last executing test programs: 3m31.518211363s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0xb00, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @empty}, 0x8a, 0x0, 0x0, 0xb00, 0x6, 0x0, 0x8, 0x200, 0x7d0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 3m30.045257667s ago: executing program 3 (id=13): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000000c0)='./file2\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getcwd(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 3m26.306573723s ago: executing program 3 (id=19): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) readlink(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r6}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x1d) getpgid(r0) 3m25.092068079s ago: executing program 3 (id=23): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) r2 = getuid() r3 = syz_clone(0x14c100, &(0x7f0000001300), 0x0, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="48e6a195e5322028baf164bdc1c672f4b7248759ea1a71843c959d9d690a9b8a0dbe071c6e122edbd7ff98a4e5211e5b9457567baf01388b5dde4c104b229467e820523c4a172d0240acaf5074f69155e173cb11bdcfe32aa328646fb0e12d102fca03fe0c1de8fd14ed2f857f367963f7ddb198f9d7bf772967580393341a346bfc0428a9fd302ea6b2c719d221a6e25e0cc552df1edf9ca55364a2294a86bd035273ecb74cb5fed463d02dd70eeb875d8788218a10ed572882e9e347edaa0d8c0a") r4 = getpid() r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000002d40), &(0x7f0000002dc0)=0x6e, 0x80800) r7 = syz_open_dev$vcsn(&(0x7f0000002e00), 0x7ff, 0x121000) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002e40), 0x105000, 0x0) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000002e80), &(0x7f0000002f00)=0x6e, 0x800) r11 = socket$can_raw(0x1d, 0x3, 0x1) r12 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000002f40), 0x80800) r13 = syz_open_dev$usbfs(&(0x7f0000002f80), 0x200, 0x40401) r14 = socket$tipc(0x1e, 0x2, 0x0) r15 = getuid() stat(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000030c0)=@o_path={&(0x7f0000003080)='./file0\x00', 0x0, 0x10}, 0x18) r18 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r19 = userfaultfd(0x80001) r20 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r21 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003140), 0xa0800, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000051c0)='./file0\x00', &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fstat(0xffffffffffffffff, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = syz_socket_connect_nvme_tcp() r28 = openat$incfs(0xffffffffffffff9c, &(0x7f0000005300)='.log\x00', 0x181220, 0x13) r29 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005340), 0x600080, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000080)={0x1154, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x1053, 0x3c, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @uid=r0}, @generic="2c460309759fa395f6e23352e6cd4b7eff8257d32f69da2109f3c3acb6ecc6", @nested={0x4, 0x123}, @typed={0x4, 0x120}, @generic="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", @nested={0x4, 0xb3}, @typed={0x8, 0x8a, 0x0, 0x0, @u32}, @typed={0xc, 0x14b, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r1}]}, @generic="70de22b2cb4d5a631f2d98f0d0f0f8313949a595d9786a46a7179d5e8c7563ec02da7c8ea25cfcf6c9259790e6d500c2ce4e5f7a8f0a383a5d8c2d7f54802966e612022b07764d660549809d9cc02d473bcfa1e4f5a7ec832dabc267c27807d69165c5c8d9634de538722264af074487bb8b858803", @nested={0x62, 0x104, 0x0, 0x1, [@nested={0x4, 0x4d}, @generic="59276ab91caf9c309ba8475e3f3a93c9d1a5fdd4bd914a4923253969b2aa0f7f30ba15e4f97fc3f5ff85915cedc81eeb9d7b5c219d22cb6cae2b24b1880557dc62c4a31e9d5300f506c7303df4d8c79d355faa6cb94a07835ff8"]}]}, 0x1154}, {&(0x7f0000001200)={0xd0, 0x26, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x4, 0xdc}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r2}, @nested={0xab, 0xea, 0x0, 0x1, [@nested={0x4, 0x134}, @generic="b54082ccaa8a097d97b558d2755a3a6963a2970761c725c21eff5ba94879fac1cf1a368102d989ebd12e81d80b7fc6c6a78a990b5fda9ddc8f7e6d1bbc6996780f80fbe7", @generic="5371935d786244eef27649f876a75f6a62d8c7f08113f3f418dfcbee9cb912f2b900652be4a5ba4590fade45bb6868c804024c22051074975ba924a53e3d8ede79c111d6d92a83a068c237c84c3f7fafaec5e17b7f71236d80ab06", @nested={0x4, 0xd5}]}, @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@multicast1}]}, 0xd0}, {&(0x7f00000014c0)={0x13e0, 0x2c, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@generic="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", @generic="c76b6eea7ada5272f71c7c9145e0bcb15ff09e52a5cac2c846dde49465665913e1484998addc9b9c9a8e8012c8ed77211037e24189415924e1d05702bd897cb1f58597367c3db39e108d096e2f29967446a96d631d39a53936c6aaa5a4", @typed={0x8, 0xbd, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x14}, @nested={0x8, 0x8d, 0x0, 0x1, [@typed={0x4, 0x133}]}, @nested={0x11e1, 0x14c, 0x0, 0x1, [@generic="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", @generic="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", @nested={0x4, 0xc1}, @nested={0x4, 0xb2}, @generic="f261be448fe1e6d23f0d4fb762652c3bae96cfb707a89a89b5feacb74371271890ec1a28a52f9c336a727808f2c216e5e69054a13d58c4b8b3359fe80b48d94c6a", @nested={0x4, 0x56}, @generic="a567c38498113da9c05ba7303d0e63f12e27684ed5a0b582d4a58e788fc0a58a7bd5791ae51d3899555eb7799b13aae2f51277e67c3c803ed2d9b21e45dbc7e12201d15293038030a7bbcf0639a910366efbc9380bcf95a8bfe7fb2dcb5f2bd9ba05433af8446ce6bd2a756f0d3c1919f04d96dff8e1066cc4221d746ab1c428a73a", @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@remote}]}, @generic="69d90c74bb9981e9cdfd2ab599c4c6099fc853a775d3d797553b83ef3b6672e99b6f51053811b513e9a12c466908c1e7fd91f81244bac30945437416ad1d236046080618aa4c9c4fa421f931241e3c7df657ad90471e6caf69921c1a5e12c29f1675de30cc9dda4b1e5693dcf0408b3f571afbe3378ac6f8e4c56f8342fa"]}, 0x13e0}, {&(0x7f00000028c0)={0x10c, 0x11, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@typed={0xfb, 0x26, 0x0, 0x0, @binary="611a16f57894f0c4ce11874e8a4e46c27f4da2ed92d17f66c45bb93c46688da4b15803c2bc5fdc456023d2b2c6335445b81bff135c41f4c830a06da2946304e6e64f3c10d373f743c396493147c519ded8692dbd03d0f59bf5a57adc970f2e6524073b62a7f4c79ac71b88a8711e3b89e5caac00cd2a5ed54031c246e6ea405aa7126582c07b5c55294e1cb6e4c9cff476df46511ec78ec14b257e5c2b3f8533b11be43f30d28700d69be20f983d5582a9fee2c700725a5bb374a815e3baf2435fb3008ac7e06ede5310033e06b91d7185eb1c3d8014d76bd2265e7f6569b3469cb701a67a94278aeb959c37c375e04a4f10730c8744c4"}]}, 0x10c}, {&(0x7f0000002a00)={0x250, 0x33, 0x200, 0x70bd2b, 0x25dfdbff, "", [@nested={0xf6, 0xd0, 0x0, 0x1, [@nested={0x4, 0x53}, @generic="99cbb3144932ea24aeb1e516a5a75754ace4065da57ae9d65bd9e5693ac2004bdda0f9903231224b59747f43d51b0bf9e35fbaa04b4fbfd522889f76d521986616670f343da95d712dd2695dc347906d4c06e910a466051164561aad187f705c5a4e96c02c56cf575b543630bae1d9023d3aa63a08ee8cf57d26de73ace0ef536b2c97a5a654f4ff202e325405bb1c0df9ef0493cbdff1b50c1f22bd1470698b30c61bf7093c0db61bd4503dab738f0cf12e2699d4be69c77edf2cb924ef7777ae6d09a6fd441b914244ad4cdba43edb202ce69eb59405b969e29723e494bb1c0126980ded753a8922bc7962521d"]}, @nested={0x148, 0x84, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @pid=r4}, @generic="cb82262fb074ce9f9bffbb892fe6a78fef1ae13c3b15836340d2c98285dc8ec3433eba1085abc6120f288507925f6951bb63ac5c8ddd213e3ce7e458b31c89250bc7bf12f7fa093ab68df53b0f8a7be5b20421e92401a8f9d995f7884face37442409ed2d1ffc9c79a1feb806201a6f2e115a4d3f80cbe819173cb595044f01db99034d2084d49bb99e749bafd76da5797debab094990a508b4c50e403fb5b", @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="f888ca04ab16502efcab5f89ede52d17a29118e0905c73e1945eca2bc866b5075f141d574039c84fae5f61da9998b555a86876cc7da059d74bf2933cc5c9dad1eb3d55067d4bdaebcbe21929c2cf7329de6284e5c6328a4382e91b92993b38b892fb41eef896baa0afbb4d9fc459abd92c19040e71d2d61c4292837921927b3d65a69c46ed", @typed={0x4, 0xa7}]}]}, 0x250}], 0x5, &(0x7f0000005380)=[@rights={{0x30, 0x1, 0x1, [r5, r6, r7, r8, r9, 0xffffffffffffffff, r10, r11]}}, @rights={{0x1c, 0x1, 0x1, [r12, r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r15, r16}}}, @rights={{0x2c, 0x1, 0x1, [r17, r18, 0xffffffffffffffff, 0xffffffffffffffff, r19, r20, r21]}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r26}}}, @rights={{0x20, 0x1, 0x1, [r27, r28, r29, 0xffffffffffffffff]}}], 0xe0, 0x8000}, 0xc840) lsetxattr$system_posix_acl(&(0x7f00000054c0)='./file0\x00', &(0x7f0000005500)='system.posix_acl_default\x00', &(0x7f0000005540)={{}, {0x1, 0x2}, [{0x2, 0x0, r0}, {0x2, 0x5, 0xee00}, {0x2, 0x1, r25}, {0x2, 0x2, r22}, {0x2, 0x2, r15}], {}, [{0x8, 0x7, r26}], {}, {0x20, 0x1}}, 0x54, 0x0) 3m24.833606337s ago: executing program 32 (id=23): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) r2 = getuid() r3 = syz_clone(0x14c100, &(0x7f0000001300), 0x0, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="48e6a195e5322028baf164bdc1c672f4b7248759ea1a71843c959d9d690a9b8a0dbe071c6e122edbd7ff98a4e5211e5b9457567baf01388b5dde4c104b229467e820523c4a172d0240acaf5074f69155e173cb11bdcfe32aa328646fb0e12d102fca03fe0c1de8fd14ed2f857f367963f7ddb198f9d7bf772967580393341a346bfc0428a9fd302ea6b2c719d221a6e25e0cc552df1edf9ca55364a2294a86bd035273ecb74cb5fed463d02dd70eeb875d8788218a10ed572882e9e347edaa0d8c0a") r4 = getpid() r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000002d40), &(0x7f0000002dc0)=0x6e, 0x80800) r7 = syz_open_dev$vcsn(&(0x7f0000002e00), 0x7ff, 0x121000) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002e40), 0x105000, 0x0) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000002e80), &(0x7f0000002f00)=0x6e, 0x800) r11 = socket$can_raw(0x1d, 0x3, 0x1) r12 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000002f40), 0x80800) r13 = syz_open_dev$usbfs(&(0x7f0000002f80), 0x200, 0x40401) r14 = socket$tipc(0x1e, 0x2, 0x0) r15 = getuid() stat(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000030c0)=@o_path={&(0x7f0000003080)='./file0\x00', 0x0, 0x10}, 0x18) r18 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r19 = userfaultfd(0x80001) r20 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r21 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003140), 0xa0800, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000051c0)='./file0\x00', &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fstat(0xffffffffffffffff, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = syz_socket_connect_nvme_tcp() r28 = openat$incfs(0xffffffffffffff9c, &(0x7f0000005300)='.log\x00', 0x181220, 0x13) r29 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000005340), 0x600080, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000080)={0x1154, 0x1a, 0x300, 0x70bd2d, 0x25dfdbff, "", [@typed={0x14, 0xa8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x1053, 0x3c, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @uid=r0}, @generic="2c460309759fa395f6e23352e6cd4b7eff8257d32f69da2109f3c3acb6ecc6", @nested={0x4, 0x123}, @typed={0x4, 0x120}, @generic="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", @nested={0x4, 0xb3}, @typed={0x8, 0x8a, 0x0, 0x0, @u32}, @typed={0xc, 0x14b, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r1}]}, @generic="70de22b2cb4d5a631f2d98f0d0f0f8313949a595d9786a46a7179d5e8c7563ec02da7c8ea25cfcf6c9259790e6d500c2ce4e5f7a8f0a383a5d8c2d7f54802966e612022b07764d660549809d9cc02d473bcfa1e4f5a7ec832dabc267c27807d69165c5c8d9634de538722264af074487bb8b858803", @nested={0x62, 0x104, 0x0, 0x1, [@nested={0x4, 0x4d}, @generic="59276ab91caf9c309ba8475e3f3a93c9d1a5fdd4bd914a4923253969b2aa0f7f30ba15e4f97fc3f5ff85915cedc81eeb9d7b5c219d22cb6cae2b24b1880557dc62c4a31e9d5300f506c7303df4d8c79d355faa6cb94a07835ff8"]}]}, 0x1154}, {&(0x7f0000001200)={0xd0, 0x26, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x4, 0xdc}, @typed={0x8, 0x94, 0x0, 0x0, @uid=r2}, @nested={0xab, 0xea, 0x0, 0x1, [@nested={0x4, 0x134}, @generic="b54082ccaa8a097d97b558d2755a3a6963a2970761c725c21eff5ba94879fac1cf1a368102d989ebd12e81d80b7fc6c6a78a990b5fda9ddc8f7e6d1bbc6996780f80fbe7", @generic="5371935d786244eef27649f876a75f6a62d8c7f08113f3f418dfcbee9cb912f2b900652be4a5ba4590fade45bb6868c804024c22051074975ba924a53e3d8ede79c111d6d92a83a068c237c84c3f7fafaec5e17b7f71236d80ab06", @nested={0x4, 0xd5}]}, @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@multicast1}]}, 0xd0}, {&(0x7f00000014c0)={0x13e0, 0x2c, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@generic="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", @generic="c76b6eea7ada5272f71c7c9145e0bcb15ff09e52a5cac2c846dde49465665913e1484998addc9b9c9a8e8012c8ed77211037e24189415924e1d05702bd897cb1f58597367c3db39e108d096e2f29967446a96d631d39a53936c6aaa5a4", @typed={0x8, 0xbd, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x14}, @nested={0x8, 0x8d, 0x0, 0x1, [@typed={0x4, 0x133}]}, @nested={0x11e1, 0x14c, 0x0, 0x1, [@generic="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", @generic="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", @nested={0x4, 0xc1}, @nested={0x4, 0xb2}, @generic="f261be448fe1e6d23f0d4fb762652c3bae96cfb707a89a89b5feacb74371271890ec1a28a52f9c336a727808f2c216e5e69054a13d58c4b8b3359fe80b48d94c6a", @nested={0x4, 0x56}, @generic="a567c38498113da9c05ba7303d0e63f12e27684ed5a0b582d4a58e788fc0a58a7bd5791ae51d3899555eb7799b13aae2f51277e67c3c803ed2d9b21e45dbc7e12201d15293038030a7bbcf0639a910366efbc9380bcf95a8bfe7fb2dcb5f2bd9ba05433af8446ce6bd2a756f0d3c1919f04d96dff8e1066cc4221d746ab1c428a73a", @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@remote}]}, @generic="69d90c74bb9981e9cdfd2ab599c4c6099fc853a775d3d797553b83ef3b6672e99b6f51053811b513e9a12c466908c1e7fd91f81244bac30945437416ad1d236046080618aa4c9c4fa421f931241e3c7df657ad90471e6caf69921c1a5e12c29f1675de30cc9dda4b1e5693dcf0408b3f571afbe3378ac6f8e4c56f8342fa"]}, 0x13e0}, {&(0x7f00000028c0)={0x10c, 0x11, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@typed={0xfb, 0x26, 0x0, 0x0, @binary="611a16f57894f0c4ce11874e8a4e46c27f4da2ed92d17f66c45bb93c46688da4b15803c2bc5fdc456023d2b2c6335445b81bff135c41f4c830a06da2946304e6e64f3c10d373f743c396493147c519ded8692dbd03d0f59bf5a57adc970f2e6524073b62a7f4c79ac71b88a8711e3b89e5caac00cd2a5ed54031c246e6ea405aa7126582c07b5c55294e1cb6e4c9cff476df46511ec78ec14b257e5c2b3f8533b11be43f30d28700d69be20f983d5582a9fee2c700725a5bb374a815e3baf2435fb3008ac7e06ede5310033e06b91d7185eb1c3d8014d76bd2265e7f6569b3469cb701a67a94278aeb959c37c375e04a4f10730c8744c4"}]}, 0x10c}, {&(0x7f0000002a00)={0x250, 0x33, 0x200, 0x70bd2b, 0x25dfdbff, "", [@nested={0xf6, 0xd0, 0x0, 0x1, [@nested={0x4, 0x53}, @generic="99cbb3144932ea24aeb1e516a5a75754ace4065da57ae9d65bd9e5693ac2004bdda0f9903231224b59747f43d51b0bf9e35fbaa04b4fbfd522889f76d521986616670f343da95d712dd2695dc347906d4c06e910a466051164561aad187f705c5a4e96c02c56cf575b543630bae1d9023d3aa63a08ee8cf57d26de73ace0ef536b2c97a5a654f4ff202e325405bb1c0df9ef0493cbdff1b50c1f22bd1470698b30c61bf7093c0db61bd4503dab738f0cf12e2699d4be69c77edf2cb924ef7777ae6d09a6fd441b914244ad4cdba43edb202ce69eb59405b969e29723e494bb1c0126980ded753a8922bc7962521d"]}, @nested={0x148, 0x84, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @pid=r4}, @generic="cb82262fb074ce9f9bffbb892fe6a78fef1ae13c3b15836340d2c98285dc8ec3433eba1085abc6120f288507925f6951bb63ac5c8ddd213e3ce7e458b31c89250bc7bf12f7fa093ab68df53b0f8a7be5b20421e92401a8f9d995f7884face37442409ed2d1ffc9c79a1feb806201a6f2e115a4d3f80cbe819173cb595044f01db99034d2084d49bb99e749bafd76da5797debab094990a508b4c50e403fb5b", @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="f888ca04ab16502efcab5f89ede52d17a29118e0905c73e1945eca2bc866b5075f141d574039c84fae5f61da9998b555a86876cc7da059d74bf2933cc5c9dad1eb3d55067d4bdaebcbe21929c2cf7329de6284e5c6328a4382e91b92993b38b892fb41eef896baa0afbb4d9fc459abd92c19040e71d2d61c4292837921927b3d65a69c46ed", @typed={0x4, 0xa7}]}]}, 0x250}], 0x5, &(0x7f0000005380)=[@rights={{0x30, 0x1, 0x1, [r5, r6, r7, r8, r9, 0xffffffffffffffff, r10, r11]}}, @rights={{0x1c, 0x1, 0x1, [r12, r13, r14]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r15, r16}}}, @rights={{0x2c, 0x1, 0x1, [r17, r18, 0xffffffffffffffff, 0xffffffffffffffff, r19, r20, r21]}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r26}}}, @rights={{0x20, 0x1, 0x1, [r27, r28, r29, 0xffffffffffffffff]}}], 0xe0, 0x8000}, 0xc840) lsetxattr$system_posix_acl(&(0x7f00000054c0)='./file0\x00', &(0x7f0000005500)='system.posix_acl_default\x00', &(0x7f0000005540)={{}, {0x1, 0x2}, [{0x2, 0x0, r0}, {0x2, 0x5, 0xee00}, {0x2, 0x1, r25}, {0x2, 0x2, r22}, {0x2, 0x2, r15}], {}, [{0x8, 0x7, r26}], {}, {0x20, 0x1}}, 0x54, 0x0) 2m29.306038496s ago: executing program 0 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="001d000000000000000000000000000062000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount$binderfs(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB="73febc6d11f5deda2762616c2c73746174733d676c6f62616c2c636f6e746578743d756e636f6e66696e65645f752c6d61735845432c000000000000000000"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='sched_switch\x00', r6}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) syz_clone3(&(0x7f0000002040)={0x204020100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) umount2(&(0x7f0000000040)='./file0\x00', 0xb) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x6, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x9, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x9, '\x00', 0x3, 0x8000000000000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m27.438610619s ago: executing program 0 (id=315): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, 0x0, &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m26.155726585s ago: executing program 0 (id=321): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x183400) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x74, 0x3, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80, 0x40, 0xa, 0xffff}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x74, 0x3, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80, 0x40, 0xa, 0xffff}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x3, 0x82, 0x40144, 0xffffffffffffffff, 0x5, '\x00', r1, r2, 0x4, 0x1, 0x2, 0xc, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x20001, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) (async) fcntl$setlease(r8, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m25.862333563s ago: executing program 0 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000dad53e491ea4c9715e9ae0c132af8670ed6118a4cfd7437fbece3784551f482176f4ffffffffffff769f027ef7d80a23e501fbec91197ac3ac01f72e5222acafff6803a42cc7769f1df3eabaf3b86ef174de6aa2198b9af2f45e0f468cb691d7c504191552c562e943e7773b804a1442afb2d73859a3189d1b0163a1ac665bbbe5ab05b61ffef40ae97169"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x49901a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f00000005c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c636865636b3d7374726963742c646f733178666c6f7070792c646973636172642c756e695f786c6174653d302c757466383d312c646d61736b3d30303030303030303030303030303030303030303030342c726f6469722c00031f2dbd86a705e79fce404c76357751f12f73af0ae775d0688c8f64103e2a81e7e136920ad250ce72c61531252591bc8fe04087b3a660681be83293bda6922afc63bca264e51b642f9b0421b17ef4c57e40b76833f9406c64c83a41be3d43bb82bf80412eef96c0ca358a246420aca1de781c2a088e8f784330d8094b7ef04b11c2a7f7bb11aafe4e7b25f66b92b11cafb0fdaa099e0e52fedae23053fe60056082a287df71f6b3fe56edc43863ba10c63486c7b31f1f70f11a032a41b784f0da463391ee5110bf962ed659c3bd7059b0110d01fb6fe5faaee325b958c53f11f1e31bca"], 0xfd, 0x299, &(0x7f0000000280)="$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") r3 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r7, 0x4e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m24.92639995s ago: executing program 0 (id=328): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="600000000040000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="228b35c98baf429031d4f8f855589e021f229704950002820666b813f700000080f68a2ce4ff238ff06595f7"], 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=@gettaction={0x68, 0x32, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000002030101000000000000000009000008080004400000000608000540"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r8, 0x20, 0x6, 0x100002000) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) 2m22.235834229s ago: executing program 0 (id=336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_clone(0xa1b4000, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)="eccd991c06d89e9bf0a47c552bdd3a206b5798aea93e75f350a912245285727a9ee658ca85b2fb28e65b53ecdbf03886c73708") ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x4, 0x15, 0x20, 0x0, "c3fe1700"}) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000640)=ANY=[@ANYBLOB="00000040010003"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf6, 0x0, 0x1, '\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file2\x00', 0x2) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000800)={0x1, 0x1, 0x1000, 0x59, &(0x7f0000000680)="408dad1d5303d2ffaa3c6dc154ddeabedf91d38ed6348b328a3b2e3f79d9feb20ecf74e2de9ed90082446878cb5adfc3fe85c256b601d00e32320a6128545853bd1ba95565fa7106bbf0c73a1c2313270840a6b92af86bd51c", 0xf7, 0x0, &(0x7f0000000700)="f1c2805fd6d14aaebbe308384ee35c86840f9c2bb0b7b11359c37601c1647119e1102b8dc235cf51d2acea403007bcd9b15ce11277889ca0dd3e262cace99160b5151d80a7d7163fb95b43a9f0c2eda8183fcd141207bf130e84ca7abb6314bcbdeccae2cfaba51636fe9ce8bf0492a7dc98159880e31687058106e086b221bdbbf0ba038cac4ed9898c41377196c862b5582d83e01dd1543fcd8525b63d7b3ad75038929d091538bfe71ac9d565afe772c9c8ff7504aa4160c889e06907419040182ba8e9f47fab0cc012a0dfbc84c9cd3765a5562083a6ab69703a6c7460191b3eb71e87f023f2da0c648301147409ac8714e798438b"}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', &(0x7f0000000300)={0x40, 0x100}, 0x18) statx(r6, &(0x7f0000000380)='./file1\x00', 0x0, 0x20, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_delete(r8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m21.916895858s ago: executing program 33 (id=336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_clone(0xa1b4000, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)="eccd991c06d89e9bf0a47c552bdd3a206b5798aea93e75f350a912245285727a9ee658ca85b2fb28e65b53ecdbf03886c73708") ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x4, 0x15, 0x20, 0x0, "c3fe1700"}) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000640)=ANY=[@ANYBLOB="00000040010003"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf6, 0x0, 0x1, '\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file2\x00', 0x2) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000800)={0x1, 0x1, 0x1000, 0x59, &(0x7f0000000680)="408dad1d5303d2ffaa3c6dc154ddeabedf91d38ed6348b328a3b2e3f79d9feb20ecf74e2de9ed90082446878cb5adfc3fe85c256b601d00e32320a6128545853bd1ba95565fa7106bbf0c73a1c2313270840a6b92af86bd51c", 0xf7, 0x0, &(0x7f0000000700)="f1c2805fd6d14aaebbe308384ee35c86840f9c2bb0b7b11359c37601c1647119e1102b8dc235cf51d2acea403007bcd9b15ce11277889ca0dd3e262cace99160b5151d80a7d7163fb95b43a9f0c2eda8183fcd141207bf130e84ca7abb6314bcbdeccae2cfaba51636fe9ce8bf0492a7dc98159880e31687058106e086b221bdbbf0ba038cac4ed9898c41377196c862b5582d83e01dd1543fcd8525b63d7b3ad75038929d091538bfe71ac9d565afe772c9c8ff7504aa4160c889e06907419040182ba8e9f47fab0cc012a0dfbc84c9cd3765a5562083a6ab69703a6c7460191b3eb71e87f023f2da0c648301147409ac8714e798438b"}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', &(0x7f0000000300)={0x40, 0x100}, 0x18) statx(r6, &(0x7f0000000380)='./file1\x00', 0x0, 0x20, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_delete(r8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.991794882s ago: executing program 5 (id=608): r0 = syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xc, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) getgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500c00100000000f96af3c6e324e00ed140c13f61304c9e72db4fb8dbfa5360067ea94aa4c8462f377c01e9f2d571fb7cb47b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f00000002c0)={0x1, r10}) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000000)={0x1}) r11 = dup(r8) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000600)=ANY=[], 0x298) 1m32.880052002s ago: executing program 5 (id=614): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) 1m32.847449032s ago: executing program 5 (id=616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x800000000000802, 0x0) socket$tipc(0x1e, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000040)={0x6, 'nr0\x00', {0x80}, 0x665}) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40300, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000440)={{}, 0x2, &(0x7f0000000300)=[0x8, 0x4], 0x11}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380)="17", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f00000001c0), &(0x7f0000000200)=""/49}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) 1m31.951868039s ago: executing program 5 (id=620): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000600"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x81000) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x1183) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x1004400, &(0x7f0000000780)={[], [{@subj_role={'subj_role', 0x3d, '-R:).'}}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r2, &(0x7f00000005c0)='net/ip_tables_targets\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x0) getpid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r7, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) sendfile(r6, r6, 0x0, 0xfffe80) 1m31.126213635s ago: executing program 5 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m28.131114504s ago: executing program 5 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000001000000000000000040000000000000010000000000002000000000000000000"], 0xfe44, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0xff, 0x1f1, &(0x7f0000000900)="$eJzsmb2LE0EYxp+Z3cveHSLYWNhYeOCJ3n5F5ZorThArQThFLYO3CcFNIskKSUAk2NhYigi2/gMWFqks7OxstVBBsDClYCGMzOy4mSRuSLgigbw/yOR53/l6Z0ieLRYEQaws377++vLsyu7NCwCOYQuOzv+whmM4kEWfXz48/3zv6qs3n16/rx9/1B9fbx2AELPvvwHg3b6FREVCiMej/VuyeTGauwWOc1rfBoObyj9CkQYRGO4qZQOZBhobWsSRe68RH5arceTLJpBNKJuiuZecPegxHGZnE4IZ/a1O934pjqPmuFgT//aZ6JpXTLs/Vd8+x56OZX0cwJ2nT3oy1ncDHzy9SwABOAKti2A40HoXDlzXHV6Jcf5T9nB9a5bzL0qw3+nPQGZO7Cy+npURwlmKMmYQbDwj/9BZ5uSg/2Fy1vdlKT5fMOQ4jjIuAFnmmh7zcTOOrx9h04LecbLLMv2J2cBZw59s2Jl/eEntgdfqdHeqtVIlqkT1MCxe9i/6/qXQK1cd+J6yoyn+t678adNYf80cYDxQCqyAdilJmkEbSJpBFodpazjuwdvGTzWHK//j2D6TriEvWR3b+X89TH+4+pZq28otniAIgiAIgiAIgiAIgiAIYi5OgyF9BaJeVIkcwhtq9N8AAAD//zSFbeI=") mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x1000, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB=',hash,subj_type=^.,de']) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0xa, 0x3, 0x3a) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 1m28.043308114s ago: executing program 34 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000001000000000000000040000000000000010000000000002000000000000000000"], 0xfe44, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[], 0xff, 0x1f1, &(0x7f0000000900)="$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") mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x1000, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB=',hash,subj_type=^.,de']) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0xa, 0x3, 0x3a) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 6.557922274s ago: executing program 4 (id=1229): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10420, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000400)={&(0x7f0000000340), 0x14, &(0x7f00000003c0)={&(0x7f0000000380)="4801f15b23f509890aeee9cba159114a3db7cc", 0x13}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) 3.835922104s ago: executing program 7 (id=1241): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x44) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES16], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) recvmsg$unix(r1, &(0x7f0000003540)={&(0x7f0000002080)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)}, {&(0x7f0000003140)=""/129, 0x81}, {&(0x7f0000003200)=""/128, 0x80}, {&(0x7f0000003280)=""/159, 0x9f}], 0x5, &(0x7f00000033c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}, 0x120) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000900)={0x0, 0x1000, 0x1, r6, 0x1}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x7a2, 0x0, 0x1, r6, 0x1}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x2a, {0x2a, 0x6, "69232737ce451c6ae6e586cdcd42a0d039de75cc3f868203c42851b115d4070ffc7065dcec58d198"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) fcntl$notify(r5, 0x402, 0x6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) userfaultfd(0x80001) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 3.790468814s ago: executing program 6 (id=1242): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 3.715939914s ago: executing program 6 (id=1243): r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xf21, 0x70bd29, 0x25dfdbfa, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) 3.715501604s ago: executing program 6 (id=1244): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 3.707016873s ago: executing program 2 (id=1245): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000900)={[{@noblock_validity}, {@data_ordered}, {@norecovery}, {@init_itable}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000300)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e21, 0x5, 0x4e22, 0x7f, 0x2, 0xa0, 0x80, 0x6c, 0x0, r5}, {0xfff, 0x0, 0x4, 0x80000000, 0x1, 0x2, 0x7, 0x323}, {0x2, 0x6e, 0x4, 0x1}, 0x6, 0x0, 0x1, 0x1, 0x3}, {{@in=@multicast1, 0x4d2, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x3501, 0x0, 0x3, 0x7, 0x1, 0xf, 0x7}}, 0xe8) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000b00)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 3.685842993s ago: executing program 6 (id=1246): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000900)={[{@noblock_validity}, {@data_ordered}, {@norecovery}, {@init_itable}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000300)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e21, 0x5, 0x4e22, 0x7f, 0x2, 0xa0, 0x80, 0x6c, 0x0, r5}, {0xfff, 0x0, 0x4, 0x80000000, 0x1, 0x2, 0x7, 0x323}, {0x2, 0x6e, 0x4, 0x1}, 0x6, 0x0, 0x1, 0x1, 0x3}, {{@in=@multicast1, 0x4d2, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x3501, 0x0, 0x3, 0x7, 0x1, 0xf, 0x7}}, 0xe8) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000b00)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 3.150929681s ago: executing program 1 (id=1250): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 3.117358301s ago: executing program 4 (id=1251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000003000000000000001406ff0ecae50000000088c9e5058cf36944da6285933fcc"], 0x48) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x802000, 0x0, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x8) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES16=r0, @ANYRESOCT=r2, @ANYBLOB="30f572b2b2d9f94708815b6464fb67223949944097c134f76ad23252ff0d58a6c268a3d8c795340fa36a00da0ee7cc6e26f87e10efdaba1b245654a6f7c85fd4d0d9659aa5d5a578c38b31babde9e979cd10df60dd1cc1c1f74ebcd4baa9a8375b2780027e9a72dd030b74b390964eba522538d8b6b4c6130e8783a0b4", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5dd7316e2fde1a8d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 3.059231991s ago: executing program 1 (id=1252): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x0, &(0x7f0000000140)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x0, &(0x7f0000000140)}, 0x10) 2.983713041s ago: executing program 1 (id=1253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x141141, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.376811239s ago: executing program 2 (id=1254): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) (fail_nth: 3) 2.138973747s ago: executing program 1 (id=1255): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0xb00, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @empty}, 0x8a, 0x0, 0x0, 0xb00, 0x6, 0x0, 0x8, 0x200, 0x7d0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, 0x0, &(0x7f0000000200)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 2.056999477s ago: executing program 4 (id=1256): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1.905868167s ago: executing program 6 (id=1257): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="002222000000962313b3ba22542a8fe0315bc7b83395"], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r7, &(0x7f0000000980), 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}) 1.676760515s ago: executing program 7 (id=1258): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r1, 0x1}, 0x20) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x80002, 0x88) (async) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) r8 = gettid() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r10}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x43, 0xea, 0x1, 0xb8, @empty, @empty, 0x1, 0x40, 0x1, 0x5}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$VT_DISALLOCATE(r7, 0x5608) (async) ioctl$VT_DISALLOCATE(r7, 0x5608) 1.626277665s ago: executing program 7 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x23108000) 1.563165235s ago: executing program 4 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x6, 0x8000, 0x16101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xd8, 0x34, 0x88, 0x8, 0x1a0a, 0x101, 0x1b21, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x50, 0x56}}]}}]}}, 0x0) timerfd_create(0x8, 0x80800) bind$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r9, r6, 0x7, r4, &(0x7f0000000280)={r2, r7, 0x9}) 1.447646495s ago: executing program 2 (id=1261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 1.442482755s ago: executing program 2 (id=1262): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) open(&(0x7f0000000240)='./bus\x00', 0x783a80, 0x98e551aa528cf097) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) prlimit64(0x0, 0xe, &(0x7f00000012c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f000066c000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r1, 0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x10000801) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpriority(0x1, 0x0) 1.419875715s ago: executing program 7 (id=1263): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x41) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@random={'system.', 'wg0\x00'}, &(0x7f0000000440)=""/247, 0xf7) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 1.343572265s ago: executing program 6 (id=1264): pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$dupfd(r1, 0x0, r0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f00000068c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0], 0x1, 0x553b, &(0x7f0000001380)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x2) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSYMLINK(r0, &(0x7f0000000a00)={0x14, 0x11, 0xfffd, {0x10, 0x100003, 0x3}}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f00000008c0)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0xb, 0x1, {{0x1d, 0x4, 0x3, 0x4, 0x74, 0x68, 0x0, 0x2, 0x29, 0x0, @multicast1, @private=0xa010100, {[@rr={0x7, 0xb, 0x34, [@multicast2, @multicast2]}, @ssrr={0x89, 0x17, 0xb8, [@remote, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010101, @rand_addr=0x64010101, @broadcast]}, @generic={0x83, 0xe, "a9968e2a785c3e102d7ffdaf"}, @timestamp_addr={0x44, 0x2c, 0x5f, 0x1, 0x5, [{@loopback, 0x9115}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@remote, 0x10}]}, @noop]}}}}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340), 0x11000) unshare(0x400) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x10000000000002d4, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000200)={0x6, 'bridge0\x00', {0xffffff50}, 0x4}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000180), 0xc1000004) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000600)=""/101) 1.312380084s ago: executing program 4 (id=1265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x141141, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 463.099171ms ago: executing program 7 (id=1266): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x1) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x12002, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlockall(0x7) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r2, 0x9e9a6000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000070001000000000000850000000700000095000000000000008bb26bc7335908f0a640bfa4f41042cbfb8861a924deb495467843b7fed6a9385d3592b2312a8852ae7116839139b8d3729252f2ca57839d0825375a29c8d60f38b74ad762bc6d8a809f62a5fea3ef054c73be703581bd06b61ebbb48e2f6eb06d7087c1f93514fbc5f5982338e8e0a0cd72"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 405.299051ms ago: executing program 4 (id=1267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000003000000000000001406ff0ecae50000000088c9e5058cf36944da6285933fcc"], 0x48) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x802000, 0x0, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0x8) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES16=r0, @ANYRESOCT=r2, @ANYBLOB="30f572b2b2d9f94708815b6464fb67223949944097c134f76ad23252ff0d58a6c268a3d8c795340fa36a00da0ee7cc6e26f87e10efdaba1b245654a6f7c85fd4d0d9659aa5d5a578c38b31babde9e979cd10df60dd1cc1c1f74ebcd4baa9a8375b2780027e9a72dd030b74b390964eba522538d8b6b4c6130e8783a0b4", @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5dd7316e2fde1a8d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 375.12659ms ago: executing program 2 (id=1268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="9fcda7a9ca06eb2c6f459ca9cc56e2615a03"], 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) ftruncate(r0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='afs_flock_op\x00', r2, 0x0, 0x2}, 0x18) close(r0) 332.583141ms ago: executing program 1 (id=1269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc240, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x14, 0x453, 0x200, 0x70bd2a, 0x25dfdbfd, "3463f2"}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 166.61594ms ago: executing program 2 (id=1270): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[], [], 0x2c}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x200801d, &(0x7f00000000c0), 0xfe, 0x4eb, &(0x7f0000000c40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 123.26392ms ago: executing program 1 (id=1271): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x4, 0x4002) mount$9p_virtio(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x1144b0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=virtio,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) io_setup(0x7ff, 0x0) r1 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB='\x00'/20, @ANYRESOCT=r2, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES8=r2], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x518, 0x22b, 0x258, 0x518, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x168, 0x188, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @remote, [], [], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x16, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0xc0280, 0x21) bpf$MAP_CREATE(0x0, 0x0, 0x48) uname(0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040cb06f67300000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000600)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="200315"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 0s ago: executing program 7 (id=1272): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (fail_nth: 3) kernel console output (not intermixed with test programs): 4-fs: Ignoring removed mblk_io_submit option [ 164.852348][ T3336] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.863923][ T3336] EXT4-fs (loop2): 1 truncate cleaned up [ 164.869396][ T3336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.443531][ T3349] overlayfs: failed to clone upperpath [ 165.467620][ T3351] 9pnet_fd: Insufficient options for proto=fd [ 165.590451][ T3357] loop7: detected capacity change from 0 to 512 [ 165.597184][ T3357] EXT4-fs: Invalid want_extra_isize 6 [ 165.637657][ T294] EXT4-fs (loop2): unmounting filesystem. [ 165.648412][ T3357] loop7: detected capacity change from 0 to 1024 [ 165.656921][ T3357] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 165.719585][ T3362] device veth0_to_batadv entered promiscuous mode [ 165.748231][ T3364] device veth0_to_batadv left promiscuous mode [ 165.776663][ T3369] loop6: detected capacity change from 0 to 512 [ 165.836404][ T3369] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 165.844971][ T3369] EXT4-fs (loop6): orphan cleanup on readonly fs [ 165.851308][ T3369] __quota_error: 33 callbacks suppressed [ 165.851326][ T3369] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 165.867099][ T3369] EXT4-fs warning (device loop6): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 165.881804][ T3369] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 165.888448][ T3369] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #16: comm syz.6.787: iget: immutable or append flags not allowed on symlinks [ 165.903006][ T3369] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.787: couldn't read orphan inode 16 (err -117) [ 165.916128][ T3369] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 165.937769][ T3369] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 165.977254][ T1765] EXT4-fs (loop6): unmounting filesystem. [ 166.004904][ T470] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 166.048554][ T3380] loop4: detected capacity change from 0 to 512 [ 166.066699][ T3380] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 166.084134][ T3380] EXT4-fs (loop4): orphan cleanup on readonly fs [ 166.087313][ T3385] syz.1.792[3385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.097114][ T3385] syz.1.792[3385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.100320][ T3380] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 166.129313][ T3380] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 166.143682][ T3380] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 166.150370][ T3380] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.790: iget: immutable or append flags not allowed on symlinks [ 166.164699][ T3380] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.790: couldn't read orphan inode 16 (err -117) [ 166.183467][ T3380] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.192320][ T470] usb 3-1: Using ep0 maxpacket: 16 [ 166.198307][ T470] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.211786][ T470] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.220993][ T3380] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 166.233127][ T470] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.250951][ T470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.260851][ T470] usb 3-1: Product: syz [ 166.265097][ T470] usb 3-1: Manufacturer: syz [ 166.269629][ T470] usb 3-1: SerialNumber: syz [ 166.305380][ T296] EXT4-fs (loop4): unmounting filesystem. [ 166.393750][ T28] audit: type=1400 audit(2000000055.047:888): avc: denied { unmount } for pid=1765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 166.454602][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 166.611371][ T328] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 166.643579][ T3409] overlayfs: failed to clone upperpath [ 166.663215][ T3401] loop6: detected capacity change from 0 to 1024 [ 166.690350][ T3401] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 166.706351][ T3401] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 166.721341][ T3401] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 166.737417][ T3401] EXT4-fs (loop6): This should not happen!! Data will be lost [ 166.737417][ T3401] [ 166.747145][ T3401] EXT4-fs (loop6): Total free blocks count 0 [ 166.753593][ T3401] EXT4-fs (loop6): Free/Dirty block details [ 166.755270][ T3406] EXT4-fs (loop6): shut down requested (0) [ 166.759367][ T3401] EXT4-fs (loop6): free_blocks=68451041280 [ 166.811252][ T3401] EXT4-fs (loop6): dirty_blocks=80 [ 166.816434][ T3401] EXT4-fs (loop6): Block reservation details [ 166.822592][ T3401] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 166.876565][ T328] usb 5-1: Using ep0 maxpacket: 32 [ 166.944120][ T328] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 166.980824][ T328] usb 5-1: config 0 has no interface number 0 [ 167.866663][ T3421] loop6: detected capacity change from 0 to 512 [ 167.882215][ T3421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.005802][ T3421] EXT4-fs (loop6): orphan cleanup on readonly fs [ 168.014664][ T3421] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.801: bg 0: block 248: padding at end of block bitmap is not set [ 168.030226][ T3421] Quota error (device loop6): write_blk: dquota write failed [ 168.037580][ T3421] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 168.047395][ T3421] EXT4-fs error (device loop6): ext4_acquire_dquot:6788: comm syz.6.801: Failed to acquire dquot type 1 [ 168.059971][ T3421] EXT4-fs (loop6): 1 truncate cleaned up [ 168.145568][ T470] usb 3-1: 0:2 : does not exist [ 168.166738][ T470] usb 3-1: unit 6 not found! [ 168.171749][ T3421] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 168.213700][ T328] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 168.364917][ T328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.372764][ T328] usb 5-1: Product: syz [ 168.376738][ T328] usb 5-1: Manufacturer: syz [ 168.381165][ T328] usb 5-1: SerialNumber: syz [ 168.397879][ T470] usb 3-1: USB disconnect, device number 20 [ 168.405259][ T3429] overlayfs: failed to clone upperpath [ 168.410953][ T328] usb 5-1: config 0 descriptor?? [ 168.602778][ T3436] loop7: detected capacity change from 0 to 512 [ 168.609750][ T3436] EXT4-fs: Invalid want_extra_isize 6 [ 168.624436][ T328] usb 5-1: USB disconnect, device number 14 [ 168.713259][ T1765] EXT4-fs (loop6): unmounting filesystem. [ 168.727112][ T3438] loop6: detected capacity change from 0 to 512 [ 168.742008][ T3438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 168.750902][ T3438] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.786470][ T3436] loop7: detected capacity change from 0 to 1024 [ 168.794982][ T3436] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 169.162084][ T470] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 169.317533][ T3450] FAT-fs (loop3): bogus number of reserved sectors [ 169.324132][ T3450] FAT-fs (loop3): Can't find a valid FAT filesystem [ 169.387483][ T470] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.400968][ T3455] overlayfs: failed to clone upperpath [ 169.412125][ T470] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.422926][ T470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.431034][ T470] usb 3-1: SerialNumber: syz [ 169.468872][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 170.897473][ T28] audit: type=1400 audit(2000000058.869:889): avc: denied { connect } for pid=3451 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.929588][ T1765] EXT4-fs (loop6): unmounting filesystem. [ 170.948748][ T3474] overlayfs: failed to clone upperpath [ 170.979464][ T3481] FAULT_INJECTION: forcing a failure. [ 170.979464][ T3481] name failslab, interval 1, probability 0, space 0, times 0 [ 171.002175][ T3481] CPU: 0 PID: 3481 Comm: syz.6.820 Tainted: G W 6.1.118-syzkaller-00075-g4c2d86d81fa6 #0 [ 171.013202][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.023096][ T3481] Call Trace: [ 171.026217][ T3481] [ 171.029007][ T3481] dump_stack_lvl+0x151/0x1b7 [ 171.033509][ T3481] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 171.038817][ T3481] dump_stack+0x15/0x18 [ 171.042798][ T3481] should_fail_ex+0x3d0/0x520 [ 171.047311][ T3481] ? getname_flags+0xba/0x520 [ 171.051823][ T3481] __should_failslab+0xaf/0xf0 [ 171.056435][ T3481] should_failslab+0x9/0x20 [ 171.060764][ T3481] kmem_cache_alloc+0x3b/0x320 [ 171.065365][ T3481] ? vfs_write+0x952/0xed0 [ 171.069615][ T3481] ? __kasan_slab_free+0x11/0x20 [ 171.074390][ T3481] getname_flags+0xba/0x520 [ 171.078727][ T3481] getname+0x19/0x20 [ 171.082461][ T3481] do_sys_openat2+0xe0/0x870 [ 171.086890][ T3481] ? bit_wait_io_timeout+0x120/0x120 [ 171.092010][ T3481] ? __mutex_lock_slowpath+0x10/0x10 [ 171.097127][ T3481] ? do_sys_open+0x220/0x220 [ 171.101554][ T3481] ? fput+0x15b/0x1b0 [ 171.105377][ T3481] ? ksys_write+0x260/0x2c0 [ 171.109710][ T3481] ? __this_cpu_preempt_check+0x13/0x20 [ 171.115093][ T3481] __x64_sys_openat+0x243/0x290 [ 171.119782][ T3481] ? __ia32_sys_open+0x270/0x270 [ 171.124574][ T3481] ? debug_smp_processor_id+0x17/0x20 [ 171.129760][ T3481] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 171.135668][ T3481] ? exit_to_user_mode_prepare+0x39/0xa0 [ 171.141134][ T3481] x64_sys_call+0x6bf/0x9a0 [ 171.145473][ T3481] do_syscall_64+0x3b/0xb0 [ 171.149724][ T3481] ? clear_bhb_loop+0x55/0xb0 [ 171.154236][ T3481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.159965][ T3481] RIP: 0033:0x7f2723785d29 [ 171.164219][ T3481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.183753][ T3481] RSP: 002b:00007f2724586038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.191995][ T3481] RAX: ffffffffffffffda RBX: 00007f2723975fa0 RCX: 00007f2723785d29 [ 171.199803][ T3481] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 171.207615][ T3481] RBP: 00007f2724586090 R08: 0000000000000000 R09: 0000000000000000 [ 171.215429][ T3481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.223236][ T3481] R13: 0000000000000000 R14: 00007f2723975fa0 R15: 00007ffc35579528 [ 171.231059][ T3481] [ 171.444867][ T3430] loop2: detected capacity change from 0 to 256 [ 171.453426][ T3430] FAT-fs (loop2): Unrecognized mount option "I›Â*arset=maccyrillic" or missing value [ 171.488922][ T686] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 171.520472][ T470] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 171.529769][ T470] usb 3-1: USB disconnect, device number 21 [ 171.668812][ T686] usb 8-1: Using ep0 maxpacket: 16 [ 171.678966][ T686] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.697903][ T686] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.716806][ T686] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.741706][ T686] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.751545][ T686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.760735][ T686] usb 8-1: config 0 descriptor?? [ 171.773483][ T3496] loop6: detected capacity change from 0 to 40427 [ 171.780369][ T3496] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 171.787919][ T3496] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 171.796764][ T3496] F2FS-fs (loop6): invalid crc value [ 171.803796][ T3496] F2FS-fs (loop6): Found nat_bits in checkpoint [ 171.875945][ T3496] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 171.883029][ T3496] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 171.957545][ T3516] overlayfs: failed to clone upperpath [ 172.044728][ T3520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.832'. [ 172.053485][ T3520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.832'. [ 172.460521][ T686] usbhid 8-1:0.0: can't add hid device: -71 [ 172.466309][ T686] usbhid: probe of 8-1:0.0 failed with error -71 [ 172.473250][ T686] usb 8-1: USB disconnect, device number 2 [ 172.533676][ T1658] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 172.542749][ T1658] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 172.628410][ T19] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 172.678351][ T470] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 172.718483][ T3525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.834'. [ 172.818716][ T19] usb 5-1: too many configurations: 164, using maximum allowed: 8 [ 172.840158][ T19] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 172.850819][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.858266][ T470] usb 3-1: Using ep0 maxpacket: 8 [ 172.860170][ T19] usb 5-1: config 0 descriptor?? [ 172.865011][ T470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.940471][ T470] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.953262][ T470] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 172.962315][ T470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.970837][ T470] usb 3-1: config 0 descriptor?? [ 173.101961][ T24] usb 5-1: USB disconnect, device number 15 [ 173.382346][ T470] wacom 0003:056A:0331.000D: item fetching failed at offset 6/8 [ 173.389998][ T470] wacom 0003:056A:0331.000D: parse failed [ 173.395540][ T470] wacom: probe of 0003:056A:0331.000D failed with error -22 [ 173.583578][ T686] usb 3-1: USB disconnect, device number 22 [ 173.593691][ T3537] loop6: detected capacity change from 0 to 40427 [ 173.602780][ T3537] F2FS-fs (loop6): Found nat_bits in checkpoint [ 173.647169][ T3537] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 173.750339][ T3548] loop4: detected capacity change from 0 to 512 [ 174.018117][ T3548] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 174.028363][ T3548] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 174.037608][ T3548] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.838: Failed to acquire dquot type 0 [ 174.049670][ T3548] EXT4-fs (loop4): Remounting filesystem read-only [ 174.056289][ T3548] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 174.066762][ T3548] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 174.076016][ T3548] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.838: Failed to acquire dquot type 0 [ 174.087906][ T3548] EXT4-fs (loop4): Remounting filesystem read-only [ 174.095594][ T3548] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 174.105883][ T3548] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 174.115112][ T3548] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.838: Failed to acquire dquot type 0 [ 174.127003][ T3548] EXT4-fs (loop4): Remounting filesystem read-only [ 174.133575][ T3548] EXT4-fs (loop4): 1 orphan inode deleted [ 174.139203][ T3548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.148152][ T3548] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.610031][ T3559] loop2: detected capacity change from 0 to 512 [ 174.641544][ T3559] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 174.659670][ T3559] EXT4-fs (loop2): orphan cleanup on readonly fs [ 174.771761][ T1765] syz-executor: attempt to access beyond end of device [ 174.771761][ T1765] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.786265][ T3559] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 174.797746][ T3566] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3566 comm=syz.1.846 [ 174.809864][ T3559] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.937842][ T3570] loop7: detected capacity change from 0 to 256 [ 174.945686][ T3570] exfat: Bad value for 'uid' [ 175.044378][ T296] EXT4-fs (loop4): unmounting filesystem. [ 175.188343][ T3559] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 175.270760][ T3559] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.842: iget: immutable or append flags not allowed on symlinks [ 176.006938][ T3559] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.842: couldn't read orphan inode 16 (err -117) [ 176.036915][ T3559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 176.058796][ T3559] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 176.073482][ T294] EXT4-fs (loop2): unmounting filesystem. [ 176.172484][ T28] audit: type=1400 audit(2000000064.832:890): avc: denied { bpf } for pid=3583 comm="syz.7.851" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.252405][ T28] audit: type=1400 audit(2000000064.832:891): avc: denied { prog_load } for pid=3583 comm="syz.7.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.252434][ T28] audit: type=1400 audit(2000000064.832:892): avc: denied { perfmon } for pid=3583 comm="syz.7.851" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.252458][ T28] audit: type=1400 audit(2000000064.832:893): avc: denied { prog_run } for pid=3583 comm="syz.7.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.252481][ T28] audit: type=1400 audit(2000000064.862:894): avc: denied { execmem } for pid=3583 comm="syz.7.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 176.252502][ T28] audit: type=1400 audit(2000000064.872:895): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 176.252524][ T28] audit: type=1400 audit(2000000064.882:896): avc: denied { read write } for pid=294 comm="syz-executor" name="loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.252547][ T28] audit: type=1400 audit(2000000064.882:897): avc: denied { open } for pid=294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.252571][ T28] audit: type=1400 audit(2000000064.882:898): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.252596][ T28] audit: type=1400 audit(2000000064.892:899): avc: denied { map_create } for pid=3585 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.281678][ T3591] loop6: detected capacity change from 0 to 256 [ 176.308603][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 176.322084][ T3591] exfat: Deprecated parameter 'utf8' [ 176.471152][ T3591] exfat: Deprecated parameter 'namecase' [ 176.476670][ T3591] exfat: Deprecated parameter 'utf8' [ 176.508624][ T3591] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 176.560759][ T3591] exFAT-fs (loop6): error, tried to truncate zeroed cluster. [ 176.569328][ T3591] exFAT-fs (loop6): hint_cluster is invalid (1) [ 176.575732][ T3591] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 176.584314][ T3591] exFAT-fs (loop6): error, failed to bmap (inode : ffff888114b75570 iblock : 9, err : -5) [ 176.594144][ T3591] exFAT-fs (loop6): error, tried to truncate zeroed cluster. [ 176.602407][ T3591] exFAT-fs (loop6): error, tried to truncate zeroed cluster. [ 176.625387][ T1691] kworker/u4:32: attempt to access beyond end of device [ 176.625387][ T1691] loop6: rw=1, sector=34359738488, nr_sectors = 8 limit=256 [ 177.073730][ T3620] loop7: detected capacity change from 0 to 512 [ 177.090513][ T3621] loop4: detected capacity change from 0 to 512 [ 177.096911][ T3620] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 177.105578][ T3620] EXT4-fs (loop7): orphan cleanup on readonly fs [ 177.113177][ T3620] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.127725][ T3620] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 177.134351][ T3620] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.862: iget: immutable or append flags not allowed on symlinks [ 177.148588][ T3620] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.862: couldn't read orphan inode 16 (err -117) [ 177.160622][ T3620] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 177.170184][ T3620] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 177.185205][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 177.202273][ T3621] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 177.212958][ T3621] EXT4-fs (loop4): orphan cleanup on readonly fs [ 177.226336][ T3621] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.241765][ T3621] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 177.248854][ T3621] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.861: iget: immutable or append flags not allowed on symlinks [ 177.263621][ T3621] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.861: couldn't read orphan inode 16 (err -117) [ 177.275659][ T3621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.286232][ T3621] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 177.302411][ T296] EXT4-fs (loop4): unmounting filesystem. [ 177.501922][ T3634] loop4: detected capacity change from 0 to 16 [ 177.515997][ T3634] erofs: (device loop4): mounted with root inode @ nid 36. [ 177.541313][ T3638] binder: 3637:3638 ioctl c0306201 20000580 returned -14 [ 177.541781][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 177.559786][ T3634] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 177.588582][ T3643] fuse: Unknown parameter 'J³”Yz0x0000000000000006' [ 178.496687][ T3654] overlayfs: failed to clone upperpath [ 178.899991][ T3663] loop2: detected capacity change from 0 to 128 [ 178.901389][ T3662] overlayfs: failed to clone upperpath [ 178.963315][ T3663] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 178.971150][ T3671] syz.1.881 uses obsolete (PF_INET,SOCK_PACKET) [ 179.004666][ T3675] loop4: detected capacity change from 0 to 2048 [ 179.012928][ T3671] overlayfs: failed to clone lowerpath [ 179.018633][ T3663] FAT-fs (loop2): Filesystem has been set read-only [ 179.042821][ T3678] loop7: detected capacity change from 0 to 16 [ 179.165357][ T3675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 179.174341][ T3678] erofs: (device loop7): mounted with root inode @ nid 36. [ 179.623561][ T296] EXT4-fs (loop4): unmounting filesystem. [ 180.386123][ T3698] loop2: detected capacity change from 0 to 256 [ 180.392561][ T3698] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 180.586402][ T3714] loop7: detected capacity change from 0 to 512 [ 180.595863][ T3714] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 180.609907][ T3714] EXT4-fs (loop7): orphan cleanup on readonly fs [ 180.616377][ T3714] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 180.631522][ T3714] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 180.632517][ T3721] overlayfs: failed to clone upperpath [ 180.638184][ T3714] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.891: iget: immutable or append flags not allowed on symlinks [ 180.657430][ T3714] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.891: couldn't read orphan inode 16 (err -117) [ 180.669217][ T3714] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 180.680613][ T3714] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 180.695030][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 180.912750][ T3717] loop2: detected capacity change from 0 to 40427 [ 180.919695][ T3717] F2FS-fs (loop2): fault_injection options not supported [ 180.934826][ T3717] F2FS-fs (loop2): invalid crc value [ 180.950459][ T3717] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.037456][ T3717] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.052300][ T3717] syz.2.890: attempt to access beyond end of device [ 181.052300][ T3717] loop2: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 181.412995][ T3742] overlayfs: failed to clone upperpath [ 181.455485][ T294] syz-executor: attempt to access beyond end of device [ 181.455485][ T294] loop2: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 181.641867][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 181.641883][ T28] audit: type=1326 audit(2000000070.305:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 181.663239][ T3749] loop7: detected capacity change from 0 to 2048 [ 181.690559][ T28] audit: type=1326 audit(2000000070.305:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 181.736401][ T28] audit: type=1326 audit(2000000070.345:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 181.764224][ T3749] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 181.822584][ T28] audit: type=1326 audit(2000000070.345:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 181.846559][ T3756] netlink: 20 bytes leftover after parsing attributes in process `syz.6.905'. [ 181.895888][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 181.907627][ T28] audit: type=1326 audit(2000000070.345:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 181.942655][ T3759] overlayfs: failed to clone upperpath [ 181.948071][ T28] audit: type=1326 audit(2000000070.345:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 181.953673][ T328] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 181.976639][ T28] audit: type=1326 audit(2000000070.345:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 182.022601][ T28] audit: type=1326 audit(2000000070.345:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 182.086375][ T28] audit: type=1326 audit(2000000070.345:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 182.109400][ T28] audit: type=1326 audit(2000000070.345:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2723785d29 code=0x7ffc0000 [ 182.205404][ T328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.220444][ T328] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.234973][ T328] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.243840][ T328] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 182.265750][ T328] usb 3-1: string descriptor 0 read error: -22 [ 182.281977][ T328] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.322348][ T328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.345886][ T328] usb 3-1: 0:2 : does not exist [ 183.039427][ T3792] loop4: detected capacity change from 0 to 4096 [ 183.096414][ T3792] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.225691][ T296] EXT4-fs (loop4): unmounting filesystem. [ 183.399244][ T3795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.917'. [ 183.541601][ T3799] loop7: detected capacity change from 0 to 512 [ 183.620946][ T3799] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 183.634637][ T3799] EXT4-fs (loop7): orphan cleanup on readonly fs [ 183.658335][ T3799] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 183.853092][ T3799] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 183.892226][ T3799] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.919: iget: immutable or append flags not allowed on symlinks [ 184.026023][ T3799] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.919: couldn't read orphan inode 16 (err -117) [ 184.054695][ T3799] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 184.069487][ T3799] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 184.100171][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 184.197385][ T3810] loop4: detected capacity change from 0 to 1024 [ 184.206458][ T3810] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 184.533905][ T3821] loop4: detected capacity change from 0 to 256 [ 184.704473][ T328] usb 3-1: USB disconnect, device number 23 [ 185.327065][ T3833] loop2: detected capacity change from 0 to 512 [ 185.859587][ T3833] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 185.867952][ T3833] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.885896][ T3833] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 185.920636][ T3833] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 185.927304][ T3833] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.927: iget: immutable or append flags not allowed on symlinks [ 186.001692][ T19] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 186.026010][ T3833] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.927: couldn't read orphan inode 16 (err -117) [ 186.054874][ T3833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 186.074377][ T3833] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 186.152301][ T3844] netlink: 'syz.1.929': attribute type 4 has an invalid length. [ 186.234642][ T294] EXT4-fs (loop2): unmounting filesystem. [ 186.432487][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.446358][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.460162][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=ffff, bcdDevice= 0.00 [ 186.487563][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.508243][ T19] usb 5-1: config 0 descriptor?? [ 186.792724][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 186.792739][ T28] audit: type=1400 audit(2000000075.458:1009): avc: denied { create } for pid=3853 comm="syz.6.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.877526][ T3846] loop7: detected capacity change from 0 to 40427 [ 186.884297][ T3846] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 186.891980][ T3846] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 186.902204][ T3846] F2FS-fs (loop7): Found nat_bits in checkpoint [ 186.947112][ T3846] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 186.954162][ T3846] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 186.968113][ T28] audit: type=1400 audit(2000000075.628:1010): avc: denied { create } for pid=3845 comm="syz.7.930" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 187.355659][ T3867] fuse: Unknown parameter 'ì\' [ 187.361003][ T28] audit: type=1326 audit(2000000076.018:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3866 comm="syz.2.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bea185d29 code=0x0 [ 187.621214][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 187.627027][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 187.633754][ T19] usb 5-1: USB disconnect, device number 16 [ 187.970654][ T686] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 188.151687][ T686] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.162500][ T686] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.172083][ T686] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 188.181013][ T686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.196700][ T686] usb 8-1: config 0 descriptor?? [ 188.428036][ T3889] loop2: detected capacity change from 0 to 256 [ 188.435150][ T3889] exfat: Bad value for 'uid' [ 188.649331][ T3885] loop4: detected capacity change from 0 to 40427 [ 188.673437][ T3885] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 188.687821][ T3885] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 188.816550][ T686] hid-rmi 0003:1532:011D.000E: unbalanced delimiter at end of report description [ 188.848615][ T686] hid-rmi 0003:1532:011D.000E: parse failed [ 188.855517][ T686] hid-rmi: probe of 0003:1532:011D.000E failed with error -22 [ 188.930044][ T686] usb 8-1: USB disconnect, device number 3 [ 189.484432][ T28] audit: type=1400 audit(2000000078.149:1012): avc: denied { mounton } for pid=3902 comm="syz.4.945" path="/163/file0/file0" dev="incremental-fs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.517690][ T28] audit: type=1400 audit(2000000078.179:1013): avc: denied { remove_name } for pid=3902 comm="syz.4.945" name=".index" dev="incremental-fs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.561409][ T28] audit: type=1400 audit(2000000078.179:1014): avc: denied { rmdir } for pid=3902 comm="syz.4.945" name=".index" dev="incremental-fs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.621122][ T28] audit: type=1400 audit(2000000078.289:1015): avc: denied { append } for pid=3908 comm="syz.7.946" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 189.915898][ T3914] loop2: detected capacity change from 0 to 512 [ 189.937166][ T3914] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 189.963891][ T3914] EXT4-fs (loop2): 1 truncate cleaned up [ 189.971543][ T3914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.363870][ T28] audit: type=1400 audit(2000000079.029:1016): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 190.399699][ T28] audit: type=1400 audit(2000000079.059:1017): avc: denied { connect } for pid=3923 comm="syz.6.948" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.439432][ T28] audit: type=1400 audit(2000000079.059:1018): avc: denied { write } for pid=3923 comm="syz.6.948" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.492111][ T3934] loop7: detected capacity change from 0 to 512 [ 190.520076][ T3934] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 190.528843][ T3934] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.636177][ T3942] fuse: Bad value for 'fd' [ 190.641475][ T3942] netlink: 104 bytes leftover after parsing attributes in process `syz.1.953'. [ 190.658006][ T294] EXT4-fs (loop2): unmounting filesystem. [ 191.041339][ T3952] loop2: detected capacity change from 0 to 512 [ 191.059874][ T3952] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.093143][ T3952] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.955: bad orphan inode 131083 [ 191.106841][ T3952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 191.276586][ T3960] 9pnet_fd: Insufficient options for proto=fd [ 191.364918][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 191.369296][ T3970] netlink: 72 bytes leftover after parsing attributes in process `syz.4.960'. [ 191.441455][ T294] EXT4-fs (loop2): unmounting filesystem. [ 191.638319][ T3992] loop2: detected capacity change from 0 to 512 [ 191.659271][ T3992] EXT4-fs: Ignoring removed i_version option [ 191.674879][ T3992] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.693439][ T3992] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.756743][ T3992] EXT4-fs (loop2): 1 truncate cleaned up [ 191.771738][ T3992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.091304][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 192.091319][ T28] audit: type=1400 audit(2000000080.760:1049): avc: denied { connect } for pid=3989 comm="syz.1.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.150793][ T28] audit: type=1400 audit(2000000080.800:1050): avc: denied { execute } for pid=3999 comm="syz.6.970" path="/126/cpu.stat" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 192.337902][ T4005] loop7: detected capacity change from 0 to 512 [ 192.355724][ T4005] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 192.364575][ T4005] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.367483][ T28] audit: type=1400 audit(2000000081.040:1051): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 192.819626][ T294] EXT4-fs (loop2): unmounting filesystem. [ 192.836195][ T4017] loop2: detected capacity change from 0 to 128 [ 192.843667][ T28] audit: type=1326 audit(2000000081.511:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.6.975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2723785d29 code=0x0 [ 192.869293][ T4017] fuse: Unknown parameter 'Qko¿è—Œî(×(' [ 192.871373][ T28] audit: type=1400 audit(2000000081.541:1053): avc: denied { mounton } for pid=4016 comm="syz.2.974" path="/191/bus/file0" dev="loop2" ino=1048671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 193.217825][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 193.955938][ T28] audit: type=1400 audit(2000000082.621:1054): avc: denied { bind } for pid=4053 comm="syz.2.986" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.978060][ T4054] raw_sendmsg: syz.2.986 forgot to set AF_INET. Fix it! [ 194.176944][ T4054] incfs: Options parsing error. -22 [ 194.210507][ T28] audit: type=1400 audit(2000000082.641:1055): avc: denied { node_bind } for pid=4053 comm="syz.2.986" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 194.237590][ T4054] incfs: mount failed -22 [ 194.487865][ T28] audit: type=1400 audit(2000000083.161:1056): avc: denied { ioctl } for pid=4067 comm="syz.1.989" path="socket:[31132]" dev="sockfs" ino=31132 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 194.581431][ T4071] loop2: detected capacity change from 0 to 512 [ 194.588864][ T4071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.604066][ T4071] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.610819][ T4071] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.987: bg 0: block 248: padding at end of block bitmap is not set [ 194.627159][ T4071] Quota error (device loop2): write_blk: dquota write failed [ 194.634448][ T4071] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 194.644174][ T4071] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.987: Failed to acquire dquot type 1 [ 194.655613][ T4071] EXT4-fs (loop2): 1 truncate cleaned up [ 194.661323][ T4071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.725521][ T4073] 9pnet: Could not find request transport: f [ 195.128201][ T4085] netlink: 25 bytes leftover after parsing attributes in process `syz.1.993'. [ 195.176909][ T4085] device 00ªX¹¦Dö» entered promiscuous mode [ 195.438402][ T4091] loop7: detected capacity change from 0 to 1024 [ 195.457536][ T4091] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.492428][ T4091] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 195.597881][ T4096] xt_bpf: check failed: parse error [ 195.708253][ T4097] device wg2 entered promiscuous mode [ 196.238023][ T1690] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.245687][ T4110] Bluetooth: hci0: Frame reassembly failed (-90) [ 196.306852][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 196.750777][ T4114] loop7: detected capacity change from 0 to 40427 [ 196.776430][ T4114] F2FS-fs (loop7): fault_injection options not supported [ 196.796838][ T4114] F2FS-fs (loop7): invalid crc value [ 196.829220][ T4114] F2FS-fs (loop7): Found nat_bits in checkpoint [ 196.955623][ T4114] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 196.994299][ T4114] syz.7.1002: attempt to access beyond end of device [ 196.994299][ T4114] loop7: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 197.037013][ T4114] syz.7.1002: attempt to access beyond end of device [ 197.037013][ T4114] loop7: rw=2049, sector=77824, nr_sectors = 40 limit=40427 [ 197.068316][ T4114] syz.7.1002: attempt to access beyond end of device [ 197.068316][ T4114] loop7: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 197.188773][ T2905] syz-executor: attempt to access beyond end of device [ 197.188773][ T2905] loop7: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 197.213211][ T294] EXT4-fs (loop2): unmounting filesystem. [ 197.377140][ T4127] loop2: detected capacity change from 0 to 512 [ 197.533275][ T4127] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 197.606321][ T4127] EXT4-fs (loop2): orphan cleanup on readonly fs [ 197.681806][ T4127] __quota_error: 5 callbacks suppressed [ 197.681871][ T4127] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 197.815892][ T4127] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 197.830740][ T4127] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 197.850006][ T4127] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.1005: iget: immutable or append flags not allowed on symlinks [ 198.056580][ T4127] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1005: couldn't read orphan inode 16 (err -117) [ 198.166388][ T4127] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.231712][ T4127] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 198.246579][ T294] EXT4-fs (loop2): unmounting filesystem. [ 198.265512][ T1640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.265517][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 198.322052][ T4140] loop2: detected capacity change from 0 to 1024 [ 198.370414][ T4140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 198.463855][ T294] EXT4-fs (loop2): unmounting filesystem. [ 198.563118][ T4159] xt_hashlimit: size too large, truncated to 1048576 [ 198.711784][ T4162] overlayfs: failed to clone upperpath [ 198.745309][ T328] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 198.894808][ T28] audit: type=1400 audit(2000000087.564:1062): avc: denied { ioctl } for pid=4172 comm="syz.6.1021" path="socket:[31860]" dev="sockfs" ino=31860 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.989774][ T328] usb 5-1: Using ep0 maxpacket: 32 [ 198.996113][ T328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.015107][ T328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.029984][ T328] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.038941][ T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.055285][ T328] usb 5-1: config 0 descriptor?? [ 199.061671][ T328] hub 5-1:0.0: USB hub found [ 199.204080][ T4179] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 199.217380][ T28] audit: type=1400 audit(2000000087.894:1063): avc: denied { relabelto } for pid=4177 comm="syz.2.1023" name="201" dev="tmpfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 199.261646][ T328] hub 5-1:0.0: 1 port detected [ 199.264574][ T28] audit: type=1400 audit(2000000087.914:1064): avc: denied { associate } for pid=4177 comm="syz.2.1023" name="201" dev="tmpfs" ino=1198 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 199.341469][ T328] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 199.348142][ T328] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 199.404949][ T686] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 199.435681][ T328] usbhid 5-1:0.0: can't add hid device: -71 [ 199.441457][ T328] usbhid: probe of 5-1:0.0 failed with error -71 [ 199.467257][ T4193] xt_hashlimit: size too large, truncated to 1048576 [ 199.475055][ T328] usb 5-1: USB disconnect, device number 17 [ 199.554899][ T19] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 199.616170][ T686] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.627706][ T28] audit: type=1400 audit(2000000088.304:1065): avc: denied { getopt } for pid=4184 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.653395][ T686] usb 8-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 199.675194][ T686] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.692313][ T686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.713393][ T686] usb 8-1: invalid MIDI out EP 0 [ 199.726353][ T686] snd-usb-audio: probe of 8-1:27.0 failed with error -22 [ 199.755830][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.785063][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.814722][ T19] usb 3-1: New USB device found, idVendor=256c, idProduct=0061, bcdDevice= 0.00 [ 199.844028][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.854677][ T28] audit: type=1400 audit(2000000088.524:1066): avc: denied { ioctl } for pid=4198 comm="syz.6.1027" path="socket:[31882]" dev="sockfs" ino=31882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.855056][ T19] usb 3-1: config 0 descriptor?? [ 199.884515][ T4199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1027'. [ 199.912797][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.934786][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.963078][ T686] usb 8-1: USB disconnect, device number 4 [ 200.014850][ T4202] overlayfs: failed to clone upperpath [ 200.305505][ T19] hid-generic 0003:256C:0061.000F: item fetching failed at offset 2/5 [ 200.323963][ T19] hid-generic: probe of 0003:256C:0061.000F failed with error -22 [ 200.465688][ T28] audit: type=1400 audit(2000000089.144:1067): avc: denied { ioctl } for pid=4222 comm="syz.1.1036" path="socket:[31904]" dev="sockfs" ino=31904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 200.498797][ T4223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 200.642205][ T28] audit: type=1400 audit(2000000089.315:1068): avc: denied { write } for pid=4177 comm="syz.2.1023" name="anycast6" dev="proc" ino=4026532422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 200.665741][ T4223] netlink: 'syz.1.1036': attribute type 4 has an invalid length. [ 200.673423][ T4223] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1036'. [ 200.731326][ T4233] overlayfs: failed to clone upperpath [ 200.738122][ T28] audit: type=1400 audit(2000000089.415:1069): avc: denied { read write } for pid=4225 comm="syz.7.1037" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.783842][ T28] audit: type=1400 audit(2000000089.415:1070): avc: denied { open } for pid=4225 comm="syz.7.1037" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.943701][ T4241] loop4: detected capacity change from 0 to 512 [ 200.990049][ T4241] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 201.020171][ T4241] EXT4-fs (loop4): orphan cleanup on readonly fs [ 201.030759][ T4241] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.054160][ T4241] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 201.094291][ T4241] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.1042: iget: immutable or append flags not allowed on symlinks [ 201.125384][ T4241] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1042: couldn't read orphan inode 16 (err -117) [ 201.148055][ T4241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.248477][ T4241] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 201.273149][ T296] EXT4-fs (loop4): unmounting filesystem. [ 201.319594][ T4246] loop4: detected capacity change from 0 to 512 [ 201.355496][ T4246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 201.364305][ T4246] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.021760][ T4267] overlayfs: failed to clone upperpath [ 202.630659][ T296] EXT4-fs (loop4): unmounting filesystem. [ 203.599208][ T4273] loop7: detected capacity change from 0 to 256 [ 203.610375][ T4273] FAT-fs (loop7): Unrecognized mount option "ëŒD" or missing value [ 204.155732][ T328] usb 3-1: USB disconnect, device number 24 [ 204.212543][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 204.212565][ T28] audit: type=1400 audit(2000000092.846:1072): avc: denied { write } for pid=294 comm="syz-executor" name="201" dev="tmpfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 204.344221][ T28] audit: type=1400 audit(2000000092.846:1073): avc: denied { remove_name } for pid=294 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 204.518849][ T28] audit: type=1400 audit(2000000092.846:1074): avc: denied { rmdir } for pid=294 comm="syz-executor" name="201" dev="tmpfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 204.555558][ T4287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 204.662090][ T4301] loop4: detected capacity change from 0 to 512 [ 204.668996][ T4301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.688181][ T4301] EXT4-fs (loop4): 1 truncate cleaned up [ 204.693824][ T4301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 205.042257][ T28] audit: type=1400 audit(2000000093.657:1075): avc: denied { map } for pid=4300 comm="syz.4.1061" path="pipe:[32027]" dev="pipefs" ino=32027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 205.139442][ T19] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 205.146888][ T28] audit: type=1400 audit(2000000093.667:1076): avc: denied { mounton } for pid=4300 comm="syz.4.1061" path="/181/bus/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.322032][ T19] usb 8-1: device descriptor read/64, error -71 [ 206.157612][ T296] EXT4-fs (loop4): unmounting filesystem. [ 206.173484][ T4325] tmpfs: Unknown parameter 'nr_' [ 206.211655][ T6] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 206.219090][ T19] usb 8-1: device descriptor read/64, error -71 [ 206.371500][ T6] usb 3-1: device descriptor read/64, error -71 [ 206.511428][ T19] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 206.671296][ T6] usb 3-1: device descriptor read/64, error -71 [ 206.677415][ T19] usb 8-1: device descriptor read/64, error -71 [ 206.951152][ T19] usb 8-1: device descriptor read/64, error -71 [ 206.957538][ T6] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 207.081206][ T19] usb usb8-port1: attempt power cycle [ 207.121204][ T6] usb 3-1: device descriptor read/64, error -71 [ 207.161406][ T4338] loop4: detected capacity change from 0 to 512 [ 207.178660][ T4338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 207.187592][ T4338] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.400940][ T6] usb 3-1: device descriptor read/64, error -71 [ 207.490919][ T19] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 207.521042][ T6] usb usb3-port1: attempt power cycle [ 207.527625][ T19] usb 8-1: device descriptor read/8, error -71 [ 207.610396][ T4343] loop7: detected capacity change from 0 to 512 [ 207.623345][ T4343] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 207.633039][ T4343] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.681638][ T19] usb 8-1: device descriptor read/8, error -71 [ 207.984164][ T296] EXT4-fs (loop4): unmounting filesystem. [ 208.142888][ T6] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 208.151071][ T4349] loop4: detected capacity change from 0 to 512 [ 208.272216][ T4349] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.1073: invalid block [ 208.284784][ T6] usb 3-1: device descriptor read/8, error -71 [ 208.293432][ T4349] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1073: invalid indirect mapped block 10 (level 1) [ 208.340554][ T4349] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1073: invalid indirect mapped block 8 (level 1) [ 208.362862][ T4353] loop2: detected capacity change from 0 to 4096 [ 208.422286][ T4349] EXT4-fs (loop4): 1 truncate cleaned up [ 208.431650][ T4353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 208.432174][ T4349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.468395][ T4349] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.1073: unexpected EA_INODE flag [ 208.480576][ T4349] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.1073: unexpected EA_INODE flag [ 208.484612][ T28] audit: type=1400 audit(2000000097.138:1077): avc: denied { setattr } for pid=4348 comm="syz.4.1073" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.514341][ T6] usb 3-1: device descriptor read/8, error -71 [ 208.538011][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 208.629384][ T296] EXT4-fs (loop4): unmounting filesystem. [ 208.770569][ T4367] FAULT_INJECTION: forcing a failure. [ 208.770569][ T4367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.783674][ T4367] CPU: 1 PID: 4367 Comm: syz.7.1076 Tainted: G W 6.1.118-syzkaller-00075-g4c2d86d81fa6 #0 [ 208.794749][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 208.804637][ T4367] Call Trace: [ 208.807764][ T4367] [ 208.810541][ T4367] dump_stack_lvl+0x151/0x1b7 [ 208.815055][ T4367] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 208.820513][ T4367] ? copy_page_from_iter_atomic+0x2ed/0x10b0 [ 208.826822][ T4367] dump_stack+0x15/0x18 [ 208.830804][ T4367] should_fail_ex+0x3d0/0x520 [ 208.835321][ T4367] should_fail+0xb/0x10 [ 208.839314][ T4367] should_fail_usercopy+0x1a/0x20 [ 208.844178][ T4367] copy_page_from_iter_atomic+0x349/0x10b0 [ 208.849810][ T4367] ? shmem_get_folio+0xa0/0xa0 [ 208.854427][ T4367] ? pipe_zero+0x220/0x220 [ 208.858663][ T4367] ? shmem_write_begin+0x1f0/0x3a0 [ 208.863619][ T4367] ? __kasan_check_write+0x14/0x20 [ 208.868563][ T4367] ? shmem_writepage+0xe00/0xe00 [ 208.873561][ T4367] generic_perform_write+0x38a/0x780 [ 208.878627][ T4367] ? __mnt_drop_write_file+0xbc/0x100 [ 208.884014][ T4367] ? generic_file_direct_write+0x6b0/0x6b0 [ 208.889909][ T4367] ? __file_remove_privs+0x640/0x640 [ 208.895383][ T4367] ? generic_file_write_iter+0x9d/0x310 [ 208.900882][ T4367] __generic_file_write_iter+0x174/0x3a0 [ 208.906349][ T4367] generic_file_write_iter+0xb1/0x310 [ 208.911544][ T4367] vfs_write+0xaf6/0xed0 [ 208.915624][ T4367] ? file_end_write+0x1c0/0x1c0 [ 208.920318][ T4367] ? __fget_files+0x2cb/0x330 [ 208.924907][ T4367] ? __fdget_pos+0x204/0x390 [ 208.929652][ T4367] ? ksys_write+0x77/0x2c0 [ 208.933902][ T4367] ksys_write+0x199/0x2c0 [ 208.938150][ T4367] ? __sched_text_start+0x8/0x8 [ 208.943281][ T4367] ? __ia32_sys_read+0x90/0x90 [ 208.947913][ T4367] ? __kasan_check_write+0x14/0x20 [ 208.947963][ T4367] ? fpregs_restore_userregs+0x130/0x290 [ 208.947990][ T4367] __x64_sys_write+0x7b/0x90 [ 208.948022][ T4367] x64_sys_call+0x2f/0x9a0 [ 208.948044][ T4367] do_syscall_64+0x3b/0xb0 [ 208.948069][ T4367] ? clear_bhb_loop+0x55/0xb0 [ 208.948097][ T4367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.948122][ T4367] RIP: 0033:0x7ff422d847df [ 208.948159][ T4367] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 208.948177][ T4367] RSP: 002b:00007ff423adcdf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 208.948199][ T4367] RAX: ffffffffffffffda RBX: 0000000000002000 RCX: 00007ff422d847df [ 208.948213][ T4367] RDX: 0000000000002000 RSI: 00007ff418df8000 RDI: 0000000000000009 [ 208.948226][ T4367] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001eb [ 208.948247][ T4367] R10: 0000000020000902 R11: 0000000000000293 R12: 0000000000000009 [ 208.948260][ T4367] R13: 00007ff423adcef0 R14: 00007ff423adceb0 R15: 00007ff418df8000 [ 208.948280][ T4367] [ 208.948973][ T4367] loop7: detected capacity change from 0 to 16 [ 209.064485][ T4367] erofs: Unknown parameter 'ÿÿÿÿ' [ 209.066694][ T294] EXT4-fs (loop2): unmounting filesystem. [ 209.129673][ T28] audit: type=1400 audit(2000000097.799:1078): avc: denied { read } for pid=4370 comm="syz.2.1078" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 209.165760][ T28] audit: type=1400 audit(2000000097.799:1079): avc: denied { open } for pid=4370 comm="syz.2.1078" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 209.231913][ T28] audit: type=1400 audit(2000000097.809:1080): avc: denied { ioctl } for pid=4370 comm="syz.2.1078" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 209.344987][ T4371] kernel profiling enabled (shift: 17) [ 209.475098][ T4381] loop7: detected capacity change from 0 to 128 [ 209.547456][ T28] audit: type=1400 audit(2000000098.219:1081): avc: denied { write } for pid=4377 comm="syz.1.1081" path="socket:[31737]" dev="sockfs" ino=31737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 209.596220][ T4388] loop2: detected capacity change from 0 to 512 [ 209.617175][ T28] audit: type=1400 audit(2000000098.279:1082): avc: denied { nlmsg_write } for pid=4377 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 209.752600][ T4388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.866560][ T4388] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1084: bad orphan inode 131083 [ 209.965234][ T4388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 210.079206][ T28] audit: type=1400 audit(2000000098.749:1083): avc: denied { connect } for pid=4387 comm="syz.2.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.099846][ T28] audit: type=1400 audit(2000000098.779:1084): avc: denied { setopt } for pid=4387 comm="syz.2.1084" laddr=172.20.20.170 lport=6 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.130515][ T28] audit: type=1400 audit(2000000098.809:1085): avc: denied { write } for pid=4387 comm="syz.2.1084" path="socket:[32159]" dev="sockfs" ino=32159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.165886][ T28] audit: type=1400 audit(2000000098.809:1086): avc: denied { read } for pid=4387 comm="syz.2.1084" laddr=172.20.20.170 lport=6 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.195123][ T4396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1080'. [ 210.236485][ T4396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1080'. [ 210.257082][ T28] audit: type=1400 audit(2000000098.919:1087): avc: denied { write } for pid=4387 comm="syz.2.1084" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.368146][ T4402] overlayfs: failed to resolve './file2': -2 [ 211.197621][ T294] EXT4-fs (loop2): unmounting filesystem. [ 211.402179][ T4424] loop2: detected capacity change from 0 to 512 [ 211.416314][ T28] audit: type=1326 audit(2000000100.090:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4412 comm="syz.7.1091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff422d85d29 code=0x0 [ 211.447336][ T4424] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1095: invalid indirect mapped block 256 (level 2) [ 211.479482][ T4424] EXT4-fs (loop2): 2 truncates cleaned up [ 211.485271][ T4424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.502682][ T28] audit: type=1400 audit(2000000100.180:1089): avc: denied { create } for pid=4423 comm="syz.2.1095" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 211.545720][ T4424] EXT4-fs error (device loop2): ext4_check_all_de:663: inode #12: block 7: comm syz.2.1095: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 211.579250][ T4428] overlayfs: failed to clone upperpath [ 212.341582][ T4441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1100'. [ 212.450514][ T4341] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 212.781773][ T4424] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.2.1095: path /212/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=128 fake=0 [ 212.836223][ T4424] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.2.1095: path /212/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=128 fake=0 [ 212.914293][ T4452] overlayfs: missing 'lowerdir' [ 212.933786][ T4422] loop4: detected capacity change from 0 to 40427 [ 212.998665][ T4422] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 213.017890][ T4422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 213.141222][ T4462] FAULT_INJECTION: forcing a failure. [ 213.141222][ T4462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.154123][ T4462] CPU: 1 PID: 4462 Comm: syz.7.1104 Tainted: G W 6.1.118-syzkaller-00075-g4c2d86d81fa6 #0 [ 213.165186][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.175084][ T4462] Call Trace: [ 213.178205][ T4462] [ 213.180982][ T4462] dump_stack_lvl+0x151/0x1b7 [ 213.185505][ T4462] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 213.190791][ T4462] dump_stack+0x15/0x18 [ 213.194783][ T4462] should_fail_ex+0x3d0/0x520 [ 213.199311][ T4462] should_fail+0xb/0x10 [ 213.203284][ T4462] should_fail_usercopy+0x1a/0x20 [ 213.208150][ T4462] _copy_from_user+0x1e/0xc0 [ 213.212573][ T4462] iovec_from_user+0xc7/0x320 [ 213.217086][ T4462] ? __sched_text_start+0x8/0x8 [ 213.221776][ T4462] __import_iovec+0x70/0x430 [ 213.226213][ T4462] ? preempt_schedule_irq+0xe7/0x140 [ 213.231323][ T4462] import_iovec+0xe5/0x120 [ 213.235578][ T4462] copy_msghdr_from_user+0x527/0x670 [ 213.240697][ T4462] ? irqentry_exit+0x30/0x40 [ 213.245124][ T4462] ? sendmsg_copy_msghdr+0x70/0x70 [ 213.250072][ T4462] ? memset_erms+0xb/0x10 [ 213.254238][ T4462] __sys_sendmsg+0x236/0x390 [ 213.258661][ T4462] ? ____sys_sendmsg+0x9a0/0x9a0 [ 213.263451][ T4462] ? __kasan_check_write+0x14/0x20 [ 213.268383][ T4462] ? mutex_unlock+0xb2/0x260 [ 213.272811][ T4462] ? __kasan_check_write+0x14/0x20 [ 213.277763][ T4462] ? fpregs_restore_userregs+0x130/0x290 [ 213.283230][ T4462] __x64_sys_sendmsg+0x7f/0x90 [ 213.287825][ T4462] x64_sys_call+0x16a/0x9a0 [ 213.292164][ T4462] do_syscall_64+0x3b/0xb0 [ 213.296414][ T4462] ? clear_bhb_loop+0x55/0xb0 [ 213.300929][ T4462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.306660][ T4462] RIP: 0033:0x7ff422d85d29 [ 213.310913][ T4462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.318709][ T4422] F2FS-fs (loop4): Found nat_bits in checkpoint [ 213.330346][ T4462] RSP: 002b:00007ff423add038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.330370][ T4462] RAX: ffffffffffffffda RBX: 00007ff422f76160 RCX: 00007ff422d85d29 [ 213.330384][ T4462] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000009 [ 213.360294][ T4462] RBP: 00007ff423add090 R08: 0000000000000000 R09: 0000000000000000 [ 213.368121][ T4462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.375918][ T4462] R13: 0000000000000000 R14: 00007ff422f76160 R15: 00007fff496289a8 [ 213.383735][ T4462] [ 213.400497][ T294] EXT4-fs (loop2): unmounting filesystem. [ 213.443833][ T4422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 213.451070][ T4422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 213.510327][ T4422] ./file0: Can't open blockdev [ 213.771634][ T4481] loop7: detected capacity change from 0 to 512 [ 213.791316][ T4481] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 213.804094][ T4481] EXT4-fs (loop7): orphan cleanup on readonly fs [ 213.809047][ T4485] loop4: detected capacity change from 0 to 512 [ 213.815082][ T4481] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.837972][ T4481] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 213.857949][ T4481] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.1112: iget: immutable or append flags not allowed on symlinks [ 213.877905][ T4481] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1112: couldn't read orphan inode 16 (err -117) [ 213.895854][ T4485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.904683][ T4485] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.907889][ T4481] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 213.963123][ T4481] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 214.006339][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 214.086916][ T4490] loop7: detected capacity change from 0 to 4096 [ 214.118705][ T4490] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 214.348692][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 214.745869][ T4508] overlayfs: failed to clone upperpath [ 214.778915][ T4510] loop2: detected capacity change from 0 to 512 [ 214.786092][ T4513] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1117'. [ 214.812030][ T4513] FAULT_INJECTION: forcing a failure. [ 214.812030][ T4513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.825188][ T4510] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 214.833728][ T4510] EXT4-fs (loop2): orphan cleanup on readonly fs [ 214.840114][ T4510] __quota_error: 4 callbacks suppressed [ 214.840129][ T4510] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 214.856304][ T4513] CPU: 0 PID: 4513 Comm: syz.7.1117 Tainted: G W 6.1.118-syzkaller-00075-g4c2d86d81fa6 #0 [ 214.867409][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 214.877304][ T4513] Call Trace: [ 214.880428][ T4513] [ 214.883207][ T4513] dump_stack_lvl+0x151/0x1b7 [ 214.887719][ T4513] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 214.893011][ T4513] ? _parse_integer+0x2a/0x40 [ 214.897526][ T4513] dump_stack+0x15/0x18 [ 214.901533][ T4513] should_fail_ex+0x3d0/0x520 [ 214.906028][ T4513] should_fail+0xb/0x10 [ 214.910020][ T4513] should_fail_usercopy+0x1a/0x20 [ 214.914885][ T4513] _copy_from_user+0x1e/0xc0 [ 214.919309][ T4513] iovec_from_user+0xc7/0x320 [ 214.923821][ T4513] ? kasan_set_track+0x4b/0x70 [ 214.928420][ T4513] ? kasan_save_free_info+0x2b/0x40 [ 214.933455][ T4513] __import_iovec+0x70/0x430 [ 214.937884][ T4513] import_iovec+0xe5/0x120 [ 214.942136][ T4513] copy_msghdr_from_user+0x527/0x670 [ 214.947257][ T4513] ? sendmsg_copy_msghdr+0x70/0x70 [ 214.952205][ T4513] __sys_sendmsg+0x236/0x390 [ 214.956628][ T4513] ? ____sys_sendmsg+0x9a0/0x9a0 [ 214.961405][ T4513] ? __kasan_check_write+0x14/0x20 [ 214.966347][ T4513] ? mutex_unlock+0xb2/0x260 [ 214.970782][ T4513] ? __kasan_check_write+0x14/0x20 [ 214.975734][ T4513] ? __ia32_sys_read+0x90/0x90 [ 214.980324][ T4513] ? debug_smp_processor_id+0x17/0x20 [ 214.985532][ T4513] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 214.991431][ T4513] __x64_sys_sendmsg+0x7f/0x90 [ 214.996030][ T4513] x64_sys_call+0x16a/0x9a0 [ 215.000370][ T4513] do_syscall_64+0x3b/0xb0 [ 215.004627][ T4513] ? clear_bhb_loop+0x55/0xb0 [ 215.009135][ T4513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.014870][ T4513] RIP: 0033:0x7ff422d85d29 [ 215.019120][ T4513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.038560][ T4513] RSP: 002b:00007ff423b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.046804][ T4513] RAX: ffffffffffffffda RBX: 00007ff422f75fa0 RCX: 00007ff422d85d29 [ 215.054616][ T4513] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 215.062430][ T4513] RBP: 00007ff423b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.070236][ T4513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.078049][ T4513] R13: 0000000000000000 R14: 00007ff422f75fa0 R15: 00007fff496289a8 [ 215.085864][ T4513] [ 215.094687][ T4510] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 215.109235][ T4510] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 215.151136][ T4510] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.1121: iget: immutable or append flags not allowed on symlinks [ 215.191572][ T4510] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1121: couldn't read orphan inode 16 (err -117) [ 215.203832][ T296] EXT4-fs (loop4): unmounting filesystem. [ 215.213753][ T4510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.226073][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'. [ 215.260448][ T4510] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 215.350695][ T294] EXT4-fs (loop2): unmounting filesystem. [ 215.713855][ T4543] loop4: detected capacity change from 0 to 128 [ 215.719439][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 215.750936][ T4549] loop2: detected capacity change from 0 to 256 [ 215.757881][ T4546] netlink: 'syz.1.1132': attribute type 3 has an invalid length. [ 215.772735][ T28] audit: type=1400 audit(2000000104.452:1093): avc: denied { bind } for pid=4545 comm="syz.1.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.773922][ T4546] syz.1.1132[4546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.797501][ T4549] FAT-fs (loop2): Directory bread(block 64) failed [ 215.824275][ T4549] FAT-fs (loop2): Directory bread(block 65) failed [ 215.838887][ T4549] FAT-fs (loop2): Directory bread(block 66) failed [ 215.853503][ T4549] FAT-fs (loop2): Directory bread(block 67) failed [ 215.863542][ T4546] syz.1.1132[4546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.886762][ T4549] FAT-fs (loop2): Directory bread(block 68) failed [ 215.921692][ T4549] FAT-fs (loop2): Directory bread(block 69) failed [ 215.939579][ T4549] FAT-fs (loop2): Directory bread(block 70) failed [ 215.960350][ T4549] FAT-fs (loop2): Directory bread(block 71) failed [ 215.972927][ T4549] FAT-fs (loop2): Directory bread(block 72) failed [ 215.993893][ T4549] FAT-fs (loop2): Directory bread(block 73) failed [ 216.409484][ T4560] loop2: detected capacity change from 0 to 512 [ 216.416857][ T4560] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 216.425258][ T4560] EXT4-fs (loop2): orphan cleanup on readonly fs [ 216.431685][ T4560] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 216.442145][ T4560] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.456747][ T4560] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 216.463548][ T4560] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.1137: iget: immutable or append flags not allowed on symlinks [ 216.486637][ T4560] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1137: couldn't read orphan inode 16 (err -117) [ 216.504853][ T4560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.525994][ T4560] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 216.555008][ T294] EXT4-fs (loop2): unmounting filesystem. [ 216.615278][ T4564] loop2: detected capacity change from 0 to 512 [ 216.626928][ T4564] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 216.639284][ T4564] EXT4-fs (loop2): orphan cleanup on readonly fs [ 216.650799][ T4564] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 216.663361][ T4564] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 216.682474][ T4569] xt_bpf: check failed: parse error [ 216.687703][ T4564] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 216.697520][ T4564] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.1138: iget: immutable or append flags not allowed on symlinks [ 216.721056][ T4569] loop4: detected capacity change from 0 to 512 [ 216.727425][ T4564] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1138: couldn't read orphan inode 16 (err -117) [ 216.740273][ T4564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.751082][ T4569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.760025][ T4569] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.779460][ T4564] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 216.832316][ T294] EXT4-fs (loop2): unmounting filesystem. [ 216.848083][ T4580] loop2: detected capacity change from 0 to 256 [ 216.855557][ T4580] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 216.863254][ T4580] FAT-fs (loop2): Filesystem has been set read-only [ 216.973675][ T296] EXT4-fs (loop4): unmounting filesystem. [ 217.315044][ T4594] loop4: detected capacity change from 0 to 512 [ 217.334851][ T4594] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 217.343210][ T4594] EXT4-fs (loop4): orphan cleanup on readonly fs [ 217.349813][ T4594] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 217.360190][ T4594] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 217.375077][ T4594] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 217.381762][ T4594] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.1148: iget: immutable or append flags not allowed on symlinks [ 217.396212][ T4594] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1148: couldn't read orphan inode 16 (err -117) [ 217.408110][ T4594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.424674][ T4594] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 217.445913][ T296] EXT4-fs (loop4): unmounting filesystem. [ 217.724678][ T4603] loop4: detected capacity change from 0 to 16 [ 217.731973][ T4603] erofs: Unknown parameter 'ÿÿÿÿ' [ 218.130228][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 218.139343][ T4616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 218.377051][ T28] audit: type=1400 audit(2000000107.063:1094): avc: denied { write } for pid=4617 comm="syz.7.1155" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 218.425417][ T686] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 218.472803][ T28] audit: type=1400 audit(2000000107.153:1095): avc: denied { getopt } for pid=4622 comm="syz.7.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.533380][ T4630] loop7: detected capacity change from 0 to 512 [ 218.544894][ T4630] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 218.553585][ T4620] netlink: 'syz.4.1156': attribute type 3 has an invalid length. [ 218.554379][ T4630] EXT4-fs (loop7): orphan cleanup on readonly fs [ 218.569469][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 218.578694][ T4630] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 218.588946][ T4630] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 218.613241][ T4630] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 218.623166][ T4630] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.1159: iget: immutable or append flags not allowed on symlinks [ 218.637268][ T686] usb 3-1: Using ep0 maxpacket: 8 [ 218.643912][ T686] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 218.655341][ T686] usb 3-1: config 179 has no interface number 0 [ 218.676336][ T686] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 218.687647][ T4630] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1159: couldn't read orphan inode 16 (err -117) [ 218.714699][ T686] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 218.729618][ T4630] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 218.748503][ T686] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.781392][ T686] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 218.796334][ T686] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 218.809695][ T686] usb 3-1: config 179 interface 65 has no altsetting 0 [ 218.816620][ T686] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 218.825621][ T686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.856972][ T686] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10 [ 218.875868][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 218.883504][ T28] audit: type=1400 audit(2000000107.564:1096): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=977 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.967259][ T4646] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1162'. [ 219.026622][ T4647] loop7: detected capacity change from 0 to 512 [ 219.063420][ T28] audit: type=1400 audit(2000000107.564:1097): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=977 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.088971][ T4616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.116684][ T4616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.197300][ T4647] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 219.215465][ T4647] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.263109][ T4645] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #2: comm syz.7.1164: corrupted inode contents [ 219.306402][ T4645] EXT4-fs error (device loop7): ext4_dirty_inode:6091: inode #2: comm syz.7.1164: mark_inode_dirty error [ 219.320638][ T4653] device pim6reg1 entered promiscuous mode [ 219.342218][ T4645] EXT4-fs error (device loop7): ext4_do_update_inode:5226: inode #2: comm syz.7.1164: corrupted inode contents [ 219.392476][ T4645] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #2: comm syz.7.1164: mark_inode_dirty error [ 219.457600][ T4647] FAULT_INJECTION: forcing a failure. [ 219.457600][ T4647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.515478][ T4647] CPU: 1 PID: 4647 Comm: syz.7.1164 Tainted: G W 6.1.118-syzkaller-00075-g4c2d86d81fa6 #0 [ 219.526591][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 219.536483][ T4647] Call Trace: [ 219.539610][ T4647] [ 219.542390][ T4647] dump_stack_lvl+0x151/0x1b7 [ 219.546901][ T4647] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 219.552199][ T4647] dump_stack+0x15/0x18 [ 219.556188][ T4647] should_fail_ex+0x3d0/0x520 [ 219.560701][ T4647] should_fail+0xb/0x10 [ 219.564698][ T4647] should_fail_usercopy+0x1a/0x20 [ 219.569553][ T4647] strncpy_from_user+0x24/0x2b0 [ 219.574237][ T4647] ? getname_flags+0xba/0x520 [ 219.578755][ T4647] getname_flags+0xf2/0x520 [ 219.583093][ T4647] ? fpregs_restore_userregs+0x130/0x290 [ 219.588564][ T4647] __x64_sys_renameat2+0xb9/0xf0 [ 219.593341][ T4647] x64_sys_call+0x85c/0x9a0 [ 219.597672][ T4647] do_syscall_64+0x3b/0xb0 [ 219.601925][ T4647] ? clear_bhb_loop+0x55/0xb0 [ 219.606439][ T4647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.612166][ T4647] RIP: 0033:0x7ff422d85d29 [ 219.616510][ T4647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.635952][ T4647] RSP: 002b:00007ff423afe038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 219.644195][ T4647] RAX: ffffffffffffffda RBX: 00007ff422f76080 RCX: 00007ff422d85d29 [ 219.652004][ T4647] RDX: 0000000000000005 RSI: 0000000020000240 RDI: 0000000000000005 [ 219.659815][ T4647] RBP: 00007ff423afe090 R08: 0000000000000000 R09: 0000000000000000 [ 219.667627][ T4647] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 219.675442][ T4647] R13: 0000000000000000 R14: 00007ff422f76080 R15: 00007fff496289a8 [ 219.683259][ T4647] [ 219.854130][ T686] usb 3-1: USB disconnect, device number 29 [ 219.854169][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 219.868753][ T686] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 219.907585][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 219.958292][ T4660] loop2: detected capacity change from 0 to 512 [ 220.042287][ T4660] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 220.052734][ T4660] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 220.061854][ T4660] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.1166: Failed to acquire dquot type 0 [ 220.075372][ T4660] EXT4-fs (loop2): Remounting filesystem read-only [ 220.081738][ T4660] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 220.091889][ T4660] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 220.101129][ T4660] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.1166: Failed to acquire dquot type 0 [ 220.114202][ T4660] EXT4-fs (loop2): Remounting filesystem read-only [ 220.121024][ T4660] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 220.131211][ T4660] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 220.140539][ T4660] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.1166: Failed to acquire dquot type 0 [ 220.152451][ T4660] EXT4-fs (loop2): Remounting filesystem read-only [ 220.159057][ T4660] EXT4-fs (loop2): 1 orphan inode deleted [ 220.164684][ T4660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.173324][ T4660] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.203905][ T4660] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 220.214117][ T4660] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 220.223301][ T4660] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.1166: Failed to acquire dquot type 0 [ 220.235205][ T4660] EXT4-fs (loop2): Remounting filesystem read-only [ 220.310196][ T4675] FAULT_INJECTION: forcing a failure. [ 220.310196][ T4675] name failslab, interval 1, probability 0, space 0, times 0 [ 220.322740][ T4675] CPU: 1 PID: 4675 Comm: syz.7.1167 Tainted: G W 6.1.118-syzkaller-00075-g4c2d86d81fa6 #0 [ 220.333811][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.343704][ T4675] Call Trace: [ 220.346831][ T4675] [ 220.349605][ T4675] dump_stack_lvl+0x151/0x1b7 [ 220.354125][ T4675] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 220.359415][ T4675] ? __kasan_check_read+0x11/0x20 [ 220.364275][ T4675] ? preempt_schedule_irq+0xe7/0x140 [ 220.369394][ T4675] ? preempt_schedule_notrace+0x140/0x140 [ 220.374954][ T4675] dump_stack+0x15/0x18 [ 220.378942][ T4675] should_fail_ex+0x3d0/0x520 [ 220.383458][ T4675] ? security_inode_alloc+0x29/0x120 [ 220.388577][ T4675] __should_failslab+0xaf/0xf0 [ 220.393178][ T4675] should_failslab+0x9/0x20 [ 220.397526][ T4675] kmem_cache_alloc+0x3b/0x320 [ 220.402119][ T4675] security_inode_alloc+0x29/0x120 [ 220.407066][ T4675] inode_init_always+0x720/0x970 [ 220.411840][ T4675] ? sockfs_init_fs_context+0xb0/0xb0 [ 220.417044][ T4675] new_inode_pseudo+0x98/0x1d0 [ 220.421646][ T4675] __sock_create+0x132/0x7e0 [ 220.426072][ T4675] __sys_socketpair+0x29f/0x6e0 [ 220.430759][ T4675] ? __ia32_sys_socket+0x90/0x90 [ 220.435537][ T4675] __x64_sys_socketpair+0x9b/0xb0 [ 220.440394][ T4675] x64_sys_call+0x19b/0x9a0 [ 220.444734][ T4675] do_syscall_64+0x3b/0xb0 [ 220.448987][ T4675] ? clear_bhb_loop+0x55/0xb0 [ 220.453499][ T4675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.459225][ T4675] RIP: 0033:0x7ff422d85d29 [ 220.463483][ T4675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.482924][ T4675] RSP: 002b:00007ff423add038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 220.491164][ T4675] RAX: ffffffffffffffda RBX: 00007ff422f76160 RCX: 00007ff422d85d29 [ 220.498975][ T4675] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 220.506785][ T4675] RBP: 00007ff423add090 R08: 0000000000000000 R09: 0000000000000000 [ 220.514621][ T4675] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 220.522410][ T4675] R13: 0000000000000000 R14: 00007ff422f76160 R15: 00007fff496289a8 [ 220.530233][ T4675] [ 220.533292][ T4675] socket: no more sockets [ 220.612002][ T4678] loop4: detected capacity change from 0 to 512 [ 220.632051][ T4678] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 220.640366][ T4678] EXT4-fs (loop4): orphan cleanup on readonly fs [ 220.646840][ T4678] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 220.657140][ T4678] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 220.671608][ T4678] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 220.678233][ T4678] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.1171: iget: immutable or append flags not allowed on symlinks [ 220.698016][ T4678] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1171: couldn't read orphan inode 16 (err -117) [ 220.710104][ T4678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.719473][ T294] EXT4-fs (loop2): unmounting filesystem. [ 220.767892][ T4678] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 220.785981][ T296] EXT4-fs (loop4): unmounting filesystem. [ 221.022138][ T4693] overlayfs: failed to clone upperpath [ 221.324983][ T4695] loop4: detected capacity change from 0 to 128 [ 221.462685][ T4695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 221.471985][ T4695] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.569002][ T686] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 221.650307][ T4700] loop7: detected capacity change from 0 to 512 [ 221.682539][ T4700] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 221.692877][ T4700] EXT4-fs (loop7): orphan cleanup on readonly fs [ 221.699653][ T4700] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 221.709944][ T4700] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 221.724722][ T4700] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 221.731671][ T4700] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.1177: iget: immutable or append flags not allowed on symlinks [ 221.824204][ T4700] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1177: couldn't read orphan inode 16 (err -117) [ 221.842460][ T4700] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 221.872865][ T296] EXT4-fs (loop4): unmounting filesystem. [ 222.058844][ T4700] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 222.170387][ T686] usb 3-1: Using ep0 maxpacket: 8 [ 222.176824][ T686] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 222.192110][ T686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.200572][ T686] usb 3-1: config 0 descriptor?? [ 222.215295][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 222.252499][ T4714] loop7: detected capacity change from 0 to 512 [ 222.269642][ T4714] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 222.282076][ T4714] EXT4-fs (loop7): orphan cleanup on readonly fs [ 222.288771][ T4714] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.303298][ T4714] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 222.310230][ T4714] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.1181: iget: immutable or append flags not allowed on symlinks [ 222.324656][ T4714] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1181: couldn't read orphan inode 16 (err -117) [ 222.336559][ T4714] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 222.350687][ T4714] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 222.366548][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 222.410782][ T4717] loop7: detected capacity change from 0 to 512 [ 222.431859][ T4717] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 222.443925][ T4717] EXT4-fs (loop7): orphan cleanup on readonly fs [ 222.450534][ T4717] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.481127][ T4717] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 222.586677][ T4717] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.1182: iget: immutable or append flags not allowed on symlinks [ 222.611230][ T4717] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1182: couldn't read orphan inode 16 (err -117) [ 222.633842][ T4683] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.647219][ T4717] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 222.831438][ T4683] FAT-fs (loop5): unable to read boot sector [ 222.867222][ T4717] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 222.894672][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 222.913514][ T686] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 222.924929][ T686] asix: probe of 3-1:0.0 failed with error -71 [ 222.932420][ T686] usb 3-1: USB disconnect, device number 30 [ 223.085154][ T4735] loop7: detected capacity change from 0 to 40427 [ 223.092136][ T4735] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 223.099766][ T4735] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 223.108159][ T4735] F2FS-fs (loop7): fault_injection options not supported [ 223.116026][ T4735] F2FS-fs (loop7): invalid crc value [ 223.122669][ T4735] F2FS-fs (loop7): Found nat_bits in checkpoint [ 223.133091][ T470] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 223.171317][ T4735] F2FS-fs (loop7): Start checkpoint disabled! [ 223.178638][ T4735] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 223.185693][ T4735] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 223.323014][ T470] usb 5-1: Using ep0 maxpacket: 16 [ 223.343743][ T470] usb 5-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 223.363299][ T470] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 223.380809][ T470] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 223.401500][ T470] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.416401][ T470] usb 5-1: config 1 interface 0 has no altsetting 0 [ 223.441481][ T470] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.456067][ T1658] kworker/u4:9: attempt to access beyond end of device [ 223.456067][ T1658] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 223.460802][ T470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 223.582853][ T470] usb 5-1: SerialNumber: syz [ 223.610691][ T4732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 223.637339][ T4747] loop2: detected capacity change from 0 to 512 [ 223.655569][ T4747] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 223.663805][ T4732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 223.674284][ T4747] EXT4-fs (loop2): orphan cleanup on readonly fs [ 223.923156][ T4747] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 223.983994][ T4747] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 223.993688][ T4747] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.1192: iget: immutable or append flags not allowed on symlinks [ 224.012940][ T4747] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1192: couldn't read orphan inode 16 (err -117) [ 224.039576][ T4747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 224.059995][ T4747] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 224.089797][ T294] EXT4-fs (loop2): unmounting filesystem. [ 224.209885][ T4760] loop2: detected capacity change from 0 to 512 [ 224.225899][ T4732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 224.249957][ T4760] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 224.250002][ T4732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 224.261373][ T4760] EXT4-fs (loop2): orphan cleanup on readonly fs [ 224.277014][ T4760] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.292592][ T6] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 224.300000][ T4760] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 224.320636][ T4760] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.1195: iget: immutable or append flags not allowed on symlinks [ 224.345493][ T4760] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1195: couldn't read orphan inode 16 (err -117) [ 224.367547][ T4760] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 224.409451][ T4760] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 224.441959][ T294] EXT4-fs (loop2): unmounting filesystem. [ 224.502390][ T6] usb 8-1: Using ep0 maxpacket: 16 [ 224.508431][ T6] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 224.532350][ T6] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.552446][ T6] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.571017][ T6] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.580888][ T6] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.588740][ T6] usb 8-1: Product: syz [ 224.592885][ T6] usb 8-1: Manufacturer: syz [ 224.597289][ T6] usb 8-1: SerialNumber: syz [ 224.832240][ T686] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 225.013222][ T4754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.021464][ T4754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.030066][ T686] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 225.044332][ T686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.064263][ T686] usb 3-1: config 0 descriptor?? [ 225.082895][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 225.082919][ T28] audit: type=1400 audit(2000000113.767:1135): avc: denied { create } for pid=4731 comm="syz.4.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.117793][ T4732] loop4: detected capacity change from 0 to 512 [ 225.125357][ T28] audit: type=1400 audit(2000000113.767:1136): avc: denied { mounton } for pid=4753 comm="syz.7.1193" path="/proc/276/task" dev="proc" ino=33170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 225.150613][ T28] audit: type=1400 audit(2000000113.767:1137): avc: denied { read write } for pid=4753 comm="syz.7.1193" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 225.182090][ T28] audit: type=1400 audit(2000000113.767:1138): avc: denied { open } for pid=4753 comm="syz.7.1193" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 225.212008][ T28] audit: type=1400 audit(2000000113.797:1139): avc: denied { write } for pid=4731 comm="syz.4.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.245396][ T6] usb 8-1: 0:2 : does not exist [ 225.253038][ T6] usb 8-1: 1:0: cannot get min/max values for control 4 (id 1) [ 225.267351][ T28] audit: type=1400 audit(2000000113.927:1140): avc: denied { create } for pid=4776 comm="syz.6.1200" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 225.272158][ T6] usb 8-1: USB disconnect, device number 9 [ 225.311945][ T28] audit: type=1400 audit(2000000113.927:1141): avc: denied { ioctl } for pid=4776 comm="syz.6.1200" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33835 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 225.339466][ T470] cdc_ether 5-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 225.377229][ T28] audit: type=1400 audit(2000000114.037:1142): avc: denied { create } for pid=4776 comm="syz.6.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.416912][ T28] audit: type=1400 audit(2000000114.087:1143): avc: denied { remount } for pid=4776 comm="syz.6.1200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 225.527892][ T28] audit: type=1400 audit(2000000114.207:1144): avc: denied { create } for pid=4779 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.529084][ T4780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=4780 comm=syz.1.1201 [ 225.719959][ T4785] loop7: detected capacity change from 0 to 512 [ 225.752499][ T4785] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 225.781151][ T4785] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 225.827622][ T4732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1187'. [ 225.830188][ T4785] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1203: Corrupt directory, running e2fsck is recommended [ 225.854361][ T4785] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 225.864167][ T4785] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2186: inode #15: comm syz.7.1203: corrupted in-inode xattr [ 225.881599][ T4785] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1203: couldn't read orphan inode 15 (err -117) [ 225.899810][ T4785] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 225.917748][ T6] usb 5-1: USB disconnect, device number 18 [ 225.924210][ T6] cdc_ether 5-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 226.242840][ T4789] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.254296][ T4789] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 226.264149][ T4789] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1203: Corrupt directory, running e2fsck is recommended [ 226.280431][ T4789] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.291743][ T4789] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 226.301664][ T4789] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1203: Corrupt directory, running e2fsck is recommended [ 226.314919][ T4789] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 3: comm syz.7.1203: path /86/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 226.315406][ T686] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 226.371573][ T4789] EXT4-fs error (device loop7): ext4_readdir:260: inode #2: block 64: comm syz.7.1203: path /86/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 226.427037][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1204'. [ 226.537868][ T4799] overlayfs: failed to clone upperpath [ 226.723406][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 227.102383][ T4804] loop7: detected capacity change from 0 to 512 [ 228.211590][ T4819] netlink: 'syz.1.1213': attribute type 3 has an invalid length. [ 228.315327][ T686] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 228.325954][ T686] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 228.336124][ T686] asix: probe of 3-1:0.0 failed with error -71 [ 228.343250][ T686] usb 3-1: USB disconnect, device number 31 [ 229.673918][ T4822] loop2: detected capacity change from 0 to 40427 [ 229.684072][ T4819] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1213'. [ 229.710059][ T4819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4819 comm=syz.1.1213 [ 229.725463][ T4822] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 229.725824][ T4804] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 229.733047][ T4822] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 229.749756][ T4804] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.816330][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 229.862187][ T4833] loop7: detected capacity change from 0 to 512 [ 229.879230][ T4822] F2FS-fs (loop2): Found nat_bits in checkpoint [ 230.106347][ T4833] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 230.117593][ T4822] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 230.124618][ T4822] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 230.202653][ T4833] EXT4-fs (loop7): orphan cleanup on readonly fs [ 230.213018][ T4833] __quota_error: 13 callbacks suppressed [ 230.213039][ T4833] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 230.235005][ T4833] EXT4-fs warning (device loop7): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 230.259765][ T4833] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 230.271663][ T4833] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #16: comm syz.7.1217: iget: immutable or append flags not allowed on symlinks [ 230.300616][ T4833] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1217: couldn't read orphan inode 16 (err -117) [ 230.359797][ T4833] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 230.377260][ T4833] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 230.463047][ T2905] EXT4-fs (loop7): unmounting filesystem. [ 230.489524][ T28] audit: type=1400 audit(2000000119.169:1158): avc: denied { write } for pid=4825 comm="syz.4.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.619357][ T28] audit: type=1400 audit(2000000119.270:1159): avc: denied { nlmsg_write } for pid=4825 comm="syz.4.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.499736][ T4858] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1224'. [ 231.695626][ T4844] loop2: detected capacity change from 0 to 40427 [ 231.706766][ T4844] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 231.722237][ T4844] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 231.730636][ T4844] F2FS-fs (loop2): fault_injection options not supported [ 231.738195][ T4844] F2FS-fs (loop2): invalid crc value [ 231.752589][ T28] audit: type=1400 audit(2000000120.440:1160): avc: denied { write } for pid=4861 comm="syz.4.1225" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 231.777407][ T4844] F2FS-fs (loop2): Found nat_bits in checkpoint [ 231.788765][ T686] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 231.858359][ T4844] F2FS-fs (loop2): Start checkpoint disabled! [ 231.877278][ T4844] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 231.885279][ T4844] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 231.948187][ T28] audit: type=1400 audit(2000000120.630:1161): avc: denied { write } for pid=4843 comm="syz.2.1218" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.995935][ T28] audit: type=1400 audit(2000000120.660:1162): avc: denied { add_name } for pid=4843 comm="syz.2.1218" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.019985][ T686] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 232.032599][ T686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.049209][ T686] usb 8-1: config 0 descriptor?? [ 232.059447][ T686] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 232.076906][ T28] audit: type=1400 audit(2000000120.660:1163): avc: denied { create } for pid=4843 comm="syz.2.1218" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 232.098129][ T686] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 232.124452][ T28] audit: type=1400 audit(2000000120.660:1164): avc: denied { read write open } for pid=4843 comm="syz.2.1218" path="/233/file1/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 232.147887][ T28] audit: type=1400 audit(2000000120.660:1165): avc: denied { ioctl } for pid=4843 comm="syz.2.1218" path="/233/file1/bus" dev="loop2" ino=10 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 232.257091][ T28] audit: type=1400 audit(2000000120.660:1166): avc: denied { setattr } for pid=4843 comm="syz.2.1218" path="/233/file1" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.285989][ T4858] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1224'. [ 232.313412][ T686] usb 8-1: USB disconnect, device number 10 [ 232.319617][ T686] ftdi_sio 8-1:0.0: device disconnected [ 232.399301][ T1691] kworker/u4:32: attempt to access beyond end of device [ 232.399301][ T1691] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 232.835166][ T4880] loop2: detected capacity change from 0 to 512 [ 232.842619][ T4880] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 232.850901][ T4880] EXT4-fs (loop2): orphan cleanup on readonly fs [ 232.857811][ T4880] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 232.872343][ T4880] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 232.912347][ T4880] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.1228: iget: immutable or append flags not allowed on symlinks [ 232.943174][ T4880] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1228: couldn't read orphan inode 16 (err -117) [ 232.967762][ T4880] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 232.990478][ T4880] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 233.056938][ T294] EXT4-fs (loop2): unmounting filesystem. [ 233.720478][ T4891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1232'. [ 234.115326][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1235'. [ 234.862980][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 235.219127][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 235.219143][ T28] audit: type=1400 audit(2000000123.912:1175): avc: denied { create } for pid=4927 comm="syz.6.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 235.279223][ T4932] loop2: detected capacity change from 0 to 512 [ 235.291403][ T4932] EXT4-fs: Invalid want_extra_isize 6 [ 235.352588][ T4932] loop2: detected capacity change from 0 to 1024 [ 235.387995][ T4932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 235.440243][ T28] audit: type=1400 audit(2000000124.132:1176): avc: denied { name_bind } for pid=4933 comm="syz.6.1246" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 235.476882][ T686] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 235.486917][ T28] audit: type=1400 audit(2000000124.152:1177): avc: denied { create } for pid=4933 comm="syz.6.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.507827][ T28] audit: type=1400 audit(2000000124.152:1178): avc: denied { write } for pid=4933 comm="syz.6.1246" path="socket:[34133]" dev="sockfs" ino=34133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.532206][ T28] audit: type=1400 audit(2000000124.152:1179): avc: denied { nlmsg_write } for pid=4933 comm="syz.6.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.667852][ T686] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.694455][ T686] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.768688][ T686] usb 8-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 235.793455][ T686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.813774][ T686] usb 8-1: config 0 descriptor?? [ 235.881549][ T28] audit: type=1400 audit(2000000124.572:1180): avc: denied { unlink } for pid=4950 comm="syz.4.1251" name="#6b" dev="tmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.931168][ T4951] loop4: detected capacity change from 0 to 512 [ 235.962727][ T4951] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 235.992198][ T4951] EXT4-fs (loop4): orphan cleanup on readonly fs [ 236.051310][ T4951] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 236.248623][ T4951] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 236.320703][ T4926] 9pnet_fd: Insufficient options for proto=fd [ 236.512283][ T686] wacom 0003:056A:00FB.0010: ignoring exceeding usage max [ 236.517981][ T4951] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 236.520780][ T686] wacom 0003:056A:00FB.0010: item fetching failed at offset 3/5 [ 236.533402][ T686] wacom 0003:056A:00FB.0010: parse failed [ 236.543336][ T686] wacom: probe of 0003:056A:00FB.0010 failed with error -22 [ 236.547592][ T4951] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.1251: iget: immutable or append flags not allowed on symlinks [ 236.595483][ T294] EXT4-fs (loop2): unmounting filesystem. [ 236.601379][ T4951] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1251: couldn't read orphan inode 16 (err -117) [ 236.618828][ T28] audit: type=1326 audit(2000000125.313:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.7.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff422d85d29 code=0x7ffc0000 [ 236.652574][ T4951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 236.686318][ T28] audit: type=1326 audit(2000000125.313:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.7.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff422d85d29 code=0x7ffc0000 [ 236.701677][ T4965] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 236.727736][ T39] usb 8-1: USB disconnect, device number 11 [ 236.769478][ T4951] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 236.908302][ T296] EXT4-fs (loop4): unmounting filesystem. [ 236.980299][ T4969] loop4: detected capacity change from 0 to 512 [ 237.024025][ T4969] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 237.048999][ T4969] EXT4-fs (loop4): orphan cleanup on readonly fs [ 237.078203][ T4969] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 237.158580][ T4969] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 237.207292][ T4969] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.1256: iget: immutable or append flags not allowed on symlinks [ 237.257848][ T4969] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1256: couldn't read orphan inode 16 (err -117) [ 237.284995][ T4969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.371302][ T4969] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 237.409151][ T296] EXT4-fs (loop4): unmounting filesystem. [ 237.542917][ T4988] loop2: detected capacity change from 0 to 128 [ 237.700933][ T4998] loop4: detected capacity change from 0 to 512 [ 237.731023][ T4998] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.739917][ T4998] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.600874][ T296] EXT4-fs (loop4): unmounting filesystem. [ 238.631873][ T5007] loop7: detected capacity change from 0 to 512 [ 238.652962][ T5007] EXT4-fs: Ignoring removed oldalloc option [ 238.659120][ T5010] syz.2.1268[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.659181][ T5010] syz.2.1268[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.687277][ T5007] EXT4-fs error (device loop7): ext4_xattr_inode_iget:400: comm syz.7.1266: Parent and EA inode have the same ino 15 [ 238.722614][ T5015] loop4: detected capacity change from 0 to 512 [ 238.780763][ T5007] EXT4-fs (loop7): Remounting filesystem read-only [ 238.808257][ T5015] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 238.816510][ T5007] EXT4-fs error (device loop7): ext4_xattr_inode_iget:400: comm syz.7.1266: Parent and EA inode have the same ino 15 [ 238.819555][ T5021] loop2: detected capacity change from 0 to 512 [ 238.847755][ T5007] EXT4-fs (loop7): Remounting filesystem read-only [ 238.854259][ T5007] EXT4-fs (loop7): 1 orphan inode deleted [ 238.865066][ T5015] EXT4-fs (loop4): orphan cleanup on readonly fs [ 238.866172][ T5007] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 238.871600][ T5021] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 238.890185][ T5015] EXT4-fs warning (device loop4): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 238.905866][ T5021] EXT4-fs (loop2): orphan cleanup on readonly fs [ 238.912269][ T5021] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 238.929778][ T2905] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 238.934131][ T5015] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 238.949834][ T5021] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 238.957637][ T2905] EXT4-fs (loop7): Remounting filesystem read-only [ 238.974592][ T5021] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.1270: iget: immutable or append flags not allowed on symlinks [ 238.997511][ T2905] ------------[ cut here ]------------ [ 239.002809][ T2905] kernel BUG at fs/namei.c:2954! [ 239.017972][ T2905] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 239.023869][ T2905] CPU: 1 PID: 2905 Comm: syz-executor Tainted: G W 6.1.118-syzkaller-00075-g4c2d86d81fa6 #0 [ 239.035155][ T2905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.045047][ T2905] RIP: 0010:may_delete+0x6eb/0x6f0 [ 239.049993][ T2905] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 06 60 f3 ff e9 72 fe ff ff e8 bc ec ab ff 0f 0b e8 b5 ec ab ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 a1 ec ab ff 4c 8d [ 239.065565][ T5021] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1270: couldn't read orphan inode 16 (err -117) [ 239.069429][ T2905] RSP: 0018:ffffc900041b7bd8 EFLAGS: 00010293 [ 239.081260][ T5015] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.1267: iget: immutable or append flags not allowed on symlinks [ 239.086961][ T2905] RAX: ffffffff81c999fb RBX: ffff88811486cf10 RCX: ffff88810fff0000 [ 239.086980][ T2905] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 239.086994][ T2905] RBP: ffffc900041b7c40 R08: ffffffff81c9938f R09: 0000000000000003 [ 239.101176][ T5021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 239.109081][ T2905] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811488d550 [ 239.109102][ T2905] R13: 1ffff11022911aaa R14: ffff88810bd95ce8 R15: dffffc0000000000 [ 239.109118][ T2905] FS: 0000555582481500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 239.131354][ T5015] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1267: couldn't read orphan inode 16 (err -117) [ 239.133386][ T2905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.133405][ T2905] CR2: 00000000204ac000 CR3: 000000013ea3a000 CR4: 00000000003506a0 [ 239.152279][ T5015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.157774][ T2905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.157789][ T2905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.157801][ T2905] Call Trace: [ 239.157807][ T2905] [ 239.157815][ T2905] ? __die_body+0x62/0xb0 [ 239.218007][ T2905] ? die+0x88/0xb0 [ 239.221563][ T2905] ? do_trap+0x103/0x330 [ 239.225649][ T2905] ? may_delete+0x6eb/0x6f0 [ 239.229981][ T2905] ? handle_invalid_op+0x95/0xc0 [ 239.234759][ T2905] ? may_delete+0x6eb/0x6f0 [ 239.239097][ T2905] ? exc_invalid_op+0x32/0x50 [ 239.243611][ T2905] ? asm_exc_invalid_op+0x1b/0x20 [ 239.248468][ T2905] ? may_delete+0x7f/0x6f0 [ 239.252721][ T2905] ? may_delete+0x6eb/0x6f0 [ 239.257059][ T2905] ? may_delete+0x6eb/0x6f0 [ 239.261399][ T2905] ? may_delete+0x6eb/0x6f0 [ 239.265746][ T2905] vfs_rmdir+0x32/0x500 [ 239.269730][ T2905] ? generic_shutdown_super+0x2b8/0x370 [ 239.275122][ T2905] incfs_kill_sb+0x113/0x230 [ 239.279547][ T2905] deactivate_locked_super+0xad/0x110 [ 239.284750][ T2905] deactivate_super+0xbe/0xf0 [ 239.289262][ T2905] cleanup_mnt+0x485/0x510 [ 239.293515][ T2905] ? user_path_at_empty+0x14e/0x1a0 [ 239.298556][ T2905] __cleanup_mnt+0x19/0x20 [ 239.302802][ T2905] task_work_run+0x24d/0x2e0 [ 239.307666][ T2905] ? task_work_cancel+0x2e0/0x2e0 [ 239.312520][ T2905] ? __x64_sys_umount+0x122/0x170 [ 239.317381][ T2905] exit_to_user_mode_loop+0x94/0xa0 [ 239.322416][ T2905] exit_to_user_mode_prepare+0x5a/0xa0 [ 239.327714][ T2905] syscall_exit_to_user_mode+0x26/0x130 [ 239.333089][ T2905] do_syscall_64+0x47/0xb0 [ 239.337342][ T2905] ? clear_bhb_loop+0x55/0xb0 [ 239.341862][ T2905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.347585][ T2905] RIP: 0033:0x7ff422d87057 [ 239.351838][ T2905] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 239.371278][ T2905] RSP: 002b:00007fff49626b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 239.379525][ T2905] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff422d87057 [ 239.387337][ T2905] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff49626c10 [ 239.395152][ T2905] RBP: 00007fff49626c10 R08: 0000000000000000 R09: 0000000000000000 [ 239.402957][ T2905] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff49627d00 [ 239.410770][ T2905] R13: 00007ff422e01894 R14: 00007fff49628dc0 R15: 0000000000000063 [ 239.418606][ T2905] [ 239.421446][ T2905] Modules linked in: [ 239.432674][ T5021] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 239.463485][ T294] EXT4-fs (loop2): unmounting filesystem. [ 239.499728][ T2905] ---[ end trace 0000000000000000 ]--- [ 239.505141][ T2905] RIP: 0010:may_delete+0x6eb/0x6f0 [ 239.506027][ T5015] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 239.510111][ T2905] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 06 60 f3 ff e9 72 fe ff ff e8 bc ec ab ff 0f 0b e8 b5 ec ab ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 a1 ec ab ff 4c 8d [ 239.537324][ T2905] RSP: 0018:ffffc900041b7bd8 EFLAGS: 00010293 [ 239.543147][ T2905] RAX: ffffffff81c999fb RBX: ffff88811486cf10 RCX: ffff88810fff0000 [ 239.550982][ T2905] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 239.558952][ T2905] RBP: ffffc900041b7c40 R08: ffffffff81c9938f R09: 0000000000000003 [ 239.566748][ T2905] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88811488d550 [ 239.574545][ T2905] R13: 1ffff11022911aaa R14: ffff88810bd95ce8 R15: dffffc0000000000 [ 239.582417][ T2905] FS: 0000555582481500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 239.591135][ T2905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.597592][ T2905] CR2: 0000555588fcf4e8 CR3: 000000013ea3a000 CR4: 00000000003506b0 [ 239.609124][ T296] EXT4-fs (loop4): unmounting filesystem. [ 239.614818][ T2905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.622697][ T2905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.630474][ T2905] Kernel panic - not syncing: Fatal exception [ 239.636657][ T2905] Kernel Offset: disabled [ 239.640788][ T2905] Rebooting in 86400 seconds..