @local=@item_012={0x1, 0x2, 0x7, "04"}, @global=@item_4={0x3, 0x1, 0x1, "653d158d"}, @global=@item_4={0x3, 0x1, 0xa, "d272ecd0"}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x0, '\b'}]}}, 0x0}, 0x0) 3.34336058s ago: executing program 6 (id=930): r0 = open(&(0x7f0000000280)='./bus\x00', 0x103143, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x3018000, &(0x7f0000000480)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f00000004c0)="$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") openat$kvm(0x0, 0x0, 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000b00)={0x0, &(0x7f0000000b40)=[@in_dx={0x69, 0x20, {0x123, 0x2}}, @out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000c40)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000c80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000d80), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) creat(&(0x7f0000000e40)='./bus\x00', 0xd4) io_setup(0x1bf9, &(0x7f0000000e80)) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000001200)=[@uexit={0x0, 0x18, 0x5}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x4, 0x6f}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x4, 0x69}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x600c, 0x800000000000, 0x4, 0x5ac069eb}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0xd8, 0x6, 0x2}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x1e, @gpa=0x4000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc02, 0x0, 0x8, 0xe1fa}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x82e6, 0x4, 0xd}}, @nested_load_code={0x12e, 0x58, {0x3, "b90f0400000f3226450f01c966b8fe008ec0653e0f01c50f06b8010000000f01c167660f519603000000b8010000000f01c166b8c2008ee8f33636410f0053b0"}}, @in_dx={0x69, 0x20, {0xf29d}}, @wrmsr={0x65, 0x20, {0x1c9, 0x4}}], 0x270}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)='syzkaller\x00'}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000021c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x46}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x80) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000002200)={[0xfff, 0x400, 0x4, 0x101, 0xffff8001, 0x43b0, 0x5, 0x0, 0x6, 0x5, 0x400, 0x2, 0x1, 0x2, 0x8, 0xb, 0x2, 0x7ffb, 0xe9, 0x1, 0x9, 0x9, 0x6, 0x6, 0x1, 0x3, 0x46, 0x1ff, 0x1000, 0x0, 0x5, 0x2892990c, 0xd0, 0xb, 0xfff, 0x7fff, 0xe, 0x7, 0x4, 0x2, 0x20d, 0x5, 0x3, 0x9, 0x7, 0x9, 0xff, 0x5, 0x3, 0xc, 0x5, 0x1, 0x10000, 0x9f00000, 0x80000000, 0x1, 0x80000000, 0x30000, 0xfffffffb, 0x2, 0x0, 0x0, 0x3, 0x40, 0x10001, 0x7fffffff, 0x7e6, 0x5, 0x91, 0x4, 0x5, 0xe, 0x2a, 0x8, 0x1, 0xd95, 0x2, 0x4, 0x8, 0x2, 0xec77, 0x0, 0x5, 0x4, 0x7, 0x2, 0x3, 0x8000, 0x3, 0x657, 0x4, 0x1, 0x400, 0x1, 0x10001, 0x1, 0x2, 0x7, 0xa012, 0x1000, 0x9, 0x9, 0xdbef, 0x7, 0x63c, 0x6, 0x10000, 0xffff, 0x4fc4366, 0x0, 0x7, 0x1b4e, 0xb, 0xe, 0x1fd, 0x93b1, 0x7ff, 0x1, 0x6, 0x80a8, 0x5, 0x81, 0x3, 0xb, 0x7a, 0x80, 0x72cd, 0x1, 0x8, 0xcc6e, 0x8, 0x9, 0x223a, 0x3, 0x3, 0x0, 0x4, 0x4, 0x1, 0x299, 0x2, 0x3, 0x8001, 0x4, 0x1, 0xb, 0x4, 0x259, 0x6, 0x2, 0x0, 0xc4, 0x2, 0x80, 0x4, 0x4, 0x7, 0xe29, 0x6, 0xfffffff8, 0x4, 0x8, 0x1f, 0x4, 0x95, 0x9, 0x5, 0x401, 0x0, 0x4, 0x7fffffff, 0x5, 0xff, 0xfff, 0x8d6, 0xb00, 0x200, 0x4, 0xc8, 0x170380fd, 0x12bd, 0x7f6, 0x8c, 0x5, 0x80, 0x1, 0x3, 0x9, 0x2, 0x5, 0xff, 0x9, 0x5, 0xb7, 0x10, 0x80000001, 0xfffffff8, 0x0, 0x6, 0x800, 0x2, 0x3, 0xfffffffb, 0xe, 0x5, 0xfff, 0x0, 0x2, 0xffffffff, 0x1, 0xfffffffb, 0x10001, 0x6, 0xc09, 0x5, 0x1000, 0x9, 0x0, 0x8, 0x9, 0x9, 0xb68, 0xfff, 0x5, 0xffffffff, 0x4, 0x5d, 0x7fff, 0x2, 0x7fff, 0x9, 0x0, 0xe000000, 0x0, 0x6, 0x81, 0x5a82c482, 0x10, 0x8, 0x2, 0x5, 0x3, 0x4, 0x6, 0x81, 0x200, 0x81, 0x4, 0x140, 0x5, 0x5, 0x1, 0x6, 0x4, 0xffff, 0x0, 0x3, 0x5782, 0x9, 0xfffffffe, 0x3, 0x4, 0x9, 0xfe63, 0x7d4, 0x1, 0x20000000, 0x6, 0x3, 0x3e7, 0x5, 0xd8e, 0xe, 0xfffffffc, 0xfffffffc, 0xfff, 0x7, 0x7, 0xe2, 0x3, 0x5, 0x8, 0x2, 0x3, 0x100, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8, 0x8000, 0xfffffc00, 0x3, 0xfff, 0x4290, 0x10001, 0x3, 0xcb191c2, 0x8, 0x8, 0x8, 0x3, 0x2, 0x8001, 0xe, 0x5, 0x69d, 0x101, 0x4, 0x8, 0xd51, 0x4800000, 0x5, 0x101, 0x3, 0xffffffdf, 0x3, 0x1ff00000, 0x7, 0x80, 0x2, 0x2, 0x1, 0x10000, 0xfffffff8, 0x639, 0x3ff, 0x8, 0x8e2, 0x99, 0x6, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffc, 0xffffff81, 0x4, 0xe1, 0xb, 0xfffff3c0, 0x7, 0x1c000, 0x9, 0x10001, 0x10000, 0x9, 0x5, 0x9, 0x7, 0x1, 0xfffffffd, 0xf00, 0x1, 0xffffffff, 0xfffffff8, 0x67, 0x7, 0xe1c1, 0x9, 0x7fff, 0x9, 0x8, 0x8, 0xfffffffe, 0x6, 0x8, 0xfffffff1, 0x4, 0x6, 0x3, 0x9, 0xe, 0x4082, 0xfffffffe, 0x0, 0x7, 0x8, 0xba90, 0xb, 0x3, 0x5, 0x2, 0x4, 0x8, 0xff, 0xfffffff0, 0x5, 0x2, 0x2, 0xfffffff7, 0x0, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0xe, 0x2, 0x80, 0x9, 0xd, 0xfffffffe, 0xd0, 0xfffff000, 0xa7a6, 0xa27a, 0x4, 0x5, 0x3, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x2, 0x200, 0xa4, 0x3ff, 0x3, 0x8, 0xb, 0x2, 0xb, 0x7ff, 0x4, 0x2, 0x1, 0x78b, 0x0, 0xa, 0x5, 0x81, 0x1, 0x8d4, 0x8, 0x2, 0x8, 0x6, 0x2b4, 0x2c8, 0x3, 0x7, 0x4, 0x8, 0x0, 0x2, 0x1, 0x189a, 0x3, 0x9, 0xffffffff, 0x401, 0x4, 0x1, 0x0, 0xf7, 0x7, 0x4, 0x8001, 0x5, 0x5, 0x514a, 0xfffffffa, 0x9, 0x5, 0x5, 0x1ff, 0xa2f, 0x3, 0x2, 0xb109, 0xfffffff8, 0xb17adbc, 0x337a, 0xe, 0xfca7, 0x6, 0x7, 0x7f, 0xffff0000, 0xd76, 0x5e, 0xffff, 0x4, 0x7, 0x8, 0x10000, 0x9, 0x2, 0xd62, 0x4, 0x9, 0xd, 0x0, 0x2, 0x2, 0x0, 0xbaa, 0x5, 0x80000000, 0x400, 0x81, 0x1000, 0x7fffffff, 0x7, 0x54cb, 0x40, 0x7e4f1400, 0xd, 0x9, 0x5, 0x5, 0x65f, 0xbd, 0xc, 0x4, 0x3, 0x7, 0x1, 0x2, 0x8001, 0xfd, 0x401, 0x1, 0x5, 0x335, 0x0, 0xc, 0x8, 0x2, 0xd7, 0x1, 0x4, 0x7f, 0x2c, 0xfffffff8, 0x9, 0x3, 0x9, 0x29b9, 0x3, 0x1, 0x6, 0x3, 0x8, 0x332c7d27, 0x1, 0x100, 0x80, 0x0, 0x1, 0x8, 0x8, 0x300000, 0x0, 0x7ff, 0x5, 0xfffffffb, 0xf2a1, 0x5, 0xe45c, 0x7f, 0x7f, 0x6, 0x80000000, 0x30000, 0x0, 0x80000001, 0xffff, 0x3, 0x0, 0x903d, 0x0, 0x4, 0xfffffff8, 0x9, 0x3, 0x4, 0xca9, 0x7ff, 0x6, 0x5, 0x2, 0x6, 0x40, 0x2, 0x80, 0x3, 0x7, 0x5f8f, 0x4, 0x8, 0x84e, 0x5, 0x1, 0x0, 0x80, 0x0, 0x7fff, 0x1, 0xcd77, 0x5, 0x80000001, 0x10000, 0x0, 0x8000, 0x2, 0x80000001, 0x4, 0x7484, 0x9, 0x8000, 0x2, 0x40, 0xaec6, 0x8, 0x233, 0x5, 0x3, 0x6, 0x7ff, 0x2, 0xb, 0x8, 0x4, 0x9, 0x3, 0xfb8, 0xfffffffb, 0x7f, 0xfffffe01, 0x0, 0x6, 0x8000, 0x4f30, 0x7fffffff, 0x0, 0x2, 0x1, 0x101, 0x66, 0x8000, 0x2, 0x5, 0xfffffff8, 0x4, 0x4, 0x0, 0x4, 0x2, 0x5, 0x3, 0x8001, 0x9, 0x3, 0x9, 0x0, 0x8, 0x7, 0x8, 0x6, 0x8, 0x0, 0x10, 0x1, 0xffffff47, 0x8, 0x0, 0x990, 0x3ff, 0x80000000, 0xfffffff2, 0x44f9c564, 0xfffffffa, 0x80000, 0xfe, 0xff, 0x8, 0x2, 0x1ffc, 0xad3, 0x2, 0x7, 0x5, 0x80000000, 0x749747b, 0x5, 0x1, 0x6, 0x23c7, 0x4, 0x10001, 0x0, 0x9, 0x5, 0x2, 0x9, 0x305a, 0x7, 0x4, 0x9, 0xffff, 0x90, 0x7c8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x1, 0x2, 0x2, 0xc7, 0x9, 0xfffffffd, 0x0, 0x36d3, 0x407, 0x7, 0x612, 0x3, 0x7, 0xb37, 0x77f3, 0xf, 0xfffffffd, 0xa, 0x8, 0x3, 0x6, 0xb, 0x5, 0xffff5490, 0x6e0f75ea, 0xd6e7, 0x400, 0xe64, 0xc8f1, 0x7e05, 0x1, 0x80, 0xc4b, 0x328dd9dc, 0x0, 0x3, 0x2, 0xffffffff, 0x1, 0xb, 0x7, 0x1, 0x3, 0x100, 0x0, 0x1f, 0x0, 0x3, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0xe, 0x101, 0xd, 0x98a9, 0x8, 0x40, 0x7ff, 0xff, 0x0, 0x2, 0x162, 0x9, 0x2, 0x8, 0x2, 0x8001, 0x1576, 0xfffff800, 0x2, 0x1, 0x3, 0x9, 0x2, 0x100, 0x200, 0x8, 0x0, 0x0, 0x4, 0x8, 0x5, 0x2, 0x7, 0x10000, 0x8c, 0x5, 0x2, 0xf2, 0xb1, 0x5, 0x200, 0xb, 0x8000, 0x7, 0x5, 0x80000001, 0x8, 0x9, 0x3, 0x8000, 0x7, 0x6, 0x9, 0x4, 0x8, 0x0, 0x9, 0xffffa3f4, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0x9, 0x7, 0x9, 0x7a5, 0x2, 0x7cd, 0x0, 0x7, 0x9, 0x6, 0x1, 0xd, 0xa6, 0x1000, 0x3, 0x0, 0x7, 0x9, 0xd, 0x40, 0x5, 0x5, 0x5, 0x3, 0x80, 0x4, 0xffffc000, 0x6, 0x10, 0x8, 0xfffffffe, 0x4, 0x81, 0xfffffff9, 0xffff, 0x9, 0x7, 0x8, 0x6, 0x4, 0x8, 0x1, 0x5, 0xffffffff, 0x2, 0x8, 0x80000000, 0x9, 0xc000000, 0x400, 0x6, 0x10001, 0x7, 0x3, 0x6, 0x0, 0x9, 0x10, 0x7, 0x8, 0x924a, 0x4, 0x9, 0xfff, 0x689, 0x4800000, 0x6, 0x1, 0x3, 0x80, 0x6, 0x8, 0xfff, 0x7, 0x2, 0x2, 0x9, 0xdcd, 0x0, 0x8, 0xffff6cb5, 0x1, 0x9b6c, 0x7, 0x7, 0x40, 0x26034831, 0x9, 0x1d, 0x80, 0x6, 0x8, 0x6, 0x3, 0x2, 0x6f81bf4f, 0x6, 0x5, 0x3, 0x3e, 0x16, 0x6, 0x8e89, 0x5, 0x7, 0xb2bdbd5, 0x5, 0x2, 0x7, 0x0, 0x8d, 0x4, 0x401, 0x7, 0x1, 0xa0, 0x4, 0x2c, 0x1, 0x3, 0x3, 0x9, 0x2, 0x9, 0x200, 0xb, 0x11a5, 0x8, 0xe00, 0x3, 0xbb08, 0x1, 0x2, 0x7, 0x1000, 0xb04, 0x7fffffff, 0xbd, 0xffffffff, 0x42, 0x0, 0x3, 0x94, 0x7ff, 0x8000, 0x8, 0x2, 0x85e, 0x5c9, 0x8001, 0x7, 0x480d, 0x0, 0x2, 0xffff7fff, 0x0, 0x0, 0x6, 0x5, 0x8, 0x4, 0x7, 0x3, 0xfffffffa, 0x7, 0x0, 0x80000000, 0x2, 0x33, 0x6, 0x3, 0x1, 0x5, 0x8, 0x2b4, 0x1, 0x7, 0x39, 0xfffffffa, 0xf, 0xa, 0xe, 0x5, 0x2, 0x0, 0x703d127c, 0x0, 0x9c37, 0x9, 0xfffffffb, 0x5, 0x3, 0x3, 0x7fffffff, 0x4]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x74, 0xa3, &(0x7f0000003200)) 2.518381424s ago: executing program 9 (id=931): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x44, &(0x7f0000000c00), 0x1, 0x777, &(0x7f0000000c40)="$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") r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000b76000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, &(0x7f0000000480)}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x8004587d, &(0x7f0000001400)={@id={0x2, 0x0, @d}}) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000140)=0x6) sched_setscheduler(r9, 0x5, &(0x7f0000000180)=0x800) ioctl$HIDIOCGDEVINFO(r7, 0x801c4803, &(0x7f0000000040)=""/28) setreuid(r8, r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_open_dev$hiddev(&(0x7f0000000080), 0x6, 0x14001) 2.445898952s ago: executing program 6 (id=932): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f00000007c0)="$eJzs3V1PZGcdAPD/GZgtr0KjF7VJa+PWANEdQOyWeFFrYvSqiVrvK8JACANDYGgXUpXGD2BijDXxqlfemPgBTEw/gjFpovdGjS/RXb3YRHfHnDMvy7JnFtgdZhB+v+RwnvOc58z/+c+Eh/PGmQCurJci4npE3K/X6zMRMdGsLzSnOGxMabs7t99dTqck6vU3/5FEJI26tNn0kdccbW42FBHf/FrEd5JH4+7uH2wsVSrlnebybG1ze3Z3/+DG+ubSWnmtvLWwMH9z8dXFVxbnupLnWES89pU//+SHP//qa7/+3Dt/eOuv099LmvURD/Lotkbqxey9aBmMiJ3zCNYng1mGAAD8P2jt5386ImZiIgayvTkAAADgMql/aSz+m0TUT2XodM0AAACAC6WQ3QObFErN+wDG4oX3S6XGPbyfiJFCpbpb++xqdW9rpXGv7GQUC6vrlfJc817hySgm6fJ8Vm4vR8Tdo8vlhYh4NiJ+PDGcLZeWq5WVfp/8AAAAgCti9Njx/78fbfKffvQLAAAA6LLJfncAAAAAOHeO/wEAAODyc/wPAAAAl9rX33gjneqt779eeXt/b6P69o2V8u5GaXNvubRc3dkurVWra9kz+zZPer1Ktbr9hdjauzVbK/9tvFFX3duqvbX+0FdgAwAAAD307Kc+/H0SEYdfHM6m1LV+dwroicGzNP7T+fUD6L2BfncA6Jsz/f0HLpVivzsA9F1ywvqhD76bv+I3HTfxX0UAAHDBTH0y//r/wInnBg4LPeoicE6c/4Ory/V/uLrOev3f/gJcHsUYCAfycLW1L9YPP1w/2px3fHhH5+v/x9TrT9QxAACga8ayKSmUIrLzAGNRKJRKEePZMUExWV2vlOci4mMR8buJ4jPp8ny2ZRLJSTcNAwAAAAAAAAAAAAAAAAAAAAAAAACZej2J+hksnqk1AAAAcBFEFP6SZE/zj5iaeHns+PmBa8ndiWweEe/87M33by3Vajvzaf0/2/W1nzbrP9+PMxgAAADAca3j9Gw+3O/eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDZ3Ln97nJr6mXcv385Iibz4g/GUDYfimJEjPwricEj2yURMdCF+IfvRcRzefGTtFsx2exFXvzhPscf7UJ8uMo+TMef1/N+/wrxUjbP//27mY1QT6/z+Fdoj38DOfHTuvF26fGe/+iXsx3jvxfx/GD++NOKn8T4w/EPG+PP9VPm+O1vHRx0Wlf/IGIq9+9P0m6TlmZrm9uzu/sHN9Y3l9bKa+WthYX5m4uvLr6yODe7ul4pN3/mxvjRC7+6/7j8RzrEn2znnz/+vnzK/O99dOv2xxvFYnvz5EH86ev5n/9zHeIXmp/6Z5rldP1Uq3zYKB/14i9++2Kr/HpO/ivH85+JY59/fv7Tp8x/5hs/+OMpmwIAPbC7f7CxVKmUd3pVKETvYp268FTvRrpb1KwZuRjpPEnh2oMsuvvK6ft6ERLMK3z/STdPd387rBrovOpCFYZOaBPxTF9HJgAAoNsePQYGAAAAAAAAAAAAAAAAAAAAeu2cnzR2Ly0Uj8U8zH524+n5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd878AAAD//+w2y28=") r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000011c0)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000050000000000000000000000ffe9ffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2.315514695s ago: executing program 9 (id=933): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x8}}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe92, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x36c2, &(0x7f0000000100)={0x0, 0x764f, 0x1, 0x1, 0x383}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x20000, &(0x7f0000002480)=""/131072, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000022480)=@generic={&(0x7f00000224c0)='./file0\x00', r3}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000022500)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r0}, 0x18) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) 2.315069845s ago: executing program 6 (id=934): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000b00)='./file0\x00', 0x104c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="757466383d312c73684f72746e616d653d77696e6e742c757466383d312c696f636861727365743d63703836352c756e695f786c6174653d302c726f6469722c757466383d302c756e695f786c6174653d302c756d61736b3d30303030303030303030303030303030303030303030352c726f806ee20000000000746e616e39352c646d61736b3d30303030303030303030303030303030303030303030322c73686f6d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c735d6f72746e616d653d77696e6e742c696f6368617273658a743d6e6f6e652c5bb04dec0b31deadc463336b886c9f6c42f1e2dbdc06a675af6264411d4c38491cd350f0d502a1b37e840500001332c746abe518461e0945e8826dca8f0a2872e7cbf5e2c1a6adf0993b1b795c927df7ffcb06c94f1442870caa56b935e64d8e34572c01c73b303903b6f45eca0e070f8004c61927642a7eef86c2ea842c4a00000000"], 0x7, 0x2d2, &(0x7f0000000c40)="$eJzs3cFrI1UcB/DfpNMk6iE9eBLBAT14WrZ79dIiuyD25NKDetDidkGaorRQUMHoyasXDx78CwTBP8SD/g1eBQ+CK6w8mclMZrIJ6WbZVLSfz2V/O3nfN7/3kpI20Nf3Xzw9uVfE/b9TSsPIorcXe/Egi53oReOLmLP3dQAA/2UPUorf09Q6uSwihptrCwDYoPr9/+fV7/95W/54JW0BABt09+133tw/OLj9VlEM487pVxeH5U/25b/Tx/fvx4cxjuO4GaN4GFF9ULAd1XcLZXknpTTJi9JOvHI6uTgsk6fv/VTPv/9bRJXfjVHsVJdmnzZU+TcObu8WU538pOzj2fr+e2X+Vozi+Vl4Ln9rST4O+/Hqy53+b8QofvkgPopx3KuaaPOf7xbF6+mbPz97t2yvzGeTi8NBNa6Vttr64z+u6vkBAAAAAAAAAAAAAAAAAAAAAOD/6UZ9ds4gqvN7ykv1+TtbD8v/bEfR2Jk/n2eaz5qJuucDpZQmKb5rzte5WRRFqge2+TxeyLsHCwIAAAAAAAAAAAAAAAAAAMD1df7JpydH4/Hx2VMpmtMA8oj4627EE8yz0NhLURe9WJoa1IGj8bhXl/Nj8u6V2GrGZBHtmOaunZnLRTzpbuSx1tqfWei5Lr7/Yd27Dy8fs738Xk+zaLbz5ChbvoeDaK4M6436th/RjunHY96r/+iVNJrOk9Z6CvpLHxpdGm8WOpvnuaqYrEhFtqqx136dmzB7dBX9aldn+zyMdqO266Lbz/xr47Fez+Wc1VfKgsxpHQAAAAAAAAAAAAAAAAAAsFGLv3jf8eXKaC8NNtYWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyp9u//r1FM6vDx2Xl+yeB+nJ3/y0sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGvgnAAD//+4ZUFg=") syz_mount_image$f2fs(&(0x7f0000000b40), &(0x7f0000000300)='./cgroup.cpu/cpuset.cpus\x00', 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x3, 0x5534, &(0x7f0000001480)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfbVxo6Q+quu9VuoNj9AhddllxFY5Ar9ALcAa667a7CCLsSRSiECA2JiTfJ9nD2NbzA7GZmacBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE7pbzmf/P71ddA0zmrdzCHvKJomCQAAAK/UspxPqg+juj9M1z+kS59TP4uIPCIeGrsX8WYrZpHilDueL+/l8CeiirB5Rz8d7yLiWzquPp36VwAAAICXazGdjdOqenUanTshulRP2uTvv7cUL4uIcvSvpWj55vTloEfX++eHNv/vXvzccTc7LrVqYisal8zcqKbcem1F26+4raRJzeBOk9VN3l06AABAV7ZHAh2OQgAAAOjYj3MnwHlUq56pFj8V8PfrJi0Ivt3qAQAAABfo2KpnAAAA4DkaPnq3Gv9fwP5/H//b/w8AAACerN7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNalvPJYjobN42zWjfTzrcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK4/j5XnGqzGTbfQ6k7x7Xkk+nRrfTo1f58Y/yVh3/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAxhMAaA+R8q7qT3P6yE6hlEmIFCSOjiAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKPP9fK9w6/hSPJv27C0HknWTg1bpzGHae+H8dgZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDJzv37xk3FAQD/3vl8pQVECChDEKISAyw0vZaWrgygiIE/ASlKryVw5UebgVYVKAsbytwFwYgQEihs/R86t1KXsnW4oUhMDCD77OT1KOKgin0kn4/0/L62HL/vc6IoXz/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgyfnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6iKRJw=") r1 = openat(0xffffffffffffff9c, &(0x7f00000069c0)='./file1\x00', 0x183341, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) write$selinux_create(r1, &(0x7f0000006a00)=@access={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'unconfined', 0x20, 0x8000000000000001}, 0x45) r2 = openat(0xffffffffffffff9c, &(0x7f0000006a80)='./file0\x00', 0x8642, 0x14) pwrite64(r2, &(0x7f0000006ac0)='2', 0x1, 0x8080c61) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000c00)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000006b00)={0x0, 0x1, 0x0, &(0x7f0000006b40), 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000006b80)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000006bc0)={0x1, 0x1, 0x0, &(0x7f0000006c00), 0x0, 0xa000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000006c80)=0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x4008af04, &(0x7f0000006cc0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) syz_clone3(&(0x7f0000000540)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.220634225s ago: executing program 9 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x5, 0xe, 0x0, &(0x7f0000000640)="7993ff01190000e5ffa53b00008f", 0x0, 0x3ff, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f00000007c0)="$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") (async) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000080)={0x0, 0x40, 0x0, 0x0}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c40)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000c80)=0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x2) (async) r9 = dup(r8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) (async) syz_ublk_setup_queues(r9, r7, &(0x7f0000000cc0)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x40) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x64) creat(&(0x7f0000001640)='./bus\x00', 0x44) (async) mount(&(0x7f0000001680)=@loop={'/dev/loop', 0x0}, &(0x7f00000016c0)='./bus\x00', 0x0, 0x301400, 0x0) setuid(0xffffffffffffffff) r10 = open(&(0x7f0000001700)='./bus\x00', 0x64842, 0x47) pwritev2(r10, &(0x7f0000001740)=[{&(0x7f0000001780)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x1f) 1.902198607s ago: executing program 6 (id=936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003580)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4000) 1.901967537s ago: executing program 6 (id=937): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000400), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000740)="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", 0x544, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000d00)=0x1b) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56, 0x0, 0x0, 0x2000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x4, 0x1}, 0x50) fcntl$getown(0xffffffffffffffff, 0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d40), 0xca00, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000088d000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/3, 0x2}, 0x20) 1.766184351s ago: executing program 4 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002000dd8d000000100000000002"], 0x30}}, 0x4090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002000dd8d000000100000000002"], 0x30}}, 0x4090) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) (async) 1.712773306s ago: executing program 4 (id=939): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x4410, &(0x7f0000000580)=ANY=[], 0x1, 0x22e, &(0x7f00000005c0)="$eJzs2r+LHGUYB/BnzguJFy674i8SEF+0UJsht7VFDk1AXFA0K0RBMvFmddlx99hZDlbEXKWtf4K1WNoJktLmQPwLLOyuuTKFOJLb87IJJyJiNujn08wD73zheXmHl6eY/Ze//HjYr/N+MY2VLIuVS7Ebt7Nox0r8YTdeeuHaD8+8fe3d1ze73ctvpXRl8+pGJ6V07tnv3/v0m+duTc++8+25707HXvv9/YPOL3tP7Z3f/+3qR4M6Deo0Gk9TkW6Mx9PiRlWmrUE9zFN6syqLukyDUV1O7lnvV+Pt7VkqRlvra9uTsq5TMZqlYTlL03GaTmap+LAYjFKe52l9Lfgnel/fbpo4aE5dj6ZpHv0qzt6K9Z+jFdljKXv8Uvbk9ezp3ez8QdO0lt0q/wrn//+2cKmfiai+2Ont9ObP+fqrP8YgqijjYrTi17jzmRyZ11de616+mA614/Pq5lH+5qneI4f5zf5RfiNa0T45vzHPp8X8Tu90rC3mO9GKJ07Od07Mn4kXn1/I59GKnz6IcVSxFXeyd/OfbaT0yhvd+/IXDt8DAPivydOx9r3zz3x+y/M/W5/nj+erv54P75uvVuPC6nL3TkQ9+2RYVFU5URwXq/FQtKFQLLFY9s3Eg3D30JfdCQAAAAAAAAAAAH/Hg/idcNl7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHm6/BwAA//+HytTx") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x800, 0x0) getdents64(r0, &(0x7f0000000400)=""/48, 0x30) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.712210137s ago: executing program 4 (id=940): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000140)='27', 0x2) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 1.711508557s ago: executing program 4 (id=941): gettid() prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="120000001e0000000400000001"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f00000005c0), &(0x7f0000000600)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000680), &(0x7f00000006c0)=@tcp=r2, 0x1}, 0x20) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x400000000000041, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_ublk_setup_io_uring(0x2785, 0x0, 0x0, 0x0, &(0x7f0000003840)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f00000016c0)=""/4096, &(0x7f00000026c0)=0x28) (async) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f00000016c0)=""/4096, &(0x7f00000026c0)=0x28) syz_mount_image$f2fs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2800000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f00000039c0)="$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") add_key$fscrypt_v1(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="667363727970743138000000000000000000000000000000002cdbed7a0ad4063ba4a775554c213bb3a52dd10cc14267ac939ad8d2bf040d240f7678896a1631e0766c01999dc04e05be8bc7a080f43154c37222bb9d2c371eadc46a98a48062326858d9276b51a5ab769ca715"], 0x0, 0x0, 0xfffffffffffffffa) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x0, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x0, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000004c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x200}, 0x2}}, 0x10) (async) bind$tipc(r4, &(0x7f00000004c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x200}, 0x2}}, 0x10) connect$inet6(r4, 0x0, 0x38) (async) connect$inet6(r4, 0x0, 0x38) r5 = socket$inet6(0xa, 0x6, 0xb8) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000140), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) 1.57948048s ago: executing program 1 (id=942): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000440), 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") (async) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x109301) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000002240)='2', 0xfdef, 0xe7c) (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) truncate(&(0x7f0000000000)='./file0/file1\x00', 0x10) 1.555363253s ago: executing program 1 (id=943): r0 = open(&(0x7f0000000280)='./bus\x00', 0x103143, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x3018000, &(0x7f0000000480)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f00000004c0)="$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") openat$kvm(0x0, 0x0, 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000b00)={0x0, &(0x7f0000000b40)=[@in_dx={0x69, 0x20, {0x123, 0x2}}, @out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000c40)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000c80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000d80), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) creat(&(0x7f0000000e40)='./bus\x00', 0xd4) io_setup(0x1bf9, &(0x7f0000000e80)) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000001200)=[@uexit={0x0, 0x18, 0x5}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x4, 0x6f}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x4, 0x69}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x600c, 0x800000000000, 0x4, 0x5ac069eb}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0xd8, 0x6, 0x2}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x1e, @gpa=0x4000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc02, 0x0, 0x8, 0xe1fa}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x82e6, 0x4, 0xd}}, @nested_load_code={0x12e, 0x58, {0x3, "b90f0400000f3226450f01c966b8fe008ec0653e0f01c50f06b8010000000f01c167660f519603000000b8010000000f01c166b8c2008ee8f33636410f0053b0"}}, @in_dx={0x69, 0x20, {0xf29d}}, @wrmsr={0x65, 0x20, {0x1c9, 0x4}}], 0x270}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)='syzkaller\x00'}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000021c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x46}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x80) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000002200)={[0xfff, 0x400, 0x4, 0x101, 0xffff8001, 0x43b0, 0x5, 0x0, 0x6, 0x5, 0x400, 0x2, 0x1, 0x2, 0x8, 0xb, 0x2, 0x7ffb, 0xe9, 0x1, 0x9, 0x9, 0x6, 0x6, 0x1, 0x3, 0x46, 0x1ff, 0x1000, 0x0, 0x5, 0x2892990c, 0xd0, 0xb, 0xfff, 0x7fff, 0xe, 0x7, 0x4, 0x2, 0x20d, 0x5, 0x3, 0x9, 0x7, 0x9, 0xff, 0x5, 0x3, 0xc, 0x5, 0x1, 0x10000, 0x9f00000, 0x80000000, 0x1, 0x80000000, 0x30000, 0xfffffffb, 0x2, 0x0, 0x0, 0x3, 0x40, 0x10001, 0x7fffffff, 0x7e6, 0x5, 0x91, 0x4, 0x5, 0xe, 0x2a, 0x8, 0x1, 0xd95, 0x2, 0x4, 0x8, 0x2, 0xec77, 0x0, 0x5, 0x4, 0x7, 0x2, 0x3, 0x8000, 0x3, 0x657, 0x4, 0x1, 0x400, 0x1, 0x10001, 0x1, 0x2, 0x7, 0xa012, 0x1000, 0x9, 0x9, 0xdbef, 0x7, 0x63c, 0x6, 0x10000, 0xffff, 0x4fc4366, 0x0, 0x7, 0x1b4e, 0xb, 0xe, 0x1fd, 0x93b1, 0x7ff, 0x1, 0x6, 0x80a8, 0x5, 0x81, 0x3, 0xb, 0x7a, 0x80, 0x72cd, 0x1, 0x8, 0xcc6e, 0x8, 0x9, 0x223a, 0x3, 0x3, 0x0, 0x4, 0x4, 0x1, 0x299, 0x2, 0x3, 0x8001, 0x4, 0x1, 0xb, 0x4, 0x259, 0x6, 0x2, 0x0, 0xc4, 0x2, 0x80, 0x4, 0x4, 0x7, 0xe29, 0x6, 0xfffffff8, 0x4, 0x8, 0x1f, 0x4, 0x95, 0x9, 0x5, 0x401, 0x0, 0x4, 0x7fffffff, 0x5, 0xff, 0xfff, 0x8d6, 0xb00, 0x200, 0x4, 0xc8, 0x170380fd, 0x12bd, 0x7f6, 0x8c, 0x5, 0x80, 0x1, 0x3, 0x9, 0x2, 0x5, 0xff, 0x9, 0x5, 0xb7, 0x10, 0x80000001, 0xfffffff8, 0x0, 0x6, 0x800, 0x2, 0x3, 0xfffffffb, 0xe, 0x5, 0xfff, 0x0, 0x2, 0xffffffff, 0x1, 0xfffffffb, 0x10001, 0x6, 0xc09, 0x5, 0x1000, 0x9, 0x0, 0x8, 0x9, 0x9, 0xb68, 0xfff, 0x5, 0xffffffff, 0x4, 0x5d, 0x7fff, 0x2, 0x7fff, 0x9, 0x0, 0xe000000, 0x0, 0x6, 0x81, 0x5a82c482, 0x10, 0x8, 0x2, 0x5, 0x3, 0x4, 0x6, 0x81, 0x200, 0x81, 0x4, 0x140, 0x5, 0x5, 0x1, 0x6, 0x4, 0xffff, 0x0, 0x3, 0x5782, 0x9, 0xfffffffe, 0x3, 0x4, 0x9, 0xfe63, 0x7d4, 0x1, 0x20000000, 0x6, 0x3, 0x3e7, 0x5, 0xd8e, 0xe, 0xfffffffc, 0xfffffffc, 0xfff, 0x7, 0x7, 0xe2, 0x3, 0x5, 0x8, 0x2, 0x3, 0x100, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8, 0x8000, 0xfffffc00, 0x3, 0xfff, 0x4290, 0x10001, 0x3, 0xcb191c2, 0x8, 0x8, 0x8, 0x3, 0x2, 0x8001, 0xe, 0x5, 0x69d, 0x101, 0x4, 0x8, 0xd51, 0x4800000, 0x5, 0x101, 0x3, 0xffffffdf, 0x3, 0x1ff00000, 0x7, 0x80, 0x2, 0x2, 0x1, 0x10000, 0xfffffff8, 0x639, 0x3ff, 0x8, 0x8e2, 0x99, 0x6, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffc, 0xffffff81, 0x4, 0xe1, 0xb, 0xfffff3c0, 0x7, 0x1c000, 0x9, 0x10001, 0x10000, 0x9, 0x5, 0x9, 0x7, 0x1, 0xfffffffd, 0xf00, 0x1, 0xffffffff, 0xfffffff8, 0x67, 0x7, 0xe1c1, 0x9, 0x7fff, 0x9, 0x8, 0x8, 0xfffffffe, 0x6, 0x8, 0xfffffff1, 0x4, 0x6, 0x3, 0x9, 0xe, 0x4082, 0xfffffffe, 0x0, 0x7, 0x8, 0xba90, 0xb, 0x3, 0x5, 0x2, 0x4, 0x8, 0xff, 0xfffffff0, 0x5, 0x2, 0x2, 0xfffffff7, 0x0, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0xe, 0x2, 0x80, 0x9, 0xd, 0xfffffffe, 0xd0, 0xfffff000, 0xa7a6, 0xa27a, 0x4, 0x5, 0x3, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x2, 0x200, 0xa4, 0x3ff, 0x3, 0x8, 0xb, 0x2, 0xb, 0x7ff, 0x4, 0x2, 0x1, 0x78b, 0x0, 0xa, 0x5, 0x81, 0x1, 0x8d4, 0x8, 0x2, 0x8, 0x6, 0x2b4, 0x2c8, 0x3, 0x7, 0x4, 0x8, 0x0, 0x2, 0x1, 0x189a, 0x3, 0x9, 0xffffffff, 0x401, 0x4, 0x1, 0x0, 0xf7, 0x7, 0x4, 0x8001, 0x5, 0x5, 0x514a, 0xfffffffa, 0x9, 0x5, 0x5, 0x1ff, 0xa2f, 0x3, 0x2, 0xb109, 0xfffffff8, 0xb17adbc, 0x337a, 0xe, 0xfca7, 0x6, 0x7, 0x7f, 0xffff0000, 0xd76, 0x5e, 0xffff, 0x4, 0x7, 0x8, 0x10000, 0x9, 0x2, 0xd62, 0x4, 0x9, 0xd, 0x0, 0x2, 0x2, 0x0, 0xbaa, 0x5, 0x80000000, 0x400, 0x81, 0x1000, 0x7fffffff, 0x7, 0x54cb, 0x40, 0x7e4f1400, 0xd, 0x9, 0x5, 0x5, 0x65f, 0xbd, 0xc, 0x4, 0x3, 0x7, 0x1, 0x2, 0x8001, 0xfd, 0x401, 0x1, 0x5, 0x335, 0x0, 0xc, 0x8, 0x2, 0xd7, 0x1, 0x4, 0x7f, 0x2c, 0xfffffff8, 0x9, 0x3, 0x9, 0x29b9, 0x3, 0x1, 0x6, 0x3, 0x8, 0x332c7d27, 0x1, 0x100, 0x80, 0x0, 0x1, 0x8, 0x8, 0x300000, 0x0, 0x7ff, 0x5, 0xfffffffb, 0xf2a1, 0x5, 0xe45c, 0x7f, 0x7f, 0x6, 0x80000000, 0x30000, 0x0, 0x80000001, 0xffff, 0x3, 0x0, 0x903d, 0x0, 0x4, 0xfffffff8, 0x9, 0x3, 0x4, 0xca9, 0x7ff, 0x6, 0x5, 0x2, 0x6, 0x40, 0x2, 0x80, 0x3, 0x7, 0x5f8f, 0x4, 0x8, 0x84e, 0x5, 0x1, 0x0, 0x80, 0x0, 0x7fff, 0x1, 0xcd77, 0x5, 0x80000001, 0x10000, 0x0, 0x8000, 0x2, 0x80000001, 0x4, 0x7484, 0x9, 0x8000, 0x2, 0x40, 0xaec6, 0x8, 0x233, 0x5, 0x3, 0x6, 0x7ff, 0x2, 0xb, 0x8, 0x4, 0x9, 0x3, 0xfb8, 0xfffffffb, 0x7f, 0xfffffe01, 0x0, 0x6, 0x8000, 0x4f30, 0x7fffffff, 0x0, 0x2, 0x1, 0x101, 0x66, 0x8000, 0x2, 0x5, 0xfffffff8, 0x4, 0x4, 0x0, 0x4, 0x2, 0x5, 0x3, 0x8001, 0x9, 0x3, 0x9, 0x0, 0x8, 0x7, 0x8, 0x6, 0x8, 0x0, 0x10, 0x1, 0xffffff47, 0x8, 0x0, 0x990, 0x3ff, 0x80000000, 0xfffffff2, 0x44f9c564, 0xfffffffa, 0x80000, 0xfe, 0xff, 0x8, 0x2, 0x1ffc, 0xad3, 0x2, 0x7, 0x5, 0x80000000, 0x749747b, 0x5, 0x1, 0x6, 0x23c7, 0x4, 0x10001, 0x0, 0x9, 0x5, 0x2, 0x9, 0x305a, 0x7, 0x4, 0x9, 0xffff, 0x90, 0x7c8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x1, 0x2, 0x2, 0xc7, 0x9, 0xfffffffd, 0x0, 0x36d3, 0x407, 0x7, 0x612, 0x3, 0x7, 0xb37, 0x77f3, 0xf, 0xfffffffd, 0xa, 0x8, 0x3, 0x6, 0xb, 0x5, 0xffff5490, 0x6e0f75ea, 0xd6e7, 0x400, 0xe64, 0xc8f1, 0x7e05, 0x1, 0x80, 0xc4b, 0x328dd9dc, 0x0, 0x3, 0x2, 0xffffffff, 0x1, 0xb, 0x7, 0x1, 0x3, 0x100, 0x0, 0x1f, 0x0, 0x3, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0xe, 0x101, 0xd, 0x98a9, 0x8, 0x40, 0x7ff, 0xff, 0x0, 0x2, 0x162, 0x9, 0x2, 0x8, 0x2, 0x8001, 0x1576, 0xfffff800, 0x2, 0x1, 0x3, 0x9, 0x2, 0x100, 0x200, 0x8, 0x0, 0x0, 0x4, 0x8, 0x5, 0x2, 0x7, 0x10000, 0x8c, 0x5, 0x2, 0xf2, 0xb1, 0x5, 0x200, 0xb, 0x8000, 0x7, 0x5, 0x80000001, 0x8, 0x9, 0x3, 0x8000, 0x7, 0x6, 0x9, 0x4, 0x8, 0x0, 0x9, 0xffffa3f4, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0x9, 0x7, 0x9, 0x7a5, 0x2, 0x7cd, 0x0, 0x7, 0x9, 0x6, 0x1, 0xd, 0xa6, 0x1000, 0x3, 0x0, 0x7, 0x9, 0xd, 0x40, 0x5, 0x5, 0x5, 0x3, 0x80, 0x4, 0xffffc000, 0x6, 0x10, 0x8, 0xfffffffe, 0x4, 0x81, 0xfffffff9, 0xffff, 0x9, 0x7, 0x8, 0x6, 0x4, 0x8, 0x1, 0x5, 0xffffffff, 0x2, 0x8, 0x80000000, 0x9, 0xc000000, 0x400, 0x6, 0x10001, 0x7, 0x3, 0x6, 0x0, 0x9, 0x10, 0x7, 0x8, 0x924a, 0x4, 0x9, 0xfff, 0x689, 0x4800000, 0x6, 0x1, 0x3, 0x80, 0x6, 0x8, 0xfff, 0x7, 0x2, 0x2, 0x9, 0xdcd, 0x0, 0x8, 0xffff6cb5, 0x1, 0x9b6c, 0x7, 0x7, 0x40, 0x26034831, 0x9, 0x1d, 0x80, 0x6, 0x8, 0x6, 0x3, 0x2, 0x6f81bf4f, 0x6, 0x5, 0x3, 0x3e, 0x16, 0x6, 0x8e89, 0x5, 0x7, 0xb2bdbd5, 0x5, 0x2, 0x7, 0x0, 0x8d, 0x4, 0x401, 0x7, 0x1, 0xa0, 0x4, 0x2c, 0x1, 0x3, 0x3, 0x9, 0x2, 0x9, 0x200, 0xb, 0x11a5, 0x8, 0xe00, 0x3, 0xbb08, 0x1, 0x2, 0x7, 0x1000, 0xb04, 0x7fffffff, 0xbd, 0xffffffff, 0x42, 0x0, 0x3, 0x94, 0x7ff, 0x8000, 0x8, 0x2, 0x85e, 0x5c9, 0x8001, 0x7, 0x480d, 0x0, 0x2, 0xffff7fff, 0x0, 0x0, 0x6, 0x5, 0x8, 0x4, 0x7, 0x3, 0xfffffffa, 0x7, 0x0, 0x80000000, 0x2, 0x33, 0x6, 0x3, 0x1, 0x5, 0x8, 0x2b4, 0x1, 0x7, 0x39, 0xfffffffa, 0xf, 0xa, 0xe, 0x5, 0x2, 0x0, 0x703d127c, 0x0, 0x9c37, 0x9, 0xfffffffb, 0x5, 0x3, 0x3, 0x7fffffff, 0x4]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x74, 0xa3, &(0x7f0000003200)) 1.517993066s ago: executing program 4 (id=944): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@deltfilter={0x5c, 0x2d, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xa, 0xffff}, {0x8, 0xfff1}, {0x6, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb}]}}, @TCA_CHAIN={0x8, 0xb, 0xb4e}, @TCA_CHAIN={0x8, 0xb, 0x800}, @TCA_CHAIN={0x8, 0xb, 0xb137}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) fsopen(&(0x7f0000000080)='vfat\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x183341, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x121000, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240600008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r9], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r10 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x44, &(0x7f0000000c00), 0x1, 0x777, &(0x7f0000000c40)="$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") r11 = openat(r10, &(0x7f0000000040)='./proc\x00', 0x7ad00, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0x8004587d, &(0x7f0000001400)={@id={0x2, 0x0, @d}}) fstat(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r12) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) 1.295547399s ago: executing program 9 (id=945): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x8}}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe92, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x36c2, &(0x7f0000000100)={0x0, 0x764f, 0x1, 0x1, 0x383}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x20000, &(0x7f0000002480)=""/131072, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000022480)=@generic={&(0x7f00000224c0)='./file0\x00', r3}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000022500)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r0}, 0x18) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) 1.244138684s ago: executing program 8 (id=946): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000b00)='./file0\x00', 0x104c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="757466383d312c73684f72746e616d653d77696e6e742c757466383d312c696f636861727365743d63703836352c756e695f786c6174653d302c726f6469722c757466383d302c756e695f786c6174653d302c756d61736b3d30303030303030303030303030303030303030303030352c726f806ee20000000000746e616e39352c646d61736b3d30303030303030303030303030303030303030303030322c73686f6d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c735d6f72746e616d653d77696e6e742c696f6368617273658a743d6e6f6e652c5bb04dec0b31deadc463336b886c9f6c42f1e2dbdc06a675af6264411d4c38491cd350f0d502a1b37e840500001332c746abe518461e0945e8826dca8f0a2872e7cbf5e2c1a6adf0993b1b795c927df7ffcb06c94f1442870caa56b935e64d8e34572c01c73b303903b6f45eca0e070f8004c61927642a7eef86c2ea842c4a00000000"], 0x7, 0x2d2, &(0x7f0000000c40)="$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") syz_mount_image$f2fs(&(0x7f0000000b40), &(0x7f0000000300)='./cgroup.cpu/cpuset.cpus\x00', 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x3, 0x5534, &(0x7f0000001480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000069c0)='./file1\x00', 0x183341, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) write$selinux_create(r1, &(0x7f0000006a00)=@access={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'unconfined', 0x20, 0x8000000000000001}, 0x45) r2 = openat(0xffffffffffffff9c, &(0x7f0000006a80)='./file0\x00', 0x8642, 0x14) pwrite64(r2, &(0x7f0000006ac0)='2', 0x1, 0x8080c61) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000c00)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000006b00)={0x0, 0x1, 0x0, &(0x7f0000006b40), 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000006b80)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000006bc0)={0x1, 0x1, 0x0, &(0x7f0000006c00), 0x0, 0xa000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000006c80)=0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x4008af04, &(0x7f0000006cc0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) syz_clone3(&(0x7f0000000540)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.211944088s ago: executing program 9 (id=947): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000011c0)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000050000000000000000000000ffe9ffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.08242342s ago: executing program 6 (id=948): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@global=@item_012={0x1, 0x1, 0x0, '0'}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_4={0x3, 0x0, 0xa, "8c612454"}, @local=@item_012={0x1, 0x2, 0x7, "04"}, @global=@item_4={0x3, 0x1, 0x1, "653d158d"}, @global=@item_4={0x3, 0x1, 0xa, "d272ecd0"}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x0, '\b'}]}}, 0x0}, 0x0) 1.08209659s ago: executing program 9 (id=949): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0xa) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) (async, rerun: 64) sched_setscheduler(r2, 0x1, &(0x7f0000000140)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000240), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f0000000280), 0x4000087, 0x2, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (rerun: 32) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x150}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newpolicy={0xb8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async, rerun: 32) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, &(0x7f00000004c0), 0x97ff, 0x400000, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) (async) close(r5) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x15, 0x8, 0x2, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1000, r8, 0x1000000}, 0x38) r9 = dup(r1) (async, rerun: 64) r10 = open(&(0x7f0000000600)='./file1\x00', 0x109cc2, 0x158) (rerun: 64) ftruncate(r10, 0x200004) sendfile(r9, r10, 0x0, 0x80001d00c0d1) (async) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 775.218712ms ago: executing program 8 (id=950): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000003580)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000008000000000000000002b000000000000000000000000000001000202000000008401050000000000000000000000ffffac1414aa000000003c00000000000000ac1414bb000000000000000000000000ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000004d33c0000000a0000000000000000000000000000000000000002000000000200000002000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003030000000000000002000000000000ac1e0101000000000000000000000000000000002b000000000000000a0101010000000000000000000000000435000004e2000000000000bf0a000000000001ff010000000000000000000000000001000004d23c"], 0x23c}}, 0x4000) 552.767604ms ago: executing program 8 (id=951): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000140)='27', 0x2) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0x0) 410.087939ms ago: executing program 8 (id=952): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001800000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fstat(r0, &(0x7f0000000080)) r3 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) r4 = open(&(0x7f0000000540)='.\x00', 0x80, 0x0) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000202, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) move_mount(r5, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@arena={0x21, 0x0, 0x0, 0x3f, 0x40400, r2, 0x7, '\x00', 0x0, r4, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000880)={'gre0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x20, 0x700, 0x6, 0x1, {{0x10, 0x4, 0x1, 0x17, 0x40, 0x65, 0x0, 0xae, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ssrr={0x89, 0xf, 0xcc, [@loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x1c, 0x92, 0x0, 0x1, [0x200, 0x0, 0x9, 0x3027, 0x4e14, 0x9]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x8001, '\x00', r7, r5, 0x0, 0x4, 0x3}, 0x50) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0xa, r8, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)='id\x00\x00\x00\x00\x00!N\x8d\xa5C\xf3\xc7\x1a\x86\xa3\x89j\xca\xe3\xbc\x83g\xb3v\xd9\xdfa\xedY\xebn>[5\xe9\x00\xf5\x10\x05$\xde\x05\xfa\xcf\x80B\x17\x85\xa5\x8a\x89\xf6~p3\xac@\xdb\xc8o\xc6\xa7\x14\x17O\xf8A/\xf0\x9cO\xcbfO\x18 L_\x00r\x89S\xd7tv\x18\x04\xb8a\x12\x10\xca4\xae\x0e\x05\xb3\xdd\xed%\xb4\xb4R\x8b\x83\xbe\xf5\xdb\x80j\xdf\xd3\xe7\n\xd7Y\nD\xcc\xb0T\xfb\x85\xd9\xd8u\x01We\xf5\xf9o\x00\xce\x80\x00\x00\x00\x00\x00\x00\x00\x88@I\xc5\xfe\x01h4\xae\x90\'\x9c7\x9d\x10\xa5\xa3b5\xafL11`\xfe\b \x90\xf9\x93\xb4B\xb8\x18\xdb{\xdf\x19\x1e\xbc\xf6\xc1\xc8\xd0\xdc\xda\xf7\xba\x18\xc7\x10r\xb7%\x13\xaa\r$\xa6\x83\x83)\xae\xd7y\xbe\\\x94\xb1\x8eb\x1f\xf1\xe9A\x82P\xcbmQ\x01\x9dn\xb7\x18\x1c\x9b\x12.A\x01\x0e\xb3h\xf6fq\xacC\x8cOv\'w\fv\xa1\v\x16\xf8\xb7s1Co\xa9\xb8\xb5Uy\x1d2\x99\x95X\aA`\x1aZH\x89\x1e\'\xc0\x88)\x86V\xda\xc2]^[\x82-O\xd9\xf1\x17o\xaa\xee]\x84\xe0\xaaw\xfd\xa8\xa3\xba\xd63\xf9`\xbb\xb3-\xc1\x8a\x0fI\xac\xa7\xc2h\xc0m\xb5]\xe8S\xd7\xc5\x1d@\xfc\xb5\xf2p\f\v?\x89\x93A\x9cwa1\xfd\x80\xd8\xbe\x14\xdb\xff\xe3\xc8{\xbb\xc3\xb6q\x92\xf9\xdb\xc9\xb6W\x00\xd6+_P\x90\x18\xc1\xc2\xcbA\xfa\x02\x92\xe5\xf7\xb5\xbf\x15\xb1\xe0)\x92i\xc1V\xfb\x1e\xd0\xc9\xf0\v\x1c\xbfd\x7fY\x00\x00\x9ae\xee,88=\xc4)\x7f\x05\xce\x190^h(\\9[H\xa2\x16\xbf,\xf0\x16\xcd\xab\x97\xc6^*\xd1\x8fz\x12\x10\xfd\x90V\xad<\x89\xb8\xe4\xe5\xc6NL\xa5\xe2\x9e\xd6`\xe1\x1f\x10\tXQ\x15\xaa\xfal\xf4\xd9\xca\xc2r?') 332.497757ms ago: executing program 8 (id=953): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0xff, 0x0, 0x0) r0 = inotify_init() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x5db) mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x1004002, 0x0) (async) mount$incfs(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x1004002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001b00), 0x80800) (async) pipe2$9p(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r3, &(0x7f0000001b40)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000001b40)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000001b80)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000001bc0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), 0x40, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYRES64=r4]) (async) mount$9p_fd(0x0, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), 0x40, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYRES64=r4]) chdir(&(0x7f0000001cc0)='./file0\x00') socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000001d00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) chown(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000040)=';', 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f00000018c0)='GPL\x00'}, 0x48) socket$netlink(0x10, 0x3, 0xa) (async) r8 = socket$netlink(0x10, 0x3, 0xa) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001900)=r7, 0x4) sendmsg$AUDIT_SET(r8, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfe, {0x32, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2b80ead6, 0x88001, 0x6, 0x0, 0x80400000, 0x80000000}}, 0x3c}, 0x1, 0x0, 0x0, 0xa0}, 0x4000010) (async) sendmsg$AUDIT_SET(r8, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfe, {0x32, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2b80ead6, 0x88001, 0x6, 0x0, 0x80400000, 0x80000000}}, 0x3c}, 0x1, 0x0, 0x0, 0xa0}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x8, 0x6, &(0x7f0000001400)=ANY=[@ANYBLOB="b4060000f0ffffff72113900000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000001440)='GPL\x00', 0x4, 0xc3, &(0x7f0000001480)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x8, 0x6, &(0x7f0000001400)=ANY=[@ANYBLOB="b4060000f0ffffff72113900000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000001440)='GPL\x00', 0x4, 0xc3, &(0x7f0000001480)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000001a00)=0x8001, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000001a00)=0x8001, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000240)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 311.281139ms ago: executing program 1 (id=954): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000d40)='./file1\x00', 0x210000, &(0x7f0000000d80), 0xfc, 0x56f, &(0x7f0000001540)="$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") (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) symlink(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) readlink(&(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001fc0)=""/4096, 0x1000) 582.09µs ago: executing program 8 (id=955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x40000000) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @private0, 0x1}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x4a}, @timestamp={0x7, 0x4, 0x5}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000200)={0x4, 0xfffffffffffffff7}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x78b}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r3], 0x3e, 0x30e, &(0x7f00000008c0)="$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") 0s ago: executing program 1 (id=956): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000002c0), 0x2000090, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r6, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x10008f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): bhb_loop+0x30/0x80 [ 102.802512][ T3036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.808404][ T3036] RIP: 0033:0x7f4bdf7a94d9 [ 102.812820][ T3036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.832433][ T3036] RSP: 002b:00007f4be060e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 102.840849][ T3036] RAX: ffffffffffffffda RBX: 00007f4bdfa25fa0 RCX: 00007f4bdf7a94d9 [ 102.848805][ T3036] RDX: 0000200000000740 RSI: 0000000000000000 RDI: 0000200000000700 [ 102.856767][ T3036] RBP: 00007f4bdf83804e R08: ffffffffffffffff R09: 0000000000000000 [ 102.864732][ T3036] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 102.872701][ T3036] R13: 00007f4bdfa26038 R14: 00007f4bdfa25fa0 R15: 00007ffde03fbf48 [ 102.880665][ T3036] [ 102.885420][ T3039] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.905354][ T3039] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 102.921005][ T3039] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.652: Failed to acquire dquot type 1 [ 102.927813][ T1112] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.932939][ T3039] EXT4-fs (loop1): 1 truncate cleaned up [ 102.949059][ T3039] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.949331][ T3044] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 102.965153][ T19] usb 1-1: device descriptor read/64, error -71 [ 102.972030][ T1112] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.973354][ T3043] EXT4-fs (loop6): 1 orphan inode deleted [ 102.987747][ T1112] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 102.987940][ T3043] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 102.997434][ T1112] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.007129][ T3043] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.025754][ T1077] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 103.040930][ T1112] usb 9-1: config 0 descriptor?? [ 103.043506][ T289] EXT4-fs (loop1): unmounting filesystem. [ 103.068352][ T3048] EXT4-fs: Ignoring removed oldalloc option [ 103.091450][ T19] usb usb1-port1: attempt power cycle [ 103.101645][ T3044] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -110 [ 103.119799][ T3044] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 103.132724][ T460] I/O error, dev loop1, sector 34688 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.146759][ T3048] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 103.172136][ T3048] EXT4-fs (loop1): unable to read superblock [ 103.204325][ T3049] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 103.501748][ T19] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 103.518145][ T1112] usbhid 9-1:0.0: can't add hid device: -71 [ 103.524319][ T1112] usbhid: probe of 9-1:0.0 failed with error -71 [ 103.535202][ T1112] usb 9-1: USB disconnect, device number 4 [ 103.543336][ T19] usb 1-1: device descriptor read/8, error -71 [ 103.692844][ T19] usb 1-1: device descriptor read/8, error -71 [ 103.828428][ T2581] EXT4-fs (loop6): unmounting filesystem. [ 103.845589][ T3074] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 103.854328][ T3074] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.867781][ T3074] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 103.890435][ T2581] EXT4-fs (loop6): unmounting filesystem. [ 103.910756][ T3078] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 103.919836][ T457] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 103.928351][ T3078] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.939947][ T3078] EXT4-fs (loop6): shut down requested (2) [ 103.950670][ T2581] EXT4-fs (loop6): unmounting filesystem. [ 103.962057][ T19] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 103.993092][ T19] usb 1-1: device descriptor read/8, error -71 [ 104.084336][ T3084] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 104.094381][ T3084] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 104.101997][ T3084] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 104.113686][ T3084] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - no `..' [ 104.319708][ T1074] usb 3-1: USB disconnect, device number 15 [ 104.330808][ T19] usb 1-1: device descriptor read/8, error -71 [ 104.337239][ T457] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 104.347000][ T457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.355204][ T1074] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 104.363222][ T457] usb 2-1: Product: syz [ 104.367563][ T1074] pl2303 3-1:1.0: device disconnected [ 104.373059][ T457] usb 2-1: Manufacturer: syz [ 104.377729][ T457] usb 2-1: SerialNumber: syz [ 104.393796][ T2680] EXT4-fs (loop8): unmounting filesystem. [ 104.472720][ T19] usb usb1-port1: unable to enumerate USB device [ 104.479251][ T3104] loop8: p1 p2 p3 p4[EZD] [ 104.483860][ T3104] loop8: p1 start 16384 is beyond EOD, truncated [ 104.490244][ T3104] loop8: p2 size 150994944 extends beyond EOD, truncated [ 104.497838][ T3104] loop8: p3 start 67108864 is beyond EOD, truncated [ 104.504665][ T3104] loop8: p4 size 33555584 extends beyond EOD, truncated [ 104.543638][ T460] udevd[460]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 104.553618][ T315] udevd[315]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 104.618301][ T3109] FAULT_INJECTION: forcing a failure. [ 104.618301][ T3109] name failslab, interval 1, probability 0, space 0, times 0 [ 104.631601][ T3109] CPU: 0 PID: 3109 Comm: syz.0.666 Not tainted syzkaller #0 [ 104.638911][ T3109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 104.648970][ T3109] Call Trace: [ 104.652242][ T3109] [ 104.655168][ T3109] __dump_stack+0x21/0x24 [ 104.659490][ T3109] dump_stack_lvl+0x110/0x170 [ 104.664150][ T3109] ? __cfi_dump_stack_lvl+0x8/0x8 [ 104.669160][ T3109] dump_stack+0x15/0x24 [ 104.673307][ T3109] should_fail_ex+0x3bf/0x510 [ 104.677970][ T3109] __should_failslab+0xac/0xf0 [ 104.682717][ T3109] should_failslab+0x9/0x20 [ 104.687202][ T3109] __kmem_cache_alloc_node+0x3d/0x2d0 [ 104.692564][ T3109] ? asymmetric_key_generate_id+0x59/0xf0 [ 104.698272][ T3109] ? asymmetric_key_generate_id+0x59/0xf0 [ 104.703975][ T3109] __kmalloc+0xa4/0x1e0 [ 104.708115][ T3109] ? memcpy+0x56/0x70 [ 104.712080][ T3109] asymmetric_key_generate_id+0x59/0xf0 [ 104.717626][ T3109] x509_akid_note_kid+0x9b/0x120 [ 104.722556][ T3109] asn1_ber_decoder+0xf33/0x1de0 [ 104.727488][ T3109] ? asn1_ber_decoder+0x532/0x1de0 [ 104.732589][ T3109] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 104.737954][ T3109] ? __asan_load16+0x60/0x70 [ 104.742534][ T3109] ? __kasan_kmalloc+0x95/0xb0 [ 104.747280][ T3109] ? x509_cert_parse+0x170/0x8b0 [ 104.752204][ T3109] ? kmalloc_trace+0x40/0xb0 [ 104.756775][ T3109] x509_cert_parse+0x24d/0x8b0 [ 104.761526][ T3109] x509_key_preparse+0x63/0x6d0 [ 104.766365][ T3109] asymmetric_key_preparse+0xaf/0x100 [ 104.771738][ T3109] key_create_or_update+0x43e/0x9f0 [ 104.776922][ T3109] ? __cfi_key_create_or_update+0x10/0x10 [ 104.782625][ T3109] ? __cfi_lookup_user_key+0x10/0x10 [ 104.787908][ T3109] ? __kasan_check_write+0x14/0x20 [ 104.793004][ T3109] __se_sys_add_key+0x34b/0x410 [ 104.797867][ T3109] ? __x64_sys_add_key+0xd0/0xd0 [ 104.802794][ T3109] ? xfd_validate_state+0x70/0x150 [ 104.807899][ T3109] ? __kasan_check_write+0x14/0x20 [ 104.812996][ T3109] ? fpregs_restore_userregs+0x128/0x260 [ 104.818701][ T3109] __x64_sys_add_key+0xbf/0xd0 [ 104.823453][ T3109] x64_sys_call+0x6aa/0x9a0 [ 104.827940][ T3109] do_syscall_64+0x4c/0xa0 [ 104.832348][ T3109] ? clear_bhb_loop+0x30/0x80 [ 104.837010][ T3109] ? clear_bhb_loop+0x30/0x80 [ 104.841671][ T3109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.847551][ T3109] RIP: 0033:0x7fe8ad9a94d9 [ 104.851977][ T3109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.871568][ T3109] RSP: 002b:00007fe8ae823028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 104.879968][ T3109] RAX: ffffffffffffffda RBX: 00007fe8adc25fa0 RCX: 00007fe8ad9a94d9 [ 104.887923][ T3109] RDX: 0000200000000740 RSI: 0000000000000000 RDI: 0000200000000700 [ 104.895875][ T3109] RBP: 00007fe8ada3804e R08: ffffffffffffffff R09: 0000000000000000 [ 104.903838][ T3109] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 104.911798][ T3109] R13: 00007fe8adc26038 R14: 00007fe8adc25fa0 R15: 00007ffe44424fd8 [ 104.919777][ T3109] [ 104.933201][ T3109] X.509: Couldn't decode AuthKeyIdentifier [ 104.944075][ T3111] EXT4-fs (loop8): 1 orphan inode deleted [ 104.949969][ T3111] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 104.960847][ T3111] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.981462][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 104.981487][ T28] audit: type=1400 audit(1794693686.820:737): avc: denied { module_request } for pid=3115 comm="syz.0.667" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 105.009663][ T1081] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 105.021757][ T1081] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:11: Failed to release dquot type 1 [ 105.025540][ T3118] set_capacity_and_notify: 11 callbacks suppressed [ 105.025558][ T3118] loop0: detected capacity change from 0 to 33280 [ 105.046620][ T3118] EXT4-fs: Ignoring removed i_version option [ 105.057168][ T3118] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.070929][ T3120] loop6: detected capacity change from 0 to 33280 [ 105.231473][ T3118] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 105.285587][ T3120] EXT4-fs (loop6): 1 orphan inode deleted [ 105.298491][ T3120] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 105.348064][ T3118] Quota error (device loop0): write_blk: dquota write failed [ 105.355658][ T1077] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 105.367039][ T1077] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 105.378691][ T3118] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 105.388607][ T3118] Quota error (device loop0): write_blk: dquota write failed [ 105.391921][ T3120] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.396534][ T3118] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 105.422046][ T3118] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.668: Failed to acquire dquot type 1 [ 105.433730][ T3118] EXT4-fs (loop0): 1 truncate cleaned up [ 105.439418][ T3118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.446597][ T3129] loop2: detected capacity change from 0 to 34816 [ 105.460037][ T3129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.474482][ T3129] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.494277][ T287] EXT4-fs (loop0): unmounting filesystem. [ 105.527859][ T3129] EXT4-fs (loop2): shut down requested (2) [ 105.616472][ T2680] EXT4-fs (loop8): unmounting filesystem. [ 105.644459][ T288] EXT4-fs (loop2): unmounting filesystem. [ 105.682392][ T3142] loop2: detected capacity change from 0 to 128 [ 105.829299][ T28] audit: type=1400 audit(1794693687.670:738): avc: denied { audit_read } for pid=3143 comm="syz.2.676" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.850467][ T3145] loop2: detected capacity change from 0 to 256 [ 105.913596][ T19] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 105.953699][ T1074] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 106.019873][ T3149] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 106.028791][ T3149] netlink: 20 bytes leftover after parsing attributes in process `syz.6.678'. [ 106.037753][ T3149] tipc: Invalid UDP bearer configuration [ 106.037780][ T3149] tipc: Enabling of bearer rejected, failed to enable media [ 106.075029][ T3151] netlink: 52 bytes leftover after parsing attributes in process `syz.6.679'. [ 106.084109][ T3151] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.091242][ T3151] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.100863][ T3151] netlink: 52 bytes leftover after parsing attributes in process `syz.6.679'. [ 106.109860][ T1074] usb 9-1: device descriptor read/64, error -71 [ 106.117647][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.125894][ T19] usb 1-1: not running at top speed; connect to a high speed hub [ 106.134358][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.144502][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.155501][ T19] usb 1-1: string descriptor 0 read error: -22 [ 106.161746][ T19] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 106.170825][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.180461][ T19] usb 1-1: unit 3 not found! [ 106.393907][ T1074] usb 9-1: device descriptor read/64, error -71 [ 106.494002][ T1112] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 106.547416][ T3166] loop1: detected capacity change from 0 to 256 [ 106.553903][ T457] usb 2-1: USB disconnect, device number 15 [ 106.593179][ T3168] loop2: detected capacity change from 0 to 256 [ 106.607252][ T460] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.617338][ T315] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.684316][ T1074] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 106.694155][ T1112] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.705169][ T1112] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.714499][ T3168] loop2: detected capacity change from 0 to 40427 [ 106.718036][ T1112] usb 7-1: config 0 interface 0 has no altsetting 0 [ 106.731151][ T1112] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 106.738785][ T3168] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 106.740352][ T1112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.752745][ T3168] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 106.755143][ T1112] usb 7-1: config 0 descriptor?? [ 106.765554][ T3168] F2FS-fs (loop2): invalid crc value [ 106.774027][ T3168] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 106.797155][ T3168] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 106.804451][ T3168] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.894281][ T1074] usb 9-1: device descriptor read/64, error -71 [ 106.935988][ T3177] cgroup: Unknown subsys name 'smackfshat' [ 107.164466][ T1074] usb 9-1: device descriptor read/64, error -71 [ 107.284598][ T1074] usb usb9-port1: attempt power cycle [ 107.372787][ T1112] usbhid 7-1:0.0: can't add hid device: -71 [ 107.378826][ T1112] usbhid: probe of 7-1:0.0 failed with error -71 [ 107.387715][ T1112] usb 7-1: USB disconnect, device number 4 [ 107.410677][ T3181] loop1: detected capacity change from 0 to 36864 [ 107.619904][ T3183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'. [ 107.642122][ T3183] netlink: 'syz.1.688': attribute type 3 has an invalid length. [ 107.649838][ T3183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 107.804885][ T1074] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 107.835976][ T1074] usb 9-1: device descriptor read/8, error -71 [ 107.907567][ T3185] loop6: detected capacity change from 0 to 36864 [ 107.985982][ T1074] usb 9-1: device descriptor read/8, error -71 [ 108.092827][ T3189] netlink: 20 bytes leftover after parsing attributes in process `syz.6.689'. [ 108.158819][ T3189] netlink: 'syz.6.689': attribute type 3 has an invalid length. [ 108.166548][ T3189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.689'. [ 108.275752][ T1112] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 108.283368][ T28] audit: type=1400 audit(1794693690.118:739): avc: denied { setopt } for pid=3190 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.365237][ T1074] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 108.396289][ T1074] usb 9-1: device descriptor read/8, error -71 [ 108.476343][ T1112] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.487323][ T1112] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.500178][ T1112] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.506828][ T1112] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 108.515927][ T1112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.524362][ T1112] usb 3-1: config 0 descriptor?? [ 108.546297][ T1074] usb 9-1: device descriptor read/8, error -71 [ 108.644116][ T24] usb 1-1: USB disconnect, device number 25 [ 108.665485][ T1074] usb usb9-port1: unable to enumerate USB device [ 108.797113][ T3204] EXT4-fs (loop8): 1 orphan inode deleted [ 108.803156][ T3204] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.815895][ T1077] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 108.826490][ T1077] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 108.834583][ T3210] EXT4-fs (loop6): 1 orphan inode deleted [ 108.845596][ T1077] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 108.846016][ T3205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.693'. [ 108.862121][ T3210] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.884647][ T3205] 9pnet_fd: Insufficient options for proto=fd [ 109.205935][ T1112] usbhid 3-1:0.0: can't add hid device: -71 [ 109.211922][ T1112] usbhid: probe of 3-1:0.0 failed with error -71 [ 109.231019][ T1112] usb 3-1: USB disconnect, device number 16 [ 109.419086][ T3219] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 109.432388][ T3219] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 109.441174][ T3219] F2FS-fs (loop1): invalid crc value [ 109.450316][ T3219] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 109.508282][ T3219] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 109.515808][ T3219] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.588785][ T3222] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.605887][ T3222] EXT4-fs (loop0): shut down requested (2) [ 109.686272][ T3232] EXT4-fs: Ignoring removed i_version option [ 109.764639][ T3232] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.800976][ T3232] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 109.819311][ T3232] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.702: Failed to acquire dquot type 1 [ 109.834027][ T3232] EXT4-fs (loop0): 1 truncate cleaned up [ 109.841053][ T3246] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.859694][ T3246] EXT4-fs (loop2): 1 truncate cleaned up [ 109.914464][ T3255] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.931354][ T3255] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.954885][ T3255] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 110.031887][ T3255] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.711: bg 0: block 248: padding at end of block bitmap is not set [ 110.046413][ T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 110.075368][ T3261] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.108389][ T3255] __quota_error: 8 callbacks suppressed [ 110.108407][ T3255] Quota error (device loop0): write_blk: dquota write failed [ 110.132120][ T3261] EXT4-fs (loop2): shut down requested (2) [ 110.146901][ T3255] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 110.166312][ T3255] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.711: Failed to acquire dquot type 1 [ 110.186506][ T3255] EXT4-fs (loop0): 1 truncate cleaned up [ 110.206300][ T24] usb 2-1: device descriptor read/64, error -71 [ 110.220236][ T3255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=3255 comm=syz.0.711 [ 110.244649][ T28] audit: type=1400 audit(1794693692.077:743): avc: denied { setattr } for pid=3254 comm="syz.0.711" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.278156][ T1077] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 110.292692][ T1077] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 110.485593][ T3269] set_capacity_and_notify: 10 callbacks suppressed [ 110.485606][ T3269] loop6: detected capacity change from 0 to 256 [ 110.546494][ T24] usb 2-1: device descriptor read/64, error -71 [ 110.558777][ T3271] loop8: detected capacity change from 0 to 33280 [ 110.588598][ T3271] EXT4-fs (loop8): 1 orphan inode deleted [ 110.594727][ T3271] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.596520][ T314] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 110.616598][ T1077] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.626520][ T1077] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 110.633121][ T3269] loop6: detected capacity change from 0 to 40427 [ 110.646227][ T3269] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 110.652667][ T3269] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 110.661444][ T3269] F2FS-fs (loop6): invalid crc value [ 110.671822][ T3269] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 110.702993][ T3269] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30 [ 110.710397][ T3269] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 110.788207][ T314] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.808842][ T314] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.821851][ T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 110.866654][ T314] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.873424][ T314] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 110.882571][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.892687][ T314] usb 1-1: config 0 descriptor?? [ 110.960027][ T3280] loop6: detected capacity change from 0 to 32896 [ 110.968111][ T3280] EXT4-fs: Ignoring removed i_version option [ 110.976990][ T3280] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.986852][ T24] usb 2-1: device descriptor read/64, error -71 [ 110.989926][ T3280] fscrypt: loop6: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 111.094209][ T3291] loop6: detected capacity change from 0 to 33280 [ 111.100751][ T28] audit: type=1400 audit(1794693692.926:744): avc: denied { read } for pid=3292 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.108667][ T3291] EXT4-fs: Ignoring removed i_version option [ 111.128550][ T3291] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.148653][ T3291] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 111.163034][ T3291] Quota error (device loop6): write_blk: dquota write failed [ 111.170512][ T3291] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 111.179663][ T3291] Quota error (device loop6): write_blk: dquota write failed [ 111.187174][ T3291] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 111.197165][ T3291] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.722: Failed to acquire dquot type 1 [ 111.208722][ T3291] EXT4-fs (loop6): 1 truncate cleaned up [ 111.237357][ T3299] loop6: detected capacity change from 0 to 34816 [ 111.247214][ T3299] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.258444][ T3299] EXT4-fs (loop6): shut down requested (2) [ 111.267008][ T24] usb 2-1: device descriptor read/64, error -71 [ 111.287404][ T3302] loop6: detected capacity change from 0 to 34816 [ 111.298525][ T3302] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.313861][ T3302] EXT4-fs (loop6): shut down requested (2) [ 111.387080][ T24] usb usb2-port1: attempt power cycle [ 111.491002][ T3305] loop6: detected capacity change from 0 to 256 [ 111.511620][ T314] usbhid 1-1:0.0: can't add hid device: -71 [ 111.518567][ T314] usbhid: probe of 1-1:0.0 failed with error -71 [ 111.533336][ T314] usb 1-1: USB disconnect, device number 26 [ 111.625485][ T3305] loop6: detected capacity change from 0 to 40427 [ 111.640858][ T3305] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 111.654495][ T3305] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 111.663424][ T3305] F2FS-fs (loop6): invalid crc value [ 111.670759][ T3305] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 111.701810][ T3305] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30 [ 111.709260][ T3305] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 111.797141][ T24] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 111.838109][ T24] usb 2-1: device descriptor read/8, error -71 [ 111.849805][ T3313] loop6: detected capacity change from 0 to 33792 [ 111.888811][ T3313] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.902536][ T3313] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 3) [ 111.916729][ T3313] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 111.929803][ T3313] EXT4-fs (loop6): This should not happen!! Data will be lost [ 111.929803][ T3313] [ 111.940891][ T3313] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 1) [ 111.959613][ T3313] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 1) [ 111.964210][ T3317] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.974234][ T3313] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 1) [ 111.996974][ T3317] EXT4-fs (loop8): shut down requested (2) [ 111.999670][ T3313] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.021182][ T3312] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.035853][ T24] usb 2-1: device descriptor read/8, error -71 [ 112.037785][ T3312] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.059103][ T3312] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.076027][ T3313] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.090206][ T3313] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.728: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.307387][ T24] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 112.338489][ T24] usb 2-1: device descriptor read/8, error -71 [ 112.488485][ T24] usb 2-1: device descriptor read/8, error -71 [ 112.607609][ T24] usb usb2-port1: unable to enumerate USB device [ 112.690375][ T1077] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 112.702721][ T1077] EXT4-fs (loop6): This should not happen!! Data will be lost [ 112.702721][ T1077] [ 112.730062][ T3339] EXT4-fs (loop6): 1 orphan inode deleted [ 112.736034][ T3339] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.747885][ T1077] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 112.765270][ T3323] FAT-fs (loop2): error, corrupted file size (i_pos 49, 8960) [ 112.772821][ T3323] FAT-fs (loop2): error, corrupted file size (i_pos 49, 8960) [ 112.780351][ T3323] FAT-fs (loop2): error, corrupted file size (i_pos 49, 8960) [ 112.789280][ T3323] FAT-fs (loop2): error, corrupted file size (i_pos 49, 8960) [ 112.804497][ T3346] EXT4-fs: Ignoring removed i_version option [ 112.811325][ T3346] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.828303][ T460] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.855224][ T3346] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 112.887777][ T3346] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.739: Failed to acquire dquot type 1 [ 112.918994][ T3346] EXT4-fs (loop1): 1 truncate cleaned up [ 112.954146][ T3352] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.987992][ T3352] EXT4-fs (loop2): shut down requested (2) [ 113.128776][ T3355] loop1: p1 p2 p3 < p5 p6 p7 > [ 113.134138][ T3355] loop1: p2 size 16775168 extends beyond EOD, truncated [ 113.142424][ T3355] loop1: p5 start 4294970168 is beyond EOD, truncated [ 113.228130][ T3344] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 113.234521][ T3344] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 113.257158][ T3369] netlink: 72 bytes leftover after parsing attributes in process `syz.0.745'. [ 113.282763][ T458] udevd[458]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 113.286823][ T316] udevd[316]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 113.293558][ T399] udevd[399]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 113.309478][ T460] udevd[460]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 113.317238][ T315] udevd[315]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 113.322243][ T3344] F2FS-fs (loop8): invalid crc value [ 113.351013][ T3374] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.362626][ T3344] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 113.375184][ T3374] EXT4-fs (loop1): shut down requested (2) [ 113.419265][ T3344] F2FS-fs (loop8): Try to recover 2th superblock, ret: -30 [ 113.426592][ T3344] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 113.434219][ T1112] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 113.468967][ T3384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3384 comm=syz.1.749 [ 113.628992][ T1112] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.640406][ T1112] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.654225][ T1112] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.660937][ T1112] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 113.670091][ T1112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.685477][ T1112] usb 3-1: config 0 descriptor?? [ 113.696424][ T3392] device pim6reg1 entered promiscuous mode [ 113.838082][ T457] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 113.998286][ T457] usb 9-1: device descriptor read/64, error -71 [ 114.018165][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 114.209238][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 114.221256][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 114.229124][ T24] usb 7-1: can't read configurations, error -71 [ 114.258797][ T3400] EXT4-fs: Ignoring removed i_version option [ 114.265967][ T3400] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.275173][ T457] usb 9-1: device descriptor read/64, error -71 [ 114.290855][ T3400] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 114.305902][ T3400] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.753: Failed to acquire dquot type 1 [ 114.317213][ T1112] usbhid 3-1:0.0: can't add hid device: -71 [ 114.323216][ T1112] usbhid: probe of 3-1:0.0 failed with error -71 [ 114.329872][ T3400] EXT4-fs (loop1): 1 truncate cleaned up [ 114.330768][ T1112] usb 3-1: USB disconnect, device number 17 [ 114.371967][ T3410] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.404694][ T3408] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.421789][ T3408] EXT4-fs (loop0): shut down requested (2) [ 114.548433][ T457] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 114.698463][ T457] usb 9-1: device descriptor read/64, error -71 [ 114.708461][ T834] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 114.779894][ T315] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.895537][ T3418] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 114.902112][ T3418] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 114.908585][ T834] usb 2-1: Using ep0 maxpacket: 32 [ 114.911190][ T3418] F2FS-fs (loop6): invalid crc value [ 114.916929][ T834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.921930][ T3418] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 114.929308][ T834] usb 2-1: config 151 has an invalid interface number: 33 but max is 0 [ 114.947858][ T834] usb 2-1: config 151 has no interface number 0 [ 114.955684][ T834] usb 2-1: config 151 interface 33 has no altsetting 0 [ 114.981309][ T834] usb 2-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=97.b3 [ 115.097845][ T834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.106150][ T3418] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30 [ 115.113592][ T3418] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 115.121432][ T834] usb 2-1: Product: syz [ 115.125725][ T834] usb 2-1: Manufacturer: syz [ 115.133511][ T834] usb 2-1: SerialNumber: syz [ 115.347917][ T3410] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 115.360817][ T3410] FAT-fs (loop1): Filesystem has been set read-only [ 115.370617][ T3429] EXT4-fs (loop6): 1 orphan inode deleted [ 115.377664][ T3429] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.396495][ T3410] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 115.417838][ T3410] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 115.440190][ T3436] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.440336][ T457] usb 9-1: device descriptor read/64, error -71 [ 115.456776][ T3410] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 115.458961][ T10] __quota_error: 14 callbacks suppressed [ 115.458976][ T10] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 115.464776][ T3410] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 115.481396][ T10] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 115.499679][ T3410] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 115.500994][ T3436] EXT4-fs warning (device loop0): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 115.526820][ T834] uvcvideo 2-1:151.33: Found multiple Units with ID 3 [ 115.545682][ T834] usb 2-1: Found UVC 0.0a device syz (1608:021b) [ 115.560335][ T834] usb 2-1: No valid video chain found. [ 115.568973][ T457] usb usb9-port1: attempt power cycle [ 115.571445][ T834] usb 2-1: USB disconnect, device number 20 [ 115.639134][ T3440] set_capacity_and_notify: 20 callbacks suppressed [ 115.639155][ T3440] loop0: detected capacity change from 0 to 34816 [ 115.724101][ T3440] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.737215][ T3443] netlink: 52 bytes leftover after parsing attributes in process `syz.2.765'. [ 115.760706][ T3440] EXT4-fs (loop0): shut down requested (2) [ 115.908254][ T3448] loop2: detected capacity change from 0 to 33280 [ 115.916201][ T3448] EXT4-fs: Ignoring removed i_version option [ 115.931556][ T3448] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.960695][ T3448] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 115.975298][ T3448] Quota error (device loop2): write_blk: dquota write failed [ 115.982786][ T457] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 115.984411][ T3456] loop0: detected capacity change from 0 to 128 [ 115.991071][ T3448] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 116.005893][ T3448] Quota error (device loop2): write_blk: dquota write failed [ 116.014499][ T3448] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 116.024537][ T3448] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.768: Failed to acquire dquot type 1 [ 116.036102][ T3448] EXT4-fs (loop2): 1 truncate cleaned up [ 116.042845][ T457] usb 9-1: device descriptor read/8, error -71 [ 116.185663][ T3460] loop1: detected capacity change from 0 to 256 [ 116.209904][ T457] usb 9-1: device descriptor read/8, error -71 [ 116.230824][ T3462] loop6: detected capacity change from 0 to 128 [ 116.279074][ T40] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 116.326149][ T3460] loop1: detected capacity change from 0 to 40427 [ 116.332690][ T1074] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 116.344572][ T3460] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 116.351148][ T3460] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 116.360022][ T3460] F2FS-fs (loop1): invalid crc value [ 116.366460][ T3460] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 116.387905][ T3460] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 116.395178][ T3460] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.489144][ T457] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 116.520213][ T457] usb 9-1: device descriptor read/8, error -71 [ 116.538047][ T1074] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.549096][ T1074] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.549164][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 116.567087][ T1074] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.574907][ T40] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.585911][ T1074] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 116.595932][ T40] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.599757][ T1074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.615654][ T40] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 116.627700][ T1074] usb 3-1: config 0 descriptor?? [ 116.630471][ T3470] loop1: detected capacity change from 0 to 40427 [ 116.639207][ T40] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 116.647695][ T40] usb 1-1: Product: syz [ 116.655041][ T40] usb 1-1: Manufacturer: syz [ 116.659971][ T3470] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 116.670136][ T457] usb 9-1: device descriptor read/8, error -71 [ 116.671008][ T40] hub 1-1:4.0: USB hub found [ 116.681299][ T3470] F2FS-fs (loop1): invalid crc value [ 116.688370][ T3470] F2FS-fs (loop1): invalid crc value [ 116.694049][ T3470] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 116.695842][ T3475] loop8: detected capacity change from 0 to 36864 [ 116.712855][ T3475] EXT4-fs: Ignoring removed orlov option [ 116.719003][ T3475] EXT4-fs: Ignoring removed orlov option [ 116.725995][ T3475] EXT4-fs (loop8): can't mount with both data=journal and delalloc [ 116.741569][ T28] audit: type=1400 audit(1794693698.574:750): avc: denied { setopt } for pid=3474 comm="syz.8.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.777264][ T28] audit: type=1400 audit(1794693698.574:751): avc: denied { map } for pid=3474 comm="syz.8.777" path="socket:[32041]" dev="sockfs" ino=32041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.799393][ T457] usb usb9-port1: unable to enumerate USB device [ 116.822401][ T28] audit: type=1400 audit(1794693698.574:752): avc: denied { read write } for pid=3474 comm="syz.8.777" path="socket:[32041]" dev="sockfs" ino=32041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.838357][ T3481] loop8: detected capacity change from 0 to 34816 [ 116.871058][ T40] hub 1-1:4.0: 2 ports detected [ 116.892074][ T315] I/O error, dev loop8, sector 34688 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.926468][ T3489] loop8: detected capacity change from 0 to 33280 [ 116.943931][ T3489] EXT4-fs: Ignoring removed i_version option [ 116.955875][ T3489] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.991753][ T3489] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 117.006379][ T3489] Quota error (device loop8): write_blk: dquota write failed [ 117.014046][ T3489] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 117.024812][ T3489] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.782: Failed to acquire dquot type 1 [ 117.036430][ T3489] EXT4-fs (loop8): 1 truncate cleaned up [ 117.080317][ T3493] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.186644][ T3497] EXT4-fs (loop6): 1 orphan inode deleted [ 117.199592][ T3497] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.209530][ T1080] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:10: Failed to release dquot type 1 [ 117.251002][ T1074] usbhid 3-1:0.0: can't add hid device: -71 [ 117.257240][ T1074] usbhid: probe of 3-1:0.0 failed with error -71 [ 117.265086][ T1074] usb 3-1: USB disconnect, device number 18 [ 117.280436][ T3456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.293128][ T3456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.304009][ T40] hub 1-1:4.0: set hub depth failed [ 117.340998][ T40] usb 1-1: USB disconnect, device number 27 [ 118.049548][ T3515] ip_tables: iptables: counters copy to user failed while replacing table [ 118.061060][ T3516] ip_tables: iptables: counters copy to user failed while replacing table [ 118.119728][ T1074] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 118.180494][ T3503] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 118.186864][ T3503] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 118.206143][ T3503] F2FS-fs (loop2): invalid crc value [ 118.213996][ T3524] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.229393][ T3524] EXT4-fs (loop6): shut down requested (2) [ 118.238104][ T3503] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 118.284586][ T3503] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 118.291972][ T1074] usb 2-1: device descriptor read/64, error -71 [ 118.292652][ T3503] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.372413][ T3538] EXT4-fs: Ignoring removed i_version option [ 118.379671][ T3538] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.391517][ T3538] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 118.405833][ T3538] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.796: Failed to acquire dquot type 1 [ 118.417364][ T3538] EXT4-fs (loop2): 1 truncate cleaned up [ 118.539860][ T40] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 118.559875][ T1074] usb 2-1: device descriptor read/64, error -71 [ 118.569902][ T834] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 118.721037][ T40] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.731998][ T40] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.744808][ T40] usb 7-1: config 0 interface 0 has no altsetting 0 [ 118.751451][ T834] usb 1-1: Using ep0 maxpacket: 32 [ 118.756612][ T40] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 118.765715][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.774353][ T40] usb 7-1: config 0 descriptor?? [ 118.779685][ T834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.788727][ T834] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 124, changing to 7 [ 118.801090][ T834] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 118.810177][ T834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.818161][ T834] usb 1-1: Product: syz [ 118.822361][ T834] usb 1-1: Manufacturer: syz [ 118.826969][ T834] usb 1-1: SerialNumber: syz [ 118.829964][ T1074] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 118.990033][ T1074] usb 2-1: device descriptor read/64, error -71 [ 119.036408][ T834] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 119.043527][ T834] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 119.066981][ T460] udevd[460]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.083305][ T834] usb 1-1: USB disconnect, device number 28 [ 119.221313][ T3554] loop8: p1 p2 p3 p4[EZD] [ 119.226278][ T3554] loop8: p1 start 16384 is beyond EOD, truncated [ 119.232976][ T3554] loop8: p2 size 150994944 extends beyond EOD, truncated [ 119.241003][ T3554] loop8: p3 start 67108864 is beyond EOD, truncated [ 119.247634][ T3554] loop8: p4 size 33555584 extends beyond EOD, truncated [ 119.260105][ T1074] usb 2-1: device descriptor read/64, error -71 [ 119.380177][ T1074] usb usb2-port1: attempt power cycle [ 119.391292][ T40] usbhid 7-1:0.0: can't add hid device: -71 [ 119.397260][ T40] usbhid: probe of 7-1:0.0 failed with error -71 [ 119.411283][ T40] usb 7-1: USB disconnect, device number 7 [ 119.493191][ T3561] binder: 3560:3561 ioctl c018620c 200000000140 returned -22 [ 119.518490][ T3564] process 'syz.2.803' launched './file0' with NULL argv: empty string added [ 119.651495][ T3571] EXT4-fs (loop2): 1 orphan inode deleted [ 119.657483][ T3571] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.670340][ T1081] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:11: Failed to release dquot type 1 [ 119.790427][ T1074] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 119.841523][ T1074] usb 2-1: device descriptor read/8, error -71 [ 120.001538][ T1074] usb 2-1: device descriptor read/8, error -71 [ 120.001862][ T3580] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 120.160691][ T3576] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 120.165025][ T3586] EXT4-fs: Ignoring removed i_version option [ 120.188484][ T3576] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 120.214581][ T3576] F2FS-fs (loop0): invalid crc value [ 120.216422][ T3586] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.263329][ T3576] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 120.280990][ T1074] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 120.295438][ T3586] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 120.307698][ T3576] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 120.317047][ T3576] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.323240][ T3586] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.809: Failed to acquire dquot type 1 [ 120.338249][ T1074] usb 2-1: device descriptor read/8, error -71 [ 120.344908][ T3586] EXT4-fs (loop6): 1 truncate cleaned up [ 120.511554][ T1074] usb 2-1: device descriptor read/8, error -71 [ 120.582986][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 120.583001][ T28] audit: type=1400 audit(1794693702.413:756): avc: denied { read write } for pid=3590 comm="syz.6.810" name="protocol" dev="configfs" ino=32392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 120.629267][ T28] audit: type=1400 audit(1794693702.453:757): avc: denied { open } for pid=3590 comm="syz.6.810" path="/63/file1/config/usb_gadget/g1/functions/hid.usb0/protocol" dev="configfs" ino=32392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 120.630587][ T1074] usb usb2-port1: unable to enumerate USB device [ 120.807532][ T3605] set_capacity_and_notify: 15 callbacks suppressed [ 120.807556][ T3605] loop2: detected capacity change from 0 to 40427 [ 120.829729][ T3605] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 120.839191][ T3605] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.847767][ T3605] F2FS-fs (loop2): fault_type options not supported [ 120.854758][ T3605] F2FS-fs (loop2): fault_injection options not supported [ 120.862090][ T3605] F2FS-fs (loop2): Image doesn't support compression [ 120.869246][ T3605] F2FS-fs (loop2): invalid crc value [ 120.885205][ T3605] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.947427][ T3605] F2FS-fs (loop2): Start checkpoint disabled! [ 120.966189][ T3605] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 120.967316][ T3614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 120.973517][ T28] audit: type=1400 audit(1794693702.793:758): avc: denied { create } for pid=3613 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 120.984008][ T3614] device macsec0 entered promiscuous mode [ 121.011343][ T3605] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 121.024781][ T3605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 121.096609][ T28] audit: type=1400 audit(1794693702.923:759): avc: denied { mounton } for pid=3604 comm="syz.2.815" path="/155/file2/file0" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 121.099241][ T834] kernel write not supported for file /rfkill (pid: 834 comm: kworker/1:5) [ 121.133718][ T28] audit: type=1400 audit(1794693702.923:760): avc: denied { setattr } for pid=3604 comm="syz.2.815" name="work" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 121.134146][ T288] F2FS-fs (loop2): access invalid blkaddr:4043309056 [ 121.155637][ T28] audit: type=1400 audit(1794693702.923:761): avc: denied { remove_name } for pid=3604 comm="syz.2.815" name="#1e" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 121.184103][ T28] audit: type=1400 audit(1794693702.923:762): avc: denied { rename } for pid=3604 comm="syz.2.815" name="#1e" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.206185][ T28] audit: type=1400 audit(1794693702.923:763): avc: denied { unlink } for pid=3604 comm="syz.2.815" name="#1e" dev="loop2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.273568][ T3623] loop1: detected capacity change from 0 to 34816 [ 121.282753][ T288] CPU: 1 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 121.290228][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 121.300279][ T288] Call Trace: [ 121.303548][ T288] [ 121.306471][ T288] __dump_stack+0x21/0x24 [ 121.310798][ T288] dump_stack_lvl+0x110/0x170 [ 121.315468][ T288] ? __cfi_dump_stack_lvl+0x8/0x8 [ 121.320483][ T288] dump_stack+0x15/0x24 [ 121.324632][ T288] __f2fs_is_valid_blkaddr+0xd2e/0x15a0 [ 121.330181][ T288] f2fs_is_valid_blkaddr+0x23/0x30 [ 121.335290][ T288] f2fs_map_blocks+0xcb3/0x4600 [ 121.340137][ T288] ? kasan_save_alloc_info+0x1f/0x30 [ 121.345426][ T288] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 121.350721][ T288] ? __cfi_mempool_alloc+0x10/0x10 [ 121.355834][ T288] ? bio_associate_blkg_from_css+0x960/0xb10 [ 121.361808][ T288] ? xas_start+0x31d/0x3e0 [ 121.366226][ T288] ? xa_load+0xad/0xd0 [ 121.370290][ T288] f2fs_mpage_readpages+0xa46/0x1b20 [ 121.375578][ T288] ? f2fs_i_blocks_write+0x1f0/0x1f0 [ 121.380863][ T288] ? cgroup_rstat_updated+0xf0/0x360 [ 121.386149][ T288] ? xas_nomem+0x6b/0x1f0 [ 121.390480][ T288] f2fs_readahead+0xfc/0x240 [ 121.395077][ T288] ? __cfi_f2fs_readahead+0x10/0x10 [ 121.400273][ T288] read_pages+0x1bf/0xe10 [ 121.404602][ T288] ? page_cache_ra_unbounded+0x850/0x850 [ 121.410232][ T288] ? filemap_add_folio+0x113/0x260 [ 121.415341][ T288] page_cache_ra_unbounded+0x6ff/0x850 [ 121.420842][ T288] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 121.426841][ T288] ? kernel_text_address+0xa0/0xd0 [ 121.431951][ T288] page_cache_ra_order+0xb0c/0xe50 [ 121.437057][ T288] ? avc_has_perm_noaudit+0x390/0x490 [ 121.442424][ T288] ? memcpy+0x56/0x70 [ 121.446399][ T288] ? avc_has_perm_noaudit+0x30a/0x490 [ 121.451770][ T288] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 121.457486][ T288] ? __cfi_page_cache_ra_order+0x10/0x10 [ 121.463119][ T288] ondemand_readahead+0x821/0xdb0 [ 121.468143][ T288] ? page_cache_sync_ra+0x3d0/0x3d0 [ 121.473338][ T288] page_cache_sync_ra+0x35b/0x3d0 [ 121.478361][ T288] f2fs_readdir+0x473/0x990 [ 121.482853][ T288] ? cgroup_rstat_updated+0xf0/0x360 [ 121.488137][ T288] ? __cfi_f2fs_readdir+0x10/0x10 [ 121.493156][ T288] ? handle_mm_fault+0x18d8/0x26b0 [ 121.498265][ T288] ? down_read_killable+0xbc/0x110 [ 121.503372][ T288] ? __cfi_down_read_killable+0x10/0x10 [ 121.508915][ T288] ? security_file_permission+0x94/0xb0 [ 121.514463][ T288] iterate_dir+0x26d/0x610 [ 121.518872][ T288] ? __cfi_f2fs_readdir+0x10/0x10 [ 121.523899][ T288] __se_sys_getdents64+0xf2/0x250 [ 121.528921][ T288] ? __x64_sys_getdents64+0x90/0x90 [ 121.534116][ T288] ? __cfi_filldir64+0x10/0x10 [ 121.538877][ T288] ? do_user_addr_fault+0x9a5/0x1030 [ 121.544165][ T288] ? debug_smp_processor_id+0x17/0x20 [ 121.549534][ T288] __x64_sys_getdents64+0x7b/0x90 [ 121.554554][ T288] x64_sys_call+0x15c/0x9a0 [ 121.559054][ T288] do_syscall_64+0x4c/0xa0 [ 121.563461][ T288] ? clear_bhb_loop+0x30/0x80 [ 121.568133][ T288] ? clear_bhb_loop+0x30/0x80 [ 121.572803][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.578691][ T288] RIP: 0033:0x7fc1617d50f3 [ 121.583099][ T288] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 01 6a fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 121.602697][ T288] RSP: 002b:00007fffb175d7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 121.611123][ T288] RAX: ffffffffffffffda RBX: 00005555564c5910 RCX: 00007fc1617d50f3 [ 121.619094][ T288] RDX: 0000000000008000 RSI: 00005555564c5940 RDI: 0000000000000005 [ 121.627056][ T288] RBP: 00005555564c5940 R08: 00007fc1619fce20 R09: 0000000000000001 [ 121.635018][ T288] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555564c5914 [ 121.642985][ T288] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fffb175faa0 [ 121.644622][ T457] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 121.650955][ T288] [ 121.662138][ T28] audit: type=1400 audit(1794693702.952:764): avc: denied { rmdir } for pid=3604 comm="syz.2.815" name="file1" dev="overlay" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 121.692614][ T288] syz-executor: attempt to access beyond end of device [ 121.692614][ T288] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 121.706899][ T288] syz-executor: attempt to access beyond end of device [ 121.706899][ T288] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 121.720965][ T3623] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.727379][ T3626] loop0: detected capacity change from 0 to 256 [ 121.745053][ T3622] IPv6: addrconf: prefix option has invalid lifetime [ 121.751757][ T3622] IPv6: addrconf: prefix option has invalid lifetime [ 121.758929][ T3622] EXT4-fs (loop1): shut down requested (2) [ 121.759708][ T10] kworker/u4:1: attempt to access beyond end of device [ 121.759708][ T10] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 121.810986][ T460] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.825600][ T3628] loop6: detected capacity change from 0 to 33280 [ 121.835388][ T3628] EXT4-fs: Ignoring removed i_version option [ 121.875707][ T457] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.891324][ T3628] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.900574][ T457] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.931066][ T457] usb 9-1: config 0 interface 0 has no altsetting 0 [ 121.937709][ T457] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 121.960845][ T457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.969834][ T457] usb 9-1: config 0 descriptor?? [ 122.001279][ T3628] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 122.015839][ T3628] Quota error (device loop6): write_blk: dquota write failed [ 122.023404][ T3628] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.822: Failed to acquire dquot type 1 [ 122.048449][ T3626] loop0: detected capacity change from 0 to 40427 [ 122.051837][ T3628] EXT4-fs (loop6): 1 truncate cleaned up [ 122.077260][ T3626] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 122.083994][ T3626] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 122.094296][ T3626] F2FS-fs (loop0): invalid crc value [ 122.109199][ T3626] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 122.145074][ T3626] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 122.154052][ T3626] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.164874][ T3644] loop6: detected capacity change from 0 to 33280 [ 122.215256][ T3644] EXT4-fs (loop6): 1 orphan inode deleted [ 122.225548][ T3644] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.236239][ T1080] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:10: Failed to release dquot type 1 [ 122.413171][ T1077] device bridge_slave_1 left promiscuous mode [ 122.419620][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.428786][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.439491][ T1077] device veth1_macvtap left promiscuous mode [ 122.446014][ T1077] device veth0_vlan left promiscuous mode [ 122.555094][ T3656] loop0: detected capacity change from 0 to 33280 [ 122.564483][ T3656] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.584707][ T457] usbhid 9-1:0.0: can't add hid device: -71 [ 122.593330][ T457] usbhid: probe of 9-1:0.0 failed with error -71 [ 122.594189][ T3656] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.830: invalid indirect mapped block 9 (level 0) [ 122.616467][ T457] usb 9-1: USB disconnect, device number 13 [ 122.624313][ T3656] EXT4-fs (loop0): 1 truncate cleaned up [ 122.671896][ T3656] netlink: 19 bytes leftover after parsing attributes in process `syz.0.830'. [ 122.917477][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.975583][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.984537][ T3654] device bridge_slave_0 entered promiscuous mode [ 123.014748][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.021925][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.029412][ T3654] device bridge_slave_1 entered promiscuous mode [ 123.088255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.095885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.105105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.113750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.121440][ T3668] loop8: detected capacity change from 0 to 128 [ 123.130154][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.137238][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.146175][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.159321][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.169679][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.195134][ T3674] loop6: detected capacity change from 0 to 34816 [ 123.197275][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.208630][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.230567][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.242277][ T3678] loop8: detected capacity change from 0 to 33280 [ 123.248830][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.254293][ T3678] EXT4-fs: Ignoring removed i_version option [ 123.272279][ T3674] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.284193][ T3678] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.291305][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.303136][ T3674] EXT4-fs (loop6): shut down requested (2) [ 123.312205][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.327542][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.336720][ T3678] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 123.352777][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.360977][ T3678] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.837: Failed to acquire dquot type 1 [ 123.372703][ T3678] EXT4-fs (loop8): 1 truncate cleaned up [ 123.378480][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 123.387194][ T3654] device veth0_vlan entered promiscuous mode [ 123.394206][ T3671] F2FS-fs (loop0): Invalid segment count (6) [ 123.401307][ T3671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 123.435584][ T3671] F2FS-fs (loop0): invalid crc value [ 123.441212][ T834] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 123.452458][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.464915][ T3671] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 123.467733][ T3654] device veth1_macvtap entered promiscuous mode [ 123.502508][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.509454][ T3671] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 123.518153][ T3671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.527425][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.642962][ T834] usb 1-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.661247][ T834] usb 1-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.681311][ T834] usb 1-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.704388][ T834] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.711033][ T834] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 123.734782][ T3684] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 123.741306][ T834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.751702][ T834] usb 1-1: config 0 descriptor?? [ 123.756933][ T3684] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 123.769147][ T3684] F2FS-fs (loop8): invalid crc value [ 123.787040][ T3684] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 123.833374][ T3684] F2FS-fs (loop8): Try to recover 2th superblock, ret: -30 [ 123.844160][ T3684] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 123.844294][ T3671] F2FS-fs (loop0): Invalid segment count (6) [ 123.873753][ T3671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 123.883094][ T3671] F2FS-fs (loop0): invalid crc value [ 123.889386][ T3671] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 123.901578][ T40] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 123.944580][ T3671] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 123.961446][ T3671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.966307][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.981674][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.995873][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.005174][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.013847][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.024487][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.033687][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.043047][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.058613][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.068693][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.091408][ T314] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 124.111397][ T40] usb 7-1: Using ep0 maxpacket: 16 [ 124.123967][ T40] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 124.140618][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.153364][ T40] usb 7-1: Product: syz [ 124.154535][ T3710] EXT4-fs (loop8): 1 orphan inode deleted [ 124.157573][ T40] usb 7-1: Manufacturer: syz [ 124.169210][ T40] usb 7-1: SerialNumber: syz [ 124.171556][ T1080] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:10: Failed to release dquot type 1 [ 124.186556][ T3710] EXT4-fs mount: 73 callbacks suppressed [ 124.186571][ T3710] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 124.221641][ T3710] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.282548][ T314] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.301400][ T314] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.345023][ T3671] F2FS-fs (loop0): Invalid segment count (6) [ 124.351032][ T3671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 124.363627][ T314] usb 10-1: config 0 interface 0 has no altsetting 0 [ 124.370610][ T314] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 124.379853][ T314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.395003][ T40] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.409590][ T314] usb 10-1: config 0 descriptor?? [ 124.417463][ T40] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 124.453514][ T40] usb 7-1: USB disconnect, device number 8 [ 124.470137][ T3671] F2FS-fs (loop0): invalid crc value [ 124.482320][ T3671] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 124.530751][ T3707] F2FS-fs (loop1): invalid crc value [ 124.538132][ T3671] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 124.549728][ T3671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.558531][ T3707] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.602603][ T3707] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.807296][ T3671] F2FS-fs (loop0): Invalid segment count (6) [ 124.814743][ T3671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 124.823974][ T3671] F2FS-fs (loop0): invalid crc value [ 124.830682][ T3671] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 124.860633][ T3671] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 124.867954][ T3671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.954334][ T3724] EXT4-fs: Ignoring removed i_version option [ 124.961423][ T3724] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.984595][ T2680] EXT4-fs (loop8): unmounting filesystem. [ 125.027362][ T3724] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 125.043595][ T314] usbhid 10-1:0.0: can't add hid device: -71 [ 125.049656][ T314] usbhid: probe of 10-1:0.0 failed with error -71 [ 125.060517][ T314] usb 10-1: USB disconnect, device number 2 [ 125.067852][ T3724] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.848: Failed to acquire dquot type 1 [ 125.083670][ T3724] EXT4-fs (loop6): 1 truncate cleaned up [ 125.099497][ T3724] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 125.152482][ T2581] EXT4-fs (loop6): unmounting filesystem. [ 125.205698][ T3738] EXT4-fs: Ignoring removed oldalloc option [ 125.229585][ T3738] EXT4-fs: Ignoring removed orlov option [ 125.269230][ T3671] F2FS-fs (loop0): Invalid segment count (6) [ 125.275772][ T3738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.275910][ T3671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 125.294391][ T3671] F2FS-fs (loop0): invalid crc value [ 125.300740][ T3671] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 125.303215][ T3738] SELinux: Context : is not valid (left unmapped). [ 125.331735][ T457] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 125.335596][ T3671] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 125.346558][ T3671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.348319][ T289] EXT4-fs (loop1): unmounting filesystem. [ 125.511651][ T457] usb 9-1: Using ep0 maxpacket: 32 [ 125.517769][ T3748] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 125.517905][ T457] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.531657][ T457] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.536172][ T3748] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 125.560064][ T457] usb 9-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 125.569266][ T457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.580942][ T3748] F2FS-fs (loop1): invalid crc value [ 125.590209][ T457] usb 9-1: config 0 descriptor?? [ 125.601708][ T3671] F2FS-fs (loop0): Invalid segment count (6) [ 125.608864][ T3748] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 125.615483][ T457] usbhid 9-1:0.0: fixing wrong optional hid class descriptors count [ 125.620507][ T3671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 125.639153][ T3750] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 125.651031][ T3671] F2FS-fs (loop0): invalid crc value [ 125.662153][ T3750] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.672792][ T457] usbhid 9-1:0.0: can't add hid device: -22 [ 125.679091][ T457] usbhid: probe of 9-1:0.0 failed with error -22 [ 125.679209][ T3748] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 125.694562][ T3671] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 125.696939][ T3748] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.778721][ T3671] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 125.786573][ T3671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.892685][ T457] usb 9-1: USB disconnect, device number 14 [ 126.112272][ T3779] set_capacity_and_notify: 16 callbacks suppressed [ 126.112291][ T3779] loop6: detected capacity change from 0 to 33280 [ 126.168044][ T3654] EXT4-fs (loop9): unmounting filesystem. [ 126.175962][ T3779] EXT4-fs (loop6): 1 orphan inode deleted [ 126.182098][ T3779] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 126.193058][ T1080] __quota_error: 18 callbacks suppressed [ 126.193073][ T1080] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 126.212772][ T834] usbhid 1-1:0.0: can't add hid device: -71 [ 126.213466][ T3779] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.227206][ T3786] loop9: detected capacity change from 0 to 33280 [ 126.234027][ T1080] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:10: Failed to release dquot type 1 [ 126.237864][ T834] usbhid: probe of 1-1:0.0 failed with error -71 [ 126.266215][ T3786] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.862: invalid indirect mapped block 256 (level 2) [ 126.288107][ T834] usb 1-1: USB disconnect, device number 29 [ 126.297435][ T3791] loop1: detected capacity change from 0 to 33280 [ 126.315734][ T3791] EXT4-fs: Ignoring removed i_version option [ 126.320078][ T3789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 126.332399][ T3791] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.338571][ T3786] EXT4-fs (loop9): 2 truncates cleaned up [ 126.348778][ T3786] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 126.372203][ T3791] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 126.399055][ T3791] Quota error (device loop1): write_blk: dquota write failed [ 126.406546][ T3791] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 126.415753][ T3791] Quota error (device loop1): write_blk: dquota write failed [ 126.428259][ T3791] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 126.438171][ T3791] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.864: Failed to acquire dquot type 1 [ 126.474986][ T3654] EXT4-fs (loop9): unmounting filesystem. [ 126.481232][ T3791] EXT4-fs (loop1): 1 truncate cleaned up [ 126.487120][ T3791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.490476][ T3799] loop8: detected capacity change from 0 to 256 [ 126.509082][ T3800] loop0: detected capacity change from 0 to 34816 [ 126.522769][ T289] EXT4-fs (loop1): unmounting filesystem. [ 126.526020][ T3800] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.538114][ T3800] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.549798][ T315] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.564124][ T3805] tipc: Enabling of bearer rejected, failed to enable media [ 126.585059][ T3805] loop1: detected capacity change from 0 to 33792 [ 126.592424][ T3800] EXT4-fs (loop0): shut down requested (2) [ 126.618654][ T3805] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.637007][ T287] EXT4-fs (loop0): unmounting filesystem. [ 126.662518][ T3805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.665100][ T3811] FAULT_INJECTION: forcing a failure. [ 126.665100][ T3811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 126.686359][ T3811] CPU: 0 PID: 3811 Comm: syz.0.869 Not tainted syzkaller #0 [ 126.693668][ T3811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 126.703754][ T3811] Call Trace: [ 126.707037][ T3811] [ 126.709970][ T3811] __dump_stack+0x21/0x24 [ 126.714307][ T3811] dump_stack_lvl+0x110/0x170 [ 126.718987][ T3811] ? __cfi_dump_stack_lvl+0x8/0x8 [ 126.720732][ T3799] loop8: detected capacity change from 0 to 40427 [ 126.724008][ T3811] ? avc_has_extended_perms+0x9d5/0xed0 [ 126.724033][ T3811] dump_stack+0x15/0x24 [ 126.740110][ T3811] should_fail_ex+0x3bf/0x510 [ 126.740933][ T3799] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 126.744802][ T3811] should_fail+0xb/0x10 [ 126.744829][ T3811] get_futex_key+0x143/0xb10 [ 126.744855][ T3811] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 126.744874][ T3811] ? __cfi_get_futex_key+0x10/0x10 [ 126.744898][ T3811] futex_wake+0x150/0x8e0 [ 126.755662][ T3799] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 126.759927][ T3811] ? ioctl_has_perm+0x1b8/0x4f0 [ 126.766962][ T3799] F2FS-fs (loop8): invalid crc value [ 126.770635][ T3811] ? __cfi_futex_wake+0x10/0x10 [ 126.775933][ T3799] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 126.783088][ T3811] ? vfs_write+0xa51/0xd00 [ 126.783115][ T3811] do_futex+0x2bf/0x430 [ 126.817528][ T3811] ? __cfi_do_futex+0x10/0x10 [ 126.822193][ T3811] ? mutex_unlock+0x8f/0x230 [ 126.826769][ T3811] __se_sys_futex+0x136/0x310 [ 126.831432][ T3811] ? __x64_sys_futex+0x100/0x100 [ 126.836350][ T3811] ? fput+0x154/0x1a0 [ 126.840318][ T3811] __x64_sys_futex+0xe5/0x100 [ 126.844985][ T3811] x64_sys_call+0x7ec/0x9a0 [ 126.849475][ T3811] do_syscall_64+0x4c/0xa0 [ 126.853875][ T3811] ? clear_bhb_loop+0x30/0x80 [ 126.858539][ T3811] ? clear_bhb_loop+0x30/0x80 [ 126.863202][ T3811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.869086][ T3811] RIP: 0033:0x7fe8ad9a94d9 [ 126.873482][ T3811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.893066][ T3811] RSP: 002b:00007fe8ae8230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.901463][ T3811] RAX: ffffffffffffffda RBX: 00007fe8adc25fa8 RCX: 00007fe8ad9a94d9 [ 126.909416][ T3811] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe8adc25fac [ 126.917368][ T3811] RBP: 00007fe8adc25fa0 R08: 00097e0e2284b0f6 R09: 0000000000000000 [ 126.925330][ T3811] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 126.933305][ T3811] R13: 00007fe8adc26038 R14: 00007ffe44424ef0 R15: 00007ffe44424fd8 [ 126.941283][ T3811] [ 126.944470][ T1102] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 126.960395][ T3799] F2FS-fs (loop8): Try to recover 2th superblock, ret: -30 [ 126.967764][ T3799] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 127.024240][ T289] EXT4-fs (loop1): unmounting filesystem. [ 127.087123][ T2581] EXT4-fs (loop6): unmounting filesystem. [ 127.104764][ T3823] netlink: 'syz.6.873': attribute type 49 has an invalid length. [ 127.133017][ T1102] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.151980][ T1102] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.165179][ T3823] device ip6gretap0 entered promiscuous mode [ 127.181677][ T1102] usb 10-1: config 0 interface 0 has no altsetting 0 [ 127.196442][ T1102] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 127.211461][ T3829] loop8: detected capacity change from 0 to 33280 [ 127.215827][ T1102] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.225495][ T3819] loop1: detected capacity change from 0 to 40427 [ 127.246460][ T3819] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 127.260205][ T3829] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 127.269528][ T3819] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 127.270340][ T1102] usb 10-1: config 0 descriptor?? [ 127.278131][ T3829] System zones: 1-12 [ 127.297672][ T3819] F2FS-fs (loop1): invalid crc value [ 127.303356][ T3829] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.874: missing EA_INODE flag [ 127.311695][ T3819] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.315471][ T3829] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.874: error while reading EA inode 12 err=-117 [ 127.334115][ T3829] EXT4-fs (loop8): 1 orphan inode deleted [ 127.340012][ T3829] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 127.365101][ T3819] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 127.372217][ T3819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.516852][ T3839] syz.1.872: attempt to access beyond end of device [ 128.516852][ T3839] loop1: rw=2049, sector=77824, nr_sectors = 3000 limit=40427 [ 128.534009][ T3839] syz.1.872: attempt to access beyond end of device [ 128.534009][ T3839] loop1: rw=2049, sector=80824, nr_sectors = 1096 limit=40427 [ 128.556170][ T3839] syz.1.872: attempt to access beyond end of device [ 128.556170][ T3839] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 128.596790][ T3839] syz.1.872: attempt to access beyond end of device [ 128.596790][ T3839] loop1: rw=2049, sector=57344, nr_sectors = 12288 limit=40427 [ 128.614215][ T3839] syz.1.872: attempt to access beyond end of device [ 128.614215][ T3839] loop1: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 128.627992][ T3839] syz.1.872: attempt to access beyond end of device [ 128.627992][ T3839] loop1: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 128.641933][ T3839] syz.1.872: attempt to access beyond end of device [ 128.641933][ T3839] loop1: rw=2049, sector=69648, nr_sectors = 8 limit=40427 [ 128.655663][ T3839] syz.1.872: attempt to access beyond end of device [ 128.655663][ T3839] loop1: rw=2049, sector=69656, nr_sectors = 8 limit=40427 [ 128.669383][ T3839] syz.1.872: attempt to access beyond end of device [ 128.669383][ T3839] loop1: rw=2049, sector=69664, nr_sectors = 8 limit=40427 [ 128.683106][ T3839] syz.1.872: attempt to access beyond end of device [ 128.683106][ T3839] loop1: rw=2049, sector=69672, nr_sectors = 8 limit=40427 [ 128.915086][ T2680] EXT4-fs (loop8): unmounting filesystem. [ 128.967773][ T3849] loop8: detected capacity change from 0 to 128 [ 128.987222][ T28] audit: type=1400 audit(1794693710.821:770): avc: denied { connect } for pid=3848 comm="syz.8.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.003021][ T3851] EXT4-fs: Ignoring removed i_version option [ 129.037179][ T3851] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.053916][ T3851] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 129.068346][ T3851] Quota error (device loop0): write_blk: dquota write failed [ 129.076172][ T3851] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 129.085336][ T3851] Quota error (device loop0): write_blk: dquota write failed [ 129.092908][ T3851] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 129.102916][ T3851] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.878: Failed to acquire dquot type 1 [ 129.116298][ T3851] EXT4-fs (loop0): 1 truncate cleaned up [ 129.121960][ T3851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.122579][ T1102] usbhid 10-1:0.0: can't add hid device: -71 [ 129.141115][ T1102] usbhid: probe of 10-1:0.0 failed with error -71 [ 129.153409][ T3857] FAULT_INJECTION: forcing a failure. [ 129.153409][ T3857] name fail_futex, interval 1, probability 0, space 0, times 0 [ 129.156767][ T1102] usb 10-1: USB disconnect, device number 3 [ 129.168653][ T287] EXT4-fs (loop0): unmounting filesystem. [ 129.173723][ T3857] CPU: 1 PID: 3857 Comm: syz.1.880 Not tainted syzkaller #0 [ 129.185142][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 129.195360][ T3857] Call Trace: [ 129.198626][ T3857] [ 129.201539][ T3857] __dump_stack+0x21/0x24 [ 129.205862][ T3857] dump_stack_lvl+0x110/0x170 [ 129.210527][ T3857] ? __cfi_dump_stack_lvl+0x8/0x8 [ 129.215536][ T3857] ? avc_has_extended_perms+0x9d5/0xed0 [ 129.221073][ T3857] dump_stack+0x15/0x24 [ 129.225211][ T3857] should_fail_ex+0x3bf/0x510 [ 129.229874][ T3857] should_fail+0xb/0x10 [ 129.234013][ T3857] get_futex_key+0x143/0xb10 [ 129.238596][ T3857] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 129.244219][ T3857] ? __cfi_get_futex_key+0x10/0x10 [ 129.249325][ T3857] futex_wake+0x150/0x8e0 [ 129.253641][ T3857] ? ioctl_has_perm+0x1b8/0x4f0 [ 129.258487][ T3857] ? __cfi_futex_wake+0x10/0x10 [ 129.263323][ T3857] ? vfs_write+0xa51/0xd00 [ 129.267725][ T3857] do_futex+0x2bf/0x430 [ 129.271861][ T3857] ? __cfi_do_futex+0x10/0x10 [ 129.276518][ T3857] ? mutex_unlock+0x8f/0x230 [ 129.281098][ T3857] __se_sys_futex+0x136/0x310 [ 129.285774][ T3857] ? __x64_sys_futex+0x100/0x100 [ 129.290693][ T3857] ? fput+0x154/0x1a0 [ 129.294663][ T3857] __x64_sys_futex+0xe5/0x100 [ 129.299322][ T3857] x64_sys_call+0x7ec/0x9a0 [ 129.303810][ T3857] do_syscall_64+0x4c/0xa0 [ 129.308207][ T3857] ? clear_bhb_loop+0x30/0x80 [ 129.312870][ T3857] ? clear_bhb_loop+0x30/0x80 [ 129.317532][ T3857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.323416][ T3857] RIP: 0033:0x7fdbf93a94d9 [ 129.327815][ T3857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.347406][ T3857] RSP: 002b:00007fdbfa20d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.355822][ T3857] RAX: ffffffffffffffda RBX: 00007fdbf9625fa8 RCX: 00007fdbf93a94d9 [ 129.363780][ T3857] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdbf9625fac [ 129.371738][ T3857] RBP: 00007fdbf9625fa0 R08: 0026ac247a67a2fe R09: 0000000000000000 [ 129.379692][ T3857] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 129.387649][ T3857] R13: 00007fdbf9626038 R14: 00007ffe87317f40 R15: 00007ffe87318028 [ 129.396215][ T3857] [ 129.399596][ T457] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 129.454016][ T315] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.472446][ T1112] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 129.534387][ T3865] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 129.540767][ T3865] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 129.550931][ T3865] F2FS-fs (loop1): invalid crc value [ 129.557326][ T3865] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 129.578464][ T3865] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 129.586260][ T3865] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.595785][ T457] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 129.605060][ T457] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.613216][ T457] usb 7-1: Product: syz [ 129.617426][ T457] usb 7-1: Manufacturer: syz [ 129.626557][ T457] usb 7-1: SerialNumber: syz [ 129.638835][ T3859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.648011][ T3859] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.663520][ T1112] usb 9-1: not running at top speed; connect to a high speed hub [ 129.670235][ T3859] EXT4-fs (loop0): shut down requested (2) [ 129.678869][ T1112] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.700920][ T1112] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 129.710124][ T1112] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.719314][ T1112] usb 9-1: Product: syz [ 129.727257][ T1112] usb 9-1: Manufacturer: syz [ 129.731862][ T1112] usb 9-1: SerialNumber: syz [ 129.747241][ T3872] EXT4-fs (loop1): 1 orphan inode deleted [ 129.753223][ T3872] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 129.762268][ T3872] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.763434][ T1080] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:10: Failed to release dquot type 1 [ 129.940235][ T3853] netlink: 'syz.8.879': attribute type 4 has an invalid length. [ 129.952012][ T3853] netlink: 'syz.8.879': attribute type 4 has an invalid length. [ 129.968483][ T3853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.979914][ T3853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.988871][ T3886] netlink: 'syz.8.879': attribute type 4 has an invalid length. [ 129.997591][ T3888] netlink: 'syz.8.879': attribute type 4 has an invalid length. [ 130.006769][ T1112] usb 9-1: USB disconnect, device number 15 [ 130.200362][ T287] EXT4-fs (loop0): unmounting filesystem. [ 130.294775][ T3901] EXT4-fs: Ignoring removed i_version option [ 130.301574][ T3901] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.315113][ T3901] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 130.329967][ T3901] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.891: Failed to acquire dquot type 1 [ 130.341583][ T3901] EXT4-fs (loop0): 1 truncate cleaned up [ 130.347432][ T3901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.361909][ T287] EXT4-fs (loop0): unmounting filesystem. [ 130.376838][ T3905] FAULT_INJECTION: forcing a failure. [ 130.376838][ T3905] name fail_futex, interval 1, probability 0, space 0, times 0 [ 130.389931][ T3905] CPU: 0 PID: 3905 Comm: syz.0.892 Not tainted syzkaller #0 [ 130.397219][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 130.407261][ T3905] Call Trace: [ 130.410551][ T3905] [ 130.413482][ T3905] __dump_stack+0x21/0x24 [ 130.417795][ T3905] dump_stack_lvl+0x110/0x170 [ 130.422467][ T3905] ? __cfi_dump_stack_lvl+0x8/0x8 [ 130.427498][ T3905] dump_stack+0x15/0x24 [ 130.431668][ T3905] should_fail_ex+0x3bf/0x510 [ 130.436353][ T3905] should_fail+0xb/0x10 [ 130.440494][ T3905] get_futex_key+0x143/0xb10 [ 130.445073][ T3905] ? __cfi_get_futex_key+0x10/0x10 [ 130.450197][ T3905] ? ttwu_queue_wakelist+0x307/0x4d0 [ 130.455486][ T3905] futex_wait_setup+0xb8/0x260 [ 130.460248][ T3905] ? __cfi_futex_wait_setup+0x10/0x10 [ 130.465607][ T3905] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 130.471401][ T3905] ? futex_setup_timer+0xb0/0xc0 [ 130.476335][ T3905] futex_wait+0x1ce/0x900 [ 130.480656][ T3905] ? __cfi_futex_wait+0x10/0x10 [ 130.485495][ T3905] ? __cfi_futex_wake+0x10/0x10 [ 130.490329][ T3905] ? vfs_write+0xa51/0xd00 [ 130.494732][ T3905] do_futex+0x2e2/0x430 [ 130.498871][ T3905] ? __cfi_do_futex+0x10/0x10 [ 130.503528][ T3905] ? __kasan_check_write+0x14/0x20 [ 130.508620][ T3905] ? mutex_unlock+0x8f/0x230 [ 130.513196][ T3905] __se_sys_futex+0x136/0x310 [ 130.517861][ T3905] ? __x64_sys_futex+0x100/0x100 [ 130.522775][ T3905] ? ksys_write+0x1fa/0x260 [ 130.527264][ T3905] ? __cfi_ksys_write+0x10/0x10 [ 130.532100][ T3905] __x64_sys_futex+0xe5/0x100 [ 130.536761][ T3905] x64_sys_call+0x7ec/0x9a0 [ 130.541256][ T3905] do_syscall_64+0x4c/0xa0 [ 130.545657][ T3905] ? clear_bhb_loop+0x30/0x80 [ 130.550323][ T3905] ? clear_bhb_loop+0x30/0x80 [ 130.554985][ T3905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.560863][ T3905] RIP: 0033:0x7fe8ad9a94d9 [ 130.565261][ T3905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.584851][ T3905] RSP: 002b:00007fe8ae8230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.593253][ T3905] RAX: ffffffffffffffda RBX: 00007fe8adc25fa8 RCX: 00007fe8ad9a94d9 [ 130.601216][ T3905] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe8adc25fa8 [ 130.609192][ T3905] RBP: 00007fe8adc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 130.617155][ T3905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.625114][ T3905] R13: 00007fe8adc26038 R14: 00007ffe44424ef0 R15: 00007ffe44424fd8 [ 130.633078][ T3905] [ 130.679319][ T289] EXT4-fs (loop1): unmounting filesystem. [ 130.724273][ T315] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.807022][ T3913] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 130.813615][ T3913] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 130.822337][ T3913] F2FS-fs (loop0): invalid crc value [ 130.829041][ T3913] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 130.851509][ T3913] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 130.858772][ T3913] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.906371][ T1102] hid-generic 3922:0005:0007.0008: item fetching failed at offset 1/65 [ 130.914964][ T1102] hid-generic: probe of 3922:0005:0007.0008 failed with error -22 [ 130.962629][ T457] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 131.003595][ T3929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.014051][ T3929] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.033984][ T287] EXT4-fs (loop0): unmounting filesystem. [ 131.064629][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 131.143888][ T457] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.154961][ T457] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.168017][ T457] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.174747][ T457] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 131.183957][ T457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.195641][ T457] usb 2-1: config 0 descriptor?? [ 131.244728][ T3936] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.251767][ T3936] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.259359][ T3936] device bridge_slave_0 entered promiscuous mode [ 131.266611][ T3936] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.273679][ T3936] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.281006][ T3936] device bridge_slave_1 entered promiscuous mode [ 131.325205][ T3936] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.332268][ T3936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.339562][ T3936] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.346627][ T3936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.366124][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.373718][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.380942][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.390594][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.398829][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.405873][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.415278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.423505][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.430521][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.443276][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.452750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.467613][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.479420][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.487714][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.495398][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.504112][ T3936] device veth0_vlan entered promiscuous mode [ 131.514356][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.523699][ T3936] device veth1_macvtap entered promiscuous mode [ 131.533587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.548235][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.578825][ T3948] set_capacity_and_notify: 11 callbacks suppressed [ 131.578844][ T3948] loop8: detected capacity change from 0 to 33280 [ 131.610978][ T3948] EXT4-fs (loop8): 1 orphan inode deleted [ 131.613550][ T3954] loop4: detected capacity change from 0 to 256 [ 131.616995][ T3948] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 131.632544][ T1079] __quota_error: 5 callbacks suppressed [ 131.632557][ T1079] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 131.648356][ T1079] EXT4-fs error (device loop8): ext4_release_dquot:6864: comm kworker/u4:9: Failed to release dquot type 1 [ 131.660607][ T3948] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.728684][ T3954] loop4: detected capacity change from 0 to 40427 [ 131.743187][ T3954] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 131.749562][ T3954] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 131.773972][ T3954] F2FS-fs (loop4): invalid crc value [ 131.780410][ T3954] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 131.823896][ T457] usbhid 2-1:0.0: can't add hid device: -71 [ 131.829873][ T457] usbhid: probe of 2-1:0.0 failed with error -71 [ 131.837428][ T3954] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 131.844163][ T457] usb 2-1: USB disconnect, device number 25 [ 131.847498][ T3954] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 131.976788][ T1074] usb 7-1: USB disconnect, device number 9 [ 132.038789][ T3968] loop4: detected capacity change from 0 to 34816 [ 132.049613][ T3968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.062849][ T3968] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.065711][ T3971] loop6: detected capacity change from 0 to 128 [ 132.095692][ T3968] xt_hashlimit: size too large, truncated to 1048576 [ 132.111321][ T3968] EXT4-fs (loop4): shut down requested (2) [ 132.121656][ T3936] EXT4-fs (loop4): unmounting filesystem. [ 132.137938][ T3975] loop4: detected capacity change from 0 to 33280 [ 132.144664][ T3975] EXT4-fs: Ignoring removed i_version option [ 132.151416][ T3975] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.165992][ T3975] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 132.180306][ T3975] Quota error (device loop4): write_blk: dquota write failed [ 132.187851][ T3975] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 132.197055][ T3975] Quota error (device loop4): write_blk: dquota write failed [ 132.204662][ T3975] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 132.214650][ T3975] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.916: Failed to acquire dquot type 1 [ 132.226130][ T3975] EXT4-fs (loop4): 1 truncate cleaned up [ 132.231772][ T3975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.246709][ T3936] EXT4-fs (loop4): unmounting filesystem. [ 132.261829][ T3980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.270431][ T3980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.379412][ T28] audit: type=1400 audit(1794693714.210:771): avc: denied { setopt } for pid=3984 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.492870][ T1074] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 132.503025][ T2680] EXT4-fs (loop8): unmounting filesystem. [ 132.522825][ T40] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.674000][ T1074] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.684412][ T1074] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 132.703034][ T314] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 132.711531][ T1074] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.721072][ T1074] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.722823][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 132.729114][ T1074] usb 7-1: SerialNumber: syz [ 132.746672][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.793136][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.805554][ T40] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 132.843235][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.852865][ T314] usb 2-1: device descriptor read/64, error -71 [ 132.877360][ T40] usb 5-1: config 0 descriptor?? [ 132.897463][ T4000] loop9: detected capacity change from 0 to 256 [ 132.933820][ T460] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.946148][ T1074] cdc_ether 7-1:1.0: More than one union descriptor, skipping ... [ 132.954563][ T1074] usb 7-1: bad CDC descriptors [ 132.966714][ T1074] usb 7-1: USB disconnect, device number 10 [ 133.040574][ T4000] loop9: detected capacity change from 0 to 40427 [ 133.047113][ T834] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 133.055672][ T4000] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 133.062037][ T4000] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 133.070977][ T4000] F2FS-fs (loop9): invalid crc value [ 133.077439][ T4000] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 133.091130][ T40] usbhid 5-1:0.0: can't add hid device: -71 [ 133.097203][ T40] usbhid: probe of 5-1:0.0 failed with error -71 [ 133.105114][ T40] usb 5-1: USB disconnect, device number 8 [ 133.113802][ T4000] F2FS-fs (loop9): Try to recover 2th superblock, ret: -30 [ 133.121120][ T4000] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 133.128766][ T314] usb 2-1: device descriptor read/64, error -71 [ 133.229434][ T4005] loop9: detected capacity change from 0 to 36864 [ 133.240707][ T4005] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 133.262920][ T834] usb 9-1: Using ep0 maxpacket: 16 [ 133.269067][ T834] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 133.277323][ T834] usb 9-1: config 0 has no interface number 0 [ 133.283424][ T834] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 133.293247][ T834] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 133.303345][ T834] usb 9-1: config 0 interface 41 has no altsetting 0 [ 133.311300][ T834] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 133.320370][ T834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.328416][ T834] usb 9-1: Product: syz [ 133.332557][ T834] usb 9-1: Manufacturer: syz [ 133.337286][ T834] usb 9-1: SerialNumber: syz [ 133.342308][ T834] usb 9-1: config 0 descriptor?? [ 133.347578][ T3996] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 133.354873][ T3996] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 133.412934][ T314] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 133.464545][ T4008] loop6: detected capacity change from 0 to 128 [ 133.522979][ T1074] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 133.583171][ T314] usb 2-1: device descriptor read/64, error -71 [ 133.635298][ T4019] EXT4-fs (loop6): 1 orphan inode deleted [ 133.641133][ T4019] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 133.650906][ T4019] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.653257][ T1080] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 133.671128][ T1080] EXT4-fs error (device loop6): ext4_release_dquot:6864: comm kworker/u4:10: Failed to release dquot type 1 [ 133.704817][ T1074] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 2047, setting to 64 [ 133.715774][ T1074] usb 10-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 133.734110][ T1074] usb 10-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 133.743381][ T1074] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.751460][ T1074] usb 10-1: Product: syz [ 133.755839][ T1074] usb 10-1: Manufacturer: syz [ 133.760608][ T1074] usb 10-1: SerialNumber: syz [ 133.852989][ T314] usb 2-1: device descriptor read/64, error -71 [ 133.883006][ T40] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.973061][ T314] usb usb2-port1: attempt power cycle [ 133.977985][ T1074] usb 10-1: MIDIStreaming interface descriptor not found [ 133.987929][ T1074] usb 10-1: USB disconnect, device number 4 [ 134.063951][ T40] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.074951][ T40] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.087852][ T40] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.094615][ T40] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 134.103718][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.112178][ T40] usb 5-1: config 0 descriptor?? [ 134.383059][ T314] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 134.414007][ T314] usb 2-1: device descriptor read/8, error -71 [ 134.481890][ T3654] EXT4-fs (loop9): unmounting filesystem. [ 134.506000][ T4026] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 134.515155][ T4026] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.547548][ T2581] EXT4-fs (loop6): unmounting filesystem. [ 134.548331][ T4026] EXT4-fs (loop9): shut down requested (2) [ 134.564123][ T314] usb 2-1: device descriptor read/8, error -71 [ 134.581606][ T4030] EXT4-fs: Ignoring removed i_version option [ 134.588931][ T4030] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.605403][ T4030] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 134.619732][ T4030] Quota error (device loop6): write_blk: dquota write failed [ 134.627237][ T4030] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 134.636368][ T4030] Quota error (device loop6): write_blk: dquota write failed [ 134.643960][ T4030] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.932: Failed to acquire dquot type 1 [ 134.655510][ T4030] EXT4-fs (loop6): 1 truncate cleaned up [ 134.655613][ T3654] EXT4-fs (loop9): unmounting filesystem. [ 134.661173][ T4030] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 134.676609][ T2581] EXT4-fs (loop6): unmounting filesystem. [ 134.693129][ T1647] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.728071][ T40] usbhid 5-1:0.0: can't add hid device: -71 [ 134.736016][ T40] usbhid: probe of 5-1:0.0 failed with error -71 [ 134.752128][ T40] usb 5-1: USB disconnect, device number 9 [ 134.802037][ T4039] FAT-fs (loop9): Directory bread(block 64) failed [ 134.808912][ T4039] FAT-fs (loop9): Directory bread(block 65) failed [ 134.817476][ T4039] FAT-fs (loop9): Directory bread(block 66) failed [ 134.825311][ T4039] FAT-fs (loop9): Directory bread(block 67) failed [ 134.834134][ T4039] FAT-fs (loop9): Directory bread(block 68) failed [ 134.840734][ T4039] FAT-fs (loop9): Directory bread(block 69) failed [ 134.847576][ T4039] FAT-fs (loop9): Directory bread(block 70) failed [ 134.853108][ T314] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 134.854787][ T4039] FAT-fs (loop9): Directory bread(block 71) failed [ 134.868381][ T4036] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 134.868809][ T4042] futex_wake_op: syz.9.935 tries to shift op by 144; fix this program [ 134.883010][ T4036] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 134.883661][ T4039] FAT-fs (loop9): Directory bread(block 72) failed [ 134.898516][ T4036] F2FS-fs (loop6): invalid crc value [ 134.900272][ T4039] FAT-fs (loop9): Directory bread(block 73) failed [ 134.905570][ T4036] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 134.912508][ T314] usb 2-1: device descriptor read/8, error -71 [ 134.936860][ T4036] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30 [ 134.944218][ T4036] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 135.084176][ T314] usb 2-1: device descriptor read/8, error -71 [ 135.213178][ T314] usb usb2-port1: unable to enumerate USB device [ 135.243594][ T4055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.938'. [ 135.255081][ T4055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.938'. [ 135.380018][ T4063] F2FS-fs (loop4): invalid crc value [ 135.390496][ T4063] F2FS-fs (loop4): Found nat_bits in checkpoint [ 135.435144][ T4068] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 135.437596][ T4063] F2FS-fs (loop4): Start checkpoint disabled! [ 135.450673][ T289] EXT4-fs (loop1): unmounting filesystem. [ 135.450900][ T4063] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 135.471432][ T4063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 135.493422][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.494726][ T4075] EXT4-fs (loop1): 1 orphan inode deleted [ 135.507137][ T4075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 135.517659][ T1079] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:9: Failed to release dquot type 1 [ 135.529453][ T4075] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.560644][ T4079] device syzkaller0 entered promiscuous mode [ 135.568452][ T4079] tipc: Started in network mode [ 135.573575][ T4079] tipc: Node identity fe899189eefe, cluster identity 4711 [ 135.580834][ T4079] tipc: Enabled bearer , priority 0 [ 135.740556][ T834] sr9700: probe of 9-1:0.41 failed with error -71 [ 135.755727][ T834] usb 9-1: USB disconnect, device number 16 [ 135.811682][ T4087] EXT4-fs: Ignoring removed i_version option [ 135.830785][ T4087] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.855802][ T4087] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 135.863211][ T314] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 135.870443][ T4087] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.947: Failed to acquire dquot type 1 [ 135.889163][ T4087] EXT4-fs (loop9): 1 truncate cleaned up [ 135.895974][ T4087] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 135.925804][ T3654] EXT4-fs (loop9): unmounting filesystem. [ 135.986592][ T4085] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 136.003784][ T4085] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 136.064415][ T314] usb 5-1: not running at top speed; connect to a high speed hub [ 136.072671][ T4085] F2FS-fs (loop8): invalid crc value [ 136.081176][ T314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.089821][ T4085] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 136.094368][ T314] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 136.112085][ T314] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 136.120615][ T314] usb 5-1: Product: syz [ 136.121438][ T4085] F2FS-fs (loop8): Try to recover 2th superblock, ret: -30 [ 136.125024][ T314] usb 5-1: Manufacturer: syz [ 136.132192][ T4085] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 136.143398][ T314] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 136.214306][ T1112] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 136.245176][ T4105] FAULT_INJECTION: forcing a failure. [ 136.245176][ T4105] name fail_futex, interval 1, probability 0, space 0, times 0 [ 136.258035][ T4105] CPU: 1 PID: 4105 Comm: syz.8.951 Not tainted syzkaller #0 [ 136.265324][ T4105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 136.275413][ T4105] Call Trace: [ 136.278683][ T4105] [ 136.281623][ T4105] __dump_stack+0x21/0x24 [ 136.285944][ T4105] dump_stack_lvl+0x110/0x170 [ 136.290634][ T4105] ? __cfi_dump_stack_lvl+0x8/0x8 [ 136.295645][ T4105] ? avc_has_perm_noaudit+0x30a/0x490 [ 136.301011][ T4105] dump_stack+0x15/0x24 [ 136.305151][ T4105] should_fail_ex+0x3bf/0x510 [ 136.309828][ T4105] should_fail+0xb/0x10 [ 136.313999][ T4105] get_futex_key+0x170/0xb10 [ 136.318601][ T4105] ? __cfi_get_futex_key+0x10/0x10 [ 136.323714][ T4105] futex_wake+0x150/0x8e0 [ 136.328050][ T4105] ? __cfi_futex_wake+0x10/0x10 [ 136.332882][ T4105] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 136.338324][ T4105] ? perf_lock_task_context+0x3fd/0x4c0 [ 136.343861][ T4105] ? perf_event_exit_event+0x530/0x530 [ 136.349316][ T4105] ? mutex_unlock+0x8f/0x230 [ 136.353900][ T4105] do_futex+0x2bf/0x430 [ 136.358044][ T4105] ? __cfi_do_futex+0x10/0x10 [ 136.362701][ T4105] ? __kasan_check_write+0x14/0x20 [ 136.367797][ T4105] mm_release+0x195/0x2d0 [ 136.372114][ T4105] ? exit_mm_release+0x30/0x30 [ 136.376864][ T4105] ? futex_exit_release+0x119/0x1e0 [ 136.382044][ T4105] exit_mm_release+0x25/0x30 [ 136.386619][ T4105] do_exit+0x8de/0x29f0 [ 136.390765][ T4105] ? __cfi_do_exit+0x10/0x10 [ 136.395339][ T4105] ? plist_check_list+0x255/0x270 [ 136.400346][ T4105] ? _raw_spin_lock+0x94/0xf0 [ 136.405006][ T4105] ? __kasan_check_write+0x14/0x20 [ 136.410100][ T4105] ? _raw_spin_lock_irq+0x95/0xf0 [ 136.415106][ T4105] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 136.420635][ T4105] do_group_exit+0x21b/0x2e0 [ 136.425211][ T4105] ? __kasan_check_write+0x14/0x20 [ 136.430307][ T4105] ? recalc_sigpending+0x168/0x1c0 [ 136.435401][ T4105] get_signal+0x167c/0x1700 [ 136.439893][ T4105] ? __cfi_get_signal+0x10/0x10 [ 136.444728][ T4105] arch_do_signal_or_restart+0xd1/0x11c0 [ 136.450356][ T4105] ? do_futex+0x2e2/0x430 [ 136.454668][ T4105] ? __cfi_do_futex+0x10/0x10 [ 136.459331][ T4105] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 136.465469][ T4105] ? __se_sys_futex+0x136/0x310 [ 136.470307][ T4105] exit_to_user_mode_loop+0x7a/0xb0 [ 136.475491][ T4105] exit_to_user_mode_prepare+0x87/0xd0 [ 136.480933][ T4105] syscall_exit_to_user_mode+0x1a/0x30 [ 136.486377][ T4105] do_syscall_64+0x58/0xa0 [ 136.490774][ T4105] ? clear_bhb_loop+0x30/0x80 [ 136.495441][ T4105] ? clear_bhb_loop+0x30/0x80 [ 136.500110][ T4105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.505985][ T4105] RIP: 0033:0x7f5dbb5a94d9 [ 136.510379][ T4105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.529969][ T4105] RSP: 002b:00007f5dbc4690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.538368][ T4105] RAX: fffffffffffffe00 RBX: 00007f5dbb825fa8 RCX: 00007f5dbb5a94d9 [ 136.546325][ T4105] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5dbb825fa8 [ 136.554279][ T4105] RBP: 00007f5dbb825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 136.562232][ T4105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.570190][ T4105] R13: 00007f5dbb826038 R14: 00007fff26fdc230 R15: 00007fff26fdc318 [ 136.578508][ T4105] [ 136.589376][ T4079] set_capacity_and_notify: 14 callbacks suppressed [ 136.589395][ T4079] loop4: detected capacity change from 0 to 34816 [ 136.610447][ T4079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.612760][ T1112] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.629258][ T4079] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.631279][ T1112] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.644574][ T4079] EXT4-fs (loop4): unmounting filesystem. [ 136.653809][ T1112] usb 7-1: config 0 interface 0 has no altsetting 0 [ 136.670937][ T1112] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 136.680079][ T1112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.690538][ T1112] usb 7-1: config 0 descriptor?? [ 136.695873][ T457] tipc: Node number set to 276271497 [ 136.696999][ T289] EXT4-fs (loop1): unmounting filesystem. [ 136.704182][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 136.704194][ T28] audit: type=1400 audit(1794693718.540:773): avc: denied { setopt } for pid=4109 comm="syz.8.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 136.749928][ T2680] ------------[ cut here ]------------ [ 136.755589][ T2680] WARNING: CPU: 1 PID: 2680 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 136.763853][ T2680] Modules linked in: [ 136.767762][ T2680] CPU: 1 PID: 2680 Comm: syz-executor Not tainted syzkaller #0 [ 136.775856][ T2680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 136.786126][ T2680] RIP: 0010:drop_nlink+0xc5/0x110 [ 136.791159][ T2680] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 83 a6 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb 08 ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 136.810807][ T2680] RSP: 0018:ffffc900009c7c60 EFLAGS: 00010293 [ 136.816920][ T2680] RAX: ffffffff81c66925 RBX: ffff888134260448 RCX: ffff88811f9b5100 [ 136.824318][ T4120] 9pnet_fd: Insufficient options for proto=fd [ 136.824921][ T2680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.832181][ T4120] futex_wake_op: syz.1.956 tries to shift op by 144; fix this program [ 136.838934][ T2680] RBP: ffffc900009c7c88 R08: 0000000000000003 R09: 0000000000000004 [ 136.838953][ T2680] R10: dffffc0000000000 R11: fffff52000138f7c R12: dffffc0000000000 [ 136.838964][ T2680] R13: 1ffff1102684c092 R14: ffff888134260490 R15: 0000000000000000 [ 136.838975][ T2680] FS: 0000555573516500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 136.839004][ T2680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.839018][ T2680] CR2: 00007fff26fd9e40 CR3: 0000000127020000 CR4: 00000000003506a0 [ 136.839034][ T2680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.902783][ T2680] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.910814][ T2680] Call Trace: [ 136.914111][ T2680] [ 136.917039][ T2680] shmem_rmdir+0x5b/0x90 [ 136.921284][ T2680] vfs_rmdir+0x381/0x4f0 [ 136.925560][ T2680] incfs_kill_sb+0xfe/0x210 [ 136.930069][ T2680] deactivate_locked_super+0xb5/0x120 [ 136.935544][ T2680] deactivate_super+0xaf/0xe0 [ 136.940233][ T2680] cleanup_mnt+0x45e/0x4e0 [ 136.944666][ T2680] __cleanup_mnt+0x19/0x20 [ 136.949080][ T2680] task_work_run+0x1e1/0x250 [ 136.953690][ T2680] ? __cfi_task_work_run+0x10/0x10 [ 136.958802][ T2680] ? __x64_sys_umount+0x12d/0x170 [ 136.963877][ T2680] ? __cfi___x64_sys_umount+0x10/0x10 [ 136.969253][ T2680] exit_to_user_mode_loop+0x9b/0xb0 [ 136.974490][ T2680] exit_to_user_mode_prepare+0x87/0xd0 [ 136.979944][ T2680] syscall_exit_to_user_mode+0x1a/0x30 [ 136.985446][ T2680] do_syscall_64+0x58/0xa0 [ 136.989854][ T2680] ? clear_bhb_loop+0x30/0x80 [ 136.994575][ T2680] ? clear_bhb_loop+0x30/0x80 [ 136.999251][ T2680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.005267][ T2680] RIP: 0033:0x7f5dbb5aa747 [ 137.009704][ T2680] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 137.029365][ T2680] RSP: 002b:00007fff26fdb588 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 137.037791][ T2680] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5dbb5aa747 [ 137.045817][ T2680] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff26fdb640 [ 137.053804][ T2680] RBP: 00007fff26fdb640 R08: 00007fff26fdc640 R09: 00000000ffffffff [ 137.061772][ T2680] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff26fdc6d0 [ 137.069775][ T2680] R13: 00007f5dbb637433 R14: 0000000000021416 R15: 00007fff26fdc710 [ 137.077772][ T2680] [ 137.080778][ T2680] ---[ end trace 0000000000000000 ]--- [ 137.086421][ T2680] ================================================================== [ 137.094479][ T2680] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 137.100710][ T2680] Write of size 4 at addr 0000000000000170 by task syz-executor/2680 [ 137.108753][ T2680] [ 137.111061][ T2680] CPU: 0 PID: 2680 Comm: syz-executor Tainted: G W syzkaller #0 [ 137.120062][ T2680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 137.130099][ T2680] Call Trace: [ 137.133364][ T2680] [ 137.136290][ T2680] __dump_stack+0x21/0x24 [ 137.140607][ T2680] dump_stack_lvl+0x110/0x170 [ 137.145265][ T2680] ? __cfi_dump_stack_lvl+0x8/0x8 [ 137.150282][ T2680] ? __cfi_call_rcu+0x10/0x10 [ 137.154945][ T2680] ? ihold+0x20/0x60 [ 137.158825][ T2680] ? ihold+0x20/0x60 [ 137.162702][ T2680] print_report+0x3d/0x60 [ 137.167017][ T2680] kasan_report+0x122/0x150 [ 137.171510][ T2680] ? ihold+0x20/0x60 [ 137.175385][ T2680] kasan_check_range+0x249/0x2a0 [ 137.180307][ T2680] __kasan_check_write+0x14/0x20 [ 137.185227][ T2680] ihold+0x20/0x60 [ 137.188931][ T2680] vfs_rmdir+0x24c/0x4f0 [ 137.193163][ T2680] incfs_kill_sb+0xfe/0x210 [ 137.197649][ T2680] deactivate_locked_super+0xb5/0x120 [ 137.203007][ T2680] deactivate_super+0xaf/0xe0 [ 137.207668][ T2680] cleanup_mnt+0x45e/0x4e0 [ 137.212066][ T2680] __cleanup_mnt+0x19/0x20 [ 137.216464][ T2680] task_work_run+0x1e1/0x250 [ 137.221038][ T2680] ? __cfi_task_work_run+0x10/0x10 [ 137.226131][ T2680] ? __x64_sys_umount+0x12d/0x170 [ 137.231143][ T2680] ? __cfi___x64_sys_umount+0x10/0x10 [ 137.236499][ T2680] exit_to_user_mode_loop+0x9b/0xb0 [ 137.241681][ T2680] exit_to_user_mode_prepare+0x87/0xd0 [ 137.247121][ T2680] syscall_exit_to_user_mode+0x1a/0x30 [ 137.252567][ T2680] do_syscall_64+0x58/0xa0 [ 137.256961][ T2680] ? clear_bhb_loop+0x30/0x80 [ 137.261621][ T2680] ? clear_bhb_loop+0x30/0x80 [ 137.266282][ T2680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.272157][ T2680] RIP: 0033:0x7f5dbb5aa747 [ 137.276553][ T2680] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 137.296141][ T2680] RSP: 002b:00007fff26fdb588 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 137.304541][ T2680] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5dbb5aa747 [ 137.312496][ T2680] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff26fdb640 [ 137.320447][ T2680] RBP: 00007fff26fdb640 R08: 00007fff26fdc640 R09: 00000000ffffffff [ 137.328400][ T2680] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff26fdc6d0 [ 137.336352][ T2680] R13: 00007f5dbb637433 R14: 0000000000021416 R15: 00007fff26fdc710 [ 137.344309][ T2680] [ 137.347309][ T2680] ================================================================== [ 137.356247][ T4078] tipc: Resetting bearer [ 137.362991][ T314] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 137.366804][ T2680] Disabling lock debugging due to kernel taint [ 137.378891][ T314] uvcvideo 5-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 137.380985][ T4078] tipc: Disabling bearer [ 137.394156][ T2680] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 137.394464][ T314] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 137.401958][ T2680] #PF: supervisor write access in kernel mode [ 137.415092][ T2680] #PF: error_code(0x0002) - not-present page [ 137.421083][ T2680] PGD 1266d8067 P4D 1266d8067 PUD 0 [ 137.426378][ T2680] Oops: 0002 [#1] PREEMPT SMP KASAN [ 137.431585][ T2680] CPU: 0 PID: 2680 Comm: syz-executor Tainted: G B W syzkaller #0 [ 137.431782][ T314] usb 5-1: USB disconnect, device number 10 [ 137.440616][ T2680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 137.440630][ T2680] RIP: 0010:ihold+0x26/0x60 [ 137.440656][ T2680] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 61 00 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 9d f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 137.440671][ T2680] RSP: 0018:ffffc900009c7ca0 EFLAGS: 00010246 [ 137.486688][ T2680] RAX: ffff88811f9b5100 RBX: 0000000000000000 RCX: ffff88811f9b5100 [ 137.494648][ T2680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.502601][ T2680] RBP: ffffc900009c7cb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 137.510554][ T2680] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff888134260454 [ 137.518509][ T2680] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 137.526459][ T2680] FS: 0000555573516500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 137.535367][ T2680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.541930][ T2680] CR2: 0000000000000170 CR3: 0000000127020000 CR4: 00000000003506b0 [ 137.549885][ T2680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.558185][ T2680] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.566140][ T2680] Call Trace: [ 137.569400][ T2680] [ 137.572312][ T2680] vfs_rmdir+0x24c/0x4f0 [ 137.576541][ T2680] incfs_kill_sb+0xfe/0x210 [ 137.581030][ T2680] deactivate_locked_super+0xb5/0x120 [ 137.586388][ T2680] deactivate_super+0xaf/0xe0 [ 137.591050][ T2680] cleanup_mnt+0x45e/0x4e0 [ 137.595450][ T2680] __cleanup_mnt+0x19/0x20 [ 137.599844][ T2680] task_work_run+0x1e1/0x250 [ 137.604416][ T2680] ? __cfi_task_work_run+0x10/0x10 [ 137.609511][ T2680] ? __x64_sys_umount+0x12d/0x170 [ 137.614521][ T2680] ? __cfi___x64_sys_umount+0x10/0x10 [ 137.619875][ T2680] exit_to_user_mode_loop+0x9b/0xb0 [ 137.625058][ T2680] exit_to_user_mode_prepare+0x87/0xd0 [ 137.630500][ T2680] syscall_exit_to_user_mode+0x1a/0x30 [ 137.635946][ T2680] do_syscall_64+0x58/0xa0 [ 137.640341][ T2680] ? clear_bhb_loop+0x30/0x80 [ 137.645001][ T2680] ? clear_bhb_loop+0x30/0x80 [ 137.649663][ T2680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.655540][ T2680] RIP: 0033:0x7f5dbb5aa747 [ 137.659938][ T2680] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 137.679530][ T2680] RSP: 002b:00007fff26fdb588 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 137.687938][ T2680] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5dbb5aa747 [ 137.695902][ T2680] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff26fdb640 [ 137.703858][ T2680] RBP: 00007fff26fdb640 R08: 00007fff26fdc640 R09: 00000000ffffffff [ 137.711811][ T2680] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff26fdc6d0 [ 137.719785][ T2680] R13: 00007f5dbb637433 R14: 0000000000021416 R15: 00007fff26fdc710 [ 137.727743][ T2680] [ 137.730742][ T2680] Modules linked in: [ 137.734633][ T2680] CR2: 0000000000000170 [ 137.738776][ T2680] ---[ end trace 0000000000000000 ]--- [ 137.744226][ T2680] RIP: 0010:ihold+0x26/0x60 [ 137.748725][ T2680] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 61 00 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 9d f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 137.768317][ T2680] RSP: 0018:ffffc900009c7ca0 EFLAGS: 00010246 [ 137.774372][ T2680] RAX: ffff88811f9b5100 RBX: 0000000000000000 RCX: ffff88811f9b5100 [ 137.782327][ T2680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.790281][ T2680] RBP: ffffc900009c7cb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 137.798236][ T2680] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff888134260454 [ 137.806196][ T2680] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 137.814162][ T2680] FS: 0000555573516500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 137.823082][ T2680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.829651][ T2680] CR2: 0000000000000170 CR3: 0000000127020000 CR4: 00000000003506b0 [ 137.837610][ T2680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.845562][ T2680] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.853519][ T2680] Kernel panic - not syncing: Fatal exception [ 137.859688][ T2680] Kernel Offset: disabled [ 137.863993][ T2680] Rebooting in 86400 seconds..