last executing test programs: 6m49.024847211s ago: executing program 32 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000050000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1, 0x0, 0x0, @void, @value}, 0x20) 5m6.068830607s ago: executing program 33 (id=730): r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013071400000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010014000000001f00000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000040000000000000000000000000000020000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m54.796012127s ago: executing program 34 (id=1559): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000002000000", @ANYBLOB="e5ff"], 0xa0}, 0x4004881) 1m41.714850763s ago: executing program 35 (id=1995): socket$inet6(0xa, 0x2, 0x6948) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@dax}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@nolazytime}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200431, &(0x7f0000000000)) 1m10.987437116s ago: executing program 36 (id=2218): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x40}, 0x1, 0xba01}, 0x0) 1m7.237466464s ago: executing program 37 (id=2250): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x4}]}]}, {0x0, [0x30]}}, &(0x7f0000000700)=""/161, 0x2f, 0xa1, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x7ff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = accept4$unix(r2, &(0x7f0000000340)=@abs, &(0x7f0000000240)=0x6e, 0x80800) getsockname$unix(r5, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r7, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a00)=@generic={&(0x7f00000006c0)='.\x00', r8}, 0x18) 59.25893226s ago: executing program 38 (id=2303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="c3aa46114e9c741357d3b56d9c91b5d3ee76c3b58642a52092d93aafb943fcaa60ed7ad0c191697f8ac2e7980640cf4db9f98b05c0809a890ae36e77a54f0ebbf6bcb41d17e032319e598b67fb9d0a0fee14392fa523a3a68c71a3f54702682096a2032c8a7ba137722304b6c732ceb26a18d2a8019b641c00232dda2c12c5d0dd503b57355f4810c14e6f7c345c03f74e7e43f5d46c96af0032d24d04de4786b67c0fbd153a444a122f", 0xaa}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="a490", 0x2}], 0x1}}], 0x2, 0x40) 54.907292468s ago: executing program 39 (id=2343): r0 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[], 0x15) r3 = dup(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) setsockopt$inet6_buf(r3, 0x29, 0xf0, &(0x7f0000000000)="be377e1c31ebeaf13252f0c162f8cb7dd4bfe66247c53d539e70d2de6f8c5f3d97aba7e31b612e", 0x27) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x3, 0xfc, 0xfffff028}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) 46.46627685s ago: executing program 40 (id=2413): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket(0x11, 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 45.348894238s ago: executing program 41 (id=2426): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000bc0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x68, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x20}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x53, 0x3, 0x0, "76935d43c74700915f11ba4d689447d737a08a5fcda9549625e6f4ddd566bc0ff639eaa52c81541fa8baac54c84d82172a4b9414cfe8b14afbae43fdffdc6e9f5869ff69d3147e76f9fe223e6948a1c1"}]}}}}}}}}, 0x0) 36.096094674s ago: executing program 42 (id=2484): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018e57dfbee0005c1ef15fd95f7d357a88b2129a68ce3000000000000018000faff00cd243c9034d42e27a34bffbdb338000007000000002e6100"], 0x0, 0x20, 0x0, 0x0, 0x10000, 0x0, @void, @value}, 0x28) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x244000, 0x0, 0x1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x15, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='sys_enter\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x81000) renameat2(r8, 0x0, r8, &(0x7f0000000980)='./file0\x00', 0x0) ppoll(&(0x7f00000003c0)=[{r5, 0x4000}], 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) ioctl$KDSIGACCEPT(r2, 0x5607, 0x3) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0203ff030c00000000000000fddbdf25010009000000000003000600000000000200000000000000000000000000010002000100000000000000050b00000000030005000000000002002000ac141daa00000000000000000100140006"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xfffffec0) 30.845024116s ago: executing program 1 (id=2525): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x1, @desc4}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x600) 30.652055659s ago: executing program 1 (id=2526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x52) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = geteuid() ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000400)=0x0) r7 = getuid() getresuid(&(0x7f00000004c0), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000840)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000640)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r13 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r14) r15 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) statx(r3, &(0x7f0000000bc0)='./file0\x00', 0x800, 0x8, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000c72fd3ca2583a9b802000400", @ANYRES32=r5, @ANYBLOB="02000a00", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000300", @ANYRES32=r9, @ANYBLOB="02000500", @ANYRES32=r11, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r12, @ANYBLOB="040004000000000008000700", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000600", @ANYRES32=r16, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r18, @ANYBLOB="10000100000000002000000000000000"], 0x8c, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) close(0x4) r19 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r19, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x437, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r20, 0x1a494, 0xa080}, [@IFLA_LINKMODE={0x5, 0x11, 0xd}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x24044804) 30.631216779s ago: executing program 43 (id=2526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x52) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = geteuid() ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000400)=0x0) r7 = getuid() getresuid(&(0x7f00000004c0), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000600)=0xe8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000840)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000640)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r13 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r14) r15 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) statx(r3, &(0x7f0000000bc0)='./file0\x00', 0x800, 0x8, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000c72fd3ca2583a9b802000400", @ANYRES32=r5, @ANYBLOB="02000a00", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000300", @ANYRES32=r9, @ANYBLOB="02000500", @ANYRES32=r11, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=r12, @ANYBLOB="040004000000000008000700", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000600", @ANYRES32=r16, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r18, @ANYBLOB="10000100000000002000000000000000"], 0x8c, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) close(0x4) r19 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r19, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x437, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r20, 0x1a494, 0xa080}, [@IFLA_LINKMODE={0x5, 0x11, 0xd}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x24044804) 29.173602552s ago: executing program 8 (id=2537): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) fgetxattr(r0, &(0x7f0000000e40)=@random={'os2.', '/proc/self/net/pfkey\x00'}, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) mknodat$loop(r1, 0x0, 0x800, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f00000003c0)={'#! ', './file0', [{}]}, 0xc) pwrite64(r6, &(0x7f0000000240)="ab", 0x1, 0x2) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8000000000000, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, 0x0, 0x0) shutdown(r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800008b0313a576f879a6410000000000000000000000047933e90d0eb2e869a9eb7f5a36df854d519271d2b4fc79d82a66673bead347dbfed6309cee"], &(0x7f0000000540)=""/246, 0x1c, 0xf6, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 27.653601936s ago: executing program 8 (id=2543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000300000132"], 0x0) 27.585213857s ago: executing program 8 (id=2545): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@sb={'sb', 0x3d, 0xffffffffffffff81}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x1000483, &(0x7f0000000480)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5", @ANYRESOCT=0x0, @ANYBLOB="fce26604b0dbc341b9b984b4c766b8721916dc499601a59218d18d3d8abf788fd03eb82a2453d4e8c7e96442bbcd86b78d175813c077af9d927a3f8ebe0df5017560b92eb0f03d7c3809b4f6466af1135672edcf0613f16dec62de5ad4774f7171127f911484f121a2895ab7982e6e15d51c9c0db5f79e139bb2369cac0fc85356ca15decbea3f51e0ea450b35efde8645e32e19343f27f23e32ae4b1de6f70b5f971086da61d00b73", @ANYRESHEX], 0x21, 0x314, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) getdents(0xffffffffffffffff, &(0x7f0000001080)=""/4090, 0xffa) 26.72626168s ago: executing program 8 (id=2549): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@sb={'sb', 0x3d, 0xffffffffffffff81}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x1000483, &(0x7f0000000480)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5", @ANYRESOCT=0x0, @ANYBLOB="fce26604b0dbc341b9b984b4c766b8721916dc499601a59218d18d3d8abf788fd03eb82a2453d4e8c7e96442bbcd86b78d175813c077af9d927a3f8ebe0df5017560b92eb0f03d7c3809b4f6466af1135672edcf0613f16dec62de5ad4774f7171127f911484f121a2895ab7982e6e15d51c9c0db5f79e139bb2369cac0fc85356ca15decbea3f51e0ea450b35efde8645e32e19343f27f23e32ae4b1de6f70b5f971086da61d00b73", @ANYRESHEX], 0x21, 0x314, &(0x7f0000000780)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000104010400000000000000000500000508000440000022dd08000540000000040500010002"], 0x40}, 0x1, 0x0, 0x0, 0x20008018}, 0x240000c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) getdents(r4, &(0x7f0000001080)=""/4090, 0xffa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002940)={'ip6tnl0\x00', 0x0}) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 26.480098374s ago: executing program 8 (id=2555): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) 26.422970385s ago: executing program 5 (id=2556): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) mkdir(0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8fe00000000bfa200000000000007020000f8ff5479264eb9620b8d1cffc8bc4a83a713706b51cf339b0cffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r7, &(0x7f0000003440)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f0000000400)='task\x00') 26.344862066s ago: executing program 8 (id=2557): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@init_itable}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000600)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, r4, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}}, 0x0) 26.344701506s ago: executing program 44 (id=2557): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@init_itable}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000600)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, r4, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}}, 0x0) 25.529050559s ago: executing program 5 (id=2564): syz_emit_ethernet(0x46, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x3c}], {0x0, 0x0, 0x8}}}}}}, 0x0) 25.502409779s ago: executing program 5 (id=2565): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) r0 = socket$inet6(0xa, 0x6, 0x7) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4f23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB="01ffffffff0000000000000008004500002c0000000000119000000018e000000100004e20001890780400"/57], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) (async) socket$inet6(0xa, 0x6, 0x7) (async) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4f23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xb}, 0x1c) (async) syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB="01ffffffff0000000000000008004500002c0000000000119000000018e000000100004e20001890780400"/57], 0x0) (async) 25.389141191s ago: executing program 5 (id=2566): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@sb={'sb', 0x3d, 0xffffffffffffff81}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x1000483, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="fce26604b0dbc341b9b984b4c766b8721916dc499601a59218d18d3d8abf788fd03eb82a2453d4e8c7e96442bbcd86b78d175813c077af9d927a3f8ebe0df5017560b92eb0f03d7c3809b4f6466af1135672edcf0613f16dec62de5ad4774f7171127f911484f121a2895ab7982e6e15d51c9c0db5f79e139bb2369cac0fc85356ca15decbea3f51e0ea450b35efde8645e32e19343f27f23e32ae4b1de6f70b5f971086da61d00b73", @ANYRESHEX], 0x21, 0x314, &(0x7f0000000780)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000104010400000000000000000500000508000440000022dd08000540000000040500010002"], 0x40}, 0x1, 0x0, 0x0, 0x20008018}, 0x240000c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) getdents(r4, &(0x7f0000001080)=""/4090, 0xffa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002940)={'ip6tnl0\x00', 0x0}) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 24.925940888s ago: executing program 5 (id=2570): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x169a80, 0x1e7) sendfile(r3, r3, 0x0, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000300)=0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf000000}, 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) close(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0xd75) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r8, &(0x7f0000000200)}, 0x20) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x18, 0x1, 0x4}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$eJzs3M9rI+UbAPAn7XZ/f/dbRNDbDixCC5uw6XYXvVXdxR/Ypfjj4EnTZBqym2RKk6a1Jw8exYP/iSh48ujf4MGzt8WD4k1QMjPRrSgITRu7/Xxg8sz75s0zz5tD4ZkpCeDMWkx++akS1+JSRMxHxNWI/LxSHrm1IjwfEdcjYu6Jo1LO/zFxPiIuR8S1cfIiZ6V86/Oboxt3fnzz52++u3Duyhdffz+7XQOz9kJE9LaL871eEbN2ER+W841RJ4+91VEZizd6j8pxVsS9dDPPsNeYrGvk8Xa7WJ9t7w7GcavbaI5ju7OVz2/3iwsORu1JnvwDDxs7+biVbuaxM8jy2D4o6to/KP62HQyGRZ5Wme+jPH0Mh5NYzKf7abGf7Ud5bPaH5XyRN2ul++M4KmN5uWhm3VZex+ZRvun/trc6/d39ZJTuDDpZP7lTq79Yq9+t1neyVjpMV6uNXuvuarLU7o6XVYdpo7fWzrJ2N601s95ystRuNqv1erJ0L93sNPpJvV67XbtVvbNcnt1MXnvwXtJtJUvj+EqnvzvsdAfJVraTFJ9YTlZqt19aTm7Uk3fWN5KNt+/fX99494N77z94ef2NV8tFh8t6nK4mSyu3Vlaq9VvVlfryGdr/J2XRU9w/HEll1gUAnD76f2AWTnv/H/r/qThV/e+krLPa/x/D/uFI9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfWDwtfvp6fLBbjK+X8/8qpZ8pxJSLmIuK3vzEf5w/lnC/zLPzD+oW/1PBtJfIM42tcKI/LEbFWHr/+/7i/BQAAAHh6ffXx9c+Kbr14WZx1QZyk4qbN3NUPp5SvEhELi4+nlG1u/PLslJLFcxFxLvanlC2/gXVxSsmKW27nppXtX5k/FC4+ESpFmDvRcgAAgBNxuBM42S4EAACAk/TprAtgNioxeZQ5eRac/+f9nw8ELx0aAQAAAKdQZdYFAAAAAMcu7//9/h8AAAA83Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n535yUoeiOACfFvoe74+RGOduxRkswyU4dGhYgJtgCbgFN8AacOYSDBjaEq3BxKS3bSTfl7SX25Afp4TJuZcUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuvRcrOaP91cPbXO2u3bS3A0AAABwzKZYzcsX02r+r75+Vl+6qOdZROQRcax3H8WvRuaozim+eH/xqYaniDJh/xm/6+NvRFzXx+t5198CAAAAnK71YjmruvXqNB26IPpULdrk/28S5WURUUxfEqXl+9NlorDy9z2Ou0Rp5QLWJFFYteQ2TpX2LaPGMPkwZNWQ91oOAADQi2Yn0G8XAgAAQJ9uhy6AYWRx2Mo87AWX/7x/3xD805gBAAAAP1A2dAEAAABA58r+3/P/AAAA4LRVz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS5tiNV8vlrO2OdtdO2nuBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Y3/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnft5jaOKAwD+ZmZna6viGmUPEVHwoBe73dbWXj0owYN/ghDSbY1u/dHmYEsRcvEmOfciehQRlHjr/9BzC73UWw57iCAeI/MrmfwAt4TMbJLPB9687w6bed83CSHfeS8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZfLATJ9mhV8Rxee7R5r2lrH+8p888WHsyn7UsjppM+nh4vf4i6reXCAAAAKdHUtX3IYSn6fpC1se9vP5Pq/dkNf9PLxZxVc/vrfurvqr9s/bnHxuvbg/UK8bJLnp9eTy6sD+VztHNckb8u1XYc/ql//3CTn7n82cvSf4NiT9efWWS5vcz+uHhww+7eXjmqBIHAA7rfNWXQfX3UNYP20wMgFOjUyu8q/o/6bWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATJqvh+SqOQgjznZ0483jz3tJB/YO1J/NVu3L//lr9mtkl0hDC9eXx6EKDc5l1t+/c/WJxPB7daj54I4TQ3uhl8OkU7wmhzQwFhw3i8md9VvI5HkHLv5gAADhx0rJldf3TdH0hOxfNhbD18+76/+1aHKas/zc+u/KoPla9/h82NsPZN1i5+fXg9p277y7fXLwxujH68r2Lw/eHl65evnx1kD8rGXhiAgAAwOF0y1av/+O5/ev/52pxmLL+/+bH4Xf1sRL1/4F2Fv3azgQAAOB0e/nNf/6ODjgfdbvh28WVlVvD4rj9+mJxbCHVZ3ambPX6P5lrOysAAACgCZPVaNf6/7VaHKZc/3/hl9d+q18zCSGcLdf/zy99Nb7W3HRmWhP/Ttz2HAEAAGjX2bLV1//TfP9/vL3lIQ4hvPNWEZcfAzhV/Z989P2v9bHq+/8vNTfFmRT3i/uR9/0QOv22MwIAAOAke65sWbH/V7q+8Pnv5z7p2v8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LT/AgAA//8Yl0ni") r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1e3340, 0x0) symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r11, 0x4004f506, &(0x7f0000000100)) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES32=r9, @ANYRES64=r0, @ANYRESHEX=0x0, @ANYRESOCT=r10, @ANYRES32=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x48, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff59) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x18) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000380)={0x8, 0x0, [{0x1000, 0x0, 0x8}, {0x2, 0x0, 0x2}, {0x4, 0x0, 0x4}, {0x2000000, 0x0, 0xf9e}, {0x2, 0x0, 0x7}, {0x2, 0x0, 0x80000000}, {0x2, 0x0, 0x6}, {0x7, 0x0, 0x6}]}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x2) 24.729242072s ago: executing program 5 (id=2572): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000003380), 0x2, 0x0) writev(r0, &(0x7f00000036c0)=[{&(0x7f00000033c0)="159a43", 0x3}, {&(0x7f0000003400)="0700ca3ee63d11ef6b5c56b63ddef61f09e85a3cb0ed65af80", 0x19}, {&(0x7f0000003440)="e4de4b37f8b6450fb0f1fa37dab8101789bc542ad5d1d4c5dc25030f6faa229bd24203b09947250fdbafe7ffee6db54d2cf7f3f3c8eeb094f5d7bc04eab4474af7364d6f9111908620f93b4a6e40cc77763b0a9687120ef190ebb7c8b98746f42a93552032f32d5d11ef2b930ad7ef3218c1b2c3f1f4dc3553176c55073addb687ddfcdead63689df721367d77055a8fa69d1ec52b78e3b2dab9248aa9ee3c377dca0b8662047eaaaf29afbb7ff024aa67580e905dac08b34f34f7767ad582e946c042cf17ca4399339f99a1ec59", 0xce}, {&(0x7f0000003540)="780610d88af438400de355691306fb5b6d21e44f584663e491595eede8a4165dd4aed7480b5e277d66ebf79f1a034e331ece0ed1076f03a42836f4b758c588e405465f7c9c75a638226f2ba51773c6e1cadb2a752fb52866842c", 0x5a}, {&(0x7f00000035c0)="40ae92cdd5ae2f4e7d5202d38e33f1035fc99c2732768d013bc5ab60b9374e99caa9019e636c87941011f5977f43d08acbf72f52882b615f8de0a5c7d3f2db220b3125ddda8969262cc5d9def05679017f005a978b6e2ff4eb2df4b24b78eda9420bced59234789d25879c7b7a5868c14c922a0c5278eed74e49d4a44a4375", 0x7f}, {&(0x7f0000003640)}], 0x6) 24.729059711s ago: executing program 45 (id=2572): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000003380), 0x2, 0x0) writev(r0, &(0x7f00000036c0)=[{&(0x7f00000033c0)="159a43", 0x3}, {&(0x7f0000003400)="0700ca3ee63d11ef6b5c56b63ddef61f09e85a3cb0ed65af80", 0x19}, {&(0x7f0000003440)="e4de4b37f8b6450fb0f1fa37dab8101789bc542ad5d1d4c5dc25030f6faa229bd24203b09947250fdbafe7ffee6db54d2cf7f3f3c8eeb094f5d7bc04eab4474af7364d6f9111908620f93b4a6e40cc77763b0a9687120ef190ebb7c8b98746f42a93552032f32d5d11ef2b930ad7ef3218c1b2c3f1f4dc3553176c55073addb687ddfcdead63689df721367d77055a8fa69d1ec52b78e3b2dab9248aa9ee3c377dca0b8662047eaaaf29afbb7ff024aa67580e905dac08b34f34f7767ad582e946c042cf17ca4399339f99a1ec59", 0xce}, {&(0x7f0000003540)="780610d88af438400de355691306fb5b6d21e44f584663e491595eede8a4165dd4aed7480b5e277d66ebf79f1a034e331ece0ed1076f03a42836f4b758c588e405465f7c9c75a638226f2ba51773c6e1cadb2a752fb52866842c", 0x5a}, {&(0x7f00000035c0)="40ae92cdd5ae2f4e7d5202d38e33f1035fc99c2732768d013bc5ab60b9374e99caa9019e636c87941011f5977f43d08acbf72f52882b615f8de0a5c7d3f2db220b3125ddda8969262cc5d9def05679017f005a978b6e2ff4eb2df4b24b78eda9420bced59234789d25879c7b7a5868c14c922a0c5278eed74e49d4a44a4375", 0x7f}, {&(0x7f0000003640)}], 0x6) 24.653104013s ago: executing program 2 (id=2575): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f0000006700), 0x9, 0x61d, &(0x7f0000000700)="$eJzs3c9rXEUcAPDv2/xO1KRB1HrQgGgL2qRJWyki2CJ4KqX+OAheXJu01G5/0EQ0tdIU6kUQLx4ETx6sB/8HLQie/Ac8ePEklSLSi1J05W3erttkX7JJs7tt9vOBdWfevOzMM/l2Zmdn3gbQtSbS/xQidkbE+SRivK6sN7LCieXzbv156Xj6SKJcfv2PJC5dTpbqXyvJnkciIi34ZzSSHyNivGd1vfOLF08XS6W5C1l+auHM+an5xYt7Tp0pnpw7OXd25vmZgwf2Hzg4vbfup068stHr21GXPnL13fdHPzn61tdf3k6mv/nlaBKHao1Or2ujr72eiZiIcqb+ePr/9eBWV9YhPbW/k/8lKw+s9HILG8SGVH9/fRHxaIxGT91vczQ+frWjjQNaqpxErY8Cuk0i/qFLVccB1ff2zb0P7m/xqARoh5uHI56pxX9fRFTjv3d5bjAGK3MDw7eSO+Z5kojYuwX1p3X89MPRq+kjWjQPBzS2dGUgmwJf2f8nldgci8FKbvhW4Y74L2TTuGPZ/OFra1czmlcwsSKf1T+w2esBmrd0JSIeazT+Xz/+386e0+PvbLL+nPgHAAAAAAAANuH64Yh4rtHnf4Xa+p/+But/RiLi0BbUv/7nf4UbW1AN0MDNwxEvNlz/W6ieMtaT5R6srAfoS06cKs3tjYiHImJ39A2k+en6F/227qcjYs+n41/k1V+//i99pPVX1wJm7bjRu2I10GxxobgFlw5d7+aViMd789f/pP1/0qD/T+P7fJN1jD997Vhe2frxD7RK+auIXQ37/6R2TrL2/TmmKuOBqeqoYLUnPvzsu7z6xT90Ttr/D68d/wNJ/f165jf2+v0RsW+xt5xXvtnxf3/yRk/U7UT8oLiwcGE6oj85svr4zMbaDPeTweZP/SgiKvFQjZc0/nc/tfb8X238XxeHQ9k9vprxyL8jv+aV6f+hc9L4n127/x+7s//feGLm2tj3efUfa6r/31/p03dnR8z/wdqaDdBOtxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7keFiHggksJkLV0oTE5GjETEwzFcKJ2bX3j2xLn3zs6mZZXv/y9Uv+l3dDmfVL//f6wuP7Mivy8idkTE5z1Dlfzk8XOl2U5fPAAAAAAAAAAAAAAAAAAAANwjRpafVu3/T/3W09GmAe3Qmz2Ld+g+vZ1uANAx4h+6l/iH7pUf/3/dLle0tTlAGzXb/5cvt7ghQNttcvzv4wLYBrz/h27V19xpg61uBwAAAAAAAHCXdjx5/eckIpZeGKo8Uv1ZWe2DwaFOtQ5opUJewUB72wG0nzW80L0s/YXu1eTiX2AbS2qpvxtu9s9f/Z+0pkEAAAAAAAAAAAAAwCq7djax/x/YlnL3/wPb3hr7/xtt7HG7ANhG7P+H7uU2X0B1sJ/3Tf/2/wMAAAAAAAAAAADAPWDw4uliqTR3YX6x6cTljZx894nfI6/opXY2Y6sSS8V7ohn3Q6IvIlYUlUeX/2xPF0tvRnvbU42YdtTV38a6chId+vcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY5b8AAAD//xRbKCk=") 24.503482845s ago: executing program 2 (id=2578): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000001f0000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 24.456949756s ago: executing program 2 (id=2579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 24.119548291s ago: executing program 2 (id=2580): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@sb={'sb', 0x3d, 0xffffffffffffff81}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x1000483, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="fce26604b0dbc341b9b984b4c766b8721916dc499601a59218d18d3d8abf788fd03eb82a2453d4e8c7e96442bbcd86b78d175813c077af9d927a3f8ebe0df5017560b92eb0f03d7c3809b4f6466af1135672edcf0613f16dec62de5ad4774f7171127f911484f121a2895ab7982e6e15d51c9c0db5f79e139bb2369cac0fc85356ca15decbea3f51e0ea450b35efde8645e32e19343f27f23e32ae4b1de6f70b5f971086da61d00b73", @ANYRESHEX], 0x21, 0x314, &(0x7f0000000780)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000104010400000000000000000500000508000440000022dd08000540000000040500010002"], 0x40}, 0x1, 0x0, 0x0, 0x20008018}, 0x240000c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) getdents(r4, &(0x7f0000001080)=""/4090, 0xffa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002940)={'ip6tnl0\x00', 0x0}) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 23.53020653s ago: executing program 2 (id=2583): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018e57dfbee0005c1ef15fd95f7d357a88b2129a68ce3000000000000018000faff00cd243c9034d42e27a34bffbdb338000007000000002e6100"], 0x0, 0x20, 0x0, 0x0, 0x10000, 0x0, @void, @value}, 0x28) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x244000, 0x0, 0x1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket(0x15, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='sys_enter\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x81000) renameat2(r8, 0x0, r8, &(0x7f0000000980)='./file0\x00', 0x0) ppoll(&(0x7f00000003c0)=[{r5, 0x4000}], 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) ioctl$KDSIGACCEPT(r2, 0x5607, 0x3) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0203ff030c00000000000000fddbdf25010009000000000003000600000000000200000000000000000000000000010002000100000000000000050b00000000030005004000000002000000ac141daa00000000000000000100140006"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 23.281143034s ago: executing program 2 (id=2584): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x18) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) 23.215989615s ago: executing program 46 (id=2584): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x18) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) 20.597160826s ago: executing program 7 (id=2591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) fcntl$setpipe(r4, 0x407, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") truncate(&(0x7f0000000140)='./file1\x00', 0x80a) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x100007c8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x78) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000850000000e00000085000000500000009500"/33], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x9) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000140)=0xa0, 0x4) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x10000, {0xa, 0x0, 0x0, 0x0, 0x8, 0x66, 0xa}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c014}, 0x4044004) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) 19.70847085s ago: executing program 7 (id=2597): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ptrace$getregset(0x4204, r0, 0x6, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pread64(0xffffffffffffffff, &(0x7f00000014c0)=""/248, 0xf8, 0x7fffffffffffffff) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 16.316378193s ago: executing program 7 (id=2618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') unshare(0x62040600) epoll_create1(0x0) r1 = socket$inet6(0x10, 0x3, 0x0) unshare(0x4000080) r2 = socket(0x11, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x3ff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114000000320600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) timerfd_create(0x3, 0x80000) 14.303619025s ago: executing program 3 (id=2622): getgid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 13.31295522s ago: executing program 3 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000200000000000000034de807200", @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002a80)=ANY=[@ANYRESDEC=r1, @ANYRES64, @ANYBLOB="3330ed3f3708388ace18eeef79911925f27867027c2e7ee7180794bfdbb540968d7e3b19e5917280af39db7f40f7dc4cd5392eecfdb2971e9d87dbfbcfa6eb779b0be1e346d9833c1cfab83e03f996fdc16065c3ed9551c450fddfd8896101649774ffc85db4e50af0e8a1dd7a12c75dffae64e0260c1fd77a05bc58723ac865b9afc67ab048c6dcf132a9e293f9de5345bf5df97efa4047669c46f05ab095493b82d15d2ebf65c68bde470d3bc87f10622eccde3f0fcf614e34bbf179836220229a96", @ANYRES8=r1, @ANYRES16, @ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="33ce00d06a9d51760d957d6a8d0115e5b412bce29c550649abea569f786ae8cd8dfd98797d7d828ab3411a61fea34c73f62189980824a8e61f103d354bd04b9447057d15341262ddf09d53b575f19bcde6a46c1976ff84598520751f0047ab118562a5b83598c8c4909eeb86811fec0a7425923d54f97724bef8065bda1af9e44fde76b847b4c2798ac433d7ad41b828e7a731213545386489a71305ee5bc373f18a72c72e816729a293b09a6655331215fd7b6b4b1f8541dee9e6aacbaee7880ef22a289dab530e6934baec73eeed7529ab1e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x44) 13.312604231s ago: executing program 3 (id=2627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs289vFFUcAPDvzLZF+dWK+ANErRJj44+WFlQOXjSaeMBoogc81m0hhIUaWhMhRKoxeDExJHo2Hk38C7x5MerJxKveDQlRLqCnmpmdgd1lt1C73UX280mmfW/n7b733Tdv58283QAG1nj2J4nYGhG/RcRoPdtcYLz+7+rls9W/L5+tJrGy8tafSV7uyuWz1bJo+bwtRWYijUg/SYpKmi2ePnN8tlabP1Xkp5ZOvDe1ePrMs8dOzB6dPzp/cubgwQP7p194fua5rsSZxXVl94cLe3a99s6F16uHL7z707dZe7cW+xvj6JbxLPC/VnKt+57odmV9tq0hnQz1sSGsSSUisu4azsf/aFTieueNxqsf97VxwIbKzk2bOu9eXgHuYEn0uwVAf5Qn+uz6t9x6NPW4LVx6qX4BlMV9tdjqe4YiLcoMt1zfdtN4RBxe/uerbIsNug8BANDos+qXh+KZdvO/NO5vKLe9WEMZi4h7ImJHRNwbETsj4r6IvOwDEfHgOttz4/wnvbjOl1xVNv97sVjbap7/lbO/GKsUuW15/MPJkWO1+X3FezIRw5uy/PQqdXz/yq+fd9rXOP/Ltqz+ci5YtOPiUMsNurnZpdl8UtoFlz6K2D3ULv7k2kpAEhG7ImL32l56e5k49tQ3ezoVunn8q+jCOtPK1xFP1vt/OVriLyWrr09O3RW1+X1T5VFxo59/Of9mp/rXFX8XZP2/ufn4by0yljSu1y6uvY7zv3/a8Zrmvx7/I8nbeb+MFI99MLu0dGo6YiQ5lOebHp+5/twyX5bP4p/Y23787yiek9XzUERkB/HDEfFIRDxatP2xiHg8IvauEv+PL3fedzv0/1zbz79rx39L/689UTn+w3ed6r+1/j+QpyaKR/LPv5u41Qau570DAACA/4s0/w58kk5eS6fp5GT9O/w7Y3NaW1hcevrIwvsn5+rflR+L4bS80zXacD90OlkuXrGenynuFZf79xf3jb+o3J3nJ6sLtbk+xw6DbkuH8Z/5o9Lv1gEbrt062sxIHxoC9Fzr+E+bs+fe6GVjgJ7ye20YXDcZ/2mv2gH0nvM/DK524/9cS95aANyZnP9hcBn/MLiMfxhcxj8MpPX8rl9ikBOR3hbNkNigRL8/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrj3wAAAP//dszurg==") 13.166075383s ago: executing program 7 (id=2628): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@sb={'sb', 0x3d, 0xffffffffffffff81}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x1000483, &(0x7f0000000480)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5", @ANYRESOCT=0x0, @ANYBLOB="fce26604b0dbc341b9b984b4c766b8721916dc499601a59218d18d3d8abf788fd03eb82a2453d4e8c7e96442bbcd86b78d175813c077af9d927a3f8ebe0df5017560b92eb0f03d7c3809b4f6466af1135672edcf0613f16dec62de5ad4774f7171127f911484f121a2895ab7982e6e15d51c9c0db5f79e139bb2369cac0fc85356ca15decbea3f51e0ea450b35efde8645e32e19343f27f23e32ae4b1de6f70b5f971086da61d00b73", @ANYRESHEX], 0x21, 0x314, &(0x7f0000000780)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000104010400000000000000000500000508000440000022dd08000540000000040500010002"], 0x40}, 0x1, 0x0, 0x0, 0x20008018}, 0x240000c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001080)=""/4090, 0xffa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002940)={'ip6tnl0\x00', 0x0}) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 12.392957455s ago: executing program 3 (id=2630): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@sb={'sb', 0x3d, 0xffffffffffffff81}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x1000483, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="fce26604b0dbc341b9b984b4c766b8721916dc499601a59218d18d3d8abf788fd03eb82a2453d4e8c7e96442bbcd86b78d175813c077af9d927a3f8ebe0df5017560b92eb0f03d7c3809b4f6466af1135672edcf0613f16dec62de5ad4774f7171127f911484f121a2895ab7982e6e15d51c9c0db5f79e139bb2369cac0fc85356ca15decbea3f51e0ea450b35efde8645e32e19343f27f23e32ae4b1de6f70b5f971086da61d00b73", @ANYRESHEX], 0x21, 0x314, &(0x7f0000000780)="$eJzs3U1rE1sYwPFn0ry2tzddXC6Xi8KhgijSoQm4c2ERC0JBaRtBBSG1UwyZJiUTChGxWQhuXbvooksRRHDnRsRtN34C33bddGfB4sjkJNN0MqZprfbF/2/RnJ55njPnzJlppqd0snbh8XxxzjG/ulFpiImIqy3pGqnL2bfLH05OvflLf6/U+Nh0JqtURERu3X82/Lo6cP3l368Ssjp0e209+3n1xLTIt+m7ElEFR5W8ttRMuVw1vOTZglM0lbpmW3nHUoWSY1WqKt/Ynp+xLTVnlxcWaipfmh3sX6hYjqPypZoqWjVVLatqpRYXkUJJmaapBvsFIjLklyId24xuibmnG64r694EJeretIdE11uFWPM18XOdxWESmP+usR0nR9+v7Bl+hw036s9/fIf5x/Gjr/+PT3q5/nH8TLXe1ZVKisw/Wswt5vSrrn4/IAWxxZLlyXM3N/1bQ+9UMbyv41cmLo+qhiE5Pb/UzF9azOk3h7G5Zn5G0t59Slu+tPIzOl9tz49Jf3t+VtLyz0poflbpAYhE2vLjcuZUW74paXl3R8pGXWYbt7hb+Q8ySl26OhHYf6oRF8RbHgAAAAAAAADgKDCVb2v93vD/1JsyzURjbd3fnvKqvTgd4K+vj0paNsPX90dD1/ej8n/0AAcOAAAAAMAfxKndK+Zt26rsviA9xPStpLrsIiYiXkHk4bDXma4N/tvscWCT10ZIVlxEOtvp66XPzULqvN7f88lmx2SvByqkcGOf2omISHuN/mcNb/D2i1ZMKuz4OJFdnQAj8ZAjb9vJ/RmFBEbxg0J7jLiuGxosyb2d2InOAfZYMDZbNf+FxrhGl3QjqmPydkzXtC7MnfZ+Mfxy6LHgzX6jkAweqJFPul27yw+NL/4SHwAAAIAjpO0XJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEB6eGZY57PZWs/t3x4szY+I73wkW/BDc3nuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD6HsAAAD//6YSrdQ=") r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000104010400000000000000000500000508000440000022dd08000540000000040500010002"], 0x40}, 0x1, 0x0, 0x0, 0x20008018}, 0x240000c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) getdents(r4, &(0x7f0000001080)=""/4090, 0xffa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002940)={'ip6tnl0\x00', 0x0}) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 10.129199421s ago: executing program 7 (id=2632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x1}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in=@loopback, 0x4e23, 0xff, 0x4e20, 0x4, 0xa, 0xcece8aaca6d64ce4, 0x20, 0x3b, 0x0, 0xee01}, {0x9, 0xfffffffffffffffd, 0x8000e4, 0x2, 0x923, 0x5, 0x1, 0xfffdffffffffffff}, {0x0, 0xc, 0x7ffffffffffffffd, 0x40}, 0x637b, 0x6e6bbf, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4d6, 0x2b}, 0x2, @in=@private=0xa010100, 0x3505, 0x4, 0x0, 0xff, 0x5, 0x9, 0xdae}}, 0xffffffffffffff70) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000000)={0x80}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 9.821069555s ago: executing program 7 (id=2634): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8ec5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00X\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.754417156s ago: executing program 47 (id=2634): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8ec5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00X\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.690434368s ago: executing program 4 (id=2636): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@init_itable}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000600)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x70bd28, 0x80000001, {{}, {}, {0x8, 0x11, 0x7ff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x4008050) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x158, 0x0, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "e128f4e35b77796226404f9167f7e9121179f774f6da90d113c00f40ad6721ecbbc4dcecb8691acb6750e76b041a83f88e5f3d734d5860a4e8a12204aaf5c346c5fe8cef3e239f05833023f3d292d4ee0885d10ffb0dd74ec27c2d210dc2cbb1f075fe6b72a8362bcc5cb1d701d8eab7462c8b70390bcfe3193a7998"}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "53115c1ec60cafb8ae5670202a61e31b0669e62276d7b6e842742fee4b05f3a7d2f04a3dfd58642ee2644b270c6ce19442dacb0a39141842d6a1a2e7fda32faa2d6f6936e487a883d0d176ab62267773c9b237d837e75f2eecfc41e43c85809824717672336915f0bf03d51950f3f84f78cdde836d82dd26a2bca7e1330a4fb17d8494dd171c685ec78bd2629344f9ff4d36417576e7800bfb2b1b4060a4694549ea78583b2582"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2a99}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}]}]}, 0x158}}, 0x0) 9.161087936s ago: executing program 4 (id=2638): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e0000a0200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff0100000000"], 0xec}}, 0x0) 9.091650657s ago: executing program 6 (id=2639): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3e) sendfile(r0, r0, &(0x7f0000000040)=0x5, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="62b7f5ff2665650f01c3660f3806d3b803008ed80f20550f050f01c864f20f1c81a636f08080ed00a86466660fd7d6", 0x2f}], 0x1, 0x44, &(0x7f0000000280)=[@vmwrite={0x8, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffff24}, @vmwrite={0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}], 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000006c0)={0x0, 0x1, 0x8, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000ac0)={0x0, 0x4, 0x0, [0x8, 0x2, 0x1, 0x8000000000000001, 0x8], [0x1f52, 0x400000000000, 0x7ff, 0x3, 0x80000001, 0xfffffffffffff524, 0xa0, 0x200, 0x7, 0xe, 0x6, 0xeb, 0xffffffff, 0x4, 0x94, 0x2, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0x6, 0x1, 0x80000000, 0x2, 0x1, 0x800, 0xfffffffffffffff7, 0x2, 0x2, 0x2, 0x0, 0xe3, 0x8, 0x10000, 0x8000, 0x4, 0xfffffffffffffffe, 0x9, 0x0, 0x3, 0x1, 0x5, 0x0, 0x4, 0x28b0, 0x40, 0x100000000, 0x5, 0x37c3, 0x1ff, 0x9e12, 0x3, 0x4, 0x4, 0x7, 0x200, 0x500000000000000, 0x10, 0x7, 0x7, 0x8, 0x0, 0xec, 0x2, 0x9b76, 0x8000, 0x7fffffffffffffff, 0xff, 0x4, 0x2, 0x6, 0xc31, 0x4c, 0x4, 0x8, 0x5, 0x8, 0x1, 0x3, 0x6659, 0x3, 0x8, 0x7f, 0x1, 0xfffffffffffffffa, 0xeb, 0xffffffffffffffff, 0x3, 0x1000, 0xc3af, 0x9, 0x4, 0x2, 0x8, 0x4, 0x8, 0x5, 0x5, 0x8000000000000000, 0x2, 0x1, 0x101, 0x80000000, 0xb648, 0xc, 0x0, 0x5, 0x401, 0x2, 0x1, 0x9, 0x3, 0xd88, 0x6, 0x8000000, 0x3, 0x9, 0x1000, 0xffff, 0x7fff]}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000f00)={0x1, 0x0, {0x60e, @struct={0xfffffff8, 0x73}, r5, 0x6, 0x9, 0x8, 0x3, 0x9, 0x0, @struct={0x9, 0x1}, 0x43c, 0x2, [0x2b, 0xfffffffffffffffb, 0x100, 0xe095, 0x0, 0x429]}, {0x5, @usage=0x7fffffffffffffff, r6, 0x8000000000000000, 0x7f, 0x9, 0x7ff, 0x1ff, 0x47c, @usage, 0x9, 0x1, [0x100000000, 0x5, 0xfffffffffffffff8, 0x1, 0x7, 0x6]}, {0xfffffffffffffffc, @struct={0x8001, 0x9}, r7, 0x3, 0x7c1, 0x1e45, 0x7b2, 0x7, 0x21, @usage=0x80, 0xff, 0xfff, [0x4, 0x6, 0xb3, 0x8, 0x0, 0xb]}, {0x1, 0x6, 0x1}}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000001300), &(0x7f0000001340)=0x4) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000001380)={0x10001}) r8 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001440)=0x14) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x6c, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x40044) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000001580)=0x7, 0x4) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000015c0), &(0x7f0000001600)=0x4) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001680), 0x20001, 0x0) accept$unix(r10, &(0x7f00000016c0)=@abs, &(0x7f0000001740)=0x6e) openat(r10, &(0x7f0000001780)='./file0\x00', 0x200000, 0x52) ioctl$BTRFS_IOC_QUOTA_RESCAN(r10, 0x4040942c, &(0x7f00000017c0)={0x0, 0xf, [0x7, 0x8000, 0x8, 0x1, 0x9, 0x8000]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001800)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)=@ipv6_delroute={0x34, 0x19, 0x700, 0x70bd2c, 0x25dfdbfd, {0xa, 0x10, 0x20, 0x1, 0x0, 0x0, 0xfd, 0x4}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0xe, 0x0, 0x1}]}}, @RTA_MULTIPATH={0xc, 0x9, {0x3f, 0x2, 0x77, r9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44000) openat$fuse(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000001980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000001a80)=""/179, 0xb3}, {&(0x7f0000001b40)=""/58, 0x3a}], 0x3, &(0x7f0000001bc0)=""/249, 0xf9}, 0xc7}, {{&(0x7f0000001cc0)=@alg, 0x80, &(0x7f0000002080)=[{&(0x7f0000001d40)=""/165, 0xa5}, {&(0x7f0000001e00)=""/211, 0xd3}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002000)=""/116, 0x74}], 0x4, &(0x7f00000020c0)=""/152, 0x98}, 0x2}, {{&(0x7f0000002180)=@qipcrtr, 0x80, &(0x7f0000002740)=[{&(0x7f0000002200)=""/71, 0x47}, {&(0x7f0000002280)=""/243, 0xf3}, {&(0x7f0000002380)=""/239, 0xef}, {&(0x7f0000002480)=""/144, 0x90}, {&(0x7f0000002540)=""/252, 0xfc}, {&(0x7f0000002640)=""/21, 0x15}, {&(0x7f0000002680)=""/153, 0x99}], 0x7, &(0x7f00000027c0)=""/16, 0x10}, 0x3}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000002880)=""/170, 0xaa}, {&(0x7f0000002940)=""/175, 0xaf}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/20, 0x14}], 0x4}, 0xe25a}, {{&(0x7f0000003a80)=@caif=@dbg, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003b00)=""/101, 0x65}, {&(0x7f0000003b80)=""/134, 0x86}, {&(0x7f0000003c40)=""/106, 0x6a}, {&(0x7f0000003cc0)=""/202, 0xca}, {&(0x7f0000003dc0)=""/181, 0xb5}], 0x5, &(0x7f0000003f00)=""/81, 0x51}, 0x77e}, {{&(0x7f0000003f80)=@phonet, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/68, 0x44}, {&(0x7f0000004080)=""/43, 0x2b}, {&(0x7f00000040c0)=""/109, 0x6d}], 0x3, &(0x7f0000004180)=""/189, 0xbd}, 0x10001}, {{&(0x7f0000004240)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004480)=[{&(0x7f00000042c0)=""/237, 0xed}, {&(0x7f00000043c0)=""/168, 0xa8}], 0x2}, 0x7}], 0x7, 0x0, 0x0) 9.068399237s ago: executing program 0 (id=2640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="71684b6ffe5c5873697ab4ce795137", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3) 9.012843518s ago: executing program 6 (id=2641): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) mkdir(0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8fe00000000bfa200000000000007020000f8ff5479264eb9620b8d1cffc8bc4a83a713706b51cf339b0cffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='task\x00') 9.010515448s ago: executing program 4 (id=2642): r0 = syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="696f636861727365743d6d616363656e746575726f2c73686f72746e616d653d77696e6e742c726f6469722c757466383d302c73686f72746e086d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d332c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c696f636861727365743d63703835302c757466383d312c757466383d312c73686f72746e616d653d6d6978362c757466383d312c757466383d302c009857a56464964f08cc355e57e0c6ac7f47cbe19c33045ace27ee750292854bc6b3a946fc7cab3d582761aa4439fa290abf991d332064d041e335fc517fbaa7144846aac0aa304ce75b16db24a93b3e4003726db6ac39743f4713"], 0xfd, 0x2ad, &(0x7f0000000900)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') fchdir(r1) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet(0x2, 0x200000003, 0x1) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000280)="077ccd7f6cb4f6ba", 0x8}], 0x1) mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x45) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x0, 0x188, 0x1}, 0x18) write$selinux_context(r6, &(0x7f00000000c0)='system_u:object_r:nvram_device_t:s0\x00', 0x24) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) 8.977142788s ago: executing program 3 (id=2643): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x3, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000010100000e22"], 0x0) 8.609081014s ago: executing program 0 (id=2644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x1}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in=@loopback, 0x4e23, 0xff, 0x4e20, 0x4, 0xa, 0xcece8aaca6d64ce4, 0x20, 0x3b, 0x0, 0xee01}, {0x9, 0xfffffffffffffffd, 0x8000e4, 0x2, 0x923, 0x5, 0x1, 0xfffdffffffffffff}, {0x0, 0xc, 0x7ffffffffffffffd, 0x40}, 0x637b, 0x6e6bbf, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4d6, 0x2b}, 0x2, @in=@private=0xa010100, 0x3505, 0x4, 0x0, 0xff, 0x5, 0x9, 0xdae}}, 0xffffffffffffff70) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000000)={0x80}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 8.554624235s ago: executing program 3 (id=2645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r7, r7, 0x0) setuid(r7) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x200}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x5, 0x4e22, 0x1, 0x2, 0x80, 0xa0, 0x33, 0x0, r7}, {0x3, 0x2f3b1ff9, 0x200, 0x100000001, 0x81, 0x4, 0x1, 0xffffffffffffffff}, {0x6, 0xffff, 0xf87, 0x3}, 0x50b, 0x6e6bc0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d5, 0xff}, 0x2, @in6=@mcast1, 0x3500, 0x3, 0x3, 0x1, 0x1000, 0x85, 0x1}}, 0xe8) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) r8 = accept4$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80400) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f00000002c0)=0xffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000004500)=ANY=[@ANYRESOCT=r5], &(0x7f0000004580)=""/218, 0x2a, 0xda, 0x1, 0x0, 0x0, @void, @value}, 0x28) 8.488363876s ago: executing program 48 (id=2645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r7, r7, 0x0) setuid(r7) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x200}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x5, 0x4e22, 0x1, 0x2, 0x80, 0xa0, 0x33, 0x0, r7}, {0x3, 0x2f3b1ff9, 0x200, 0x100000001, 0x81, 0x4, 0x1, 0xffffffffffffffff}, {0x6, 0xffff, 0xf87, 0x3}, 0x50b, 0x6e6bc0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d5, 0xff}, 0x2, @in6=@mcast1, 0x3500, 0x3, 0x3, 0x1, 0x1000, 0x85, 0x1}}, 0xe8) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) r8 = accept4$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80400) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f00000002c0)=0xffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000004500)=ANY=[@ANYRESOCT=r5], &(0x7f0000004580)=""/218, 0x2a, 0xda, 0x1, 0x0, 0x0, @void, @value}, 0x28) 8.092915723s ago: executing program 6 (id=2647): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00'], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x17c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa530}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3926eac8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_PUBL={0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48445) splice(r0, 0x0, r2, 0x0, 0x400000, 0x100000000000000) 7.983845464s ago: executing program 4 (id=2648): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[], 0x1, 0x1ff, &(0x7f0000000a80)="$eJzs3MtqU1scBvB12p5ecuhldEAnLnSik02tTxCkBTGg1EbUgbBLUw2JSckOmoiDjh35HMWhM0F8gb6FsyJIRx0ZaZNerTqxjZLfD8L6wkdgLULCfweytx68eVZZzZLVtBmGxmMYCmE97IQws5t6/umtQ3t5NBy1Hq7NPt9+fe/ho9v5QmF+McaF/NKNuRjj1KUPL169vfyx+d/9d1Pvx8LmzOOtL3OfNv/fvLD1delpOYvlLNbqzZjG5Xq9mS5XS3GlnFWSGO9WS2lWiuVaVmoc61er9bW1dkxrK5O5tUYpy2Jaa8dKqR2b9dhstGP6JC3XYpIkcTIX+JXixuJimu/3LjhbjUY+HQ4hTHzXFDf6siEAoK/M/4PM/D8Iduf/XO/ze5z5HwAAAAAAAAAAAAAA/gY7nc50p9OZ3l/3H2MhhPEQwv7zfu+Ts+H9H2xH/rg3HsLn9VaxVeyu3X7hVmF+Nu6ZOXzVdqtVHD7or3f7eLz/N+R6/dyp/Wi4eqXb73Y37xRO9BNh5eyPDwAAAAMhiQdOvb5Pkh/13XTk94ET1+8j4eLIuR0DAAAA+Ims/bKSVqulhiAIwkHo9zcTAADwux0O/f3eCQAAAAAAAAAAAAAAAAAAAAyu87idWL/PCAAAAAAAAAAAAAAAAAAAAAAAAH+KbwEAAP//VuHQrA==") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b000008051d0bdd9883f110caa81c462385f600000002000000040000000500000050fe2e56128ba598c177e099c49a27d0d12f17f49a56a79da33b2d09acc4c6e1f5d728892d9b8c1c7acff57f0aa3d8586131aeb21e79b721bd666fe66e75ec953244e77177bf4e06e37db2ee7df013e6ee77cfce43590730cded90204a59d6655257f34b2098a65bc60afd4b2078982735077a5801afd924cc0d48", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYRESHEX=r4, @ANYBLOB="25347a81e6013cf2b690f0cfb3ac7894cd28bd8822a04d6e878965f3760e42003f350af1cac5d1149159f51473519a27a9e238e325eb4d100452e7c906557f099cf1d97d76416b0bc9b6718df3cf12b711e69d4b4f646111dae0af1f861df0cba655f76a289ef1a5d7dbf41ed7d6ef97a56a8b90ef92971db80ab3e8101b9fcab3386170cfbcc2e825f951c0fd72120497e71e7630cd08abe39f438f879d4d89c213bda07dee8d1e7516fd3e339079", @ANYRES32=r1, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x50) r6 = userfaultfd(0x1) r7 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0x4}) epoll_pwait2(r7, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) prctl$PR_GET_SECUREBITS(0x1b) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e23, 0x100000, @mcast2, 0x1003}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x52, &(0x7f0000000980)}}], 0x1, 0x40805) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x10) syz_usb_connect(0x0, 0x4f, &(0x7f0000001e00)=ANY=[@ANYBLOB="120151027ae2e940d1250145b61d0102030109023d000264fe483609043b0401bc6941fc09050e0020000ef9ab080bc1d697777cf30904c53f01bc505b0009050d03200008ad0608020017486198dc"], &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) 7.289428125s ago: executing program 1 (id=2646): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ptrace$getregset(0x4204, r0, 0x6, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000094c0), 0x800, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000009500)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000014c0)=""/248, 0xf8, 0x7fffffffffffffff) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 5.965912216s ago: executing program 0 (id=2651): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x6, 0x5, {{0x11, 0x4, 0x0, 0x5, 0x44, 0x65, 0x0, 0xd, 0x29, 0x0, @private=0xa010100, @private=0xa010102, {[@end, @noop, @rr={0x7, 0x13, 0xc6, [@broadcast, @broadcast, @private=0xa010101, @empty]}, @rr={0x7, 0x13, 0xe3, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2]}, @timestamp={0x44, 0x8, 0xa5, 0x0, 0x3, [0x39]}]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") r6 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x48) fallocate(r6, 0x8, 0x40000, 0x10000) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX]) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x80000000) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltfilter={0x3c, 0x2d, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd, 0xfff1}, {0xd}, {0xb, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_emit_ethernet(0x46, &(0x7f0000002040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x3c}], {0x0, 0x0, 0x8}}}}}}, 0x0) 5.780920329s ago: executing program 9 (id=2653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x200000000000000}, 0x8000) 1.604570784s ago: executing program 6 (id=2654): timerfd_create(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000d6f000/0x2000)=nil, 0x2000, 0x12) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000480)) r3 = syz_clone(0x21100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x3, 0xf000, 0x0, 0xffffffffffffffff, 0x8}) sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x77, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 1.602732034s ago: executing program 4 (id=2655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@nombcache}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@data_journal}, {@nombcache}]}, 0x8, 0x5fa, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.601919714s ago: executing program 9 (id=2656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@nombcache}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@data_journal}, {@nombcache}]}, 0x8, 0x5fa, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.484977236s ago: executing program 6 (id=2657): r0 = syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xfd, 0x2ad, &(0x7f0000000900)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') fchdir(r1) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet(0x2, 0x200000003, 0x1) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000280)="077ccd7f6cb4f6ba", 0x8}], 0x1) mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x45) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat2(r0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x0, 0x188, 0x1}, 0x18) write$selinux_context(r6, &(0x7f00000000c0)='system_u:object_r:nvram_device_t:s0\x00', 0x24) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) 1.443838217s ago: executing program 1 (id=2658): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@norecovery}, {@sb={'sb', 0x3d, 0xffffffffffffff81}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x1000483, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="fce26604b0dbc341b9b984b4c766b8721916dc499601a59218d18d3d8abf788fd03eb82a2453d4e8c7e96442bbcd86b78d175813c077af9d927a3f8ebe0df5017560b92eb0f03d7c3809b4f6466af1135672edcf0613f16dec62de5ad4774f7171127f911484f121a2895ab7982e6e15d51c9c0db5f79e139bb2369cac0fc85356ca15decbea3f51e0ea450b35efde8645e32e19343f27f23e32ae4b1de6f70b5f971086da61d00b73", @ANYRESHEX], 0x21, 0x314, &(0x7f0000000780)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000000104010400000000000000000500000508000440000022dd08000540000000040500010002"], 0x40}, 0x1, 0x0, 0x0, 0x20008018}, 0x240000c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001080)=""/4090, 0xffa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002940)={'ip6tnl0\x00', 0x0}) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.336944929s ago: executing program 0 (id=2659): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x7ff, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(r0, 0x0, 0x0, 0x8685, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x0, @private=0xa010101}}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000f59ffc)=0x20024, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sysinfo(0x0) 952.395385ms ago: executing program 0 (id=2660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@nombcache}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@data_journal}, {@nombcache}]}, 0x8, 0x5fa, &(0x7f00000004c0)="$eJzs3c1vVFUbAPDn3k4/aN/XFmJUXEgTYyBRWlrAEGMi7AnBj52rSgtBCiW0RosklgQ3JsaNCxNXLsT/QkncunDrwo0rQ0KMYSGGyJg7vVOn05nSTjsfzPx+yaXn3Mvc89zC03Pn9Jw7AfSs8eyPNGJ/RFxNIkYrjhUiPzi++vfu/3njXLYlUSy+/UcSNz5JVirPleRfR/IX/zMayc9pxL6+je0uLl+/NDM/P3ctr08uXb46ubh8/fDFyzMX5i7MXZl+dfrE8WPHT0wd2dH1FSrKp2+9/+HoZ2fe/fbrh8nUd7+eSeJkPMpjy66r+rWDO2o5+56NR3HVg+qYTuzw3J3ir9H13+NMUr2DjnU+///YHxHPxmj0Vfxrjsanb7Y1OKCpikmU+yig5yQN5f/Q7gcCtFj5PqD83r7W++CN0ibflQCtcO/U6gDAau73R0Q5/wurY4MxVBobGL6frBvnSSJiZyNzq7I2fvrxzK1sizrjcEBzrNwsj3JX9/9JKTfHYqhUG76frsv/tGLL9r/VYPvjVXX5D62zcjMinsv7/4HYVv6PV+T/ew22L/8BAAAAAABg99w5FRGv1Jr/l67N/xmoMf9nJCJO7kL7j//9X3o3LyS70BxQ4d6piNdrzv9dm+M71pfX/l+aD9CfnL84P3ckIp6KiEPRP5jVp6rOWzlD+PDn+76q137l/L9sy9ovzwXMz3S3ULUQd3ZmaWan1w1E3LsZ8Xxp/u+BfM/6+T9Z/5/U6P+z/L66xTb2vXT7bL1jj89/oFmK30QcrNn//3e7nWz+fI7J0v3AZPmuYKMXPv7i+3rty39on6z/H948/weTyuf1LG7v/AMRcXS5UKx3vNH7/4Hknb7y+TMfzSwtXZuKGEhOb9w/vb2YoVuV86GcL1n+H3px8/G/tfv/ijzcExErW2zzmUcjv9U7pv+H9snyf3bz/n9sff+//cL07bEf6rV/dkv9/7FSn34o32P8DyptfB7HVhO0LeECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBMujYj/RZJOrJXTdGIiYiQino7hdH5hcenl8wsfXJnNjpU+/z8tf9Lv6Go9KX/+/1hFfbqqfjQi9kbEl317SvWJcwvzs+2+eAAAAAAAAAAAAAAAAAAAAOgQI6U1/8XB6vX/md/72h0d0HSF/Kt8h95TaPiVxcFdDQRoucbzH3jSbT3/+5saB9B69fP/wcNiSUvDAVrI/T/0rgbz368LoAvo/6FXbXFMb6jZcQDtoP8HAAAAAICusvfAnV+SiFh5bU9pywzkx0z2h+6WtjsAoG3M4YXeVVhodwRAu3iPDyRrpb9rLvavP/s/aU5AAAAAAAAAAAAAAMAGB/db/w+9avP1/+b2QzfbZP1/reT3uADoIvU/+kPfD93Oe3zgcb299f8AAAAAAAAAAAAA0AGGrl+amZ+fu7a4/OQV3uiMMLZXWJnpiDB2tfCoOWfuj4jOuMBWF8qP4GhjGG3+uQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKz5NwAA//+Ysid/") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 878.663266ms ago: executing program 4 (id=2661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x1}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in=@loopback, 0x4e23, 0xff, 0x4e20, 0x4, 0xa, 0xcece8aaca6d64ce4, 0x20, 0x3b, 0x0, 0xee01}, {0x9, 0xfffffffffffffffd, 0x8000e4, 0x2, 0x923, 0x5, 0x1, 0xfffdffffffffffff}, {0x0, 0xc, 0x7ffffffffffffffd, 0x40}, 0x637b, 0x6e6bbf, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4d6, 0x2b}, 0x2, @in=@private=0xa010100, 0x3505, 0x4, 0x0, 0xff, 0x5, 0x9, 0xdae}}, 0xffffffffffffff70) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000000)={0x80}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 877.924696ms ago: executing program 9 (id=2662): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f0000006700), 0x9, 0x61d, &(0x7f0000000700)="$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") 679.496859ms ago: executing program 1 (id=2663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e0000a0200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff0100000000"], 0xec}}, 0x0) 556.462421ms ago: executing program 6 (id=2664): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x17c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa530}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3926eac8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_PUBL={0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48445) splice(r0, 0x0, r2, 0x0, 0x400000, 0x100000000000000) 455.005152ms ago: executing program 1 (id=2665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000002800000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1, 0x0, 0x0, @void, @value}, 0x20) 452.032503ms ago: executing program 9 (id=2666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 399.583963ms ago: executing program 49 (id=2665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000002800000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1, 0x0, 0x0, @void, @value}, 0x20) 332.982504ms ago: executing program 9 (id=2668): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000980)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@mblk_io_submit}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x15) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10) listen(r2, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) r4 = dup(r1) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r3]) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0xfe, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYRES32=r5], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000980)='./file2\x00', 0x41, &(0x7f0000000a00), 0x64, 0x50b, &(0x7f0000000200)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) chown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 183.700096ms ago: executing program 0 (id=2669): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@init_itable}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000600)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x70bd28, 0x80000001, {{}, {}, {0x8, 0x11, 0x7ff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x4008050) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x158, 0x0, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "e128f4e35b77796226404f9167f7e9121179f774f6da90d113c00f40ad6721ecbbc4dcecb8691acb6750e76b041a83f88e5f3d734d5860a4e8a12204aaf5c346c5fe8cef3e239f05833023f3d292d4ee0885d10ffb0dd74ec27c2d210dc2cbb1f075fe6b72a8362bcc5cb1d701d8eab7462c8b70390bcfe3193a7998"}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "53115c1ec60cafb8ae5670202a61e31b0669e62276d7b6e842742fee4b05f3a7d2f04a3dfd58642ee2644b270c6ce19442dacb0a39141842d6a1a2e7fda32faa2d6f6936e487a883d0d176ab62267773c9b237d837e75f2eecfc41e43c85809824717672336915f0bf03d51950f3f84f78cdde836d82dd26a2bca7e1330a4fb17d8494dd171c685ec78bd2629344f9ff4d36417576e7800bfb2b1b4060a4694549ea78583b2582"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2a99}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}]}]}, 0x158}}, 0x0) 0s ago: executing program 9 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800090008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): ng a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.338222][ T8766] syz.1.2454[8766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.407804][ T8768] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2452'. [ 417.551323][ T8772] FAULT_INJECTION: forcing a failure. [ 417.551323][ T8772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.564402][ T8772] CPU: 0 PID: 8772 Comm: syz.1.2456 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 417.574374][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.584270][ T8772] Call Trace: [ 417.587426][ T8772] [ 417.590172][ T8772] dump_stack_lvl+0x151/0x1c0 [ 417.594686][ T8772] ? io_uring_drop_tctx_refs+0x190/0x190 [ 417.600160][ T8772] dump_stack+0x15/0x20 [ 417.604144][ T8772] should_fail+0x3c6/0x510 [ 417.608396][ T8772] should_fail_usercopy+0x1a/0x20 [ 417.613260][ T8772] _copy_to_user+0x20/0x90 [ 417.617513][ T8772] simple_read_from_buffer+0xc7/0x150 [ 417.622756][ T8772] proc_fail_nth_read+0x1a3/0x210 [ 417.627578][ T8772] ? proc_fault_inject_write+0x390/0x390 [ 417.633044][ T8772] ? fsnotify_perm+0x269/0x5b0 [ 417.637676][ T8772] ? security_file_permission+0x86/0xb0 [ 417.643025][ T8772] ? proc_fault_inject_write+0x390/0x390 [ 417.648495][ T8772] vfs_read+0x27d/0xd40 [ 417.652490][ T8772] ? kernel_read+0x1f0/0x1f0 [ 417.656915][ T8772] ? __kasan_check_write+0x14/0x20 [ 417.661859][ T8772] ? mutex_lock+0xb6/0x1e0 [ 417.666115][ T8772] ? wait_for_completion_killable_timeout+0x10/0x10 [ 417.672543][ T8772] ? __fdget_pos+0x2e7/0x3a0 [ 417.676969][ T8772] ? ksys_read+0x77/0x2c0 [ 417.681131][ T8772] ksys_read+0x199/0x2c0 [ 417.685211][ T8772] ? __ia32_sys_recv+0xb0/0xb0 [ 417.689809][ T8772] ? vfs_write+0x1110/0x1110 [ 417.694247][ T8772] ? debug_smp_processor_id+0x17/0x20 [ 417.699457][ T8772] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 417.701674][ T8776] loop0: detected capacity change from 0 to 512 [ 417.705345][ T8772] __x64_sys_read+0x7b/0x90 [ 417.705373][ T8772] x64_sys_call+0x28/0x9a0 [ 417.720013][ T8772] do_syscall_64+0x3b/0x80 [ 417.724265][ T8772] ? clear_bhb_loop+0x35/0x90 [ 417.728780][ T8772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 417.734503][ T8772] RIP: 0033:0x7f6fb30beb7c [ 417.738761][ T8772] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 417.758201][ T8772] RSP: 002b:00007f6fb1729030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.766444][ T8772] RAX: ffffffffffffffda RBX: 00007f6fb32e7fa0 RCX: 00007f6fb30beb7c [ 417.774255][ T8772] RDX: 000000000000000f RSI: 00007f6fb17290a0 RDI: 0000000000000004 [ 417.782066][ T8772] RBP: 00007f6fb1729090 R08: 0000000000000000 R09: 0000000000000000 [ 417.789884][ T8772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.797691][ T8772] R13: 0000000000000000 R14: 00007f6fb32e7fa0 R15: 00007fff418517d8 [ 417.805510][ T8772] [ 417.864919][ T8776] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 417.878587][ T8776] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.918480][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 417.936934][ T8793] loop0: detected capacity change from 0 to 1024 [ 418.140205][ T8793] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 418.182472][ T8793] EXT4-fs (loop0): barriers disabled [ 418.211289][ T8793] JBD2: no valid journal superblock found [ 418.222596][ T8793] EXT4-fs (loop0): error loading journal [ 418.261545][ T8798] syz.9.2465[8798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.261601][ T8798] syz.9.2465[8798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.300741][ T8793] loop0: detected capacity change from 0 to 2048 [ 418.358356][ T8793] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 418.437519][ T8793] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2462: bg 0: block 234: padding at end of block bitmap is not set [ 418.452018][ T8793] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 418.464497][ T8805] loop9: detected capacity change from 0 to 512 [ 418.465945][ T8793] EXT4-fs (loop0): This should not happen!! Data will be lost [ 418.465945][ T8793] [ 418.475590][ T8806] loop2: detected capacity change from 0 to 1024 [ 418.495408][ T8807] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1024 with error 28 [ 418.508339][ T8807] EXT4-fs (loop0): This should not happen!! Data will be lost [ 418.508339][ T8807] [ 418.518017][ T8807] EXT4-fs (loop0): Total free blocks count 0 [ 418.523847][ T8807] EXT4-fs (loop0): Free/Dirty block details [ 418.528064][ T8805] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 418.529838][ T8807] EXT4-fs (loop0): free_blocks=0 [ 418.536142][ T8805] EXT4-fs (loop9): mount failed [ 418.540810][ T8807] EXT4-fs (loop0): dirty_blocks=1360 [ 418.550574][ T8807] EXT4-fs (loop0): Block reservation details [ 418.551852][ T8806] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 418.556410][ T8807] EXT4-fs (loop0): i_reserved_data_blocks=85 [ 418.574319][ T8806] overlayfs: missing 'workdir' [ 418.789996][ T8821] loop1: detected capacity change from 0 to 512 [ 418.861361][ T8824] FAULT_INJECTION: forcing a failure. [ 418.861361][ T8824] name failslab, interval 1, probability 0, space 0, times 0 [ 418.873992][ T8824] CPU: 1 PID: 8824 Comm: syz.0.2468 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 418.883902][ T8824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.893800][ T8824] Call Trace: [ 418.896924][ T8824] [ 418.899699][ T8824] dump_stack_lvl+0x151/0x1c0 [ 418.904218][ T8824] ? io_uring_drop_tctx_refs+0x190/0x190 [ 418.909680][ T8824] ? __kasan_check_read+0x11/0x20 [ 418.914543][ T8824] dump_stack+0x15/0x20 [ 418.918533][ T8824] should_fail+0x3c6/0x510 [ 418.922788][ T8824] __should_failslab+0xa4/0xe0 [ 418.927385][ T8824] ? xfrm_state_alloc+0x26/0x2d0 [ 418.932157][ T8824] should_failslab+0x9/0x20 [ 418.936503][ T8824] slab_pre_alloc_hook+0x37/0xd0 [ 418.941271][ T8824] ? xfrm_state_alloc+0x26/0x2d0 [ 418.946150][ T8824] kmem_cache_alloc+0x44/0x250 [ 418.950732][ T8824] xfrm_state_alloc+0x26/0x2d0 [ 418.955334][ T8824] ipcomp6_init_state+0x26c/0x780 [ 418.960199][ T8824] __xfrm_init_state+0x8a6/0xbd0 [ 418.964982][ T8824] xfrm_add_sa+0x23d0/0x34e0 [ 418.969399][ T8824] ? __nla_validate+0x50/0x50 [ 418.973913][ T8824] ? xfrm_user_rcv_msg+0x7d0/0x7d0 [ 418.978862][ T8824] xfrm_user_rcv_msg+0x4f3/0x7d0 [ 418.983632][ T8824] ? __kasan_check_write+0x14/0x20 [ 418.988588][ T8824] ? xfrm_netlink_rcv+0x90/0x90 [ 418.993360][ T8824] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 418.998990][ T8824] ? rcu_preempt_deferred_qs_irqrestore+0x709/0x9f0 [ 419.005413][ T8824] netlink_rcv_skb+0x1cf/0x410 [ 419.010011][ T8824] ? xfrm_netlink_rcv+0x90/0x90 [ 419.014696][ T8824] ? netlink_ack+0xb10/0xb10 [ 419.019122][ T8824] ? mutex_lock+0xb6/0x1e0 [ 419.023380][ T8824] ? wait_for_completion_killable_timeout+0x10/0x10 [ 419.029798][ T8824] xfrm_netlink_rcv+0x72/0x90 [ 419.034310][ T8824] netlink_unicast+0x8df/0xac0 [ 419.038920][ T8824] ? netlink_detachskb+0x90/0x90 [ 419.043688][ T8824] ? security_netlink_send+0x7b/0xa0 [ 419.048804][ T8824] netlink_sendmsg+0xa0a/0xd20 [ 419.053407][ T8824] ? netlink_getsockopt+0x560/0x560 [ 419.058439][ T8824] ? check_stack_object+0x114/0x130 [ 419.063475][ T8824] ? security_socket_sendmsg+0x82/0xb0 [ 419.068772][ T8824] ? netlink_getsockopt+0x560/0x560 [ 419.073802][ T8824] ____sys_sendmsg+0x59e/0x8f0 [ 419.078402][ T8824] ? iovec_from_user+0x2d9/0x330 [ 419.083176][ T8824] ? __import_iovec+0x25e/0x420 [ 419.087877][ T8824] ? __sys_sendmsg_sock+0x40/0x40 [ 419.092735][ T8824] ___sys_sendmsg+0x252/0x2e0 [ 419.097241][ T8824] ? __sys_sendmsg+0x260/0x260 [ 419.101839][ T8824] ? __kasan_check_write+0x14/0x20 [ 419.106795][ T8824] ? __fdget+0x1bc/0x240 [ 419.110862][ T8824] __se_sys_sendmsg+0x19a/0x260 [ 419.115550][ T8824] ? __x64_sys_sendmsg+0x90/0x90 [ 419.120328][ T8824] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 419.125796][ T8824] ? trie_lookup_elem+0x6a/0x2b0 [ 419.130565][ T8824] __x64_sys_sendmsg+0x7b/0x90 [ 419.135166][ T8824] x64_sys_call+0x16a/0x9a0 [ 419.139507][ T8824] do_syscall_64+0x3b/0x80 [ 419.143760][ T8824] ? clear_bhb_loop+0x35/0x90 [ 419.148272][ T8824] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 419.154010][ T8824] RIP: 0033:0x7ff4cf014169 [ 419.158255][ T8824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.177697][ T8824] RSP: 002b:00007ff4cd63b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.185940][ T8824] RAX: ffffffffffffffda RBX: 00007ff4cf23c160 RCX: 00007ff4cf014169 [ 419.193750][ T8824] RDX: 0000000000008000 RSI: 00002000000035c0 RDI: 0000000000000007 [ 419.201560][ T8824] RBP: 00007ff4cd63b090 R08: 0000000000000000 R09: 0000000000000000 [ 419.209371][ T8824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.217186][ T8824] R13: 0000000000000000 R14: 00007ff4cf23c160 R15: 00007ffd6f3669c8 [ 419.224999][ T8824] [ 419.229183][ T303] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 419.258721][ T8821] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 419.272117][ T8821] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.284759][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 419.284774][ T30] audit: type=1326 audit(1745094127.208:9870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb30c0169 code=0x7ffc0000 [ 419.316977][ T30] audit: type=1326 audit(1745094127.208:9871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6fb30be9d7 code=0x7ffc0000 [ 419.447617][ T30] audit: type=1326 audit(1745094127.208:9872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb30c0169 code=0x7ffc0000 [ 419.472588][ T30] audit: type=1326 audit(1745094127.208:9873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6fb30c0169 code=0x7ffc0000 [ 419.599146][ T30] audit: type=1326 audit(1745094127.208:9874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb30c0169 code=0x7ffc0000 [ 419.636738][ T30] audit: type=1326 audit(1745094127.208:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fb30c0169 code=0x7ffc0000 [ 419.662499][ T8831] loop0: detected capacity change from 0 to 512 [ 419.668722][ T30] audit: type=1326 audit(1745094127.208:9876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb30c0169 code=0x7ffc0000 [ 419.675153][ T8833] loop9: detected capacity change from 0 to 512 [ 419.698336][ T30] audit: type=1326 audit(1745094127.208:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fb30c0169 code=0x7ffc0000 [ 419.723198][ T30] audit: type=1326 audit(1745094127.248:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb30c0169 code=0x7ffc0000 [ 419.747092][ T30] audit: type=1326 audit(1745094127.248:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fb30c0169 code=0x7ffc0000 [ 419.749856][ T8833] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 419.773710][ T8831] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 419.780864][ T8833] EXT4-fs (loop9): invalid journal inode [ 419.797680][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2476'. [ 419.798879][ T8831] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.816753][ T8833] EXT4-fs (loop9): can't get journal size [ 419.834998][ T8833] EXT4-fs (loop9): 1 truncate cleaned up [ 419.840553][ T8833] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 419.842483][ T8839] loop1: detected capacity change from 0 to 8192 [ 419.890945][ T8833] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2474'. [ 419.900735][ T8833] overlayfs: './file2' not a directory [ 419.937248][ T8833] EXT4-fs error (device loop9): __ext4_get_inode_loc:4351: comm syz.9.2474: Invalid inode table block 3034507813 in block_group 0 [ 419.950857][ T303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 419.951139][ T8833] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 419.967896][ T8833] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #18: comm syz.9.2474: mark_inode_dirty error [ 419.981055][ T8833] EXT4-fs error (device loop9): __ext4_get_inode_loc:4351: comm syz.9.2474: Invalid inode table block 3034507813 in block_group 0 [ 419.994956][ T8833] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 420.004484][ T8833] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #18: comm syz.9.2474: mark_inode_dirty error [ 420.017567][ T8833] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #18: comm syz.9.2474: attempt to clear invalid blocks 36 len 12 [ 420.030595][ T303] usb 3-1: not running at top speed; connect to a high speed hub [ 420.030835][ T8833] EXT4-fs error (device loop9): __ext4_get_inode_loc:4351: comm syz.9.2474: Invalid inode table block 3034507813 in block_group 0 [ 420.066985][ T8833] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 420.077488][ T8833] EXT4-fs error (device loop9): ext4_punch_hole:4143: inode #18: comm syz.9.2474: mark_inode_dirty error [ 420.248320][ T7997] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 421.171264][ T303] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 421.180128][ T303] usb 3-1: config 0 has no interface number 0 [ 421.187445][ T303] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 421.211629][ T303] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 421.221498][ T303] usb 3-1: config 0 interface 88 has no altsetting 0 [ 421.333186][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.340258][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.350931][ T8864] device bridge_slave_0 entered promiscuous mode [ 421.387217][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.440613][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.465763][ T8864] device bridge_slave_1 entered promiscuous mode [ 421.626765][ T303] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 421.639295][ T303] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 421.657057][ T303] usb 3-1: Product: syz [ 421.664089][ T303] usb 3-1: Manufacturer: syz [ 421.677084][ T8873] loop6: detected capacity change from 0 to 128 [ 421.684195][ T303] usb 3-1: config 0 descriptor?? [ 421.704719][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.711590][ T8864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.718724][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.725558][ T8864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.732856][ T303] usb 3-1: can't set config #0, error -71 [ 421.738550][ T339] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 421.755572][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.763321][ T303] usb 3-1: USB disconnect, device number 5 [ 421.769518][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.778313][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.798234][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.806741][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.813581][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.821024][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.829608][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.836458][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.848498][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.857820][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.877529][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.898563][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.908435][ T8864] device veth0_vlan entered promiscuous mode [ 421.914639][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.922386][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.939313][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.949000][ T8864] device veth1_macvtap entered promiscuous mode [ 421.960626][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.970897][ T4878] device bridge_slave_1 left promiscuous mode [ 421.976849][ T339] usb 1-1: Using ep0 maxpacket: 32 [ 421.986315][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.994516][ T4878] device bridge_slave_0 left promiscuous mode [ 422.000613][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.008731][ T4878] device veth1_macvtap left promiscuous mode [ 422.099427][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2490'. [ 422.109968][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 422.126818][ T339] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 422.134962][ T339] usb 1-1: config 0 has no interface number 0 [ 422.141354][ T339] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 422.153371][ T339] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 422.166781][ T8886] loop8: detected capacity change from 0 to 512 [ 422.207781][ T8886] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 422.219709][ T8886] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.2485: inode #1: comm syz.8.2485: iget: illegal inode # [ 422.233566][ T8886] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.2485: error while reading EA inode 1 err=-117 [ 422.250411][ T8886] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.2485: inode #1: comm syz.8.2485: iget: illegal inode # [ 422.263698][ T8886] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.2485: error while reading EA inode 1 err=-117 [ 422.276404][ T8886] EXT4-fs (loop8): 1 orphan inode deleted [ 422.281988][ T8886] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000002,bsdgroups,mblk_io_submit,,errors=continue. Quota mode: none. [ 422.326843][ T339] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 422.335860][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.344117][ T339] usb 1-1: Product: syz [ 422.348444][ T339] usb 1-1: Manufacturer: syz [ 422.352997][ T339] usb 1-1: SerialNumber: syz [ 422.359828][ T339] usb 1-1: config 0 descriptor?? [ 422.367509][ T8891] tipc: Started in network mode [ 422.372237][ T8891] tipc: Node identity ac14140f, cluster identity 4711 [ 422.376807][ T8858] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 422.379118][ T8891] tipc: New replicast peer: 10.1.1.2 [ 422.385869][ T8858] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 422.391002][ T8891] tipc: Enabled bearer , priority 10 [ 422.420534][ T339] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 36:66:25:0e:e1:85 [ 422.688980][ T8897] UDC core: couldn't find an available UDC or it's busy: -16 [ 422.725511][ T8897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 422.840302][ T339] usb 1-1: USB disconnect, device number 26 [ 422.846605][ T339] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 423.070199][ T8911] xt_CT: No such helper "syz0" [ 423.286736][ T26] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 423.298240][ T8914] FAULT_INJECTION: forcing a failure. [ 423.298240][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.311404][ T8914] CPU: 0 PID: 8914 Comm: syz.8.2500 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 423.321403][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.331299][ T8914] Call Trace: [ 423.334421][ T8914] [ 423.337198][ T8914] dump_stack_lvl+0x151/0x1c0 [ 423.341711][ T8914] ? io_uring_drop_tctx_refs+0x190/0x190 [ 423.347182][ T8914] dump_stack+0x15/0x20 [ 423.351172][ T8914] should_fail+0x3c6/0x510 [ 423.355424][ T8914] should_fail_usercopy+0x1a/0x20 [ 423.360287][ T8914] _copy_from_iter+0x22f/0xdc0 [ 423.364889][ T8914] ? copy_mc_pipe_to_iter+0x760/0x760 [ 423.370180][ T8914] ? __kasan_kmalloc+0x9/0x10 [ 423.374691][ T8914] ? __kmalloc_track_caller+0x13e/0x2c0 [ 423.380073][ T8914] ? __check_object_size+0x2ec/0x3d0 [ 423.385197][ T8914] netlink_sendmsg+0x8b9/0xd20 [ 423.389798][ T8914] ? netlink_getsockopt+0x560/0x560 [ 423.394827][ T8914] ? kmem_cache_free+0x115/0x330 [ 423.399602][ T8914] ? check_stack_object+0x114/0x130 [ 423.404635][ T8914] ? security_socket_sendmsg+0x82/0xb0 [ 423.409932][ T8914] ? netlink_getsockopt+0x560/0x560 [ 423.414960][ T8914] ____sys_sendmsg+0x59e/0x8f0 [ 423.419559][ T8914] ? iovec_from_user+0x2d9/0x330 [ 423.424334][ T8914] ? __import_iovec+0x25e/0x420 [ 423.429042][ T8914] ? __sys_sendmsg_sock+0x40/0x40 [ 423.433884][ T8914] ___sys_sendmsg+0x252/0x2e0 [ 423.438482][ T8914] ? __sys_sendmsg+0x260/0x260 [ 423.443172][ T8914] ? putname+0xfa/0x150 [ 423.447164][ T8914] ? __fdget+0x1bc/0x240 [ 423.451240][ T8914] __se_sys_sendmsg+0x19a/0x260 [ 423.455927][ T8914] ? __x64_sys_sendmsg+0x90/0x90 [ 423.460699][ T8914] ? ksys_write+0x260/0x2c0 [ 423.465049][ T8914] ? debug_smp_processor_id+0x17/0x20 [ 423.470251][ T8914] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 423.473239][ T8916] loop0: detected capacity change from 0 to 256 [ 423.476155][ T8914] __x64_sys_sendmsg+0x7b/0x90 [ 423.486918][ T8914] x64_sys_call+0x16a/0x9a0 [ 423.491250][ T8914] do_syscall_64+0x3b/0x80 [ 423.495502][ T8914] ? clear_bhb_loop+0x35/0x90 [ 423.500017][ T8914] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 423.505922][ T8914] RIP: 0033:0x7fd8cbf6f169 [ 423.506702][ T385] tipc: Node number set to 2886997007 [ 423.510259][ T8914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.534910][ T8914] RSP: 002b:00007fd8ca5d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.543151][ T8914] RAX: ffffffffffffffda RBX: 00007fd8cc196fa0 RCX: 00007fd8cbf6f169 [ 423.550967][ T8914] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 423.558777][ T8914] RBP: 00007fd8ca5d8090 R08: 0000000000000000 R09: 0000000000000000 [ 423.566587][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.574400][ T8914] R13: 0000000000000000 R14: 00007fd8cc196fa0 R15: 00007ffe386e17a8 [ 423.582213][ T8914] [ 423.697506][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 423.710227][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 423.721538][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 423.799282][ T8927] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2503'. [ 423.808486][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2505'. [ 423.946775][ T26] usb 2-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 423.955790][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.963825][ T26] usb 2-1: Product: syz [ 423.968036][ T26] usb 2-1: Manufacturer: syz [ 423.972538][ T26] usb 2-1: SerialNumber: syz [ 423.977901][ T26] usb 2-1: config 0 descriptor?? [ 424.006666][ T525] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 424.257355][ T525] usb 1-1: Using ep0 maxpacket: 16 [ 424.339047][ T8935] loop6: detected capacity change from 0 to 512 [ 424.383934][ T385] usb 2-1: USB disconnect, device number 14 [ 424.393712][ T8937] loop1: detected capacity change from 0 to 256 [ 424.402232][ T8935] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 424.415869][ T8935] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.426469][ T525] usb 1-1: unable to get BOS descriptor or descriptor too short [ 424.435090][ T8937] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 424.485428][ T8942] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2508'. [ 424.506792][ T525] usb 1-1: config 7 has an invalid interface number: 48 but max is 0 [ 424.523894][ T525] usb 1-1: config 7 has no interface number 0 [ 424.534010][ T525] usb 1-1: config 7 interface 48 has no altsetting 0 [ 424.553694][ T8947] loop8: detected capacity change from 0 to 512 [ 424.588580][ T8947] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 424.616934][ T8947] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.696774][ T525] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 424.705657][ T525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.728907][ T525] usb 1-1: Product: syz [ 424.736873][ T525] usb 1-1: Manufacturer: syz [ 424.751130][ T8957] loop2: detected capacity change from 0 to 2048 [ 424.764186][ T525] usb 1-1: SerialNumber: syz [ 424.842436][ T8957] loop2: p2 p3 p7 [ 425.708371][ T8925] UDC core: couldn't find an available UDC or it's busy: -16 [ 425.715774][ T8925] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 425.842197][ T525] rndis_host 1-1:7.48: More than one union descriptor, skipping ... [ 425.861262][ T525] usb 1-1: bad CDC descriptors [ 425.872607][ T525] cdc_acm 1-1:7.48: More than one union descriptor, skipping ... [ 425.881362][ T525] usb 1-1: USB disconnect, device number 27 [ 425.887940][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 425.887956][ T30] audit: type=1326 audit(1745094133.798:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbf6f169 code=0x7ffc0000 [ 425.928565][ T30] audit: type=1326 audit(1745094133.798:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd8cbf6f169 code=0x7ffc0000 [ 425.953207][ T30] audit: type=1326 audit(1745094133.798:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbf6f169 code=0x7ffc0000 [ 425.977541][ T30] audit: type=1326 audit(1745094133.798:9926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fd8cbf6f169 code=0x7ffc0000 [ 426.001395][ T30] audit: type=1326 audit(1745094133.798:9927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbf6f169 code=0x7ffc0000 [ 426.026932][ T30] audit: type=1326 audit(1745094133.798:9928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd8cbf6f169 code=0x7ffc0000 [ 426.042574][ T8967] loop6: detected capacity change from 0 to 512 [ 426.050650][ T30] audit: type=1326 audit(1745094133.798:9929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cbf6f169 code=0x7ffc0000 [ 426.079370][ T30] audit: type=1326 audit(1745094133.798:9930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8cbf6dad0 code=0x7ffc0000 [ 426.103050][ T30] audit: type=1326 audit(1745094133.798:9931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8cbf6ed6b code=0x7ffc0000 [ 426.126433][ T30] audit: type=1326 audit(1745094133.798:9932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8962 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8cbf6ed6b code=0x7ffc0000 [ 426.139988][ T8969] loop1: detected capacity change from 0 to 512 [ 426.150592][ T8967] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 426.164603][ T8967] EXT4-fs (loop6): invalid journal inode [ 426.170146][ T8967] EXT4-fs (loop6): can't get journal size [ 426.177529][ T8969] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 426.186075][ T8967] EXT4-fs (loop6): 1 truncate cleaned up [ 426.186152][ T8969] EXT4-fs (loop1): invalid journal inode [ 426.192327][ T8967] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 426.197593][ T8969] EXT4-fs (loop1): can't get journal size [ 426.216696][ T303] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 426.224207][ T8969] EXT4-fs (loop1): 1 truncate cleaned up [ 426.229786][ T8969] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 426.231066][ T8967] overlayfs: './file2' not a directory [ 426.273514][ T8973] loop0: detected capacity change from 0 to 512 [ 426.278622][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2514'. [ 426.289637][ T8969] overlayfs: './file2' not a directory [ 426.311686][ T8973] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 426.322021][ T8969] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz.1.2514: Invalid inode table block 3034507813 in block_group 0 [ 426.325879][ T8973] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.347528][ T8969] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 426.358925][ T8969] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #18: comm syz.1.2514: mark_inode_dirty error [ 426.371396][ T8969] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz.1.2514: Invalid inode table block 3034507813 in block_group 0 [ 426.387318][ T8969] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 426.396931][ T8969] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #18: comm syz.1.2514: mark_inode_dirty error [ 426.410274][ T8969] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #18: comm syz.1.2514: attempt to clear invalid blocks 36 len 12 [ 426.423317][ T8969] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz.1.2514: Invalid inode table block 3034507813 in block_group 0 [ 426.437080][ T8969] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 426.448669][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2521'. [ 426.457798][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2521'. [ 426.466808][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2521'. [ 426.475675][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2521'. [ 426.484639][ T8969] EXT4-fs error (device loop1): ext4_punch_hole:4143: inode #18: comm syz.1.2514: mark_inode_dirty error [ 426.504148][ T8402] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 426.512879][ T8990] loop0: detected capacity change from 0 to 512 [ 426.529990][ T8990] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 426.541840][ T8990] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2524: bg 0: block 384: padding at end of block bitmap is not set [ 426.560256][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.566599][ T8990] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 426.575889][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.582881][ T8990] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.2524: attempt to clear invalid blocks 983260 len 1 [ 426.596403][ T303] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 426.604781][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.611561][ T303] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.621979][ T8990] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm syz.0.2524: Invalid inode table block 0 in block_group 0 [ 426.634990][ T303] usb 9-1: config 0 has no interface number 0 [ 426.635078][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.652075][ T8990] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 426.661845][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.668499][ T8990] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 426.677036][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.683402][ T8990] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm syz.0.2524: Invalid inode table block 0 in block_group 0 [ 426.713257][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.728977][ T8990] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 426.794768][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.801521][ T8990] EXT4-fs error (device loop0): ext4_truncate:4303: inode #11: comm syz.0.2524: mark_inode_dirty error [ 426.813391][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.820458][ T8990] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 426.844935][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.885022][ T8990] EXT4-fs (loop0): 1 truncate cleaned up [ 426.914639][ T8990] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 426.941557][ T8990] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.2524: Invalid block bitmap block 0 in block_group 0 [ 426.955232][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.962565][ T8990] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm syz.0.2524: Invalid inode table block 0 in block_group 0 [ 426.975513][ T8990] EXT4-fs (loop0): Remounting filesystem read-only [ 426.987592][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 426.997347][ T303] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 427.006311][ T303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.016116][ T303] usb 9-1: Product: syz [ 427.017010][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=8990 comm=syz.0.2524 [ 427.021907][ T303] usb 9-1: Manufacturer: syz [ 427.039453][ T303] usb 9-1: SerialNumber: syz [ 427.044515][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.044542][ T303] usb 9-1: config 0 descriptor?? [ 427.051782][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.063770][ T8999] device bridge_slave_0 entered promiscuous mode [ 427.070470][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2524'. [ 427.083362][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.090424][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.097938][ T8999] device bridge_slave_1 entered promiscuous mode [ 427.171635][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.178503][ T8999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.185701][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.190263][ T9008] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2530'. [ 427.192496][ T8999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.219779][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.229505][ T3344] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.240870][ T3344] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.258254][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.264728][ T9008] SELinux: failed to load policy [ 427.266613][ T3344] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.277731][ T3344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.285837][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.294885][ T3344] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.301773][ T3344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.314117][ T8963] loop8: detected capacity change from 0 to 512 [ 427.319730][ T9010] loop0: detected capacity change from 0 to 512 [ 427.326891][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.334738][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.349776][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.361948][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.370197][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.378849][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.387876][ T8999] device veth0_vlan entered promiscuous mode [ 427.402060][ T8999] device veth1_macvtap entered promiscuous mode [ 427.421826][ T3392] device bridge_slave_1 left promiscuous mode [ 427.427987][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.435926][ T3392] device bridge_slave_0 left promiscuous mode [ 427.438151][ T8963] EXT4-fs (loop8): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 427.442852][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.462292][ T9010] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 427.480359][ T9010] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.483812][ T9015] sit: Src spoofed 0.0.224.0/2002:0:e0::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 427.491045][ T8963] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.501637][ T3392] device veth1_macvtap left promiscuous mode [ 427.525976][ T3392] device veth0_vlan left promiscuous mode [ 427.534015][ T8963] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 427.549972][ T8963] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 427.562434][ T8963] EXT4-fs (loop8): This should not happen!! Data will be lost [ 427.562434][ T8963] [ 427.572339][ T8963] EXT4-fs (loop8): Total free blocks count 0 [ 427.578362][ T8963] EXT4-fs (loop8): Free/Dirty block details [ 427.584475][ T8963] EXT4-fs (loop8): free_blocks=39626 [ 427.590600][ T9019] UDC core: couldn't find an available UDC or it's busy: -16 [ 427.597951][ T8963] EXT4-fs (loop8): dirty_blocks=1 [ 427.602844][ T9019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 427.610491][ T8963] EXT4-fs (loop8): Block reservation details [ 427.616378][ T8963] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 427.619121][ T9020] loop2: detected capacity change from 0 to 512 [ 427.658746][ T9020] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 427.667284][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 427.669212][ T9020] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2533: inode #1: comm syz.2.2533: iget: illegal inode # [ 427.675906][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 427.688756][ T9020] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2533: error while reading EA inode 1 err=-117 [ 427.697271][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.708605][ T9020] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2533: inode #1: comm syz.2.2533: iget: illegal inode # [ 427.729327][ T9020] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2533: error while reading EA inode 1 err=-117 [ 427.743310][ T9020] EXT4-fs (loop2): 1 orphan inode deleted [ 427.749911][ T303] usb 9-1: Found UVC 0.00 device syz (046d:0823) [ 427.756578][ T303] usb 9-1: No valid video chain found. [ 427.757775][ T9020] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000002,bsdgroups,mblk_io_submit,,errors=continue. Quota mode: none. [ 427.766103][ T303] usb 9-1: USB disconnect, device number 6 [ 427.800043][ T9023] loop5: detected capacity change from 0 to 512 [ 427.817816][ T9023] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 427.826812][ T9023] EXT4-fs (loop5): invalid journal inode [ 427.838813][ T9023] EXT4-fs (loop5): can't get journal size [ 427.852450][ T9023] EXT4-fs (loop5): 1 truncate cleaned up [ 427.858314][ T9023] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 427.878457][ T9023] overlayfs: './file2' not a directory [ 427.935997][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2535'. [ 428.068541][ T9033] loop0: detected capacity change from 0 to 2048 [ 428.121686][ T9033] loop0: p2 p3 p7 [ 429.717247][ T9057] loop6: detected capacity change from 0 to 512 [ 430.138466][ T9062] loop8: detected capacity change from 0 to 512 [ 430.217685][ T9057] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 430.231143][ T9057] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.247357][ T9062] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 430.266901][ T9062] EXT4-fs (loop8): invalid journal inode [ 430.272427][ T9062] EXT4-fs (loop8): can't get journal size [ 430.282113][ T9062] EXT4-fs (loop8): 1 truncate cleaned up [ 430.288061][ T9062] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 430.313922][ T9072] FAULT_INJECTION: forcing a failure. [ 430.313922][ T9072] name failslab, interval 1, probability 0, space 0, times 0 [ 430.332913][ T9072] CPU: 1 PID: 9072 Comm: syz.6.2547 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 430.343152][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.353042][ T9072] Call Trace: [ 430.356165][ T9072] [ 430.358943][ T9072] dump_stack_lvl+0x151/0x1c0 [ 430.363458][ T9072] ? io_uring_drop_tctx_refs+0x190/0x190 [ 430.368923][ T9072] ? __this_cpu_preempt_check+0x13/0x20 [ 430.374307][ T9072] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 430.380826][ T9072] dump_stack+0x15/0x20 [ 430.384807][ T9072] should_fail+0x3c6/0x510 [ 430.389060][ T9072] __should_failslab+0xa4/0xe0 [ 430.393665][ T9072] should_failslab+0x9/0x20 [ 430.398000][ T9072] slab_pre_alloc_hook+0x37/0xd0 [ 430.402772][ T9072] __kmalloc+0x6d/0x2c0 [ 430.406768][ T9072] ? release_firmware_map_entry+0x190/0x190 [ 430.412492][ T9072] ? bpf_test_init+0x101/0x1b0 [ 430.417181][ T9072] bpf_test_init+0x101/0x1b0 [ 430.421606][ T9072] bpf_prog_test_run_skb+0x268/0x1420 [ 430.426814][ T9072] ? native_set_ldt+0x360/0x360 [ 430.431504][ T9072] ? irqentry_exit_cond_resched+0x2a/0x30 [ 430.437065][ T9072] ? irqentry_exit+0x30/0x40 [ 430.441486][ T9072] ? sysvec_reschedule_ipi+0x8c/0x160 [ 430.446700][ T9072] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 430.452424][ T9072] ? bpf_prog_test_run+0x3a3/0x630 [ 430.457909][ T9072] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 430.463633][ T9072] bpf_prog_test_run+0x3b0/0x630 [ 430.468432][ T9072] ? bpf_prog_query+0x220/0x220 [ 430.473262][ T9072] ? __sanitizer_cov_trace_switch+0x60/0xe0 [ 430.478984][ T9072] __sys_bpf+0x525/0x760 [ 430.483066][ T9072] ? bpf_link_show_fdinfo+0x300/0x300 [ 430.488277][ T9072] __x64_sys_bpf+0x7c/0x90 [ 430.492529][ T9072] x64_sys_call+0x87f/0x9a0 [ 430.496864][ T9072] do_syscall_64+0x3b/0x80 [ 430.501116][ T9072] ? clear_bhb_loop+0x35/0x90 [ 430.505631][ T9072] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.511359][ T9072] RIP: 0033:0x7fe040600169 [ 430.515613][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.535057][ T9072] RSP: 002b:00007fe03ec69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.543297][ T9072] RAX: ffffffffffffffda RBX: 00007fe040827fa0 RCX: 00007fe040600169 [ 430.551114][ T9072] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 430.558920][ T9072] RBP: 00007fe03ec69090 R08: 0000000000000000 R09: 0000000000000000 [ 430.566737][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.574544][ T9072] R13: 0000000000000000 R14: 00007fe040827fa0 R15: 00007ffc8a2f1f28 [ 430.582359][ T9072] [ 430.587190][ T9062] overlayfs: './file2' not a directory [ 430.625303][ T9078] loop8: detected capacity change from 0 to 512 [ 430.647202][ T9078] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 430.656079][ T9078] EXT4-fs (loop8): invalid journal inode [ 430.662384][ T9078] EXT4-fs (loop8): can't get journal size [ 430.669818][ T9078] EXT4-fs (loop8): 1 truncate cleaned up [ 430.675340][ T9078] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 430.721088][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2549'. [ 430.731380][ T9078] overlayfs: './file2' not a directory [ 430.744006][ T9078] EXT4-fs error (device loop8): __ext4_get_inode_loc:4351: comm syz.8.2549: Invalid inode table block 3034507813 in block_group 0 [ 430.757771][ T9078] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 430.767210][ T9078] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #18: comm syz.8.2549: mark_inode_dirty error [ 430.778960][ T9078] EXT4-fs error (device loop8): __ext4_get_inode_loc:4351: comm syz.8.2549: Invalid inode table block 3034507813 in block_group 0 [ 430.792420][ T9078] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 430.801834][ T9078] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #18: comm syz.8.2549: mark_inode_dirty error [ 430.814306][ T9078] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #18: comm syz.8.2549: attempt to clear invalid blocks 36 len 12 [ 430.827518][ T9078] EXT4-fs error (device loop8): __ext4_get_inode_loc:4351: comm syz.8.2549: Invalid inode table block 3034507813 in block_group 0 [ 430.840951][ T9078] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 430.850515][ T9078] EXT4-fs error (device loop8): ext4_punch_hole:4143: inode #18: comm syz.8.2549: mark_inode_dirty error [ 430.868545][ T8864] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 430.947671][ T3259] tipc: Disabling bearer [ 430.952705][ T3259] tipc: Left network mode [ 431.045948][ T9097] loop2: detected capacity change from 0 to 512 [ 431.057707][ T9097] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 431.167155][ T9097] EXT4-fs (loop2): invalid journal inode [ 431.204207][ T9097] EXT4-fs (loop2): can't get journal size [ 431.319006][ T9097] EXT4-fs (loop2): 1 truncate cleaned up [ 431.335398][ T9097] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 431.359876][ T9097] overlayfs: './file2' not a directory [ 431.385147][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.392208][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.400802][ T9098] device bridge_slave_0 entered promiscuous mode [ 431.410417][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.417607][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.425053][ T9098] device bridge_slave_1 entered promiscuous mode [ 431.433475][ T9106] loop2: detected capacity change from 0 to 128 [ 431.458817][ T9106] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 431.469382][ T9106] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 431.514959][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.521859][ T9098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.529067][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.535818][ T9098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.562784][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.570302][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.577790][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.585865][ T3259] device bridge_slave_1 left promiscuous mode [ 431.591913][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.599365][ T3259] device bridge_slave_0 left promiscuous mode [ 431.605379][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.613250][ T3259] device veth1_macvtap left promiscuous mode [ 431.619392][ T3259] device veth0_vlan left promiscuous mode [ 431.684413][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.694503][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.701388][ T4878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.710576][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.718955][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.725805][ T4878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.800386][ T9098] device veth0_vlan entered promiscuous mode [ 431.813384][ T9098] device veth1_macvtap entered promiscuous mode [ 431.825310][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.834293][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.874287][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.884849][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.902972][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.917477][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.935888][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.940489][ T9126] loop5: detected capacity change from 0 to 512 [ 431.944132][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.969593][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.987077][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.025996][ T9128] loop4: detected capacity change from 0 to 1024 [ 432.033616][ T9126] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 432.051605][ T9126] EXT4-fs (loop5): invalid journal inode [ 432.067499][ T9128] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 432.068771][ T9126] EXT4-fs (loop5): can't get journal size [ 432.087399][ T9128] EXT4-fs (loop4): barriers disabled [ 432.101402][ T9128] JBD2: no valid journal superblock found [ 432.111094][ T9126] EXT4-fs (loop5): 1 truncate cleaned up [ 432.116905][ T9128] EXT4-fs (loop4): error loading journal [ 432.125004][ T9134] loop0: detected capacity change from 0 to 128 [ 432.131372][ T9126] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 432.205754][ T9126] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2566'. [ 432.218152][ T9126] overlayfs: './file2' not a directory [ 432.226488][ T9128] loop4: detected capacity change from 0 to 2048 [ 432.243412][ T9126] EXT4-fs error (device loop5): __ext4_get_inode_loc:4351: comm syz.5.2566: Invalid inode table block 3034507813 in block_group 0 [ 432.257557][ T9126] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 432.267132][ T9126] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #18: comm syz.5.2566: mark_inode_dirty error [ 432.279371][ T9126] EXT4-fs error (device loop5): __ext4_get_inode_loc:4351: comm syz.5.2566: Invalid inode table block 3034507813 in block_group 0 [ 432.300640][ T9126] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 432.313068][ T9126] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #18: comm syz.5.2566: mark_inode_dirty error [ 432.325925][ T9128] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 432.349874][ T9126] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #18: comm syz.5.2566: attempt to clear invalid blocks 36 len 12 [ 432.368719][ T9126] EXT4-fs error (device loop5): __ext4_get_inode_loc:4351: comm syz.5.2566: Invalid inode table block 3034507813 in block_group 0 [ 432.382753][ T9126] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 432.392806][ T9126] EXT4-fs error (device loop5): ext4_punch_hole:4143: inode #18: comm syz.5.2566: mark_inode_dirty error [ 432.422043][ T8999] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 432.423954][ T9128] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2558: bg 0: block 234: padding at end of block bitmap is not set [ 432.450412][ T9128] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1102 with error 117 [ 432.463317][ T9128] EXT4-fs (loop4): This should not happen!! Data will be lost [ 432.463317][ T9128] [ 432.505816][ T9139] loop0: detected capacity change from 0 to 8192 [ 432.631823][ T9146] xt_TCPMSS: Only works on TCP SYN packets [ 432.666301][ T9148] loop2: detected capacity change from 0 to 1024 [ 432.677165][ T9150] xt_bpf: check failed: parse error [ 432.728306][ T9148] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 432.736088][ T9148] EXT4-fs (loop2): write access will be enabled during recovery [ 432.743804][ T9148] EXT4-fs (loop2): barriers disabled [ 432.749323][ T9148] JBD2: no valid journal superblock found [ 432.754864][ T9148] EXT4-fs (loop2): error loading journal [ 432.777856][ T9152] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.784696][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.792088][ T9152] device bridge_slave_0 entered promiscuous mode [ 432.799059][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.805968][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.813416][ T9152] device bridge_slave_1 entered promiscuous mode [ 432.894299][ T9160] loop4: detected capacity change from 0 to 2048 [ 432.917120][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 432.917137][ T30] audit: type=1400 audit(1745094140.848:10001): avc: denied { create } for pid=9161 comm="syz.2.2579" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 432.951548][ T9160] loop4: p2 p3 p7 [ 432.952227][ T30] audit: type=1400 audit(1745094140.878:10002): avc: denied { write } for pid=9161 comm="syz.2.2579" name="file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 433.011946][ T30] audit: type=1400 audit(1745094140.878:10003): avc: denied { open } for pid=9161 comm="syz.2.2579" path="/52/file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 433.039526][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.047268][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.067196][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.075733][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.084327][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.091213][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.099514][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.108438][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.116469][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.123326][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.131043][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.139527][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.147700][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 433.155671][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.181747][ T30] audit: type=1400 audit(1745094141.108:10004): avc: denied { unlink } for pid=8097 comm="syz-executor" name="file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 433.205582][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.222354][ T9164] loop2: detected capacity change from 0 to 512 [ 433.228213][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 433.237544][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.245899][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 433.254708][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.264090][ T9152] device veth0_vlan entered promiscuous mode [ 433.273443][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.281415][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.297291][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.306501][ T9152] device veth1_macvtap entered promiscuous mode [ 433.313019][ T9164] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 433.321550][ T3259] device bridge_slave_1 left promiscuous mode [ 433.328725][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.336265][ T3259] device bridge_slave_0 left promiscuous mode [ 433.337141][ T9164] EXT4-fs (loop2): invalid journal inode [ 433.347920][ T9164] EXT4-fs (loop2): can't get journal size [ 433.353628][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.368877][ T9164] EXT4-fs (loop2): 1 truncate cleaned up [ 433.374480][ T9164] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 433.395590][ T3259] device veth1_macvtap left promiscuous mode [ 433.413004][ T3259] device veth0_vlan left promiscuous mode [ 433.453660][ T9164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2580'. [ 433.479082][ T9164] overlayfs: './file2' not a directory [ 433.493237][ T9168] loop0: detected capacity change from 0 to 1024 [ 433.537636][ T9168] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 433.538404][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.549108][ T9168] EXT4-fs (loop0): barriers disabled [ 433.565835][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.574254][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.578330][ T9168] JBD2: no valid journal superblock found [ 433.589997][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.594122][ T9168] EXT4-fs (loop0): error loading journal [ 433.606165][ T9169] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz.2.2580: Invalid inode table block 3034507813 in block_group 0 [ 433.622065][ T9169] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 433.633267][ T9169] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #18: comm syz.2.2580: mark_inode_dirty error [ 433.647250][ T9169] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz.2.2580: Invalid inode table block 3034507813 in block_group 0 [ 433.664301][ T9169] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 433.677487][ T9169] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #18: comm syz.2.2580: mark_inode_dirty error [ 433.693195][ T9169] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #18: comm syz.2.2580: attempt to clear invalid blocks 36 len 12 [ 433.718397][ T9169] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm syz.2.2580: Invalid inode table block 3034507813 in block_group 0 [ 433.734091][ T9171] loop3: detected capacity change from 0 to 512 [ 433.739664][ T9168] loop0: detected capacity change from 0 to 2048 [ 433.757455][ T9169] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 433.777864][ T9169] EXT4-fs error (device loop2): ext4_punch_hole:4143: inode #18: comm syz.2.2580: mark_inode_dirty error [ 433.797514][ T9171] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 433.818462][ T8097] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 433.825760][ T9168] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 433.888770][ T9171] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2573: inode #1: comm syz.3.2573: iget: illegal inode # [ 433.902003][ T9173] loop6: detected capacity change from 0 to 8192 [ 433.911478][ T9171] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2573: error while reading EA inode 1 err=-117 [ 433.933686][ T9171] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2573: inode #1: comm syz.3.2573: iget: illegal inode # [ 433.962370][ T9171] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2573: error while reading EA inode 1 err=-117 [ 433.987060][ T9171] EXT4-fs (loop3): 1 orphan inode deleted [ 433.992618][ T9171] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000002,bsdgroups,mblk_io_submit,,errors=continue. Quota mode: none. [ 434.022888][ T9168] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2581: bg 0: block 234: padding at end of block bitmap is not set [ 434.046975][ T9168] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1492 with error 117 [ 434.106737][ T9168] EXT4-fs (loop0): This should not happen!! Data will be lost [ 434.106737][ T9168] [ 434.646346][ T9187] loop0: detected capacity change from 0 to 512 [ 434.665895][ T339] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 434.686140][ T9187] EXT4-fs (loop0): user quota file already specified [ 434.822775][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.829804][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.837220][ T9182] device bridge_slave_0 entered promiscuous mode [ 434.844396][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.851301][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.859177][ T9182] device bridge_slave_1 entered promiscuous mode [ 434.906854][ T339] usb 4-1: Using ep0 maxpacket: 32 [ 434.964611][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.971504][ T9182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.978615][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.985357][ T9182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.017725][ T3344] device bridge_slave_1 left promiscuous mode [ 435.023791][ T3344] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.031010][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.042180][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.051919][ T339] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 435.061046][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.069801][ T339] usb 4-1: config 0 descriptor?? [ 435.075049][ T3344] device bridge_slave_0 left promiscuous mode [ 435.081570][ T3344] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.090049][ T3344] device veth1_macvtap left promiscuous mode [ 435.095989][ T3344] device veth0_vlan left promiscuous mode [ 435.209630][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.217493][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.263503][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 435.271139][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.280183][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 435.288427][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.296486][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.303350][ T3259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.326680][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.334890][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.343305][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.350265][ T3259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.376794][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.384853][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.397348][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.405654][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.423911][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 435.432398][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 435.444907][ T9182] device veth0_vlan entered promiscuous mode [ 435.452518][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 435.460457][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.474844][ T9182] device veth1_macvtap entered promiscuous mode [ 435.481721][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.489264][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.496526][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 435.504856][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.512876][ T339] usbhid 4-1:0.0: can't add hid device: -71 [ 435.513258][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 435.519000][ T339] usbhid: probe of 4-1:0.0 failed with error -71 [ 435.533117][ T339] usb 4-1: USB disconnect, device number 10 [ 435.540535][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.548790][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.557102][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.565265][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.134769][ T9207] FAULT_INJECTION: forcing a failure. [ 436.134769][ T9207] name failslab, interval 1, probability 0, space 0, times 0 [ 436.147289][ T9207] CPU: 0 PID: 9207 Comm: syz.6.2590 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 436.157211][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 436.167100][ T9207] Call Trace: [ 436.170223][ T9207] [ 436.173001][ T9207] dump_stack_lvl+0x151/0x1c0 [ 436.177518][ T9207] ? io_uring_drop_tctx_refs+0x190/0x190 [ 436.182980][ T9207] dump_stack+0x15/0x20 [ 436.186976][ T9207] should_fail+0x3c6/0x510 [ 436.191243][ T9207] __should_failslab+0xa4/0xe0 [ 436.195830][ T9207] ? xfrm6_tunnel_alloc_spi+0x4ab/0xa00 [ 436.201206][ T9207] should_failslab+0x9/0x20 [ 436.205547][ T9207] slab_pre_alloc_hook+0x37/0xd0 [ 436.210318][ T9207] ? xfrm6_tunnel_alloc_spi+0x4ab/0xa00 [ 436.215702][ T9207] kmem_cache_alloc+0x44/0x250 [ 436.220305][ T9207] xfrm6_tunnel_alloc_spi+0x4ab/0xa00 [ 436.225513][ T9207] ipcomp6_init_state+0x2b3/0x780 [ 436.230371][ T9207] __xfrm_init_state+0x8a6/0xbd0 [ 436.235155][ T9207] xfrm_add_sa+0x23d0/0x34e0 [ 436.239572][ T9207] ? __nla_validate+0x50/0x50 [ 436.244086][ T9207] ? xfrm_user_rcv_msg+0x7d0/0x7d0 [ 436.249036][ T9207] xfrm_user_rcv_msg+0x4f3/0x7d0 [ 436.253804][ T9207] ? xfrm_netlink_rcv+0x90/0x90 [ 436.258497][ T9207] ? avc_has_perm+0x16f/0x260 [ 436.263020][ T9207] ? avc_has_perm_noaudit+0x430/0x430 [ 436.268215][ T9207] netlink_rcv_skb+0x1cf/0x410 [ 436.272810][ T9207] ? xfrm_netlink_rcv+0x90/0x90 [ 436.277499][ T9207] ? netlink_ack+0xb10/0xb10 [ 436.281922][ T9207] ? mutex_lock+0xb6/0x1e0 [ 436.286175][ T9207] ? wait_for_completion_killable_timeout+0x10/0x10 [ 436.292603][ T9207] ? netlink_autobind+0x1a0/0x1a0 [ 436.297470][ T9207] ? selinux_vm_enough_memory+0x170/0x170 [ 436.303014][ T9207] xfrm_netlink_rcv+0x72/0x90 [ 436.307530][ T9207] netlink_unicast+0x8df/0xac0 [ 436.312140][ T9207] ? netlink_detachskb+0x90/0x90 [ 436.316906][ T9207] ? security_netlink_send+0x7b/0xa0 [ 436.322027][ T9207] netlink_sendmsg+0xa0a/0xd20 [ 436.326628][ T9207] ? netlink_getsockopt+0x560/0x560 [ 436.331655][ T9207] ? check_stack_object+0x114/0x130 [ 436.336705][ T9207] ? security_socket_sendmsg+0x82/0xb0 [ 436.341986][ T9207] ? netlink_getsockopt+0x560/0x560 [ 436.347025][ T9207] ____sys_sendmsg+0x59e/0x8f0 [ 436.351617][ T9207] ? iovec_from_user+0x2d9/0x330 [ 436.356397][ T9207] ? __import_iovec+0x25e/0x420 [ 436.361262][ T9207] ? __sys_sendmsg_sock+0x40/0x40 [ 436.366117][ T9207] ___sys_sendmsg+0x252/0x2e0 [ 436.370630][ T9207] ? __sys_sendmsg+0x260/0x260 [ 436.375240][ T9207] ? __fdget+0x1bc/0x240 [ 436.379308][ T9207] __se_sys_sendmsg+0x19a/0x260 [ 436.384001][ T9207] ? __x64_sys_sendmsg+0x90/0x90 [ 436.388769][ T9207] ? ksys_write+0x260/0x2c0 [ 436.393124][ T9207] ? debug_smp_processor_id+0x17/0x20 [ 436.398317][ T9207] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 436.404225][ T9207] __x64_sys_sendmsg+0x7b/0x90 [ 436.408816][ T9207] x64_sys_call+0x16a/0x9a0 [ 436.413158][ T9207] do_syscall_64+0x3b/0x80 [ 436.417411][ T9207] ? clear_bhb_loop+0x35/0x90 [ 436.421924][ T9207] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.427655][ T9207] RIP: 0033:0x7fe040600169 [ 436.431919][ T9207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.451345][ T9207] RSP: 002b:00007fe03ec27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.459765][ T9207] RAX: ffffffffffffffda RBX: 00007fe040828160 RCX: 00007fe040600169 [ 436.467578][ T9207] RDX: 0000000000008000 RSI: 00002000000035c0 RDI: 0000000000000007 [ 436.475387][ T9207] RBP: 00007fe03ec27090 R08: 0000000000000000 R09: 0000000000000000 [ 436.483196][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.491011][ T9207] R13: 0000000000000000 R14: 00007fe040828160 R15: 00007ffc8a2f1f28 [ 436.498826][ T9207] [ 436.769326][ T9214] loop6: detected capacity change from 0 to 128 [ 436.794263][ T9210] loop7: detected capacity change from 0 to 8192 [ 436.849292][ T9219] loop6: detected capacity change from 0 to 1024 [ 436.870158][ T9221] loop4: detected capacity change from 0 to 512 [ 436.927896][ T9219] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 436.929235][ T9221] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 436.939325][ T9219] EXT4-fs (loop6): barriers disabled [ 436.950967][ T9221] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.956184][ T9219] JBD2: no valid journal superblock found [ 436.983327][ T9219] EXT4-fs (loop6): error loading journal [ 436.991465][ T30] audit: type=1326 audit(1745094144.908:10005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec6338169 code=0x7ffc0000 [ 437.015444][ T30] audit: type=1326 audit(1745094144.908:10006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5ec6338169 code=0x7ffc0000 [ 437.053475][ T9229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2596'. [ 437.062349][ T9229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2596'. [ 437.098598][ T30] audit: type=1326 audit(1745094144.908:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec6338169 code=0x7ffc0000 [ 437.159153][ T30] audit: type=1326 audit(1745094144.908:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.4.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5ec6338169 code=0x7ffc0000 [ 437.545947][ T9219] loop6: detected capacity change from 0 to 2048 [ 437.598401][ T9219] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 437.675826][ T9219] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2595: bg 0: block 234: padding at end of block bitmap is not set [ 437.692211][ T9219] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 437.704966][ T9219] EXT4-fs (loop6): This should not happen!! Data will be lost [ 437.704966][ T9219] [ 437.800688][ T9236] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1024 with error 28 [ 437.813524][ T9236] EXT4-fs (loop6): This should not happen!! Data will be lost [ 437.813524][ T9236] [ 437.824967][ T9241] loop3: detected capacity change from 0 to 128 [ 437.825947][ T9236] EXT4-fs (loop6): Total free blocks count 0 [ 437.842251][ T9236] EXT4-fs (loop6): Free/Dirty block details [ 437.848238][ T9236] EXT4-fs (loop6): free_blocks=0 [ 437.853066][ T9236] EXT4-fs (loop6): dirty_blocks=1376 [ 437.858472][ T9236] EXT4-fs (loop6): Block reservation details [ 437.864750][ T9236] EXT4-fs (loop6): i_reserved_data_blocks=86 [ 437.936601][ T9246] loop7: detected capacity change from 0 to 2048 [ 437.991377][ T9246] loop7: p2 p3 p7 [ 438.351909][ T30] audit: type=1326 audit(1745094146.278:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 438.397879][ T30] audit: type=1326 audit(1745094146.308:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 438.440981][ T30] audit: type=1326 audit(1745094146.308:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 438.495156][ T30] audit: type=1326 audit(1745094146.308:10012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 438.543043][ T30] audit: type=1326 audit(1745094146.308:10013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 438.587603][ T30] audit: type=1326 audit(1745094146.308:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 438.631854][ T30] audit: type=1326 audit(1745094146.308:10015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 438.655542][ T404] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 438.672463][ T30] audit: type=1326 audit(1745094146.308:10016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 438.771962][ T30] audit: type=1326 audit(1745094146.308:10017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 438.804185][ T30] audit: type=1326 audit(1745094146.308:10018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe040600169 code=0x7ffc0000 [ 439.066682][ T525] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 439.086843][ T404] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 439.101801][ T404] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.148633][ T404] usb 7-1: config 0 has no interface number 0 [ 439.336744][ T404] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 439.355172][ T404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.388590][ T404] usb 7-1: Product: syz [ 439.406160][ T404] usb 7-1: Manufacturer: syz [ 439.426375][ T404] usb 7-1: SerialNumber: syz [ 439.426962][ T525] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 439.432155][ T404] usb 7-1: config 0 descriptor?? [ 439.466687][ T525] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.476601][ T525] usb 4-1: config 0 has no interface number 0 [ 439.538578][ T9256] loop4: detected capacity change from 0 to 40427 [ 439.587659][ T9256] F2FS-fs (loop4): quotafile must be on filesystem root [ 439.646814][ T525] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 439.655682][ T525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.663561][ T525] usb 4-1: Product: syz [ 439.667519][ T525] usb 4-1: Manufacturer: syz [ 439.671899][ T525] usb 4-1: SerialNumber: syz [ 439.683258][ T9250] loop6: detected capacity change from 0 to 512 [ 439.687019][ T525] usb 4-1: config 0 descriptor?? [ 439.729029][ T9250] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 439.746721][ T9250] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.762623][ T9250] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 439.777433][ T9250] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 439.777530][ T9262] netlink: 'syz.0.2604': attribute type 3 has an invalid length. [ 439.789538][ T9250] EXT4-fs (loop6): This should not happen!! Data will be lost [ 439.789538][ T9250] [ 439.807421][ T9250] EXT4-fs (loop6): Total free blocks count 0 [ 439.813431][ T9250] EXT4-fs (loop6): Free/Dirty block details [ 439.814387][ T9265] UDC core: couldn't find an available UDC or it's busy: -16 [ 439.819294][ T9250] EXT4-fs (loop6): free_blocks=39626 [ 439.829813][ T9265] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 439.841180][ T9250] EXT4-fs (loop6): dirty_blocks=1 [ 439.846471][ T9250] EXT4-fs (loop6): Block reservation details [ 439.846490][ T9250] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 439.895986][ T9275] loop0: detected capacity change from 0 to 512 [ 439.927480][ T9275] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.933038][ T9253] loop3: detected capacity change from 0 to 512 [ 439.944652][ T9275] EXT4-fs (loop0): orphan cleanup on readonly fs [ 439.951510][ T9275] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.2608: iget: bad extended attribute block 64 [ 439.964244][ T9275] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2608: couldn't read orphan inode 15 (err -117) [ 439.976449][ T9275] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 439.996921][ T404] usb 7-1: Found UVC 0.00 device syz (046d:0823) [ 440.001389][ T9253] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 440.003222][ T404] usb 7-1: No valid video chain found. [ 440.020668][ T9253] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.027865][ T404] usb 7-1: USB disconnect, device number 18 [ 440.044777][ T9253] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 440.059278][ T9253] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 440.071420][ T9253] EXT4-fs (loop3): This should not happen!! Data will be lost [ 440.071420][ T9253] [ 440.081011][ T9253] EXT4-fs (loop3): Total free blocks count 0 [ 440.086942][ T9253] EXT4-fs (loop3): Free/Dirty block details [ 440.092882][ T9253] EXT4-fs (loop3): free_blocks=39626 [ 440.098865][ T9253] EXT4-fs (loop3): dirty_blocks=1 [ 440.113749][ T9282] UDC core: couldn't find an available UDC or it's busy: -16 [ 440.116703][ T9253] EXT4-fs (loop3): Block reservation details [ 440.126921][ T9253] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 440.132916][ T9282] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 440.141343][ T9284] device veth1_macvtap left promiscuous mode [ 440.163305][ T9286] loop0: detected capacity change from 0 to 1024 [ 440.187958][ T9286] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 440.198245][ T9286] EXT4-fs (loop0): barriers disabled [ 440.203631][ T9286] JBD2: no valid journal superblock found [ 440.209303][ T9286] EXT4-fs (loop0): error loading journal [ 440.266739][ T525] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 440.272973][ T525] usb 4-1: No valid video chain found. [ 440.279003][ T525] usb 4-1: USB disconnect, device number 11 [ 440.293568][ T9286] loop0: detected capacity change from 0 to 2048 [ 440.368251][ T9286] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 440.444738][ T9286] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2611: bg 0: block 234: padding at end of block bitmap is not set [ 440.459037][ T9286] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 440.471644][ T9286] EXT4-fs (loop0): This should not happen!! Data will be lost [ 440.471644][ T9286] [ 440.495933][ T9292] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1024 with error 28 [ 440.508465][ T9292] EXT4-fs (loop0): This should not happen!! Data will be lost [ 440.508465][ T9292] [ 440.517958][ T9292] EXT4-fs (loop0): Total free blocks count 0 [ 440.523854][ T9292] EXT4-fs (loop0): Free/Dirty block details [ 440.529622][ T9292] EXT4-fs (loop0): free_blocks=0 [ 440.534462][ T9292] EXT4-fs (loop0): dirty_blocks=1088 [ 440.539503][ T9292] EXT4-fs (loop0): Block reservation details [ 440.545386][ T9292] EXT4-fs (loop0): i_reserved_data_blocks=68 [ 441.122999][ T9311] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2617'. [ 441.156880][ T9311] loop4: detected capacity change from 0 to 1024 [ 441.197297][ T9311] EXT4-fs (loop4): Ignoring removed nobh option [ 441.203487][ T9311] EXT4-fs (loop4): Ignoring removed bh option [ 441.209457][ T9311] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 441.278701][ T9311] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 441.704233][ T9321] loop4: detected capacity change from 0 to 256 [ 441.750649][ T9321] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 441.777000][ T39] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 441.823346][ T9325] loop3: detected capacity change from 0 to 512 [ 441.887115][ T9325] EXT4-fs (loop3): orphan cleanup on readonly fs [ 441.898318][ T9325] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2620: bg 0: block 248: padding at end of block bitmap is not set [ 441.914509][ T9325] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.2620: Failed to acquire dquot type 1 [ 441.928594][ T9325] EXT4-fs (loop3): 1 truncate cleaned up [ 441.935904][ T9325] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000800,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,stripe=0x0000000000000008,nodiscard,,errors=continue. Quota mode: writeback. [ 442.357103][ T39] usb 8-1: device descriptor read/64, error -71 [ 442.471186][ T9324] loop0: detected capacity change from 0 to 2048 [ 443.028591][ T9324] loop0: p2 p3 p7 [ 443.236718][ T39] usb 8-1: device descriptor read/64, error -71 [ 443.506743][ T39] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 443.716831][ T9337] tipc: Started in network mode [ 443.721596][ T9337] tipc: Node identity 00000000000000000000eb3f91a0a649, cluster identity 4711 [ 443.738535][ T9337] tipc: Enabling of bearer rejected, failed to enable media [ 443.786671][ T39] usb 8-1: device descriptor read/64, error -71 [ 443.794023][ T9339] loop6: detected capacity change from 0 to 1024 [ 443.847585][ T9339] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 443.864460][ T9339] EXT4-fs (loop6): barriers disabled [ 443.874738][ T9339] JBD2: no valid journal superblock found [ 443.885467][ T9339] EXT4-fs (loop6): error loading journal [ 444.024231][ T9339] loop6: detected capacity change from 0 to 2048 [ 444.037551][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 444.037567][ T30] audit: type=1326 audit(1745094151.968:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9344 comm="syz.3.2627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7373d4169 code=0x0 [ 444.127236][ T9350] loop4: detected capacity change from 0 to 2048 [ 444.163805][ T9349] loop3: detected capacity change from 0 to 512 [ 444.183795][ T9350] loop4: p2 p3 p7 [ 444.217085][ T9339] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 444.225930][ T9355] loop7: detected capacity change from 0 to 512 [ 444.249305][ T9349] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 444.286445][ T9349] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2627: inode #1: comm syz.3.2627: iget: illegal inode # [ 444.301756][ T9355] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 444.317954][ T9349] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2627: error while reading EA inode 1 err=-117 [ 444.331464][ T9339] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2624: bg 0: block 234: padding at end of block bitmap is not set [ 444.333770][ T9355] EXT4-fs (loop7): invalid journal inode [ 444.352051][ T9355] EXT4-fs (loop7): can't get journal size [ 444.360174][ T9349] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2627: inode #1: comm syz.3.2627: iget: illegal inode # [ 444.364448][ T9339] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1096 with error 117 [ 444.391088][ T9349] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2627: error while reading EA inode 1 err=-117 [ 444.406671][ T9339] EXT4-fs (loop6): This should not happen!! Data will be lost [ 444.406671][ T9339] [ 444.424012][ T9349] EXT4-fs (loop3): 1 orphan inode deleted [ 444.441676][ T9355] EXT4-fs (loop7): 1 truncate cleaned up [ 444.449827][ T9349] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000002,bsdgroups,mblk_io_submit,,errors=continue. Quota mode: none. [ 444.466746][ T9355] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 444.666772][ T9360] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2628'. [ 444.762621][ T9355] overlayfs: './file2' not a directory [ 444.837159][ T9360] EXT4-fs error (device loop7): __ext4_get_inode_loc:4351: comm syz.7.2628: Invalid inode table block 3034507813 in block_group 0 [ 444.907947][ T9360] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 445.027470][ T9360] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #18: comm syz.7.2628: mark_inode_dirty error [ 445.050505][ T9355] EXT4-fs error (device loop7): __ext4_get_inode_loc:4351: comm syz.7.2628: Invalid inode table block 3034507813 in block_group 0 [ 445.065325][ T9355] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 445.948490][ T9355] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #18: comm syz.7.2628: mark_inode_dirty error [ 445.977665][ T9355] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #18: comm syz.7.2628: attempt to clear invalid blocks 36 len 12 [ 445.991633][ T9355] EXT4-fs error (device loop7): __ext4_get_inode_loc:4351: comm syz.7.2628: Invalid inode table block 3034507813 in block_group 0 [ 445.994158][ T9373] loop3: detected capacity change from 0 to 512 [ 446.011998][ T9355] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 446.192987][ T9355] EXT4-fs error (device loop7): ext4_punch_hole:4143: inode #18: comm syz.7.2628: mark_inode_dirty error [ 447.216594][ T9182] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 447.234887][ T9373] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 447.387032][ T9373] EXT4-fs (loop3): invalid journal inode [ 447.395738][ T9373] EXT4-fs (loop3): can't get journal size [ 447.435938][ T9373] EXT4-fs (loop3): 1 truncate cleaned up [ 447.441517][ T9373] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 447.594049][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2630'. [ 447.671898][ T9382] overlayfs: './file2' not a directory [ 447.701000][ T9386] loop4: detected capacity change from 0 to 512 [ 447.735269][ T9389] loop0: detected capacity change from 0 to 512 [ 447.797125][ T9386] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 447.869721][ T9389] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 447.929506][ T9386] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.938951][ T9389] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 447.956666][ T9386] tipc: Started in network mode [ 447.961344][ T9386] tipc: Node identity 7ff, cluster identity 4711 [ 447.968756][ T9386] tipc: Node number set to 2047 [ 447.973600][ T9389] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 447.986824][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.993681][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.004573][ T9373] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.2630: Invalid inode table block 3034507813 in block_group 0 [ 448.017852][ T9389] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 448.047222][ T9387] device bridge_slave_0 entered promiscuous mode [ 448.056179][ T9389] EXT4-fs (loop0): 1 truncate cleaned up [ 448.071111][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.097103][ T9373] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 448.106466][ T9389] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,data_err=abort,noinit_itable,nouid32,grpjquota=.subj_type=P_+[,errors=continue. Quota mode: writeback. [ 448.130777][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.143507][ T9373] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #18: comm syz.3.2630: mark_inode_dirty error [ 448.155258][ T9387] device bridge_slave_1 entered promiscuous mode [ 448.163150][ T4878] device bridge_slave_1 left promiscuous mode [ 448.169372][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.176795][ T9382] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.2630: Invalid inode table block 3034507813 in block_group 0 [ 448.190333][ T4878] device bridge_slave_0 left promiscuous mode [ 448.190912][ T9382] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 448.196375][ T9389] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 448.206624][ T9382] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #18: comm syz.3.2630: mark_inode_dirty error [ 448.225968][ T9382] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #18: comm syz.3.2630: attempt to clear invalid blocks 36 len 12 [ 448.236756][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.246791][ T30] audit: type=1400 audit(1745094156.168:10130): avc: denied { bind } for pid=9388 comm="syz.0.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 448.269853][ T9399] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2638'. [ 448.269860][ T30] audit: type=1400 audit(1745094156.178:10131): avc: denied { write } for pid=9403 comm="syz.6.2639" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 448.279077][ T4878] device veth1_macvtap left promiscuous mode [ 448.314279][ T9382] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz.3.2630: Invalid inode table block 3034507813 in block_group 0 [ 448.328453][ T4878] device veth0_vlan left promiscuous mode [ 448.333036][ T9382] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 448.341856][ T9410] loop4: detected capacity change from 0 to 256 [ 448.350566][ T9382] EXT4-fs error (device loop3): ext4_punch_hole:4143: inode #18: comm syz.3.2630: mark_inode_dirty error [ 448.369139][ T9152] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 448.394431][ T9412] FAULT_INJECTION: forcing a failure. [ 448.394431][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.397177][ T9410] FAT-fs (loop4): Unrecognized mount option "shortnme=mixed" or missing value [ 448.437011][ T9412] CPU: 0 PID: 9412 Comm: syz.0.2640 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 448.446998][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 448.456898][ T9412] Call Trace: [ 448.460017][ T9412] [ 448.462791][ T9412] dump_stack_lvl+0x151/0x1c0 [ 448.467308][ T9412] ? io_uring_drop_tctx_refs+0x190/0x190 [ 448.472778][ T9412] dump_stack+0x15/0x20 [ 448.476771][ T9412] should_fail+0x3c6/0x510 [ 448.481025][ T9412] should_fail_usercopy+0x1a/0x20 [ 448.485878][ T9412] _copy_from_user+0x20/0xd0 [ 448.490305][ T9412] bpf_test_init+0x13b/0x1b0 [ 448.494735][ T9412] bpf_prog_test_run_skb+0x268/0x1420 [ 448.499938][ T9412] ? __kasan_check_write+0x14/0x20 [ 448.504885][ T9412] ? proc_fail_nth_write+0x20b/0x290 [ 448.510004][ T9412] ? selinux_file_permission+0x2c4/0x570 [ 448.515471][ T9412] ? proc_fail_nth_read+0x210/0x210 [ 448.520505][ T9412] ? fsnotify_perm+0x6a/0x5b0 [ 448.525022][ T9412] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 448.530747][ T9412] ? __kasan_check_write+0x14/0x20 [ 448.535695][ T9412] ? fput_many+0x160/0x1b0 [ 448.539963][ T9412] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 448.545676][ T9412] bpf_prog_test_run+0x3b0/0x630 [ 448.550455][ T9412] ? bpf_prog_query+0x220/0x220 [ 448.555139][ T9412] ? selinux_bpf+0xd2/0x100 [ 448.559477][ T9412] ? security_bpf+0x82/0xb0 [ 448.563825][ T9412] __sys_bpf+0x525/0x760 [ 448.567895][ T9412] ? fput_many+0x160/0x1b0 [ 448.572148][ T9412] ? bpf_link_show_fdinfo+0x300/0x300 [ 448.577360][ T9412] ? debug_smp_processor_id+0x17/0x20 [ 448.582570][ T9412] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 448.588468][ T9412] __x64_sys_bpf+0x7c/0x90 [ 448.592719][ T9412] x64_sys_call+0x87f/0x9a0 [ 448.597059][ T9412] do_syscall_64+0x3b/0x80 [ 448.601310][ T9412] ? clear_bhb_loop+0x35/0x90 [ 448.605834][ T9412] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.611551][ T9412] RIP: 0033:0x7ff4cf014169 [ 448.615807][ T9412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.635248][ T9412] RSP: 002b:00007ff4cd67d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.643491][ T9412] RAX: ffffffffffffffda RBX: 00007ff4cf23bfa0 RCX: 00007ff4cf014169 [ 448.651303][ T9412] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 448.659116][ T9412] RBP: 00007ff4cd67d090 R08: 0000000000000000 R09: 0000000000000000 [ 448.666927][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.674740][ T9412] R13: 0000000000000000 R14: 00007ff4cf23bfa0 R15: 00007ffd6f3669c8 [ 448.682552][ T9412] [ 448.800238][ T9410] loop4: detected capacity change from 0 to 2048 [ 448.922425][ T9410] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 448.934289][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.942715][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.950881][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.961782][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.009447][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.016394][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.046171][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.056247][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.065072][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.071992][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.081036][ T339] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 449.129901][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.170655][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.197021][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.236463][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.261225][ T9387] device veth0_vlan entered promiscuous mode [ 449.270107][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.283036][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.290936][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.319936][ T9387] device veth1_macvtap entered promiscuous mode [ 449.326800][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.340265][ T339] usb 1-1: Using ep0 maxpacket: 32 [ 449.364793][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.371900][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.379192][ T9422] device bridge_slave_0 entered promiscuous mode [ 449.386080][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.393192][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.400697][ T9422] device bridge_slave_1 entered promiscuous mode [ 449.414293][ T9431] loop4: detected capacity change from 0 to 128 [ 449.424341][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.457353][ T3259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.466729][ T339] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.528988][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.535886][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.543012][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.549886][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.579014][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.586455][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.594057][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.609333][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.618033][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.624873][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.636460][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.646086][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.652950][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.681912][ T9435] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2635'. [ 449.826263][ T339] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 449.835230][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.843147][ T339] usb 1-1: Product: syz [ 449.847191][ T339] usb 1-1: Manufacturer: syz [ 449.851601][ T339] usb 1-1: SerialNumber: syz [ 449.857455][ T339] usb 1-1: config 0 descriptor?? [ 449.863369][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.872414][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.880409][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.897350][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.905499][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.906737][ T9366] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 449.914159][ T339] usb 1-1: bad CDC descriptors [ 449.926366][ T339] usb 1-1: unsupported MDLM descriptors [ 449.930681][ T9422] device veth0_vlan entered promiscuous mode [ 449.938580][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.946322][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.954313][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.961765][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.975257][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.983305][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.992711][ T9422] device veth1_macvtap entered promiscuous mode [ 450.002355][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.010005][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.018367][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.029643][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 450.037724][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 450.077482][ T4878] device bridge_slave_1 left promiscuous mode [ 450.083553][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.091675][ T4878] device bridge_slave_0 left promiscuous mode [ 450.098134][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.106334][ T4878] device veth1_macvtap left promiscuous mode [ 450.113247][ T4878] device veth0_vlan left promiscuous mode [ 450.129110][ T356] usb 1-1: USB disconnect, device number 28 [ 450.240689][ T9439] loop1: detected capacity change from 0 to 2048 [ 450.295579][ T9439] loop1: p2 p3 p7 [ 450.445363][ T9366] usb 5-1: unable to get BOS descriptor or descriptor too short [ 450.479324][ T9442] FAULT_INJECTION: forcing a failure. [ 450.479324][ T9442] name failslab, interval 1, probability 0, space 0, times 0 [ 450.491890][ T9442] CPU: 0 PID: 9442 Comm: syz.9.2649 Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 450.501842][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.511733][ T9442] Call Trace: [ 450.514858][ T9442] [ 450.517637][ T9442] dump_stack_lvl+0x151/0x1c0 [ 450.522149][ T9442] ? io_uring_drop_tctx_refs+0x190/0x190 [ 450.527622][ T9442] dump_stack+0x15/0x20 [ 450.531613][ T9442] should_fail+0x3c6/0x510 [ 450.535879][ T9442] __should_failslab+0xa4/0xe0 [ 450.540461][ T9442] ? dst_alloc+0x164/0x1e0 [ 450.544711][ T9442] should_failslab+0x9/0x20 [ 450.549055][ T9442] slab_pre_alloc_hook+0x37/0xd0 [ 450.553829][ T9442] ? dst_alloc+0x164/0x1e0 [ 450.558079][ T9442] kmem_cache_alloc+0x44/0x250 [ 450.562686][ T9442] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 450.568147][ T9442] dst_alloc+0x164/0x1e0 [ 450.572225][ T9442] ip6_pol_route+0xc2a/0x14b0 [ 450.576743][ T9442] ? native_set_ldt+0x360/0x360 [ 450.581426][ T9442] ? fib6_table_lookup+0xaf0/0xaf0 [ 450.586373][ T9442] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 450.592882][ T9442] ? finish_task_switch+0x167/0x7b0 [ 450.597926][ T9442] ip6_pol_route_input+0x55/0x80 [ 450.598035][ T9366] usb 5-1: config 100 has an invalid interface number: 59 but max is 1 [ 450.602692][ T9442] fib6_rule_lookup+0x25a/0x620 [ 450.610932][ T9366] usb 5-1: config 100 has an invalid interface number: 197 but max is 1 [ 450.615448][ T9442] ? release_firmware_map_entry+0x190/0x190 [ 450.623738][ T9366] usb 5-1: config 100 contains an unexpected descriptor of type 0x2, skipping [ 450.629338][ T9442] ? ip6_route_input_lookup+0xd0/0xd0 [ 450.629363][ T9442] ? fib6_lookup+0x3f0/0x3f0 [ 450.638160][ T9366] usb 5-1: config 100 has no interface number 0 [ 450.643223][ T9442] ? __local_bh_enable_ip+0x58/0x80 [ 450.649702][ T9366] usb 5-1: config 100 has no interface number 1 [ 450.653728][ T9442] ? local_bh_enable+0x1f/0x30 [ 450.659140][ T9366] usb 5-1: config 100 interface 59 has no altsetting 0 [ 450.664834][ T9442] ? ip6t_do_table+0x1662/0x1850 [ 450.669753][ T9366] usb 5-1: config 100 interface 197 has no altsetting 0 [ 450.676122][ T9442] ? ip6_route_input+0x245/0xb60 [ 450.692437][ T9442] ? __ipv6_addr_type+0x116/0x2f0 [ 450.697304][ T9442] ip6_route_input+0x724/0xb60 [ 450.701897][ T9442] ? ip6_multipath_l3_keys+0x610/0x610 [ 450.707193][ T9442] ? irqentry_exit+0x30/0x40 [ 450.711618][ T9442] ? sysvec_reschedule_ipi+0x8c/0x160 [ 450.716828][ T9442] ? nf_hook_slow+0xd1/0x200 [ 450.721251][ T9442] ? nf_hook_slow+0x115/0x200 [ 450.725764][ T9442] ip6_rcv_finish+0x150/0x350 [ 450.730275][ T9442] ipv6_rcv+0xeb/0x270 [ 450.734184][ T9442] ? ip6_rcv_finish+0x350/0x350 [ 450.738869][ T9442] ? refcount_add+0x80/0x80 [ 450.743210][ T9442] ? ip6_rcv_finish+0x350/0x350 [ 450.747895][ T9442] __netif_receive_skb+0x1c6/0x530 [ 450.752841][ T9442] ? tun_chr_write_iter+0x1e1/0x2e0 [ 450.757876][ T9442] ? vfs_write+0xd5d/0x1110 [ 450.762216][ T9442] ? ksys_write+0x199/0x2c0 [ 450.766576][ T9442] ? x64_sys_call+0x2f/0x9a0 [ 450.770984][ T9442] ? do_syscall_64+0x3b/0x80 [ 450.775410][ T9442] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.781311][ T9442] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 450.786698][ T9442] netif_receive_skb+0xb0/0x480 [ 450.791378][ T9442] ? netif_receive_skb_core+0x210/0x210 [ 450.796766][ T9442] tun_rx_batched+0x6d9/0x870 [ 450.801273][ T9442] ? eth_type_trans+0x2e4/0x620 [ 450.805960][ T9442] ? local_bh_enable+0x30/0x30 [ 450.810561][ T9442] tun_get_user+0x2cb7/0x3aa0 [ 450.815096][ T9442] ? _raw_spin_unlock+0x4d/0x70 [ 450.819761][ T9442] ? finish_task_switch+0x167/0x7b0 [ 450.824793][ T9442] ? tun_do_read+0x2010/0x2010 [ 450.829400][ T9442] ? __kasan_check_write+0x14/0x20 [ 450.834342][ T9442] ? _raw_spin_lock+0xa4/0x1b0 [ 450.838945][ T9442] ? release_firmware_map_entry+0x190/0x190 [ 450.844671][ T9442] ? avc_policy_seqno+0x1b/0x70 [ 450.849356][ T9442] ? selinux_file_permission+0x2c4/0x570 [ 450.854825][ T9442] tun_chr_write_iter+0x1e1/0x2e0 [ 450.859687][ T9442] vfs_write+0xd5d/0x1110 [ 450.863855][ T9442] ? irqentry_exit+0x30/0x40 [ 450.868279][ T9442] ? file_end_write+0x1c0/0x1c0 [ 450.872964][ T9442] ? __rcu_read_unlock+0x7e/0xd0 [ 450.877742][ T9442] ? __fdget_pos+0x209/0x3a0 [ 450.882163][ T9442] ? ksys_write+0x77/0x2c0 [ 450.886417][ T9442] ksys_write+0x199/0x2c0 [ 450.890581][ T9442] ? __ia32_sys_read+0x90/0x90 [ 450.895183][ T9442] ? debug_smp_processor_id+0x17/0x20 [ 450.900396][ T9442] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 450.906293][ T9442] __x64_sys_write+0x7b/0x90 [ 450.910734][ T9442] x64_sys_call+0x2f/0x9a0 [ 450.914971][ T9442] do_syscall_64+0x3b/0x80 [ 450.919222][ T9442] ? clear_bhb_loop+0x35/0x90 [ 450.923742][ T9442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.929467][ T9442] RIP: 0033:0x7fb4e079ac1f [ 450.933721][ T9442] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 450.953161][ T9442] RSP: 002b:00007fb4dee05000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 450.961408][ T9442] RAX: ffffffffffffffda RBX: 00007fb4e09c3fa0 RCX: 00007fb4e079ac1f [ 450.969217][ T9442] RDX: 0000000000000046 RSI: 0000200000002040 RDI: 00000000000000c8 [ 450.977033][ T9442] RBP: 00007fb4dee05090 R08: 0000000000000000 R09: 0000000000000000 [ 450.984844][ T9442] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 450.992658][ T9442] R13: 0000000000000001 R14: 00007fb4e09c3fa0 R15: 00007fff117e6688 [ 451.000469][ T9442] [ 451.076819][ T9366] usb 5-1: New USB device found, idVendor=25d1, idProduct=4501, bcdDevice=1d.b6 [ 451.092769][ T9366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.103743][ T9366] usb 5-1: Product: syz [ 451.400453][ T9366] usb 5-1: Manufacturer: syz [ 451.408491][ T9446] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2652'. [ 451.418743][ T9366] usb 5-1: SerialNumber: syz [ 451.675911][ T9453] loop0: detected capacity change from 0 to 512 [ 455.685997][ T9453] EXT4-fs: error -4 creating inode table initialization thread [ 455.693713][ T9453] EXT4-fs (loop0): mount failed [ 455.722670][ T9366] usb 5-1: USB disconnect, device number 8 [ 455.767310][ T9462] tipc: Failed to remove unknown binding: 66,1,1/0:3580510414/3580510416 [ 455.780931][ T9461] loop9: detected capacity change from 0 to 1024 [ 455.816111][ T9465] loop4: detected capacity change from 0 to 1024 [ 455.838071][ T9461] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 455.854029][ T9461] EXT4-fs (loop9): barriers disabled [ 455.865953][ T9461] JBD2: no valid journal superblock found [ 455.875736][ T9468] loop6: detected capacity change from 0 to 256 [ 455.882119][ T9461] EXT4-fs (loop9): error loading journal [ 455.889751][ T9465] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 455.903933][ T9465] EXT4-fs (loop4): barriers disabled [ 455.909172][ T9465] JBD2: no valid journal superblock found [ 455.914822][ T9465] EXT4-fs (loop4): error loading journal [ 455.920981][ T9468] FAT-fs (loop6): Unrecognized mount option "shortnme=mixed" or missing value [ 455.944029][ T9470] loop1: detected capacity change from 0 to 512 [ 455.998743][ T9470] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 456.008483][ T9470] EXT4-fs (loop1): invalid journal inode [ 456.013973][ T9470] EXT4-fs (loop1): can't get journal size [ 456.023276][ T9468] loop6: detected capacity change from 0 to 2048 [ 456.024709][ T9461] loop9: detected capacity change from 0 to 2048 [ 456.030983][ T9470] EXT4-fs (loop1): 1 truncate cleaned up [ 456.037957][ T9472] netlink: 'syz.0.2659': attribute type 27 has an invalid length. [ 456.041422][ T9470] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,sb=0xffffffffffffff81,,errors=continue. Quota mode: none. [ 456.079763][ T9465] loop4: detected capacity change from 0 to 2048 [ 456.089878][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.096919][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.108359][ T9468] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 456.120624][ T9461] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 456.145997][ T9470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2658'. [ 456.158866][ T9465] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 456.240206][ T9470] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz.1.2658: Invalid inode table block 3034507813 in block_group 0 [ 456.253573][ T9465] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2655: bg 0: block 234: padding at end of block bitmap is not set [ 456.259087][ T9461] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2656: bg 0: block 234: padding at end of block bitmap is not set [ 456.282033][ T9470] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 456.282217][ T9461] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1648 with error 117 [ 456.307143][ T9465] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1576 with error 117 [ 456.319716][ T9461] EXT4-fs (loop9): This should not happen!! Data will be lost [ 456.319716][ T9461] [ 456.326733][ T9470] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #18: comm syz.1.2658: mark_inode_dirty error [ 456.342574][ T9465] EXT4-fs (loop4): This should not happen!! Data will be lost [ 456.342574][ T9465] [ 456.376928][ T9483] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz.1.2658: Invalid inode table block 3034507813 in block_group 0 [ 456.416746][ T9487] loop0: detected capacity change from 0 to 1024 [ 456.427088][ T9483] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 456.445095][ T9483] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #18: comm syz.1.2658: mark_inode_dirty error [ 456.473273][ T9483] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #18: comm syz.1.2658: attempt to clear invalid blocks 36 len 12 [ 456.487543][ T9487] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 456.498704][ T9487] EXT4-fs (loop0): barriers disabled [ 456.503927][ T9487] JBD2: no valid journal superblock found [ 456.524929][ T9483] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm syz.1.2658: Invalid inode table block 3034507813 in block_group 0 [ 456.540097][ T9487] EXT4-fs (loop0): error loading journal [ 456.546309][ T9483] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 456.556351][ T9483] EXT4-fs error (device loop1): ext4_punch_hole:4143: inode #18: comm syz.1.2658: mark_inode_dirty error [ 456.656805][ T9491] loop9: detected capacity change from 0 to 1024 [ 456.669351][ T9422] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 456.706177][ T9491] EXT4-fs (loop9): INFO: recovery required on readonly filesystem [ 456.706280][ T9487] loop0: detected capacity change from 0 to 2048 [ 456.718311][ T9491] EXT4-fs (loop9): write access will be enabled during recovery [ 456.728808][ T9491] EXT4-fs (loop9): barriers disabled [ 456.734514][ T9491] JBD2: no valid journal superblock found [ 456.744395][ T9491] EXT4-fs (loop9): error loading journal [ 456.793635][ T9487] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 456.886684][ T356] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 456.904764][ T9487] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2660: bg 0: block 234: padding at end of block bitmap is not set [ 456.927380][ T9487] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 456.947446][ T9487] EXT4-fs (loop0): This should not happen!! Data will be lost [ 456.947446][ T9487] [ 456.983877][ T9502] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 470 with error 28 [ 456.996674][ T9502] EXT4-fs (loop0): This should not happen!! Data will be lost [ 456.996674][ T9502] [ 457.021504][ T9505] loop9: detected capacity change from 0 to 512 [ 457.027792][ T9502] EXT4-fs (loop0): Total free blocks count 0 [ 457.033697][ T9502] EXT4-fs (loop0): Free/Dirty block details [ 457.040233][ T9502] EXT4-fs (loop0): free_blocks=0 [ 457.045064][ T9502] EXT4-fs (loop0): dirty_blocks=480 [ 457.051249][ T9502] EXT4-fs (loop0): Block reservation details [ 457.063778][ T9502] EXT4-fs (loop0): i_reserved_data_blocks=30 [ 457.070545][ T9505] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 457.082727][ T9505] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.2668: inode #1: comm syz.9.2668: iget: illegal inode # [ 457.096185][ T9505] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.2668: error while reading EA inode 1 err=-117 [ 457.108808][ T9505] EXT4-fs (loop9): 1 orphan inode deleted [ 457.109145][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.114410][ T9505] EXT4-fs (loop9): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000004,minixdf,max_batch_time=0x0000000000000002,bsdgroups,mblk_io_submit,barrier,,errors=continue. Quota mode: none. [ 457.125830][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.155424][ T9506] device bridge_slave_0 entered promiscuous mode [ 457.165592][ T9506] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.172509][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.179709][ T356] usb 5-1: Using ep0 maxpacket: 32 [ 457.180490][ T9505] 9pnet: Insufficient options for proto=fd [ 457.191622][ T9506] device bridge_slave_1 entered promiscuous mode [ 457.199600][ T30] audit: type=1326 audit(1745094165.128:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e079c169 code=0x7ffc0000 [ 457.223108][ T30] audit: type=1326 audit(1745094165.128:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e079c169 code=0x7ffc0000 [ 457.249045][ T9512] loop0: detected capacity change from 0 to 512 [ 457.255588][ T30] audit: type=1326 audit(1745094165.128:10134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4e079c169 code=0x7ffc0000 [ 457.279028][ T30] audit: type=1326 audit(1745094165.128:10135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e079c169 code=0x7ffc0000 [ 457.302914][ T30] audit: type=1326 audit(1745094165.128:10136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4e079c169 code=0x7ffc0000 [ 457.303584][ T9387] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 457.347106][ T30] audit: type=1326 audit(1745094165.128:10137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e079c169 code=0x7ffc0000 [ 457.358909][ T9512] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,init_itable,minixdf,,errors=continue. Quota mode: writeback. [ 457.370868][ T356] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.383926][ T9512] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.393984][ T30] audit: type=1326 audit(1745094165.128:10138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4e079c169 code=0x7ffc0000 [ 457.427203][ T30] audit: type=1326 audit(1745094165.128:10139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e079c169 code=0x7ffc0000 [ 457.427232][ T9387] ------------[ cut here ]------------ [ 457.427241][ T9387] kernel BUG at fs/namei.c:2933! [ 457.450528][ T30] audit: type=1326 audit(1745094165.128:10140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb4e079c169 code=0x7ffc0000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 457.468264][ T9387] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 457.483953][ T30] audit: type=1326 audit(1745094165.128:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9504 comm="syz.9.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb4e079c1a3 code=0x7ffc0000 [ 457.489689][ T9387] CPU: 0 PID: 9387 Comm: syz-executor Not tainted 5.15.180-syzkaller-android13-5.15.180_r00 #0 [ 457.489709][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.489718][ T9387] RIP: 0010:may_delete+0x6eb/0x6f0 [ 457.489741][ T9387] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 86 8a f4 ff e9 72 fe ff ff e8 ac 1f b2 ff 0f 0b e8 a5 1f b2 ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 91 1f b2 ff 4c 8d [ 457.489754][ T9387] RSP: 0000:ffffc900007afc70 EFLAGS: 00010293 [ 457.489769][ T9387] RAX: ffffffff81bdf7ab RBX: ffff88813273acf0 RCX: ffff888139b362c0 [ 457.489781][ T9387] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 457.489791][ T9387] RBP: ffffc900007afcd8 R08: ffffffff81bdf13f R09: 0000000000000003 [ 457.489802][ T9387] R10: fffff520000f5f70 R11: dffffc0000000001 R12: ffff88813273a000 [ 457.489814][ T9387] R13: 1ffff110264e7400 R14: ffff888132635328 R15: dffffc0000000000 [ 457.489826][ T9387] FS: 00005555586cf500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 457.489840][ T9387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.489851][ T9387] CR2: 0000001b3200eff8 CR3: 0000000118444000 CR4: 00000000003506b0 [ 457.489866][ T9387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.489875][ T9387] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.489885][ T9387] Call Trace: [ 457.489891][ T9387] [ 457.489900][ T9387] vfs_rmdir+0x32/0x470 [ 457.650849][ T9387] incfs_kill_sb+0x113/0x230 [ 457.655271][ T9387] deactivate_locked_super+0xad/0x110 [ 457.660478][ T9387] deactivate_super+0xbe/0xf0 [ 457.664996][ T9387] cleanup_mnt+0x45c/0x510 [ 457.669245][ T9387] __cleanup_mnt+0x19/0x20 [ 457.673496][ T9387] task_work_run+0x129/0x190 [ 457.677923][ T9387] exit_to_user_mode_loop+0xc4/0xe0 [ 457.682956][ T9387] exit_to_user_mode_prepare+0x5a/0xa0 [ 457.688251][ T9387] syscall_exit_to_user_mode+0x26/0x160 [ 457.693633][ T9387] do_syscall_64+0x47/0x80 [ 457.697884][ T9387] ? clear_bhb_loop+0x35/0x90 [ 457.702398][ T9387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.708127][ T9387] RIP: 0033:0x7fb4e079d497 [ 457.712381][ T9387] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 457.731821][ T9387] RSP: 002b:00007fff117e4828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 457.740066][ T9387] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb4e079d497 [ 457.747877][ T9387] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff117e48e0 [ 457.755689][ T9387] RBP: 00007fff117e48e0 R08: 0000000000000000 R09: 0000000000000000 [ 457.763502][ T9387] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff117e59d0 [ 457.771313][ T9387] R13: 00007fb4e081e854 R14: 000000000006fa12 R15: 00007fff117e6aa0 [ 457.779129][ T9387] [ 457.781990][ T9387] Modules linked in: [ 457.785917][ T9387] ---[ end trace fe83eb34bcc635ec ]--- [ 457.792768][ T9387] RIP: 0010:may_delete+0x6eb/0x6f0 [ 457.797877][ T9387] Code: 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fe ff ff 4c 89 e7 e8 86 8a f4 ff e9 72 fe ff ff e8 ac 1f b2 ff 0f 0b e8 a5 1f b2 ff <0f> 0b 0f 1f 00 55 48 89 e5 41 56 53 48 89 fb e8 91 1f b2 ff 4c 8d [ 457.818605][ T9387] RSP: 0000:ffffc900007afc70 EFLAGS: 00010293 [ 457.824509][ T9387] RAX: ffffffff81bdf7ab RBX: ffff88813273acf0 RCX: ffff888139b362c0 [ 457.832653][ T9387] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 457.840544][ T9512] tipc: Started in network mode [ 457.845136][ T9512] tipc: Node identity 7ff, cluster identity 4711 [ 457.846703][ T9387] RBP: ffffc900007afcd8 R08: ffffffff81bdf13f R09: 0000000000000003 [ 457.859488][ T9387] R10: fffff520000f5f70 R11: dffffc0000000001 R12: ffff88813273a000 [ 457.867342][ T9387] R13: 1ffff110264e7400 R14: ffff888132635328 R15: dffffc0000000000 [ 457.872309][ T9512] tipc: Node number set to 2047 [ 457.875124][ T9387] FS: 00005555586cf500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 457.918697][ T9387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.925271][ T9387] CR2: 00007fff1aa9cd0c CR3: 0000000118444000 CR4: 00000000003506a0 [ 457.938920][ T9387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.946799][ T9387] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.954570][ T9387] Kernel panic - not syncing: Fatal exception [ 457.960665][ T9387] Kernel Offset: disabled [ 457.964815][ T9387] Rebooting in 86400 seconds..