last executing test programs: 3m34.318203772s ago: executing program 3 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newneigh={0x5c, 0x1c, 0x4, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x0, r1, 0x8, 0x11}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_VLAN={0x6}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_MASTER={0x8, 0x9, 0x349}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x5c}}, 0x4001840) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000500)={0x4, 0x1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000540)={0x0, 0xfffffffffffffffb, 0x18c00000020, 0x6, 0x8, 0x1, 0x7fffffffffffffff, 0x2}, &(0x7f0000000580)={0xffffffffffffffff, 0x7fffffff, 0x4, 0x0, 0x8, 0x8, 0x39, 0xffffffffffffffff}, &(0x7f00000005c0)={0x5, 0x6, 0x5, 0x281, 0x9, 0x6, 0x7, 0x10000}, &(0x7f0000000600)={0x0, 0x989680}, &(0x7f0000000680)={&(0x7f0000000640)={[0x4]}, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000300)={0xd, 0x6, 0x1000, 0x7, 0x0, 0x6, 0x8, 0x6}, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4) 3m33.399527408s ago: executing program 3 (id=261): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xe1, &(0x7f0000000680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x7, 0x1, 0x4}}, {@llc_tr={0x11, {@llc={0x8e, 0x7e, "ff", "ed08f5e54ce02a7b6e82f67f282a381aa1fa880c1d8bde26e219937b1ebaece24295bd8145dd2a0e4691ee7e43fef231d6032faeee1f369ba36e6e236aa32f5066416eea717c41cfd319be965ad4fdd3e9ca5e3e31d35052883ac4261f8ae03e1a1296b99b634d60884219d6d2a9cc5c86eb707067b2acc0b600cc9ad2f1651a0bdacbe0db670cf4d9189461ae941c6e1ab654edc03636d4c21ff4577116bd90efe158e549672b78d3e99abacda28a6be5064c2b43c657dde42ef529b5878481dc0a8b7efa991654"}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x339, 0x4c4, 0xe08, 0x47]}) 3m33.371673928s ago: executing program 3 (id=262): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xffffffff, 0x80, &(0x7f00000002c0)='pfs', 0x3, 0x2, 0x6, 0x0, 0x9, 0xfff, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x8) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) syz_open_procfs(0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000068000903ff9f0000000000000a00000000000000040004000800010001"], 0x24}}, 0x4) lseek(r5, 0x9, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cc, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) 3m32.981945387s ago: executing program 3 (id=264): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xffffc000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0x9, &(0x7f00000000c0)={0x17, 0x7, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty1(0xc, 0x4, 0x1) 3m32.029914033s ago: executing program 3 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x74f}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(0xffffffffffffffff) r3 = inotify_init1(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) gettid() fcntl$setsig(r3, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') 3m31.925428263s ago: executing program 3 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r2, &(0x7f0000000380)=[{0x0, 0x4010}, {&(0x7f00000000c0)=""/115, 0x63}], 0x100000000000004b, 0x20000a96, 0x0) 3m31.766001522s ago: executing program 32 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r2, &(0x7f0000000380)=[{0x0, 0x4010}, {&(0x7f00000000c0)=""/115, 0x63}], 0x100000000000004b, 0x20000a96, 0x0) 3m7.556968982s ago: executing program 4 (id=384): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@user_xattr}, {}, {@barrier_val}, {}, {@oldalloc}, {@lazytime}, {@nodelalloc}, {@acl}, {@nouid32}]}, 0xfc, 0x56b, &(0x7f0000000f80)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xffffffff, 0x4040) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000100)={0x7, 0x41, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 3m6.94441335s ago: executing program 4 (id=386): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r0, 0x60f6000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000016c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0x40086607, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 3m4.557522011s ago: executing program 4 (id=395): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000380)=""/160}, 0x20) 3m4.373073151s ago: executing program 4 (id=397): mkdir(0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000200)=ANY=[@ANYBLOB="646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c666c7573682c646f733178666c6f7070792c6572726f7273090000000000000026726f2c646f74732c646f74732c036f646f74732c71756965742c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f636173652c646f74732c6e6f646f74732c74696d655f6f66667365743d3078303030303030303030303030303030352c666f747398636865636b517374726963742c646f74732c00"], 0xfd, 0x207, &(0x7f0000000780)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1004040}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x50, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xd, 0x6}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_PID={0x8, 0x52, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28}, 0x8010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x18) pivot_root(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xec, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0xc8, 0x80, 0xa9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x8}, [@mixer_unit={0x8, 0x24, 0x4, 0x4, 0x4, '9k{'}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x2, 0x5, "1e77"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x5, 0x9, 0x1, 0x0, 0xb}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x2, 0x5, [0x3, 0x6, 0xf2384955110237be, 0x6, 0x9], 0x2}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x4, 0x0, "92d7af"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x1005}, @as_header={0x7, 0x24, 0x1, 0x1, 0x42, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x9b, 0x9, {0x7, 0x25, 0x1, 0x0, 0xe, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xc0, 0x2, 0x5, 0xc, "fa0796095870ee2c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0x6, 0x7b, "9b0350"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x4, 0x81, "a6f1"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x3, 0x16, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3, 0x40, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0x2, 0x6, {0x7, 0x25, 0x1, 0x0, 0x7}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x200, 0x6, 0x1, 0x9, 0x20, 0xff}, 0x5d, &(0x7f0000000c00)={0x5, 0xf, 0x5d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xc0, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b7d6e19ac2458ad5e516113f1993129b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0x3, 0x5, 0xa, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x7f, 0xb}, @ssp_cap={0x24, 0x10, 0xa, 0xf6, 0x6, 0x7, 0x770f, 0x8, [0x3f00, 0xc0f0, 0x0, 0xf, 0xffc03f, 0xff3f3f]}]}, 0x2, [{0x42, &(0x7f0000000c80)=ANY=[@ANYBLOB="4203e61d2fc1c022f1d43c5b0290fa9dbb19d739cba7b60c9f251a6f358fc0d8c2966bd672e499e501a95b7729b3ed5f21cab168492ae3e2168b20ff7d91f4a8dcb4"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x437}}]}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c251b15dbf7452079b37b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000001d000000000000004c2acb3a36483fd263c01d35f1a2119243d623dc359faf6e9099331ed99a6acc"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000980)=ANY=[@ANYBLOB='utf8=1,iocharset=koi8-r,uni_xl\\te=0,iocharset=utf8,utf8=0,utf8=1,nonumtail=0,nonumtail=0,check=relaxed,shortname=lower,utf8=0,shortname=win95,shortname=lower,shortname=lower,shortname=lower,check=strict,allow_utime=00000000000000000000777,\x00'], 0x1, 0x363, &(0x7f0000000280)="$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") r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$9p_fd(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), 0x84006, &(0x7f0000000dc0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}, {@version_9p2000}, {@version_u}], [{@flag='nomand'}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@subj_user={'subj_user', 0x3d, '\xcc\\'}}]}}) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m1.58042059s ago: executing program 4 (id=407): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x60}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r3, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040), 0x4) dup3(0xffffffffffffffff, r4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1}]) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x10) 3m1.44975239s ago: executing program 4 (id=408): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x60}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r3, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040), 0x4) dup3(0xffffffffffffffff, r4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x10) 3m1.362149219s ago: executing program 33 (id=408): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x20, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x60}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r3, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r1, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040), 0x4) dup3(0xffffffffffffffff, r4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0x1}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x10) 2m28.554771527s ago: executing program 6 (id=606): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3, 0x1, @thr={&(0x7f0000000940)="ea33b664a24fed6c1849bcf55e46eefad4399a8f8704274ae24db4de3627996bd60969db19921298468404ab7fdc318ee448d6615446c3db69cc4b11d16cf17a03b935fea58fc00f27bb09c5d497bb591a12cc0b5372413d412ba278437f7affdd4c3a4d3cc4e5fc3c767deb7f650d66ae47709e4600bc3929447848f276aae0862d4decba69e4d03e76b55234dd16497dfbca103b00eff04b66e1d4b4fa7d2ce55893a7", &(0x7f0000000780)="8270b8d17b11d70b771f6a30143178fb6c3b856a4491b0748e1909d16800d225df361591ddaf2fa9bce32ee4fa889baa9d55b1c23ae98d7b44015c50d2a8bc771371f163d567ad7c68a7a3416279339ed2bf9d4db95959c854be4a4bd78c85780b9702dfe3e5cf39743e4b64a6c1bc85f17584569245480961cd47fb4fd54894c84889c3469c0b9369a5b5f1a6f9a115f0352ae3408ade6491c59f9bfd353635df94e9f884b64d006fa3020d151eee023de4b32432ecef29400a00c28f8f2faa5805ffe78ec38e3a8db422b640f6eb433df001c946128197a549a4e16f4a4db352ca3ad5e5"}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000040a3a470000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000100000000000000002000d9c4000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 2m27.122276002s ago: executing program 6 (id=612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000"], 0x38}}, 0x0) 2m26.273170439s ago: executing program 6 (id=615): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 2m25.715295727s ago: executing program 6 (id=616): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x0], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000a0e5c0191b931af7bf7777a45106836e838452fa5212367e74356b325a1a6c6519fba943b5ef2c2aac3aac7f897003b0cbd0a8000ef4c7935b236713ab7c8477c7b5042f08230374a40c67e3857dbaa0f71e7e3d709b38cd57841d7a3d16b49f590f15b2767c030a00eae32ebefb2040548ebc4d62e5328a5e429b82d4aef4ce5c524ca9345abad73af81b53372261f1e4"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r7}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000001c0)=ANY=[]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = fcntl$dupfd(r0, 0x0, r2) close_range(r5, r11, 0x0) ptrace(0x10, r10) 2m24.496593252s ago: executing program 6 (id=619): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3, 0x1, @thr={&(0x7f0000000940)="ea33b664a24fed6c1849bcf55e46eefad4399a8f8704274ae24db4de3627996bd60969db19921298468404ab7fdc318ee448d6615446c3db69cc4b11d16cf17a03b935fea58fc00f27bb09c5d497bb591a12cc0b5372413d412ba278437f7affdd4c3a4d3cc4e5fc3c767deb7f650d66ae47709e4600bc3929447848f276aae0862d4decba69e4d03e76b55234dd16497dfbca103b00eff04b66e1d4b4fa7d2ce55893a7", &(0x7f0000000780)="8270b8d17b11d70b771f6a30143178fb6c3b856a4491b0748e1909d16800d225df361591ddaf2fa9bce32ee4fa889baa9d55b1c23ae98d7b44015c50d2a8bc771371f163d567ad7c68a7a3416279339ed2bf9d4db95959c854be4a4bd78c85780b9702dfe3e5cf39743e4b64a6c1bc85f17584569245480961cd47fb4fd54894c84889c3469c0b9369a5b5f1a6f9a115f0352ae3408ade6491c59f9bfd353635df94e9f884b64d006fa3020d151eee023de4b32432ecef29400a00c28f8f2faa5805ffe78ec38e3a8db422b640f6eb433df001c946128197a549a4e16f4a4db352ca3ad5e5"}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000040a3a470000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000100000000000000002000d9c4000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2m24.171026731s ago: executing program 6 (id=620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0) 2m24.154875011s ago: executing program 34 (id=620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0) 1m4.639601598s ago: executing program 5 (id=1041): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 1m4.090445497s ago: executing program 5 (id=1044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0xc00, 0x1a9, 0x1}, 0x18) lseek(0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x190, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x416}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x1f58, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @private1, 0xc0d}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x61f}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @empty, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff84d3}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40000}, 0x4011) mknodat(r4, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000000)='net/igmp\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711060000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) io_setup(0xfe, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000240)={r8, 0x1, 0xfff}) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f00000003e3f6918a5688e45c6fb3ad31c2f803f3e81256a5019dc4eb004d30e8349bc61350137c1c070d0a7cbae144cb9e99d4a00fdad9aaf443a16c60c24c130e3a4facd169b932d3ddecf3aec52343ccf3bb9030973a2d5fca795e557a3396a0cff473c9f325c234c11936916eff751dbba19d9b3fedcdd4030f98da2be029a92231ee042ee6e2ae9ed89835e861fe155eda076da12b73599e6af3509dbe4b7230365bc714f0b38901d2581564970634ef79925545ce5ae6e17a56260536bd10fe92be1fe84fb5d1da9e70864fc9baabd9b7276671f2ef33de910533d206897ba8463", @ANYBLOB="200029bd7000fedbdf25020000000400050006000a004e210000060001004e24000004000500080006006401010014000900fc00"/63], 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x20001004) 1m2.745334832s ago: executing program 5 (id=1048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0xc00, 0x1a9, 0x1}, 0x18) lseek(0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x190, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x416}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x1f58, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @private1, 0xc0d}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x61f}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @empty, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff84d3}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40000}, 0x4011) mknodat(r4, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000000)='net/igmp\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711060000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) io_setup(0xfe, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000240)={r8, 0x1, 0xfff}) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f00000003e3f6918a5688e45c6fb3ad31c2f803f3e81256a5019dc4eb004d30e8349bc61350137c1c070d0a7cbae144cb9e99d4a00fdad9aaf443a16c60c24c130e3a4facd169b932d3ddecf3aec52343ccf3bb9030973a2d5fca795e557a3396a0cff473c9f325c234c11936916eff751dbba19d9b3fedcdd4030f98da2be029a92231ee042ee6e2ae9ed89835e861fe155eda076da12b73599e6af3509dbe4b7230365bc714f0b38901d2581564970634ef79925545ce5ae6e17a56260536bd10fe92be1fe84fb5d1da9e70864fc9baabd9b7276671f2ef33de910533d206897ba8463", @ANYBLOB="200029bd7000fedbdf25020000000400050006000a004e210000060001004e24000004000500080006006401010014000900fc00"/63], 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x20001004) 1m1.796815619s ago: executing program 5 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000202020"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x29878c2, 0x0, 0x1, 0x0, &(0x7f0000000380)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000580)=@urb_type_interrupt={0x1, {0x4}, 0x9, 0x6, &(0x7f0000000340)="7c7bf5ae0fa89cf356c5c7f58009159f61208a9ac5c63f563c99ad3c3dc3f356ade29843faa600e3dd289609376c62bee2f3ad6b08049830", 0x38, 0x1ff, 0x6, 0x0, 0x833b, 0x4, &(0x7f0000000380)="179ce1b6a061cffb04812a60cbe0d255ddcea5753074d3452c52f664c661ee0ede9c5859f90677520780cc05259fa26af231d45d6552bd31c5315ad9c603b1ca0f546c1b86ee344261d0672e86bba61e0b859729b31eda6f975c84975517dd93bb50d1fea235c9770e933b73f8f1c62f1dfa910f7c5d867c348ea36a6bc1c8914292f9f901605b5df8e6437a6a36679742389bfc39c11a7b28925efc149d6ee4d78e6920e49e16e56d1d70"}) r6 = socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @remote}}}}, 0x0) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)={[{@default_permissions}], [], 0x2c}) 1m1.420010938s ago: executing program 5 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) close(0xffffffffffffffff) getrusage(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32], 0x58}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$packet_buf(r5, 0x107, 0xa, 0x0, &(0x7f0000000000)) 1m1.323113748s ago: executing program 5 (id=1060): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r0, 0x60f6000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000016c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0x40086607, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 1m1.322876127s ago: executing program 35 (id=1060): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r0, 0x60f6000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000016c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0x40086607, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 13.627286444s ago: executing program 1 (id=1326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 13.564769994s ago: executing program 1 (id=1329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) getdents(r2, 0x0, 0x0) 13.479160263s ago: executing program 1 (id=1331): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1e, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000b00)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000000a80), 0x0, 0x40002002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) dup3(0xffffffffffffffff, r5, 0x0) unshare(0x42000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000000000000800000008400200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000de35574a3915051600"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000ab70626d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x10000, &(0x7f0000000c00), 0x1, 0xb8e, &(0x7f00000017c0)="$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") 12.000806628s ago: executing program 1 (id=1338): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000002f00)={0x0, 0xfb, 0x1015, 0x0, 0x3, "67f404cba088d8ded92cbb36ac999d9a", "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"}, 0x1015, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0x9, 0x2a8, &(0x7f0000000500)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000002f00)={0x0, 0xfb, 0x1015, 0x0, 0x3, "67f404cba088d8ded92cbb36ac999d9a", "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"}, 0x1015, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) (async) getpid() (async) sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) (async) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0x9, 0x2a8, &(0x7f0000000500)="$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") (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) 11.191926746s ago: executing program 1 (id=1342): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fremovexattr(0xffffffffffffffff, 0x0) 11.023734485s ago: executing program 1 (id=1346): sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendto$packet(r0, &(0x7f00000000c0)="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", 0xfa, 0x4, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x1) accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x80800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x400, 0x5, 0xb, 0x40052, 0x1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0xa, @void, @value, @void, @value}, 0x50) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000400)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/50, 0x32}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f0000000640)=""/64, 0x40}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000880)=""/91, 0x5b}], 0x8, &(0x7f0000000980)=""/143, 0x8f}, 0xa7c4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/128, 0x80}, {&(0x7f0000000ac0)=""/175, 0xaf}], 0x2, &(0x7f0000000bc0)=""/7, 0x7}, 0x3}, {{&(0x7f0000000c00)=@caif=@dgm, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000c80)=""/161, 0xa1}, {&(0x7f0000000d40)=""/52, 0x34}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/54, 0x36}, {&(0x7f0000001dc0)=""/48, 0x30}, {&(0x7f0000001e00)=""/236, 0xec}, {&(0x7f0000001f00)=""/69, 0x45}, {&(0x7f0000001f80)=""/199, 0xc7}, {&(0x7f0000002080)=""/15, 0xf}], 0x9, &(0x7f0000002180)=""/205, 0xcd}}], 0x3, 0x20, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000023c0)='.log\x00', 0x4040c0, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002480)={0xb, 0x0}, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000026c0)={0x6, 0x10, &(0x7f00000024c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6d5}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xd, 0x1, 0x2, 0xfffffffffffffffe, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000002540)='GPL\x00', 0x8, 0xb, &(0x7f0000002580)=""/11, 0x40f00, 0x54, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000025c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000002600)={0x3, 0xf, 0x6, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002640)=[r3], &(0x7f0000002680)=[{0x0, 0xffff, 0x0, 0x9}], 0x10, 0xc9, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xe, 0x8, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}]}, &(0x7f0000002380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x71, '\x00', r4, @fallback=0x22, r5, 0x8, &(0x7f0000002400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002440)={0x5, 0x6, 0x48000000, 0x1000}, 0x10, r6, r7, 0x1, &(0x7f0000002780)=[r3, r3, r3], &(0x7f00000027c0)=[{0x4, 0x5, 0x0, 0x7}], 0x10, 0xa, @void, @value}, 0x94) r9 = creat(&(0x7f00000028c0)='./file0\x00', 0xd5) r10 = socket$inet(0x2, 0x4, 0x40) openat$urandom(0xffffffffffffff9c, &(0x7f0000002900), 0x30002, 0x0) connect$inet(r10, &(0x7f0000002940)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002980)={'veth0_to_bridge\x00'}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f00000029c0), 0x2000, 0x0) pwrite64(r0, &(0x7f0000002a00)="8b3b329381fd8cf2d4514e3f5a237b2116a1cf725a89bb7c83f9b998d64810d67070e69cc414c6916e307a1d24aeec43e2148cf497f1dee87aa63797e495645dab371d6ea7aa623e1dce9b820d7a7907ccef01ce7b29e137bf0bea1104fe0d976b1fcfa0de23c6867008e36f8059fcbe2f4c3edc93fdd0be3813415056", 0x7d, 0x0) preadv(r11, &(0x7f0000002f80)=[{&(0x7f0000002a80)=""/212, 0xd4}, {&(0x7f0000002b80)=""/136, 0x88}, {&(0x7f0000002c40)=""/71, 0x47}, {&(0x7f0000002cc0)=""/27, 0x1b}, {&(0x7f0000002d00)=""/230, 0xe6}, {&(0x7f0000002e00)=""/78, 0x4e}, {&(0x7f0000002e80)=""/213, 0xd5}], 0x7, 0x0, 0xc77) socket$inet(0x2, 0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000003000)={0x10001, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CAP_DISABLE_QUIRKS(r9, 0x4068aea3, &(0x7f0000003040)={0x74, 0x0, 0x14}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000030c0), r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003140)={&(0x7f0000003100)='percpu_alloc_percpu\x00', r8, 0x0, 0x10}, 0x18) setsockopt$inet6_int(r5, 0x29, 0xf4, &(0x7f0000003180)=0x7f, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x10, 0x3f8, 0x800, 0x70bd29, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000032c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000003300)={0x9, 0xffff1000, 0x0, 0xffffffffffffffff, 0x9}) 11.023360015s ago: executing program 36 (id=1346): sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendto$packet(r0, &(0x7f00000000c0)="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", 0xfa, 0x4, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x1) accept4$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x80800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x400, 0x5, 0xb, 0x40052, 0x1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0xa, @void, @value, @void, @value}, 0x50) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000400)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/50, 0x32}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f0000000640)=""/64, 0x40}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000880)=""/91, 0x5b}], 0x8, &(0x7f0000000980)=""/143, 0x8f}, 0xa7c4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/128, 0x80}, {&(0x7f0000000ac0)=""/175, 0xaf}], 0x2, &(0x7f0000000bc0)=""/7, 0x7}, 0x3}, {{&(0x7f0000000c00)=@caif=@dgm, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000c80)=""/161, 0xa1}, {&(0x7f0000000d40)=""/52, 0x34}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/54, 0x36}, {&(0x7f0000001dc0)=""/48, 0x30}, {&(0x7f0000001e00)=""/236, 0xec}, {&(0x7f0000001f00)=""/69, 0x45}, {&(0x7f0000001f80)=""/199, 0xc7}, {&(0x7f0000002080)=""/15, 0xf}], 0x9, &(0x7f0000002180)=""/205, 0xcd}}], 0x3, 0x20, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f00000023c0)='.log\x00', 0x4040c0, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002480)={0xb, 0x0}, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000026c0)={0x6, 0x10, &(0x7f00000024c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6d5}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xd, 0x1, 0x2, 0xfffffffffffffffe, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000002540)='GPL\x00', 0x8, 0xb, &(0x7f0000002580)=""/11, 0x40f00, 0x54, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000025c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000002600)={0x3, 0xf, 0x6, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002640)=[r3], &(0x7f0000002680)=[{0x0, 0xffff, 0x0, 0x9}], 0x10, 0xc9, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xe, 0x8, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}]}, &(0x7f0000002380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x71, '\x00', r4, @fallback=0x22, r5, 0x8, &(0x7f0000002400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002440)={0x5, 0x6, 0x48000000, 0x1000}, 0x10, r6, r7, 0x1, &(0x7f0000002780)=[r3, r3, r3], &(0x7f00000027c0)=[{0x4, 0x5, 0x0, 0x7}], 0x10, 0xa, @void, @value}, 0x94) r9 = creat(&(0x7f00000028c0)='./file0\x00', 0xd5) r10 = socket$inet(0x2, 0x4, 0x40) openat$urandom(0xffffffffffffff9c, &(0x7f0000002900), 0x30002, 0x0) connect$inet(r10, &(0x7f0000002940)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002980)={'veth0_to_bridge\x00'}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f00000029c0), 0x2000, 0x0) pwrite64(r0, &(0x7f0000002a00)="8b3b329381fd8cf2d4514e3f5a237b2116a1cf725a89bb7c83f9b998d64810d67070e69cc414c6916e307a1d24aeec43e2148cf497f1dee87aa63797e495645dab371d6ea7aa623e1dce9b820d7a7907ccef01ce7b29e137bf0bea1104fe0d976b1fcfa0de23c6867008e36f8059fcbe2f4c3edc93fdd0be3813415056", 0x7d, 0x0) preadv(r11, &(0x7f0000002f80)=[{&(0x7f0000002a80)=""/212, 0xd4}, {&(0x7f0000002b80)=""/136, 0x88}, {&(0x7f0000002c40)=""/71, 0x47}, {&(0x7f0000002cc0)=""/27, 0x1b}, {&(0x7f0000002d00)=""/230, 0xe6}, {&(0x7f0000002e00)=""/78, 0x4e}, {&(0x7f0000002e80)=""/213, 0xd5}], 0x7, 0x0, 0xc77) socket$inet(0x2, 0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000003000)={0x10001, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CAP_DISABLE_QUIRKS(r9, 0x4068aea3, &(0x7f0000003040)={0x74, 0x0, 0x14}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000030c0), r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003140)={&(0x7f0000003100)='percpu_alloc_percpu\x00', r8, 0x0, 0x10}, 0x18) setsockopt$inet6_int(r5, 0x29, 0xf4, &(0x7f0000003180)=0x7f, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x10, 0x3f8, 0x800, 0x70bd29, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000032c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(r13, 0x4040ae79, &(0x7f0000003300)={0x9, 0xffff1000, 0x0, 0xffffffffffffffff, 0x9}) 4.666525965s ago: executing program 7 (id=1399): syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7}]}}, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@redirect_dir_on}]}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @input_terminal={0xc}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "4336d88b1a56"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x2, "f6f81132fff8"}, @as_header={0x7, 0x24, 0x1, 0xfe}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x2, 0x3, 0x0, 0x0, @loopback, @local}}}}) 4.087565663s ago: executing program 8 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 3.974165892s ago: executing program 8 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x2000809, &(0x7f0000000000)=ANY=[], 0x0, 0x21a, &(0x7f00000004c0)="$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") sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x4008024}, 0x80) socket(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1955, 0x8021, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0x1, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x7, 0x9fd, {0x3, 0x8}}, {0x52f, 0x7, {0x3}}, {0x8, 0x7, {0x1, 0x13}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x2, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x8000}}, {0xd, 0x3, {0x3, 0x404}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x7, {0x0, 0x7}}, {0x2, 0x0, {0x2, 0x3}}, {0x5, 0xb, {0x2, 0x40000001}}, {0x5, 0xf, {0x0, 0x4}}, {0x5, 0x3, {0x3, 0xaa0}}, {0x9, 0x8, {0x0, 0x6}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0xc, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x2, 0x9}}, {0x400, 0x101, {0x3, 0x5}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0x20a80}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x13, 0x1, {0x2, 0x80000001}}, {0xa9, 0x6, {0x1, 0x5}}, {0x81, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.467248911s ago: executing program 2 (id=1411): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x810001, &(0x7f00000003c0)={[{@nodiscard}, {}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, '\xc9#-'}}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000000fc020000000000000000000000000000e0000001000000000000000000000000000000000000fffe0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf0}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000089000/0x3000)=nil, 0x3000, 0x1000006, 0x238b6b73558044f8, 0xffffffffffffffff, 0x2d221000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) 3.12985768s ago: executing program 9 (id=1413): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000340)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nojournal_checksum}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1372ac98e73966fcb4941801000000000000000000000000ea"], &(0x7f0000000100)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = socket$netlink(0x10, 0x3, 0xf) socket$inet(0x2, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de00000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc004050}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="54010000100013070000000000000000e0000001000000000000000200000000000001d000000000020000005e0000000000000000000000000000000000004c", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac141400000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000100000000000000000000000000000000000010000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 2.952643509s ago: executing program 2 (id=1415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000000040)=""/44, 0x3c) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents64(r2, &(0x7f0000002180)=""/4102, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000a67f2c001c00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @adiantum, 0x1, '\x00', @b}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.851505549s ago: executing program 8 (id=1416): mkdir(&(0x7f00000003c0)='./file0\x00', 0x113) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x42002, 0x41) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r3}, {r0, 0x96}], 0x2, &(0x7f0000000200)={r4, r5+60000000}, &(0x7f0000000240)={[0x200]}, 0x8) 2.796821139s ago: executing program 8 (id=1418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 2.795961509s ago: executing program 9 (id=1419): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005f40), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) dup3(0xffffffffffffffff, r4, 0x0) unshare(0x42000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000ab70626d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x10000, &(0x7f0000000c00), 0x1, 0xb8e, &(0x7f00000017c0)="$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") 2.733936748s ago: executing program 2 (id=1420): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1fffe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r5, 0x850, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r3, 0x0) 2.468619848s ago: executing program 0 (id=1421): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) getdents(r3, 0x0, 0x0) 2.459316848s ago: executing program 2 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9b, 0x912}}}}}}, 0x0) 2.359678827s ago: executing program 8 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file1', [{0x20, '/#(+*^$^#,$&\x1f@\'&'}, {}]}, 0x1d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003ef000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000380)="0f201766b9e309000066b83f46151e66ba1cc889580f302ef4ba6100ed0f0966b90602000066b80100000066ba000000000f300f20c06635000000400f22c066adbaa100ecf9", 0x25}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f00004d9000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000440)="b9800000c00f3235002000000f30b8000000000f23d80f21f835400000f00f23f8b83b0000000f23d00f21f835000000060f23f80f01cbb9be090000b8f5000000ba000000000f30b89e0000000f23d80f21f835400000800f23f8c4e17f5eae008000003e0f20180f0052540f2921", 0x6f}], 0x1, 0x0, &(0x7f0000000500)=[@flags={0x3, 0x40094}], 0x1) fstat(r7, &(0x7f00000005c0)) lseek(r2, 0x0, 0x4) 2.303395687s ago: executing program 0 (id=1424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="08a503576a7f"}, 0x0, {0x2, 0x0, @loopback}, 'syz_tun\x00'}) 1.826564595s ago: executing program 2 (id=1425): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x810001, &(0x7f00000003c0)={[{@nodiscard}, {}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, '\xc9#-'}}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000000fc020000000000000000000000000000e0000001000000000000000000000000000000000000fffe0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000de27564a2a1a09872b6c900e9ffffffffffff32000000ac14144b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008ec8be3dde15d5a35bf29dc3450e35b40000000000000000000000000000000000000000000000000000000099aeab0000000000000000000000000000000000000000000000000000000000000000000000000000000800000000007774456cc80dd8fa73a63b805016ec9d5ae710d482b9de6c49597ccb58b1c58c4f12b204f6540bf89c2962a15df22dd0e3a1078e041180272ecd0d25e2a1206c378717665f37"], 0xf0}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000089000/0x3000)=nil, 0x3000, 0x1000006, 0x238b6b73558044f8, 0xffffffffffffffff, 0x2d221000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) 1.655188225s ago: executing program 7 (id=1426): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES16=r0, @ANYBLOB="000000000041d6bf42d2f3a8d900000000000000a3f53b846609a61b68865a2793afa5808df150c9dbf8eafc4b3387edf78c85a3608cff6aa5880fc12da1552edb9f5f69741ef5b3ebff7e9645fc4867e579fbc157004897375eb647d61041d5c8e3c8904a28b5f8360b5736b2870cb5a9235f749724407d22bb8959bac59aad85aaad1a0c8f3f3ff4f4766fe1e8d6236e0c98df3ea1a1d3d937", @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3, 0x1, @thr={&(0x7f0000000940)="ea33b664a24fed6c1849bcf55e46eefad4399a8f8704274ae24db4de3627996bd60969db19921298468404ab7fdc318ee448d6615446c3db69cc4b11d16cf17a03b935fea58fc00f27bb09c5d497bb591a12cc0b5372413d412ba278437f7affdd4c3a4d3cc4e5fc3c767deb7f650d66ae47709e4600bc3929447848f276aae0862d4decba69e4d03e76b55234dd16497dfbca103b00eff04b66e1d4b4fa7d2ce55893a7", &(0x7f0000000780)="8270b8d17b11d70b771f6a30143178fb6c3b856a4491b0748e1909d16800d225df361591ddaf2fa9bce32ee4fa889baa9d55b1c23ae98d7b44015c50d2a8bc771371f163d567ad7c68a7a3416279339ed2bf9d4db95959c854be4a4bd78c85780b9702dfe3e5cf39743e4b64a6c1bc85f17584569245480961cd47fb4fd54894c84889c3469c0b9369a5b5f1a6f9a115f0352ae3408ade6491c59f9bfd353635df94e9f884b64d006fa3020d151eee023de4b32432ecef29400a00c28f8f2faa5805ffe78ec38e3a8db422b640f6eb433df001c946128197a549a4e16f4a4db352ca3ad5e5"}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000040a3a470000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000100000000000000002000d9c4000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.543310624s ago: executing program 0 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) close_range(r6, r6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000200)) r8 = inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x80000006) inotify_rm_watch(0xffffffffffffffff, r8) sendto$packet(r4, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000240)={0x2f, 0x19, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1.335199644s ago: executing program 0 (id=1428): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00030020000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 997.736763ms ago: executing program 9 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x10000000, 0x0, 0x0, 0x4, 0x0) 977.276733ms ago: executing program 0 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) close(0xffffffffffffffff) getrusage(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32], 0x58}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$packet_buf(r5, 0x107, 0xa, 0x0, &(0x7f0000000000)) 901.814232ms ago: executing program 9 (id=1431): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB='rodir,nonumtail=0,shortname=winnt,uni_xlate=1,codepage=864,codepage=865rset=koi8-ru,utf8=0,utf8=0,rodir,uni_xlate=1,\x00'/129], 0x1, 0x26c, &(0x7f0000000340)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) recvmmsg(r1, 0x0, 0x0, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x5, 0x1, r8}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_ENCAP_TYPE={0x0, 0xe, 0x2}]}}}]}, 0x68}}, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000700000b7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000009ac8ba700d428c6638a7c8d883354b34c80d77d166996483d17e5b4627ae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x10) 471.583561ms ago: executing program 9 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x457, &(0x7f0000000d80)="$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") close(r2) 468.963521ms ago: executing program 7 (id=1433): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 243.599331ms ago: executing program 7 (id=1434): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) getrlimit(0xd, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x101400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512406c7f0000000000008000", [0x6, 0x40000000000000]}}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x3, &(0x7f0000000340)=@raw=[@ldst={0x3, 0x1, 0x4, 0x3, 0x0, 0x10, 0xfffffffffffffff0}, @generic={0x9, 0x8, 0x9, 0x9, 0x7}, @generic={0xb5, 0x4, 0x5, 0x9, 0x4}], &(0x7f0000000600)='GPL\x00', 0xffff, 0x0, 0x0, 0x41100, 0x18, '\x00', r0, @fallback=0x29, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x2, 0x60, 0x62c}, 0x10, 0xffffffffffffffff, r6, 0x3, &(0x7f0000000700)=[r2, r8, r2, r2, r2, r2, r4], &(0x7f0000000800)=[{0x3, 0x2, 0x8, 0x8}, {0x0, 0x1, 0x0, 0x8}, {0x2, 0x4, 0x9, 0x5}], 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) 26.49629ms ago: executing program 9 (id=1435): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='xprtrdma_op_connect\x00', r0, 0x0, 0x4}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0b88b6ffd0fa9fb52e04000009000000010000003b712e38f8a8606cfed6266525506ca65434600163ab31544ea3bb757c7096abafa070c06fa0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xd, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYBLOB="460d9ce2c193ce49ee41c3a7721f8087d4b548a598058b566e71ee96c69d9132c592cc017bc529c550ec7bcf45a57c1f419bb87483d1b5dd7613d242e81d4490a9b374a3d4ad7390b8813fa59f348e35c1a7759e53789ce13660410faac735aecb5f014f9dac10e2cf10e2aeb586d9cb2da22eca68f4c4edd8d938bc58f035cf291f9ef2", @ANYRES64=r1, @ANYRES8, @ANYBLOB="5955a9438866e959ad737c1c3f7381f0686b083e3f483c722ca8ed7215cc7ba2a96e381347d102e50efc494d09b57982ff7295b40f7f612f1246cc8926afc502b2a64ed8d487ddd3331db930909f682b9a4037895eddac24dae8f439d0e5b3f32e3a808fc38c2da4b8fbe217eaac18696735b3f0832d4322031e4469e6c1ecbc3d12785014d6304f13ad8f9fc772a81a77d883612f3967bbe172cc587138afdd1713c680daf0e807a37d4fb491866ae29dc3acf72d82375fb9f687e23b99a9ade2b9a9672aad20a880c7a3b1482e7294747cc6349fe6a39ab79111b766d63a4728f32d37f3094417c7e7d4f791193faebeea328e74", @ANYRES8=r2, @ANYRES16=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='.\x00', &(0x7f0000000040), 0x58) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000003186704fcb3a96b2fe55d0919868b5cec7ab939e39e3dd5c535dfabf99c5d2ce5a0ab4a33d4e8dbadcc67d8b6fda009fe08731ffbe5b5ba4595d188db797ffbbb688c730ba4652e4a2364e151bf98b2b4835a598371dbe20cc56602e43c98702984b71f0afbe0289ff15078cab7da6b5c2688fa9b49d8a496d2eee3710022821e0f6ee67917c4f99f50fc1116fa58ba66761bca8ecd246d5e5e42e4b6cd744a6d63f3fa4b9bdcc6b91a194befc429a355dcf07b9d561f46927fa18a87bef79dbc59e35591706230f3553f44b4260868b3b1c0be8642394dc33491a"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0xffff912c, 0x0}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3e, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2f47ac3d95a0eca44fdee77d94f9597cf55b0c7a886caa12e9d1716e97487496ab71d900f4380d554d2407c714026a845f491ee623e18183f64569fe13f76d6a215c9dffb65e5d6778944bcad7915f49af8f95360388e70b0cf58ce2f1d367bfe07708a7a702d3a52a8cdb60eb6f5667c60846391086d6fbd7606f0b64ca332a78b6796fb01d0f04", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="c819b481d3854f4d9fd40c6e3c6473f1b5d060f9ef4cccf357bb0cc8baf177247fe30b973e3b4c86f0dfafe1719af5ea7553d4ceaaaeab11ff0ec3879092ebcad2cd016fbda44f699215890c3a09f4b0fe0603d58ab3b613030393479bc178ced5bc999a2e9523dcabbfacd88ebe504fee893015231ce941", @ANYRESHEX, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000c00)='ufshcd_clk_gating\x00', r6}, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 25.79347ms ago: executing program 7 (id=1436): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 20.0682ms ago: executing program 8 (id=1437): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getrlimit(0x1, &(0x7f0000000000)) syslog(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000000000)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) alarm(0x8) mount$overlay(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x3, 0x0, 0xfffffffc, 0x0}) (fail_nth: 2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r8}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="fd7a4cf0b5eb9c0f0070d5d4d61c406be713425f1b906cf438128aa25a6f8163906e59398b226f2b6d288087447c7dc377287c92dc61484644a76217d861973d3bef28eb4a391a7d78c481c1cb1a50af8d85bc0e22ce5fcf65839962c9a4b0994de0e3459c95d6c6aa962cf6b8208ebdcb85f09faebf4576182adf67487fcb8b3a3b1c170e12d1d3f4328a7448e1732248504752006bc9cd198df57014aa945620741a4f52483d4d13ebc885741433955fd36d30e57a59ad2ea4c5a2af1c35", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 19.28338ms ago: executing program 2 (id=1438): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000080080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sync() ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x3) 4.02159ms ago: executing program 7 (id=1439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x9, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x30, 0x5, {0x5, 0xf, "0bb3ba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=1440): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3, 0x1, @thr={&(0x7f0000000940)="ea33b664a24fed6c1849bcf55e46eefad4399a8f8704274ae24db4de3627996bd60969db19921298468404ab7fdc318ee448d6615446c3db69cc4b11d16cf17a03b935fea58fc00f27bb09c5d497bb591a12cc0b5372413d412ba278437f7affdd4c3a4d3cc4e5fc3c767deb7f650d66ae47709e4600bc3929447848f276aae0862d4decba69e4d03e76b55234dd16497dfbca103b00eff04b66e1d4b4fa7d2ce55893a7", &(0x7f0000000780)="8270b8d17b11d70b771f6a30143178fb6c3b856a4491b0748e1909d16800d225df361591ddaf2fa9bce32ee4fa889baa9d55b1c23ae98d7b44015c50d2a8bc771371f163d567ad7c68a7a3416279339ed2bf9d4db95959c854be4a4bd78c85780b9702dfe3e5cf39743e4b64a6c1bc85f17584569245480961cd47fb4fd54894c84889c3469c0b9369a5b5f1a6f9a115f0352ae3408ade6491c59f9bfd353635df94e9f884b64d006fa3020d151eee023de4b32432ecef29400a00c28f8f2faa5805ffe78ec38e3a8db422b640f6eb433df001c946128197a549a4e16f4a4db352ca3ad5e5"}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000040a3a470000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000100000000000000002000d9c4000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) kernel console output (not intermixed with test programs): ready [ 222.282301][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.291583][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.321036][ T2760] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 222.346493][ T2760] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.364542][ T4327] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1075'. [ 222.512564][ T2760] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 222.539903][ T2760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.560269][ T2760] usb 3-1: config 0 descriptor?? [ 222.611064][ T2760] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 222.815364][ T4344] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1076'. [ 222.858645][ T4302] tun0: tun_chr_ioctl cmd 35108 [ 223.115948][ T4347] device pim6reg1 entered promiscuous mode [ 223.495839][ T4350] futex_wake_op: syz.0.1080 tries to shift op by -1; fix this program [ 223.840208][ T4358] 9pnet: Insufficient options for proto=fd [ 224.130554][ T1899] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 224.301448][ T3196] usb 3-1: USB disconnect, device number 20 [ 224.314959][ T4365] futex_wake_op: syz.2.1085 tries to shift op by -1; fix this program [ 224.483055][ T4372] hub 2-0:1.0: USB hub found [ 224.488159][ T4372] hub 2-0:1.0: 1 port detected [ 224.568575][ T4369] EXT4-fs (loop0): Ignoring removed orlov option [ 224.652084][ T4369] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 224.681718][ T4375] device pim6reg1 entered promiscuous mode [ 224.691887][ T4369] EXT4-fs (loop0): re-mounted. Opts: (null) [ 224.760661][ T1899] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.774271][ T1899] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.784263][ T1899] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 224.793551][ T1899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.799847][ T2760] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 224.818591][ T4379] incfs: Error accessing: ./file0. [ 224.819356][ T1899] usb 9-1: config 0 descriptor?? [ 224.823668][ T4379] incfs: mount failed -20 [ 224.950851][ T4384] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 225.160611][ T2760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.171446][ T2760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.181242][ T2760] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 225.190130][ T2760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.198954][ T2760] usb 2-1: config 0 descriptor?? [ 225.287118][ T1899] uclogic 0003:5543:0522.001B: item fetching failed at offset 2/5 [ 225.295878][ T1899] uclogic 0003:5543:0522.001B: parse failed [ 225.302144][ T1899] uclogic: probe of 0003:5543:0522.001B failed with error -22 [ 225.550558][ T1899] usb 9-1: USB disconnect, device number 2 [ 225.715800][ T2760] uclogic 0003:5543:0522.001C: item fetching failed at offset 2/5 [ 225.724089][ T2760] uclogic 0003:5543:0522.001C: parse failed [ 225.729974][ T2760] uclogic: probe of 0003:5543:0522.001C failed with error -22 [ 225.864380][ T4397] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1094'. [ 225.968281][ T2760] usb 2-1: USB disconnect, device number 9 [ 226.190949][ T4404] exfat: Unknown parameter 'nameª}t' [ 227.372290][ T4409] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 227.918310][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 227.918332][ T24] audit: type=1326 audit(1734713630.597:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.044590][ T4422] futex_wake_op: syz.1.1101 tries to shift op by -1; fix this program [ 228.046848][ T24] audit: type=1326 audit(1734713630.717:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.076788][ T24] audit: type=1326 audit(1734713630.717:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.100939][ T24] audit: type=1326 audit(1734713630.717:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.125769][ T24] audit: type=1326 audit(1734713630.717:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.156315][ T24] audit: type=1326 audit(1734713630.717:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.199348][ T24] audit: type=1326 audit(1734713630.717:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.229614][ T24] audit: type=1326 audit(1734713630.717:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.313094][ T4429] hub 2-0:1.0: USB hub found [ 228.318081][ T4429] hub 2-0:1.0: 1 port detected [ 228.374619][ T24] audit: type=1326 audit(1734713630.717:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.409597][ T24] audit: type=1326 audit(1734713630.717:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4416 comm="syz.0.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 228.613456][ T2760] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 228.663388][ T4435] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 228.731668][ T4441] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1105'. [ 228.884213][ T54] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 228.922249][ T4443] futex_wake_op: syz.1.1106 tries to shift op by -1; fix this program [ 229.081525][ T4445] hub 2-0:1.0: USB hub found [ 229.086727][ T4445] hub 2-0:1.0: 1 port detected [ 229.120914][ T2760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.132524][ T2760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.142678][ T2760] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.155989][ T2760] usb 9-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 229.165110][ T2760] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.176976][ T2760] usb 9-1: config 0 descriptor?? [ 229.333412][ T4447] futex_wake_op: syz.0.1107 tries to shift op by -1; fix this program [ 229.390769][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.407170][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.416932][ T54] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 229.425952][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.434421][ T54] usb 8-1: config 0 descriptor?? [ 229.567604][ T4450] hub 2-0:1.0: USB hub found [ 229.572223][ T4450] hub 2-0:1.0: 1 port detected [ 229.904213][ T2760] dragonrise 0003:0079:0011.001D: item fetching failed at offset 1/5 [ 229.913375][ T2760] dragonrise 0003:0079:0011.001D: parse failed [ 229.931762][ T2760] dragonrise: probe of 0003:0079:0011.001D failed with error -22 [ 230.139366][ T54] uclogic 0003:5543:0522.001E: item fetching failed at offset 2/5 [ 230.147243][ T54] uclogic 0003:5543:0522.001E: parse failed [ 230.153159][ T54] uclogic: probe of 0003:5543:0522.001E failed with error -22 [ 230.225046][ T4459] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 230.246120][ T4459] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 230.247076][ T2760] usb 8-1: USB disconnect, device number 6 [ 230.261495][ T4459] F2FS-fs (loop1): invalid crc value [ 230.268577][ T4459] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.292519][ T4468] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 230.293088][ T4459] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 230.302072][ T4468] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 230.308683][ T4459] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 230.333775][ T4468] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 230.342099][ T4468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 230.349985][ T4468] System zones: 0-1, 15-15, 18-18, 34-34 [ 230.356343][ T4468] EXT4-fs (loop0): orphan cleanup on readonly fs [ 230.362749][ T4468] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 230.377337][ T4468] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 230.384036][ T49] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 230.384315][ T4468] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1112: bg 0: block 40: padding at end of block bitmap is not set [ 230.392869][ T49] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 230.416419][ T4468] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 230.425117][ T4468] EXT4-fs (loop0): 1 truncate cleaned up [ 230.431037][ T4468] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue [ 230.446491][ T4468] FAULT_INJECTION: forcing a failure. [ 230.446491][ T4468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.460226][ T4468] CPU: 0 PID: 4468 Comm: syz.0.1112 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 230.470101][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.479996][ T4468] Call Trace: [ 230.483221][ T4468] dump_stack_lvl+0x1e2/0x24b [ 230.487749][ T4468] ? bfq_pos_tree_add_move+0x43b/0x43b [ 230.493032][ T4468] ? kmem_cache_free+0xa9/0x1e0 [ 230.497699][ T4468] dump_stack+0x15/0x17 [ 230.501694][ T4468] should_fail+0x3c6/0x510 [ 230.505946][ T4468] should_fail_usercopy+0x1a/0x20 [ 230.510821][ T4468] _copy_from_user+0x20/0xd0 [ 230.515237][ T4468] __copy_msghdr_from_user+0xaf/0x7c0 [ 230.520528][ T4468] ? __ia32_sys_shutdown+0x70/0x70 [ 230.525472][ T4468] ___sys_sendmsg+0x166/0x2e0 [ 230.529984][ T4468] ? __sys_sendmsg+0x280/0x280 [ 230.534590][ T4468] ? rw_verify_area+0x1c3/0x360 [ 230.539276][ T4468] ? __fdget+0x1bc/0x240 [ 230.543352][ T4468] __se_sys_sendmsg+0x1b1/0x280 [ 230.548037][ T4468] ? __x64_sys_sendmsg+0x90/0x90 [ 230.552809][ T4468] ? ksys_write+0x260/0x2c0 [ 230.557153][ T4468] ? debug_smp_processor_id+0x17/0x20 [ 230.562358][ T4468] __x64_sys_sendmsg+0x7b/0x90 [ 230.566956][ T4468] do_syscall_64+0x34/0x70 [ 230.571212][ T4468] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.576937][ T4468] RIP: 0033:0x7fb10b2ffd29 [ 230.581189][ T4468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.600639][ T4468] RSP: 002b:00007fb109971038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.608873][ T4468] RAX: ffffffffffffffda RBX: 00007fb10b4effa0 RCX: 00007fb10b2ffd29 [ 230.616684][ T4468] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000005 [ 230.624497][ T4468] RBP: 00007fb109971090 R08: 0000000000000000 R09: 0000000000000000 [ 230.632317][ T4468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.640138][ T4468] R13: 0000000000000000 R14: 00007fb10b4effa0 R15: 00007ffc33cecb48 [ 230.981700][ T4486] EXT4-fs (loop2): Ignoring removed nobh option [ 231.110486][ T4486] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,nobh,errors=remount-ro, [ 231.141988][ T4486] EXT4-fs error (device loop2): ext4_find_extent:928: inode #2: comm syz.2.1117: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 231.158389][ T4486] EXT4-fs (loop2): Remounting filesystem read-only [ 231.260591][ T15] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 231.275418][ T3196] usb 9-1: USB disconnect, device number 3 [ 231.317475][ T4497] futex_wake_op: syz.8.1120 tries to shift op by -1; fix this program [ 231.374181][ T2760] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 232.324991][ T2760] usb 8-1: Using ep0 maxpacket: 16 [ 232.360654][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.371339][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.380913][ T15] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 232.389992][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.398742][ T15] usb 2-1: config 0 descriptor?? [ 232.440881][ T2760] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 232.452873][ T2760] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.473943][ T2760] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 232.484308][ T2760] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.497442][ T2760] usb 8-1: config 0 descriptor?? [ 232.651984][ T2760] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 232.677464][ T4519] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 232.686313][ T4519] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.852742][ T4492] tun0: tun_chr_ioctl cmd 35108 [ 232.861445][ T15] uclogic 0003:5543:0522.001F: item fetching failed at offset 2/5 [ 232.869209][ T15] uclogic 0003:5543:0522.001F: parse failed [ 232.875079][ T15] uclogic: probe of 0003:5543:0522.001F failed with error -22 [ 232.980604][ T54] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.281501][ T3923] usb 2-1: USB disconnect, device number 10 [ 233.418529][ T4528] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 233.514956][ T4533] 9pnet: Insufficient options for proto=fd [ 233.974298][ T4537] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 233.986647][ T4540] xt_hashlimit: size too large, truncated to 1048576 [ 234.006368][ T4537] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 234.014724][ T4537] EXT4-fs (loop2): orphan cleanup on readonly fs [ 234.021105][ T4537] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1130: bg 0: block 361: padding at end of block bitmap is not set [ 234.035646][ T4537] EXT4-fs (loop2): Remounting filesystem read-only [ 234.042000][ T4537] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 234.050922][ T4537] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #11: comm syz.2.1130: attempt to clear invalid blocks 33619980 len 1 [ 234.064578][ T4537] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.1130: invalid indirect mapped block 1811939328 (level 0) [ 234.078528][ T4537] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.1130: invalid indirect mapped block 2185560079 (level 1) [ 234.092752][ T4537] EXT4-fs (loop2): 1 truncate cleaned up [ 234.098207][ T4537] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000 [ 234.118347][ T4537] EXT4-fs warning (device loop2): dx_probe:860: inode #2: comm syz.2.1130: dx entry: limit 0 != root limit 125 [ 234.130558][ T4537] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.1130: Corrupt directory, running e2fsck is recommended [ 234.174672][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.195085][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.224231][ T4552] 9pnet: Insufficient options for proto=fd [ 234.225398][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.239893][ T54] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 234.257470][ T54] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 234.266767][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.275726][ T24] kauditd_printk_skb: 93 callbacks suppressed [ 234.275736][ T24] audit: type=1326 audit(1734713636.957:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.314306][ T54] usb 1-1: config 0 descriptor?? [ 234.319281][ T24] audit: type=1326 audit(1734713636.957:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.342760][ T24] audit: type=1326 audit(1734713636.957:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.367540][ T24] audit: type=1326 audit(1734713636.957:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.391316][ T24] audit: type=1326 audit(1734713636.957:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.414736][ T24] audit: type=1326 audit(1734713636.957:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.438200][ T24] audit: type=1326 audit(1734713636.957:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.462745][ T24] audit: type=1326 audit(1734713636.957:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.462889][ T4554] EXT4-fs (loop1): Invalid journal IO priority (must be 0-7) [ 234.493607][ T24] audit: type=1326 audit(1734713636.957:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.522698][ T3923] usb 8-1: USB disconnect, device number 7 [ 234.522844][ T24] audit: type=1326 audit(1734713636.957:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4553 comm="syz.1.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 234.598937][ T4559] futex_wake_op: syz.1.1137 tries to shift op by -1; fix this program [ 234.755230][ T4561] hub 2-0:1.0: USB hub found [ 234.760145][ T4561] hub 2-0:1.0: 1 port detected [ 234.935782][ T3923] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 234.981225][ T54] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 234.991341][ T54] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0020/input/input7 [ 235.071119][ T4572] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 235.081451][ T54] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 235.199893][ T54] usb 1-1: USB disconnect, device number 15 [ 235.300599][ T3923] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.311333][ T3923] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.321258][ T3923] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 235.330143][ T3923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.338850][ T3923] usb 8-1: config 0 descriptor?? [ 235.821941][ T3923] uclogic 0003:5543:0522.0021: item fetching failed at offset 2/5 [ 235.829904][ T3923] uclogic 0003:5543:0522.0021: parse failed [ 235.833112][ T4580] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 235.836367][ T3923] uclogic: probe of 0003:5543:0522.0021 failed with error -22 [ 235.860643][ T4580] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 235.950652][ T386] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.996421][ T4583] netlink: 'syz.8.1143': attribute type 29 has an invalid length. [ 236.004087][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1143'. [ 236.012973][ T4583] netlink: 'syz.8.1143': attribute type 29 has an invalid length. [ 236.020625][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1143'. [ 236.032566][ T54] usb 8-1: USB disconnect, device number 8 [ 236.040261][ T4583] netlink: 'syz.8.1143': attribute type 29 has an invalid length. [ 236.048504][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1143'. [ 236.190569][ T386] usb 2-1: Using ep0 maxpacket: 8 [ 236.240562][ T15] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 236.330181][ T4598] xt_hashlimit: size too large, truncated to 1048576 [ 236.360572][ T3923] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 236.390657][ T386] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 236.398544][ T386] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.408899][ T386] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 236.417878][ T386] usb 2-1: config 1 has no interface number 1 [ 236.424066][ T386] usb 2-1: too many endpoints for config 1 interface 4 altsetting 4: 57, using maximum allowed: 30 [ 236.436907][ T386] usb 2-1: config 1 interface 4 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 57 [ 236.450470][ T386] usb 2-1: config 1 interface 4 has no altsetting 0 [ 236.530581][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 236.620558][ T3923] usb 9-1: Using ep0 maxpacket: 32 [ 236.630767][ T386] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.639802][ T386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.647713][ T386] usb 2-1: Product: syz [ 236.651668][ T386] usb 2-1: Manufacturer: з [ 236.655938][ T386] usb 2-1: SerialNumber: syz [ 236.730839][ T4604] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1150'. [ 236.848173][ T15] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 236.858377][ T15] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.871066][ T15] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 236.879939][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.888537][ T15] usb 1-1: config 0 descriptor?? [ 236.930937][ T4577] FAT-fs (loop1): Unrecognized mount option "uni_xl\te=0" or missing value [ 236.940749][ T3923] usb 9-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 236.949783][ T3923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.951132][ T15] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 236.957969][ T3923] usb 9-1: Product: syz [ 236.968687][ T3923] usb 9-1: Manufacturer: syz [ 236.973140][ T3923] usb 9-1: SerialNumber: syz [ 236.978069][ T3923] usb 9-1: config 0 descriptor?? [ 237.154349][ T4592] tun0: tun_chr_ioctl cmd 35108 [ 237.160653][ T386] usb 2-1: 0:2 : does not exist [ 237.176345][ T4608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 237.203509][ T386] usb 2-1: USB disconnect, device number 11 [ 237.246193][ T4608] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 237.411496][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.025036][ T3923] rtl8150 9-1:0.0: eth1: rtl8150 is detected [ 238.218047][ T4618] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 238.581362][ T4595] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 238.591573][ T4595] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 238.602215][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 238.602434][ T4595] EXT4-fs error (device loop8): ext4_get_journal_inode:5243: inode #5: comm syz.8.1148: unexpected bad inode w/o EXT4_IGET_BAD [ 238.616917][ T4626] EXT4-fs (loop7): Ignoring removed orlov option [ 238.624201][ T4595] EXT4-fs (loop8): no journal found [ 238.635261][ T4595] EXT4-fs (loop8): can't get journal size [ 238.643984][ T4626] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 238.670262][ T4595] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue [ 238.698018][ T4595] incfs: Can't find or create .index dir in ./file0 [ 238.716886][ T4595] incfs: mount failed -30 [ 238.762514][ T5] usb 9-1: USB disconnect, device number 4 [ 239.633566][ T24] kauditd_printk_skb: 131 callbacks suppressed [ 239.633576][ T24] audit: type=1400 audit(1734713642.317:2847): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 239.661064][ T15] usb 1-1: USB disconnect, device number 16 [ 239.730726][ T24] audit: type=1326 audit(1734713642.347:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 239.786812][ T24] audit: type=1326 audit(1734713642.347:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 239.908318][ T24] audit: type=1326 audit(1734713642.357:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 239.931729][ T24] audit: type=1326 audit(1734713642.357:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 239.956492][ T24] audit: type=1326 audit(1734713642.357:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 239.983077][ T24] audit: type=1326 audit(1734713642.357:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 240.012700][ T4686] exfat: Deprecated parameter 'utf8' [ 240.019129][ T4686] exfat: Deprecated parameter 'namecase' [ 240.111069][ T4686] exfat: Deprecated parameter 'namecase' [ 240.308218][ T24] audit: type=1326 audit(1734713642.357:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 240.343763][ T4692] EXT4-fs (loop7): Test dummy encryption mode enabled [ 240.350970][ T4692] EXT4-fs (loop7): Test dummy encryption mode enabled [ 240.357633][ T4692] EXT4-fs (loop7): Ignoring removed orlov option [ 240.387942][ T4692] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 240.447409][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1164'. [ 240.457631][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1164'. [ 240.489570][ T4683] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 240.574890][ T4683] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 240.682934][ T4686] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 240.794085][ T4683] F2FS-fs (loop0): invalid crc value [ 240.831634][ T24] audit: type=1326 audit(1734713642.357:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 240.854993][ T24] audit: type=1326 audit(1734713642.357:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4676 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a8d8d29 code=0x7ffc0000 [ 240.966091][ T4683] F2FS-fs (loop0): Found nat_bits in checkpoint [ 241.206246][ T4710] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1167'. [ 241.277089][ T4683] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 241.284227][ T4683] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 241.328970][ T4720] FAULT_INJECTION: forcing a failure. [ 241.328970][ T4720] name failslab, interval 1, probability 0, space 0, times 0 [ 241.356467][ T4720] CPU: 1 PID: 4720 Comm: syz.1.1170 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 241.366267][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.376245][ T4720] Call Trace: [ 241.379379][ T4720] dump_stack_lvl+0x1e2/0x24b [ 241.385117][ T4720] ? panic+0x812/0x812 [ 241.389039][ T4720] ? bfq_pos_tree_add_move+0x43b/0x43b [ 241.394340][ T4720] dump_stack+0x15/0x17 [ 241.398300][ T4720] should_fail+0x3c6/0x510 [ 241.402730][ T4720] ? __alloc_skb+0x80/0x510 [ 241.407057][ T4720] __should_failslab+0xa4/0xe0 [ 241.411797][ T4720] should_failslab+0x9/0x20 [ 241.416092][ T4720] kmem_cache_alloc+0x3d/0x2e0 [ 241.420784][ T4720] __alloc_skb+0x80/0x510 [ 241.424938][ T4720] alloc_skb_with_frags+0xa1/0x570 [ 241.429886][ T4720] ? __kasan_check_write+0x14/0x20 [ 241.434832][ T4720] sock_alloc_send_pskb+0x915/0xa50 [ 241.439866][ T4720] ? _raw_spin_unlock+0x4d/0x70 [ 241.444555][ T4720] ? sock_kzfree_s+0x60/0x60 [ 241.448975][ T4720] ? __kasan_check_write+0x14/0x20 [ 241.453922][ T4720] ? _raw_spin_lock+0xa4/0x1b0 [ 241.458525][ T4720] ? _raw_spin_trylock_bh+0x190/0x190 [ 241.463745][ T4720] unix_dgram_sendmsg+0x700/0x1f90 [ 241.468767][ T4720] ? selinux_socket_sendmsg+0x243/0x340 [ 241.474904][ T4720] ? unix_dgram_poll+0x610/0x610 [ 241.479835][ T4720] ? vmf_allows_speculation+0x6f0/0x6f0 [ 241.485995][ T4720] unix_seqpacket_sendmsg+0x120/0x1f0 [ 241.492146][ T4720] ? unix_dgram_peer_wake_me+0x3e0/0x3e0 [ 241.497604][ T4720] ____sys_sendmsg+0x59e/0x8f0 [ 241.502237][ T4720] ? __sys_sendmsg_sock+0x40/0x40 [ 241.507506][ T4720] ? import_iovec+0xe5/0x120 [ 241.512075][ T4720] ___sys_sendmsg+0x252/0x2e0 [ 241.517285][ T4720] ? __sys_sendmsg+0x280/0x280 [ 241.521868][ T4720] ? down_read_trylock+0x179/0x1d0 [ 241.526918][ T4720] ? exc_page_fault+0x33d/0x5b0 [ 241.531585][ T4720] ? __sys_sendmmsg+0x2cf/0x510 [ 241.536265][ T4720] __sys_sendmmsg+0x2c3/0x510 [ 241.540779][ T4720] ? __ia32_sys_sendmsg+0x90/0x90 [ 241.545632][ T4720] ? mutex_lock+0xa5/0x110 [ 241.549889][ T4720] ? __kasan_check_write+0x14/0x20 [ 241.554853][ T4720] ? __ia32_sys_read+0x90/0x90 [ 241.559439][ T4720] __x64_sys_sendmmsg+0xa0/0xb0 [ 241.564138][ T4720] do_syscall_64+0x34/0x70 [ 241.568378][ T4720] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 241.574104][ T4720] RIP: 0033:0x7fb54a8d8d29 [ 241.578360][ T4720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.597893][ T4720] RSP: 002b:00007fb548f29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.606129][ T4720] RAX: ffffffffffffffda RBX: 00007fb54aac9080 RCX: 00007fb54a8d8d29 [ 241.613945][ T4720] RDX: 0400000000000159 RSI: 0000000020001c00 RDI: 0000000000000006 [ 241.621760][ T4720] RBP: 00007fb548f29090 R08: 0000000000000000 R09: 0000000000000000 [ 241.629568][ T4720] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 241.637468][ T4720] R13: 0000000000000000 R14: 00007fb54aac9080 R15: 00007ffe37518b08 [ 241.669149][ T1477] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 241.678825][ T1477] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 241.810624][ T3196] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 241.862325][ T4728] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1172'. [ 242.060569][ T3196] usb 8-1: Using ep0 maxpacket: 16 [ 242.200741][ T3196] usb 8-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 242.211521][ T3196] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.226099][ T3196] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 242.236744][ T3196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.273122][ T3196] usb 8-1: config 0 descriptor?? [ 242.313023][ T3196] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 242.350591][ T15] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 242.515689][ T4717] tun0: tun_chr_ioctl cmd 35108 [ 242.533798][ T4737] FAULT_INJECTION: forcing a failure. [ 242.533798][ T4737] name failslab, interval 1, probability 0, space 0, times 0 [ 242.546520][ T4737] CPU: 1 PID: 4737 Comm: syz.8.1175 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 242.556418][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 242.566311][ T4737] Call Trace: [ 242.569440][ T4737] dump_stack_lvl+0x1e2/0x24b [ 242.573946][ T4737] ? panic+0x812/0x812 [ 242.577848][ T4737] ? bfq_pos_tree_add_move+0x43b/0x43b [ 242.583152][ T4737] ? _parse_integer_limit+0x19b/0x1e0 [ 242.588357][ T4737] dump_stack+0x15/0x17 [ 242.592390][ T4737] should_fail+0x3c6/0x510 [ 242.596600][ T4737] ? match_int+0xd9/0x1f0 [ 242.600767][ T4737] __should_failslab+0xa4/0xe0 [ 242.605368][ T4737] should_failslab+0x9/0x20 [ 242.609705][ T4737] __kmalloc_track_caller+0x5f/0x320 [ 242.614827][ T4737] ? kasan_set_track+0x5d/0x70 [ 242.619424][ T4737] ? kasan_set_track+0x4b/0x70 [ 242.624024][ T4737] kmemdup_nul+0x2a/0xa0 [ 242.628099][ T4737] match_int+0xd9/0x1f0 [ 242.632092][ T4737] ? match_token+0x660/0x660 [ 242.636520][ T4737] ? memcpy+0x56/0x70 [ 242.640350][ T4737] parse_opts+0x281/0x690 [ 242.644508][ T4737] ? p9_fd_show_options+0x1b0/0x1b0 [ 242.649540][ T4737] ? kfree+0xc3/0x270 [ 242.653369][ T4737] p9_fd_create+0x8c/0x510 [ 242.657613][ T4737] ? p9_fd_create_unix+0x430/0x430 [ 242.662564][ T4737] ? kfree+0xc3/0x270 [ 242.666379][ T4737] p9_client_create+0x81b/0x1180 [ 242.671151][ T4737] ? p9_parse_header+0x6c0/0x6c0 [ 242.675927][ T4737] ? slab_post_alloc_hook+0x80/0x2f0 [ 242.681044][ T4737] ? kstrdup+0x4f/0x70 [ 242.684952][ T4737] ? __kasan_check_write+0x14/0x20 [ 242.689920][ T4737] v9fs_session_init+0x1fa/0x19b0 [ 242.694764][ T4737] ? v9fs_show_options+0x570/0x570 [ 242.699713][ T4737] ? __kasan_kmalloc+0x9/0x10 [ 242.704221][ T4737] ? v9fs_mount+0x5f/0x7b0 [ 242.708472][ T4737] v9fs_mount+0x75/0x7b0 [ 242.712552][ T4737] legacy_get_tree+0xf1/0x190 [ 242.717062][ T4737] ? incfs_get_verity_signature+0x420/0x420 [ 242.722791][ T4737] vfs_get_tree+0x88/0x290 [ 242.727053][ T4737] do_new_mount+0x2ba/0xb30 [ 242.731384][ T4737] ? do_move_mount_old+0x160/0x160 [ 242.736333][ T4737] ? security_capable+0x87/0xb0 [ 242.741015][ T4737] ? ns_capable+0x89/0xe0 [ 242.745184][ T4737] path_mount+0x56f/0xcb0 [ 242.749359][ T4737] __se_sys_mount+0x2c4/0x3b0 [ 242.753866][ T4737] ? __x64_sys_mount+0xd0/0xd0 [ 242.758468][ T4737] __x64_sys_mount+0xbf/0xd0 [ 242.762900][ T4737] do_syscall_64+0x34/0x70 [ 242.767143][ T4737] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 242.772867][ T4737] RIP: 0033:0x7f683fbe1d29 [ 242.777299][ T4737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.796919][ T4737] RSP: 002b:00007f683e253038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.805172][ T4737] RAX: ffffffffffffffda RBX: 00007f683fdd1fa0 RCX: 00007f683fbe1d29 [ 242.813139][ T4737] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 242.820949][ T4737] RBP: 00007f683e253090 R08: 0000000020000300 R09: 0000000000000000 [ 242.828771][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.836579][ T4737] R13: 0000000000000000 R14: 00007f683fdd1fa0 R15: 00007ffd4e37f4b8 [ 242.846124][ T4737] 9pnet: Insufficient options for proto=fd [ 243.410611][ T3196] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 243.410645][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.428783][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.438488][ T15] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 243.447442][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.456148][ T15] usb 1-1: config 0 descriptor?? [ 243.777627][ T3196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.788354][ T3196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.798066][ T3196] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 243.825677][ T3196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.836666][ T3196] usb 3-1: config 0 descriptor?? [ 243.882346][ T4763] FAULT_INJECTION: forcing a failure. [ 243.882346][ T4763] name failslab, interval 1, probability 0, space 0, times 0 [ 243.894844][ T4763] CPU: 1 PID: 4763 Comm: syz.8.1183 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 243.904495][ T4763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 243.914461][ T4763] Call Trace: [ 243.917590][ T4763] dump_stack_lvl+0x1e2/0x24b [ 243.922098][ T4763] ? panic+0x812/0x812 [ 243.926006][ T4763] ? bfq_pos_tree_add_move+0x43b/0x43b [ 243.931298][ T4763] dump_stack+0x15/0x17 [ 243.935289][ T4763] should_fail+0x3c6/0x510 [ 243.939631][ T4763] ? vm_area_alloc+0x24/0x160 [ 243.944144][ T4763] __should_failslab+0xa4/0xe0 [ 243.948750][ T4763] should_failslab+0x9/0x20 [ 243.953084][ T4763] kmem_cache_alloc+0x3d/0x2e0 [ 243.957681][ T4763] ? __kasan_check_read+0x11/0x20 [ 243.962553][ T4763] ? __vm_enough_memory+0x119/0x2f0 [ 243.967578][ T4763] vm_area_alloc+0x24/0x160 [ 243.971946][ T4763] mmap_region+0xc2a/0x1cd0 [ 243.976609][ T4763] ? get_unmapped_area+0x2ec/0x380 [ 243.981655][ T4763] ? cap_mmap_addr+0x169/0x2e0 [ 243.986245][ T4763] ? locks_verify_locked+0x100/0x100 [ 243.991356][ T4763] ? get_unmapped_area+0x31d/0x380 [ 243.996314][ T4763] do_mmap+0x800/0xeb0 [ 244.000217][ T4763] vm_mmap_pgoff+0x201/0x390 [ 244.004656][ T4763] ? kfree+0xc3/0x270 [ 244.008459][ T4763] ? account_locked_vm+0x1a0/0x1a0 [ 244.013517][ T4763] ? __kasan_check_write+0x14/0x20 [ 244.018523][ T4763] ? switch_fpu_return+0x1e4/0x3c0 [ 244.023648][ T4763] ksys_mmap_pgoff+0xf8/0x1f0 [ 244.028154][ T4763] __x64_sys_mmap+0x103/0x120 [ 244.032673][ T4763] do_syscall_64+0x34/0x70 [ 244.036927][ T4763] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 244.042649][ T4763] RIP: 0033:0x7f683fbe1d63 [ 244.047166][ T4763] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 244.066735][ T4763] RSP: 002b:00007f683e210e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 244.074973][ T4763] RAX: ffffffffffffffda RBX: 00000000000004f6 RCX: 00007f683fbe1d63 [ 244.082780][ T4763] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 244.090604][ T4763] RBP: 0000000020000702 R08: 00000000ffffffff R09: 0000000000000000 [ 244.098404][ T4763] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 244.106218][ T4763] R13: 00007f683e210ef0 R14: 00007f683e210eb0 R15: 0000000020000100 [ 244.340579][ T4763] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 244.349619][ T4763] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.379245][ T15] uclogic 0003:5543:0522.0022: item fetching failed at offset 2/5 [ 244.436405][ T15] uclogic 0003:5543:0522.0022: parse failed [ 244.442313][ T15] uclogic: probe of 0003:5543:0522.0022 failed with error -22 [ 244.460014][ T15] usb 1-1: USB disconnect, device number 17 [ 244.520858][ T54] usb 8-1: USB disconnect, device number 9 [ 244.624886][ T3196] uclogic 0003:5543:0522.0023: item fetching failed at offset 2/5 [ 244.632901][ T3196] uclogic 0003:5543:0522.0023: parse failed [ 244.638949][ T3196] uclogic: probe of 0003:5543:0522.0023 failed with error -22 [ 244.705204][ T4776] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1185'. [ 244.850462][ T3196] usb 3-1: USB disconnect, device number 21 [ 245.009575][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 245.009586][ T24] audit: type=1400 audit(1734713647.687:2882): avc: denied { read } for pid=4783 comm="syz.0.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.081747][ T4786] exfat: Deprecated parameter 'utf8' [ 245.086885][ T4786] exfat: Deprecated parameter 'namecase' [ 245.092767][ T4786] exfat: Deprecated parameter 'utf8' [ 245.135637][ T4786] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 245.172736][ T24] audit: type=1400 audit(1734713647.857:2883): avc: denied { getopt } for pid=4785 comm="syz.1.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.237633][ T4782] F2FS-fs (loop8): Found nat_bits in checkpoint [ 245.259296][ T4782] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 245.352839][ T24] audit: type=1400 audit(1734713648.037:2884): avc: denied { lock } for pid=4781 comm="syz.8.1189" path="/22/file0/file0" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.388056][ T24] audit: type=1400 audit(1734713648.067:2885): avc: denied { link } for pid=4781 comm="syz.8.1189" name="file0" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.466564][ T4266] attempt to access beyond end of device [ 245.466564][ T4266] loop8: rw=2049, want=45112, limit=40427 [ 245.890298][ T4811] erofs: (device loop7): erofs_init_devices: extra devices don't match (ondisk 31, given 0) [ 246.329985][ T4806] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 246.350417][ T4806] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 246.359761][ T4806] F2FS-fs (loop2): invalid crc value [ 246.419082][ T4806] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.688446][ T15] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 246.811547][ T4806] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 246.822459][ T4806] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.914858][ T4844] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1203'. [ 247.012266][ T4836] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 247.142778][ T1477] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 247.151653][ T1477] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 247.163251][ T24] audit: type=1400 audit(1734713649.847:2886): avc: denied { accept } for pid=4835 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 247.260746][ T1007] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 247.310691][ T15] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.322026][ T15] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.331984][ T15] usb 9-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 247.341372][ T15] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.353039][ T15] usb 9-1: config 0 descriptor?? [ 247.573186][ T5] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 247.680419][ T1007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.691204][ T1007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.701067][ T1007] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 247.710083][ T1007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.719161][ T1007] usb 2-1: config 0 descriptor?? [ 247.831525][ T15] uclogic 0003:5543:0522.0024: item fetching failed at offset 2/5 [ 248.161821][ T4850] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 248.221942][ T4856] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 248.242350][ T4850] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 248.286729][ T4850] F2FS-fs (loop7): invalid crc value [ 248.299546][ T4850] F2FS-fs (loop7): Found nat_bits in checkpoint [ 248.417963][ T4850] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 248.425328][ T4850] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 248.735930][ T305] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 248.755667][ T15] uclogic 0003:5543:0522.0024: parse failed [ 248.756620][ T305] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 248.762873][ T15] uclogic: probe of 0003:5543:0522.0024 failed with error -22 [ 248.771852][ T4865] netlink: 'syz.8.1209': attribute type 4 has an invalid length. [ 248.778787][ T15] usb 9-1: USB disconnect, device number 5 [ 248.791861][ T1007] uclogic 0003:5543:0522.0025: item fetching failed at offset 2/5 [ 248.799622][ T1007] uclogic 0003:5543:0522.0025: parse failed [ 248.806970][ T1007] uclogic: probe of 0003:5543:0522.0025 failed with error -22 [ 248.825969][ T4865] netlink: 'syz.8.1209': attribute type 4 has an invalid length. [ 248.833629][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.844526][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.864347][ T4865] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.864422][ T5] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 248.871418][ T4865] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.880059][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.918834][ T5] usb 3-1: config 0 descriptor?? [ 248.932584][ T4866] FAT-fs (loop8): Unrecognized mount option "À" or missing value [ 248.994952][ T54] usb 2-1: USB disconnect, device number 12 [ 249.360547][ T15] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 249.402194][ T5] uclogic 0003:5543:0522.0026: item fetching failed at offset 2/5 [ 249.410222][ T5] uclogic 0003:5543:0522.0026: parse failed [ 249.416386][ T5] uclogic: probe of 0003:5543:0522.0026 failed with error -22 [ 249.606112][ T3923] usb 3-1: USB disconnect, device number 22 [ 249.657590][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1213'. [ 249.709887][ T4876] FAT-fs (loop1): Directory bread(block 64) failed [ 249.717835][ T4876] FAT-fs (loop1): Directory bread(block 65) failed [ 249.720721][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 249.735652][ T4876] FAT-fs (loop1): Directory bread(block 66) failed [ 249.741584][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 249.743718][ T4876] FAT-fs (loop1): Directory bread(block 67) failed [ 249.759635][ T4876] FAT-fs (loop1): Directory bread(block 68) failed [ 249.766075][ T4876] FAT-fs (loop1): Directory bread(block 69) failed [ 249.770568][ T15] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.772721][ T4876] FAT-fs (loop1): Directory bread(block 70) failed [ 249.791534][ T4876] FAT-fs (loop1): Directory bread(block 71) failed [ 249.795155][ T15] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.797879][ T4876] FAT-fs (loop1): Directory bread(block 72) failed [ 249.797897][ T4876] FAT-fs (loop1): Directory bread(block 73) failed [ 249.819758][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.840836][ T15] usb 1-1: config 0 descriptor?? [ 249.860731][ T4871] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 249.910428][ T4887] mmap: syz.1.1215 (4887) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 250.010167][ T1477] Bluetooth: hci0: Frame reassembly failed (-84) [ 250.083166][ T4871] 9pnet: Insufficient options for proto=fd [ 250.853431][ T4909] futex_wake_op: syz.7.1220 tries to shift op by -1; fix this program [ 251.012149][ T4911] hub 2-0:1.0: USB hub found [ 251.017182][ T4911] hub 2-0:1.0: 1 port detected [ 251.223671][ T4913] EXT4-fs (loop2): Ignoring removed nobh option [ 251.241974][ T4913] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,nobh,errors=remount-ro, [ 251.273658][ T4913] EXT4-fs error (device loop2): ext4_find_extent:928: inode #2: comm syz.2.1221: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 251.290187][ T4913] EXT4-fs (loop2): Remounting filesystem read-only [ 251.701359][ T4922] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 251.762949][ T24] audit: type=1400 audit(1734713654.447:2887): avc: denied { map } for pid=4927 comm="syz.7.1225" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 251.787637][ T4928] binder: 4927:4928 ioctl c0306201 20000180 returned -14 [ 251.823656][ T24] audit: type=1400 audit(1734713654.477:2888): avc: denied { call } for pid=4927 comm="syz.7.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 251.861129][ T4936] futex_wake_op: syz.7.1227 tries to shift op by -1; fix this program [ 252.088887][ T4938] hub 2-0:1.0: USB hub found [ 252.094067][ T4938] hub 2-0:1.0: 1 port detected [ 252.221109][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 252.227003][ T4895] Bluetooth: hci0: sending frame failed (-49) [ 252.340627][ T15] usbhid 1-1:0.0: can't add hid device: -71 [ 252.346434][ T15] usbhid: probe of 1-1:0.0 failed with error -71 [ 252.358212][ T15] usb 1-1: USB disconnect, device number 18 [ 253.672953][ T4952] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 254.313355][ T54] Bluetooth: hci0: command 0x1001 tx timeout [ 254.319244][ T4895] Bluetooth: hci0: sending frame failed (-49) [ 254.403163][ T4962] device pim6reg1 entered promiscuous mode [ 254.410441][ T4962] FAULT_INJECTION: forcing a failure. [ 254.410441][ T4962] name failslab, interval 1, probability 0, space 0, times 0 [ 254.423029][ T4962] CPU: 0 PID: 4962 Comm: syz.1.1235 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 254.432646][ T4962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.442977][ T4962] Call Trace: [ 254.446203][ T4962] dump_stack_lvl+0x1e2/0x24b [ 254.450711][ T4962] ? panic+0x812/0x812 [ 254.454619][ T4962] ? bfq_pos_tree_add_move+0x43b/0x43b [ 254.459999][ T4962] dump_stack+0x15/0x17 [ 254.464180][ T4962] should_fail+0x3c6/0x510 [ 254.468427][ T4962] ? inet6_rt_notify+0x2db/0x550 [ 254.473212][ T4962] __should_failslab+0xa4/0xe0 [ 254.477814][ T4962] should_failslab+0x9/0x20 [ 254.482152][ T4962] __kmalloc_track_caller+0x5f/0x320 [ 254.487262][ T4962] ? kmem_cache_alloc+0x168/0x2e0 [ 254.492244][ T4962] ? __alloc_skb+0x80/0x510 [ 254.496582][ T4962] ? inet6_rt_notify+0x2db/0x550 [ 254.501361][ T4962] __alloc_skb+0xbc/0x510 [ 254.505606][ T4962] ? ip6_route_add+0x27/0x130 [ 254.510119][ T4962] ? addrconf_notify+0x8c5/0xe90 [ 254.514894][ T4962] inet6_rt_notify+0x2db/0x550 [ 254.519490][ T4962] ? __x64_sys_ioctl+0x7b/0x90 [ 254.524107][ T4962] ? rt6_nh_dump_exceptions+0x650/0x650 [ 254.529476][ T4962] fib6_add+0x233e/0x3d20 [ 254.533642][ T4962] ? skb_gro_incr_csum_unnecessary+0x260/0x260 [ 254.539630][ T4962] ? ipv6_addr_prefix+0x42/0x180 [ 254.544406][ T4962] ? fib6_update_sernum_stub+0x1a0/0x1a0 [ 254.549876][ T4962] ? __kasan_check_write+0x14/0x20 [ 254.554818][ T4962] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 254.559677][ T4962] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 254.564711][ T4962] ip6_route_add+0x8a/0x130 [ 254.569050][ T4962] addrconf_add_linklocal+0x5b5/0x9e0 [ 254.574347][ T4962] ? inet6_addr_del+0x550/0x550 [ 254.579045][ T4962] ? ipv6_generate_stable_address+0x4db/0x650 [ 254.584937][ T4962] ? in6_ifa_put+0x80/0x80 [ 254.589190][ T4962] ? skb_gro_incr_csum_unnecessary+0x260/0x260 [ 254.595184][ T4962] ? ipv6_addr_prefix+0x42/0x180 [ 254.599952][ T4962] addrconf_addr_gen+0x886/0xd00 [ 254.604724][ T4962] ? addrconf_sysctl_register+0x1a0/0x1a0 [ 254.610279][ T4962] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 254.615143][ T4962] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 254.620173][ T4962] ? __kasan_check_write+0x14/0x20 [ 254.625121][ T4962] ? ip6_route_add+0x102/0x130 [ 254.629717][ T4962] ? addrconf_add_dev+0x415/0x610 [ 254.634589][ T4962] ? local_bh_enable+0x30/0x30 [ 254.639196][ T4962] ? addrconf_permanent_addr+0xb40/0xba0 [ 254.644657][ T4962] ? igmpv3_del_delrec+0x740/0x740 [ 254.649596][ T4962] ? __kasan_check_read+0x11/0x20 [ 254.654584][ T4962] addrconf_dev_config+0x342/0x5a0 [ 254.659524][ T4962] ? __kasan_check_write+0x14/0x20 [ 254.664460][ T4962] ? init_loopback+0x1c0/0x1c0 [ 254.669057][ T4962] ? macsec_notify+0x101/0x4c0 [ 254.673657][ T4962] ? addrconf_link_ready+0xfb/0x1e0 [ 254.678688][ T4962] addrconf_notify+0x8c5/0xe90 [ 254.683295][ T4962] raw_notifier_call_chain+0x8c/0xf0 [ 254.688422][ T4962] __dev_notify_flags+0x304/0x610 [ 254.693363][ T4962] ? __dev_change_flags+0x6e0/0x6e0 [ 254.698393][ T4962] ? __dev_change_flags+0x56c/0x6e0 [ 254.703428][ T4962] ? dev_get_flags+0x1e0/0x1e0 [ 254.708030][ T4962] ? selinux_capable+0x2f1/0x430 [ 254.712800][ T4962] ? selinux_capset+0xf0/0xf0 [ 254.717314][ T4962] dev_change_flags+0xf0/0x1a0 [ 254.721913][ T4962] dev_ifsioc+0x115/0xae0 [ 254.726086][ T4962] ? dev_ioctl+0xb40/0xb40 [ 254.730332][ T4962] ? dev_get_by_name_rcu+0xc5/0xf0 [ 254.735293][ T4962] dev_ioctl+0x526/0xb40 [ 254.739363][ T4962] sock_do_ioctl+0x295/0x3a0 [ 254.743790][ T4962] ? sock_show_fdinfo+0xa0/0xa0 [ 254.748567][ T4962] ? kernel_write+0x3d0/0x3d0 [ 254.753073][ T4962] ? selinux_file_ioctl+0x3cc/0x540 [ 254.758192][ T4962] sock_ioctl+0x4a6/0x760 [ 254.762366][ T4962] ? sock_poll+0x340/0x340 [ 254.766614][ T4962] ? security_file_ioctl+0x84/0xb0 [ 254.771562][ T4962] ? sock_poll+0x340/0x340 [ 254.775813][ T4962] __se_sys_ioctl+0x114/0x190 [ 254.780328][ T4962] __x64_sys_ioctl+0x7b/0x90 [ 254.784753][ T4962] do_syscall_64+0x34/0x70 [ 254.789008][ T4962] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 254.794820][ T4962] RIP: 0033:0x7fb54a8d8d29 [ 254.799158][ T4962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.818686][ T4962] RSP: 002b:00007fb548f4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.826927][ T4962] RAX: ffffffffffffffda RBX: 00007fb54aac8fa0 RCX: 00007fb54a8d8d29 [ 254.834828][ T4962] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 0000000000000008 [ 254.842639][ T4962] RBP: 00007fb548f4a090 R08: 0000000000000000 R09: 0000000000000000 [ 254.850573][ T4962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.858371][ T4962] R13: 0000000000000000 R14: 00007fb54aac8fa0 R15: 00007ffe37518b08 [ 254.868299][ T24] audit: type=1326 audit(1734713657.557:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.2.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 254.910623][ T24] audit: type=1326 audit(1734713657.557:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.2.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 254.952008][ T24] audit: type=1326 audit(1734713657.637:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.7.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 254.990557][ T24] audit: type=1326 audit(1734713657.637:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.7.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 255.030551][ T24] audit: type=1326 audit(1734713657.637:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.7.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 255.070549][ T24] audit: type=1326 audit(1734713657.637:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.7.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 255.094337][ T24] audit: type=1326 audit(1734713657.697:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.7.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 255.140572][ T24] audit: type=1326 audit(1734713657.697:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4963 comm="syz.7.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 255.172393][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1234'. [ 255.181372][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1234'. [ 255.240290][ T4960] EXT4-fs (loop2): dax option not supported [ 255.457681][ T4989] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1242'. [ 255.553264][ T4979] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 255.561365][ T4979] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 255.576315][ T4979] F2FS-fs (loop7): invalid crc value [ 255.584306][ T4979] F2FS-fs (loop7): Found nat_bits in checkpoint [ 255.606888][ T4979] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 255.613848][ T4979] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 255.640594][ T54] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 255.664737][ T305] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 255.673491][ T305] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 255.880583][ T54] usb 2-1: Using ep0 maxpacket: 16 [ 255.972811][ T4997] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1243'. [ 256.200651][ T54] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 256.210762][ T54] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.223567][ T54] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 256.232395][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.241532][ T54] usb 2-1: config 0 descriptor?? [ 256.274552][ T5002] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 256.281193][ T54] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 256.283729][ T5002] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.384075][ T5010] device batadv_slave_1 entered promiscuous mode [ 256.390571][ T54] Bluetooth: hci0: command 0x1009 tx timeout [ 256.473668][ T5007] F2FS-fs (loop2): fault_injection options not supported [ 256.481355][ T5007] F2FS-fs (loop2): invalid crc value [ 256.487683][ T5007] F2FS-fs (loop2): Found nat_bits in checkpoint [ 256.495849][ T4973] tun0: tun_chr_ioctl cmd 35108 [ 256.521766][ T5007] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 256.860331][ T5019] erofs: (device loop0): erofs_init_devices: extra devices don't match (ondisk 31, given 0) [ 256.906907][ T5018] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 256.917709][ T5018] FAT-fs (loop5): unable to read boot sector [ 256.944561][ T289] attempt to access beyond end of device [ 256.944561][ T289] loop2: rw=2049, want=45112, limit=40427 [ 257.638357][ T5043] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1254'. [ 257.994096][ T5048] device pim6reg1 entered promiscuous mode [ 257.999994][ T5048] FAULT_INJECTION: forcing a failure. [ 257.999994][ T5048] name failslab, interval 1, probability 0, space 0, times 0 [ 258.012683][ T5048] CPU: 1 PID: 5048 Comm: syz.7.1256 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 258.022529][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.032434][ T5048] Call Trace: [ 258.035564][ T5048] dump_stack_lvl+0x1e2/0x24b [ 258.040082][ T5048] ? panic+0x812/0x812 [ 258.043986][ T5048] ? bfq_pos_tree_add_move+0x43b/0x43b [ 258.049271][ T5048] dump_stack+0x15/0x17 [ 258.053255][ T5048] should_fail+0x3c6/0x510 [ 258.057530][ T5048] ? inet6_rt_notify+0x2db/0x550 [ 258.062283][ T5048] __should_failslab+0xa4/0xe0 [ 258.067065][ T5048] should_failslab+0x9/0x20 [ 258.071402][ T5048] __kmalloc_track_caller+0x5f/0x320 [ 258.076510][ T5048] ? kmem_cache_alloc+0x168/0x2e0 [ 258.081370][ T5048] ? __alloc_skb+0x80/0x510 [ 258.085721][ T5048] ? inet6_rt_notify+0x2db/0x550 [ 258.090570][ T5048] __alloc_skb+0xbc/0x510 [ 258.094756][ T5048] ? ip6_route_add+0x27/0x130 [ 258.099250][ T5048] ? addrconf_notify+0x8c5/0xe90 [ 258.104035][ T5048] inet6_rt_notify+0x2db/0x550 [ 258.108622][ T5048] ? __x64_sys_ioctl+0x7b/0x90 [ 258.113226][ T5048] ? rt6_nh_dump_exceptions+0x650/0x650 [ 258.118615][ T5048] fib6_add+0x233e/0x3d20 [ 258.122861][ T5048] ? skb_gro_incr_csum_unnecessary+0x260/0x260 [ 258.128846][ T5048] ? ipv6_addr_prefix+0x42/0x180 [ 258.133623][ T5048] ? fib6_update_sernum_stub+0x1a0/0x1a0 [ 258.139090][ T5048] ? __kasan_check_write+0x14/0x20 [ 258.144037][ T5048] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 258.148897][ T5048] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 258.153934][ T5048] ip6_route_add+0x8a/0x130 [ 258.158270][ T5048] addrconf_add_linklocal+0x5b5/0x9e0 [ 258.163475][ T5048] ? inet6_addr_del+0x550/0x550 [ 258.168168][ T5048] ? ipv6_generate_stable_address+0x4db/0x650 [ 258.174066][ T5048] ? in6_ifa_put+0x80/0x80 [ 258.178413][ T5048] ? skb_gro_incr_csum_unnecessary+0x260/0x260 [ 258.184567][ T5048] ? ipv6_addr_prefix+0x42/0x180 [ 258.189338][ T5048] addrconf_addr_gen+0x886/0xd00 [ 258.194113][ T5048] ? addrconf_sysctl_register+0x1a0/0x1a0 [ 258.199669][ T5048] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 258.205156][ T5048] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 258.210177][ T5048] ? __kasan_check_write+0x14/0x20 [ 258.215120][ T5048] ? ip6_route_add+0x102/0x130 [ 258.219746][ T5048] ? addrconf_add_dev+0x415/0x610 [ 258.224575][ T5048] ? local_bh_enable+0x30/0x30 [ 258.229238][ T5048] ? addrconf_permanent_addr+0xb40/0xba0 [ 258.234752][ T5048] ? igmpv3_del_delrec+0x740/0x740 [ 258.240115][ T5048] ? __kasan_check_read+0x11/0x20 [ 258.244973][ T5048] addrconf_dev_config+0x342/0x5a0 [ 258.249893][ T5048] ? __kasan_check_write+0x14/0x20 [ 258.254836][ T5048] ? init_loopback+0x1c0/0x1c0 [ 258.259436][ T5048] ? macsec_notify+0x101/0x4c0 [ 258.264034][ T5048] ? addrconf_link_ready+0xfb/0x1e0 [ 258.269069][ T5048] addrconf_notify+0x8c5/0xe90 [ 258.273681][ T5048] raw_notifier_call_chain+0x8c/0xf0 [ 258.278789][ T5048] __dev_notify_flags+0x304/0x610 [ 258.283651][ T5048] ? __dev_change_flags+0x6e0/0x6e0 [ 258.288681][ T5048] ? __dev_change_flags+0x56c/0x6e0 [ 258.293720][ T5048] ? dev_get_flags+0x1e0/0x1e0 [ 258.298318][ T5048] ? selinux_capable+0x2f1/0x430 [ 258.303094][ T5048] ? selinux_capset+0xf0/0xf0 [ 258.307603][ T5048] dev_change_flags+0xf0/0x1a0 [ 258.312202][ T5048] dev_ifsioc+0x115/0xae0 [ 258.316374][ T5048] ? dev_ioctl+0xb40/0xb40 [ 258.320621][ T5048] ? dev_get_by_name_rcu+0xc5/0xf0 [ 258.325567][ T5048] dev_ioctl+0x526/0xb40 [ 258.329666][ T5048] sock_do_ioctl+0x295/0x3a0 [ 258.334102][ T5048] ? sock_show_fdinfo+0xa0/0xa0 [ 258.338766][ T5048] ? kernel_write+0x3d0/0x3d0 [ 258.343279][ T5048] ? selinux_file_ioctl+0x3cc/0x540 [ 258.348309][ T5048] sock_ioctl+0x4a6/0x760 [ 258.352477][ T5048] ? sock_poll+0x340/0x340 [ 258.356729][ T5048] ? security_file_ioctl+0x84/0xb0 [ 258.361689][ T5048] ? sock_poll+0x340/0x340 [ 258.365932][ T5048] __se_sys_ioctl+0x114/0x190 [ 258.370462][ T5048] __x64_sys_ioctl+0x7b/0x90 [ 258.374869][ T5048] do_syscall_64+0x34/0x70 [ 258.379119][ T5048] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 258.384850][ T5048] RIP: 0033:0x7f3393f23d29 [ 258.389104][ T5048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.408547][ T5048] RSP: 002b:00007f3392595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.416788][ T5048] RAX: ffffffffffffffda RBX: 00007f3394113fa0 RCX: 00007f3393f23d29 [ 258.424606][ T5048] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 000000000000000a [ 258.432409][ T5048] RBP: 00007f3392595090 R08: 0000000000000000 R09: 0000000000000000 [ 258.440390][ T5048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.448210][ T5048] R13: 0000000000000000 R14: 00007f3394113fa0 R15: 00007ffd2cec3ee8 [ 258.488105][ T5045] device veth0_to_batadv entered promiscuous mode [ 258.495198][ T291] usb 2-1: USB disconnect, device number 13 [ 258.496609][ T5044] device veth0_to_batadv left promiscuous mode [ 258.533770][ T5056] tmpfs: Unknown parameter 'nolazytimeåOã' [ 258.913613][ T5097] FAULT_INJECTION: forcing a failure. [ 258.913613][ T5097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.933589][ T5097] CPU: 0 PID: 5097 Comm: syz.1.1271 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 258.943347][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.953543][ T5097] Call Trace: [ 258.956696][ T5097] dump_stack_lvl+0x1e2/0x24b [ 258.961175][ T5097] ? bfq_pos_tree_add_move+0x43b/0x43b [ 258.966493][ T5097] ? 0xffffffffa0026000 [ 258.970469][ T5097] ? is_bpf_text_address+0x172/0x190 [ 258.975582][ T5097] dump_stack+0x15/0x17 [ 258.979588][ T5097] should_fail+0x3c6/0x510 [ 258.983827][ T5097] should_fail_usercopy+0x1a/0x20 [ 258.988782][ T5097] _copy_from_user+0x20/0xd0 [ 258.993348][ T5097] __se_sys_bpf+0x232/0x11cb0 [ 258.997852][ T5097] ? stack_trace_save+0x113/0x1c0 [ 259.002698][ T5097] ? terminate_walk+0x407/0x4f0 [ 259.007379][ T5097] ? stack_trace_snprint+0xf0/0xf0 [ 259.012589][ T5097] ? kmem_cache_free+0xa9/0x1e0 [ 259.017394][ T5097] ? kmem_cache_free+0xa9/0x1e0 [ 259.022059][ T5097] ? kasan_set_track+0x5d/0x70 [ 259.026769][ T5097] ? __x64_sys_bpf+0x90/0x90 [ 259.031182][ T5097] ? __kasan_slab_free+0x11/0x20 [ 259.035937][ T5097] ? slab_free_freelist_hook+0xc0/0x190 [ 259.041317][ T5097] ? kmem_cache_free+0xa9/0x1e0 [ 259.046009][ T5097] ? putname+0xe7/0x140 [ 259.050000][ T5097] ? do_sys_openat2+0x1fc/0x710 [ 259.054769][ T5097] ? __x64_sys_openat+0x243/0x290 [ 259.059652][ T5097] ? do_syscall_64+0x34/0x70 [ 259.064063][ T5097] ? _kstrtoull+0x3a0/0x4a0 [ 259.068395][ T5097] ? kstrtouint_from_user+0x20a/0x2a0 [ 259.073792][ T5097] ? kstrtol_from_user+0x310/0x310 [ 259.078737][ T5097] ? htab_map_hash+0x371/0x7e0 [ 259.083344][ T5097] ? memset+0x35/0x40 [ 259.087164][ T5097] ? __fsnotify_parent+0x4b9/0x6c0 [ 259.092106][ T5097] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 259.098526][ T5097] ? proc_fail_nth_write+0x20b/0x290 [ 259.103665][ T5097] ? proc_fail_nth_read+0x210/0x210 [ 259.108698][ T5097] ? security_file_permission+0x86/0xb0 [ 259.114068][ T5097] ? rw_verify_area+0x1c3/0x360 [ 259.118754][ T5097] ? preempt_count_add+0x92/0x1a0 [ 259.123641][ T5097] ? vfs_write+0x852/0xe70 [ 259.127874][ T5097] ? kmem_cache_free+0x1c0/0x1e0 [ 259.132642][ T5097] ? kernel_write+0x3d0/0x3d0 [ 259.137151][ T5097] ? __kasan_check_write+0x14/0x20 [ 259.142099][ T5097] ? mutex_lock+0xa5/0x110 [ 259.146350][ T5097] ? mutex_trylock+0xa0/0xa0 [ 259.150779][ T5097] ? __kasan_check_write+0x14/0x20 [ 259.155726][ T5097] ? fput_many+0x160/0x1b0 [ 259.159984][ T5097] ? debug_smp_processor_id+0x17/0x20 [ 259.165186][ T5097] __x64_sys_bpf+0x7b/0x90 [ 259.169434][ T5097] do_syscall_64+0x34/0x70 [ 259.173688][ T5097] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 259.179426][ T5097] RIP: 0033:0x7fb54a8d8d29 [ 259.183683][ T5097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.203440][ T5097] RSP: 002b:00007fb548f4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.211772][ T5097] RAX: ffffffffffffffda RBX: 00007fb54aac8fa0 RCX: 00007fb54a8d8d29 [ 259.219846][ T5097] RDX: 0000000000000020 RSI: 0000000020000b80 RDI: 0000000000000004 [ 259.227910][ T5097] RBP: 00007fb548f4a090 R08: 0000000000000000 R09: 0000000000000000 [ 259.235714][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.243524][ T5097] R13: 0000000000000000 R14: 00007fb54aac8fa0 R15: 00007ffe37518b08 [ 259.308927][ T5099] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1270'. [ 259.576284][ T5103] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 259.585378][ T5103] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.823105][ T5109] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 259.861010][ T5109] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.996513][ T5123] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1277'. [ 260.552005][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 260.552031][ T24] audit: type=1400 audit(1734713663.237:2921): avc: denied { setopt } for pid=5135 comm="syz.0.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 260.812534][ T5136] EXT4-fs (loop8): Unrecognized mount option "measure" or missing value [ 261.101945][ T5139] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 261.450589][ T291] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 261.815089][ T5158] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1285'. [ 262.099109][ T5160] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1287'. [ 262.120865][ T291] usb 9-1: Using ep0 maxpacket: 16 [ 262.205147][ T24] audit: type=1326 audit(1734713664.887:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 262.243193][ T24] audit: type=1326 audit(1734713664.907:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 262.268489][ T24] audit: type=1326 audit(1734713664.917:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 262.291818][ T24] audit: type=1326 audit(1734713664.927:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 262.305943][ T291] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 262.326443][ T24] audit: type=1326 audit(1734713664.927:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 262.326698][ T291] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.359599][ T291] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 262.370046][ T291] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 262.375521][ T24] audit: type=1326 audit(1734713664.927:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 262.380028][ T291] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 262.416864][ T24] audit: type=1326 audit(1734713664.927:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 262.445218][ T24] audit: type=1326 audit(1734713664.927:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 262.468709][ T24] audit: type=1326 audit(1734713664.927:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.7.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3393f23d29 code=0x7ffc0000 [ 262.510733][ T291] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.519586][ T291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.526074][ T5168] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 262.527840][ T291] usb 9-1: SerialNumber: syz [ 262.534326][ T5168] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 262.548555][ T5168] F2FS-fs (loop0): Found nat_bits in checkpoint [ 262.554950][ T5136] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 262.561884][ T5136] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 262.582107][ T5168] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 262.607412][ T291] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 262.627262][ T291] cdc_acm: probe of 9-1:1.0 failed with error -12 [ 262.634580][ T5168] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 262.644606][ T5173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 262.717678][ T5173] EXT4-fs (loop2): 1 orphan inode deleted [ 262.723576][ T5173] EXT4-fs (loop2): 1 truncate cleaned up [ 262.728524][ T5178] attempt to access beyond end of device [ 262.728524][ T5178] loop0: rw=2049, want=57344, limit=40427 [ 262.729088][ T5173] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,data_err=ignore,inode_readahead_blks=0x0000000000000020,resuid=0x0000000000000000,block_validity, [ 262.747882][ T5178] attempt to access beyond end of device [ 262.747882][ T5178] loop0: rw=2049, want=53248, limit=40427 [ 262.821955][ T5182] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1294'. [ 262.944192][ T5173] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 263.034494][ T5178] attempt to access beyond end of device [ 263.034494][ T5178] loop0: rw=2049, want=63560, limit=40427 [ 263.049971][ T5173] EXT4-fs (loop2): Remounting filesystem read-only [ 263.074038][ T285] attempt to access beyond end of device [ 263.074038][ T285] loop0: rw=2049, want=45104, limit=40427 [ 263.117899][ T5187] futex_wake_op: syz.2.1296 tries to shift op by -1; fix this program [ 263.536579][ T5212] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1304'. [ 263.599847][ T3923] usb 9-1: USB disconnect, device number 6 [ 263.789716][ T5210] F2FS-fs (loop0): invalid crc value [ 263.801375][ T5210] F2FS-fs (loop0): Found nat_bits in checkpoint [ 263.844048][ T5210] F2FS-fs (loop0): recover fsync data on readonly fs [ 263.851609][ T5210] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 263.858213][ T5210] F2FS-fs (loop0): checkpoint=disable on readonly fs [ 263.926018][ T5220] EXT4-fs (loop1): Ignoring removed nobh option [ 263.933112][ T5220] EXT4-fs (loop1): blocks per group (1280) and clusters per group (8192) inconsistent [ 264.123094][ T15] hid (null): unknown global tag 0xe [ 264.130535][ T15] hid-generic 0007:0006:0007.0027: unknown global tag 0xe [ 264.141091][ T15] hid-generic 0007:0006:0007.0027: item 0 4 1 14 parsing failed [ 264.155575][ T15] hid-generic: probe of 0007:0006:0007.0027 failed with error -22 [ 264.180706][ T5210] overlayfs: missing 'lowerdir' [ 264.753052][ T5256] netlink: 'syz.0.1318': attribute type 4 has an invalid length. [ 264.831630][ T5261] FAULT_INJECTION: forcing a failure. [ 264.831630][ T5261] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 264.846764][ T5261] CPU: 0 PID: 5261 Comm: syz.8.1319 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 264.856476][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.866451][ T5261] Call Trace: [ 264.869586][ T5261] dump_stack_lvl+0x1e2/0x24b [ 264.874235][ T5261] ? bfq_pos_tree_add_move+0x43b/0x43b [ 264.880012][ T5261] ? create_empty_buffers+0x4b0/0x4b0 [ 264.885461][ T5261] dump_stack+0x15/0x17 [ 264.889573][ T5261] should_fail+0x3c6/0x510 [ 264.893826][ T5261] should_fail_alloc_page+0x52/0x60 [ 264.898862][ T5261] __alloc_pages_nodemask+0x1b3/0xaf0 [ 264.904159][ T5261] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 264.909540][ T5261] ? page_cache_prev_miss+0x410/0x410 [ 264.914747][ T5261] pagecache_get_page+0x669/0x950 [ 264.919602][ T5261] grab_cache_page_write_begin+0x5d/0xa0 [ 264.925072][ T5261] cont_write_begin+0x62c/0x950 [ 264.929925][ T5261] ? mark_buffer_dirty+0x1ba/0x350 [ 264.934877][ T5261] ? generic_cont_expand_simple+0x230/0x230 [ 264.940608][ T5261] fat_write_begin+0xa8/0x180 [ 264.945117][ T5261] ? fat_block_truncate_page+0x50/0x50 [ 264.950497][ T5261] pagecache_write_begin+0x9b/0xb0 [ 264.955473][ T5261] cont_write_begin+0x24d/0x950 [ 264.960265][ T5261] ? generic_cont_expand_simple+0x230/0x230 [ 264.965986][ T5261] ? __kasan_check_write+0x14/0x20 [ 264.970935][ T5261] ? iov_iter_fault_in_readable+0x31f/0x4f0 [ 264.976662][ T5261] fat_write_begin+0xa8/0x180 [ 264.981177][ T5261] ? fat_block_truncate_page+0x50/0x50 [ 264.986560][ T5261] generic_perform_write+0x2cd/0x570 [ 264.991660][ T5261] ? __mark_inode_dirty+0x63e/0x9d0 [ 264.996701][ T5261] ? grab_cache_page_write_begin+0xa0/0xa0 [ 265.002859][ T5261] ? file_remove_privs+0x570/0x570 [ 265.007815][ T5261] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 265.014233][ T5261] ? __kasan_check_write+0x14/0x20 [ 265.019180][ T5261] __generic_file_write_iter+0x23c/0x560 [ 265.024651][ T5261] ? generic_write_checks+0x3b9/0x470 [ 265.029905][ T5261] generic_file_write_iter+0xaf/0x1c0 [ 265.035319][ T5261] vfs_write+0xb4c/0xe70 [ 265.039414][ T5261] ? kernel_write+0x3d0/0x3d0 [ 265.044180][ T5261] ? __fdget+0x1bc/0x240 [ 265.048353][ T5261] __x64_sys_pwrite64+0x1a6/0x230 [ 265.053204][ T5261] ? ksys_pwrite64+0x1d0/0x1d0 [ 265.057800][ T5261] ? debug_smp_processor_id+0x17/0x20 [ 265.063012][ T5261] do_syscall_64+0x34/0x70 [ 265.067257][ T5261] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.072980][ T5261] RIP: 0033:0x7f683fbe1d29 [ 265.077237][ T5261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.096935][ T5261] RSP: 002b:00007f683e253038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 265.105229][ T5261] RAX: ffffffffffffffda RBX: 00007f683fdd1fa0 RCX: 00007f683fbe1d29 [ 265.113036][ T5261] RDX: 0000000000000001 RSI: 0000000020003a80 RDI: 0000000000000006 [ 265.120851][ T5261] RBP: 00007f683e253090 R08: 0000000000000000 R09: 0000000000000000 [ 265.128662][ T5261] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000001 [ 265.136486][ T5261] R13: 0000000000000000 R14: 00007f683fdd1fa0 R15: 00007ffd4e37f4b8 [ 265.237917][ T5265] erofs: (device loop1): erofs_init_devices: extra devices don't match (ondisk 31, given 0) [ 265.331677][ T5269] EXT4-fs (loop7): Ignoring removed nobh option [ 265.354629][ T5269] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,lazytime,nobh,errors=remount-ro, [ 265.389557][ T5278] FAULT_INJECTION: forcing a failure. [ 265.389557][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 265.402494][ T5278] CPU: 1 PID: 5278 Comm: syz.8.1323 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 265.412371][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.422260][ T5278] Call Trace: [ 265.425399][ T5278] dump_stack_lvl+0x1e2/0x24b [ 265.429906][ T5278] ? panic+0x812/0x812 [ 265.433812][ T5278] ? bfq_pos_tree_add_move+0x43b/0x43b [ 265.439107][ T5278] dump_stack+0x15/0x17 [ 265.443107][ T5278] should_fail+0x3c6/0x510 [ 265.447463][ T5278] ? netlink_ack+0x33c/0xb30 [ 265.451880][ T5278] __should_failslab+0xa4/0xe0 [ 265.456453][ T5278] should_failslab+0x9/0x20 [ 265.460793][ T5278] __kmalloc_track_caller+0x5f/0x320 [ 265.465912][ T5278] ? kmem_cache_alloc+0x168/0x2e0 [ 265.470772][ T5278] ? __alloc_skb+0x80/0x510 [ 265.475119][ T5278] ? netlink_ack+0x33c/0xb30 [ 265.479638][ T5278] __alloc_skb+0xbc/0x510 [ 265.483792][ T5278] ? memcpy+0x56/0x70 [ 265.487617][ T5278] netlink_ack+0x33c/0xb30 [ 265.491863][ T5278] ? __kasan_slab_alloc+0xb1/0xe0 [ 265.496725][ T5278] ? slab_post_alloc_hook+0x61/0x2f0 [ 265.501846][ T5278] ? kmem_cache_alloc+0x168/0x2e0 [ 265.506887][ T5278] ? netlink_dump+0xd30/0xd30 [ 265.511389][ T5278] ? iov_iter_advance+0x258/0xb20 [ 265.516249][ T5278] netlink_rcv_skb+0x24c/0x410 [ 265.520850][ T5278] ? rtnetlink_bind+0x80/0x80 [ 265.525361][ T5278] ? netlink_ack+0xb30/0xb30 [ 265.529790][ T5278] ? __netlink_lookup+0x37b/0x3a0 [ 265.534650][ T5278] rtnetlink_rcv+0x1c/0x20 [ 265.538904][ T5278] netlink_unicast+0x8df/0xac0 [ 265.543501][ T5278] ? netlink_detachskb+0x90/0x90 [ 265.548277][ T5278] ? security_netlink_send+0x7b/0xa0 [ 265.553395][ T5278] netlink_sendmsg+0xa46/0xd00 [ 265.557997][ T5278] ? netlink_getsockopt+0x5c0/0x5c0 [ 265.563044][ T5278] ? kmem_cache_free+0xa9/0x1e0 [ 265.567717][ T5278] ? security_socket_sendmsg+0x82/0xb0 [ 265.573017][ T5278] ? netlink_getsockopt+0x5c0/0x5c0 [ 265.578076][ T5278] ____sys_sendmsg+0x59e/0x8f0 [ 265.582656][ T5278] ? __sys_sendmsg_sock+0x40/0x40 [ 265.587510][ T5278] ? import_iovec+0xe5/0x120 [ 265.591933][ T5278] ___sys_sendmsg+0x252/0x2e0 [ 265.596461][ T5278] ? __sys_sendmsg+0x280/0x280 [ 265.601051][ T5278] ? rw_verify_area+0x1c3/0x360 [ 265.605741][ T5278] ? __fdget+0x1bc/0x240 [ 265.609815][ T5278] __se_sys_sendmsg+0x1b1/0x280 [ 265.614515][ T5278] ? __x64_sys_sendmsg+0x90/0x90 [ 265.619269][ T5278] ? ksys_write+0x260/0x2c0 [ 265.623617][ T5278] ? debug_smp_processor_id+0x17/0x20 [ 265.628819][ T5278] __x64_sys_sendmsg+0x7b/0x90 [ 265.633431][ T5278] do_syscall_64+0x34/0x70 [ 265.637675][ T5278] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.643403][ T5278] RIP: 0033:0x7f683fbe1d29 [ 265.647724][ T5278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.667234][ T5278] RSP: 002b:00007f683e253038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.675468][ T5278] RAX: ffffffffffffffda RBX: 00007f683fdd1fa0 RCX: 00007f683fbe1d29 [ 265.683284][ T5278] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 265.691091][ T5278] RBP: 00007f683e253090 R08: 0000000000000000 R09: 0000000000000000 [ 265.698902][ T5278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.706714][ T5278] R13: 0000000000000000 R14: 00007f683fdd1fa0 R15: 00007ffd4e37f4b8 [ 265.769031][ T5269] EXT4-fs error (device loop7): ext4_find_extent:928: inode #2: comm syz.7.1321: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 265.836180][ T5269] EXT4-fs (loop7): Remounting filesystem read-only [ 265.869720][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 265.869733][ T24] audit: type=1326 audit(1734713668.547:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 265.958044][ T5298] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1325'. [ 266.161328][ T24] audit: type=1326 audit(1734713668.577:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 266.554005][ T24] audit: type=1326 audit(1734713668.577:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 266.615792][ T24] audit: type=1326 audit(1734713668.577:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 266.881560][ T5305] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 267.266345][ T24] audit: type=1326 audit(1734713668.577:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 267.289620][ T24] audit: type=1326 audit(1734713669.637:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 267.313324][ T24] audit: type=1326 audit(1734713669.637:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 267.339188][ T24] audit: type=1326 audit(1734713669.647:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 267.391119][ T24] audit: type=1326 audit(1734713669.657:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 267.414589][ T24] audit: type=1326 audit(1734713669.677:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5309 comm="syz.0.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b2ffd29 code=0x7ffc0000 [ 267.414979][ T5318] SELinux: failed to load policy [ 267.594409][ T5325] erofs: (device loop7): erofs_init_devices: extra devices don't match (ondisk 31, given 0) [ 267.607028][ T5333] incfs: Can't find or create .index dir in ./file0 [ 267.613611][ T5333] incfs: mount failed -22 [ 267.922249][ T5314] F2FS-fs (loop2): invalid crc value [ 267.928732][ T5314] F2FS-fs (loop2): Found nat_bits in checkpoint [ 267.972042][ T5314] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 268.170322][ T284] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f) [ 268.204220][ T284] FAT-fs (loop1): Filesystem has been set read-only [ 268.215103][ T284] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f) [ 268.403862][ T5351] EXT4-fs (loop8): Ignoring removed nobh option [ 268.482429][ T5351] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,lazytime,nobh,errors=remount-ro, [ 268.613690][ T289] attempt to access beyond end of device [ 268.613690][ T289] loop2: rw=2049, want=45104, limit=40427 [ 268.654728][ T5351] EXT4-fs error (device loop8): ext4_find_extent:928: inode #2: comm syz.8.1345: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 268.674746][ T5351] EXT4-fs (loop8): Remounting filesystem read-only [ 268.705323][ T5369] FAULT_INJECTION: forcing a failure. [ 268.705323][ T5369] name failslab, interval 1, probability 0, space 0, times 0 [ 268.717959][ T5369] CPU: 0 PID: 5369 Comm: syz.7.1353 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 268.727622][ T5369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.737516][ T5369] Call Trace: [ 268.740650][ T5369] dump_stack_lvl+0x1e2/0x24b [ 268.745162][ T5369] ? bfq_pos_tree_add_move+0x43b/0x43b [ 268.750457][ T5369] dump_stack+0x15/0x17 [ 268.754449][ T5369] should_fail+0x3c6/0x510 [ 268.758709][ T5369] ? skb_clone+0x1de/0x370 [ 268.762954][ T5369] __should_failslab+0xa4/0xe0 [ 268.767638][ T5369] should_failslab+0x9/0x20 [ 268.771979][ T5369] kmem_cache_alloc+0x3d/0x2e0 [ 268.776580][ T5369] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 268.778319][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.782048][ T5369] skb_clone+0x1de/0x370 [ 268.782059][ T5369] packet_rcv+0x5ca/0x11f0 [ 268.782069][ T5369] ? packet_sock_destruct+0x160/0x160 [ 268.782080][ T5369] __netif_receive_skb_core+0x29d7/0x3760 [ 268.782090][ T5369] ? set_rps_cpu+0x5e0/0x5e0 [ 268.782103][ T5369] ? __kasan_slab_alloc+0xc3/0xe0 [ 268.782110][ T5369] ? __kasan_slab_alloc+0xb1/0xe0 [ 268.782120][ T5369] __netif_receive_skb+0x11c/0x530 [ 268.782128][ T5369] ? ksys_write+0x199/0x2c0 [ 268.782139][ T5369] ? __x64_sys_write+0x7b/0x90 [ 268.782149][ T5369] ? do_syscall_64+0x34/0x70 [ 268.782160][ T5369] ? deliver_ptype_list_skb+0x3c0/0x3c0 [ 268.782172][ T5369] netif_receive_skb+0xb0/0x480 [ 268.782191][ T5369] ? netif_receive_skb_core+0x210/0x210 [ 268.789531][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.793078][ T5369] tun_rx_batched+0x6d9/0x870 [ 268.793090][ T5369] ? eth_type_trans+0x2e4/0x620 [ 268.793099][ T5369] ? local_bh_enable+0x30/0x30 [ 268.793115][ T5369] tun_get_user+0x2bf3/0x38f0 [ 268.797762][ T5359] device bridge_slave_0 entered promiscuous mode [ 268.802546][ T5369] ? _kstrtoull+0x3a0/0x4a0 [ 268.802558][ T5369] ? tun_do_read+0x1f60/0x1f60 [ 268.802565][ T5369] ? kstrtouint_from_user+0x20a/0x2a0 [ 268.802574][ T5369] ? kstrtol_from_user+0x310/0x310 [ 268.802585][ T5369] ? avc_policy_seqno+0x1b/0x70 [ 268.802603][ T5369] ? selinux_file_permission+0x2bb/0x560 [ 268.808820][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.812519][ T5369] ? fsnotify_perm+0x67/0x4e0 [ 268.812531][ T5369] tun_chr_write_iter+0x1a8/0x250 [ 268.812549][ T5369] vfs_write+0xb4c/0xe70 [ 268.817636][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.822483][ T5369] ? kernel_write+0x3d0/0x3d0 [ 268.822495][ T5369] ? __fdget_pos+0x209/0x3a0 [ 268.822503][ T5369] ? ksys_write+0x77/0x2c0 [ 268.822511][ T5369] ksys_write+0x199/0x2c0 [ 268.822520][ T5369] ? __ia32_sys_read+0x90/0x90 [ 268.822533][ T5369] ? debug_smp_processor_id+0x17/0x20 [ 268.822541][ T5369] __x64_sys_write+0x7b/0x90 [ 268.822549][ T5369] do_syscall_64+0x34/0x70 [ 268.822558][ T5369] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 268.822565][ T5369] RIP: 0033:0x7f3393f227df [ 268.822577][ T5369] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 268.822591][ T5369] RSP: 002b:00007f3392595000 EFLAGS: 00000293 [ 268.828353][ T5359] device bridge_slave_1 entered promiscuous mode [ 268.831879][ T5369] ORIG_RAX: 0000000000000001 [ 268.831887][ T5369] RAX: ffffffffffffffda RBX: 00007f3394113fa0 RCX: 00007f3393f227df [ 268.831893][ T5369] RDX: 0000000000000022 RSI: 00000000200000c0 RDI: 00000000000000c8 [ 268.831899][ T5369] RBP: 00007f3392595090 R08: 0000000000000000 R09: 0000000000000000 [ 268.831913][ T5369] R10: 0000000000000022 R11: 0000000000000293 R12: 0000000000000001 [ 268.879927][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.881695][ T5369] R13: 0000000000000000 R14: 00007f3394113fa0 R15: 00007ffd2cec3ee8 [ 269.072624][ T5359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.079696][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.086648][ T5359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.129233][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.137072][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.145974][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.221936][ T5383] erofs: (device loop0): erofs_init_devices: extra devices don't match (ondisk 31, given 0) [ 269.276504][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.290071][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.296975][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.320650][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.511101][ T5389] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 269.524020][ T5389] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 269.533023][ T5389] F2FS-fs (loop8): invalid crc value [ 269.594568][ T5389] F2FS-fs (loop8): Found nat_bits in checkpoint [ 269.606275][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.613188][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.636264][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.653505][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.664196][ T5389] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 269.672236][ T5389] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 269.801426][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.810755][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.821558][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.840102][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.848916][ T305] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 269.858732][ T5359] device veth0_vlan entered promiscuous mode [ 269.867504][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.874719][ T305] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 269.875173][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.903152][ T5359] device veth1_macvtap entered promiscuous mode [ 269.909676][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.919730][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.928168][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.947578][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.967829][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.999650][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.011066][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.059406][ T1477] device bridge_slave_1 left promiscuous mode [ 270.072270][ T1477] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.082111][ T1477] device bridge_slave_0 left promiscuous mode [ 270.088071][ T1477] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.096556][ T1477] device veth1_macvtap left promiscuous mode [ 270.102449][ T1477] device veth0_vlan left promiscuous mode [ 270.131092][ T5412] EXT4-fs (loop2): Ignoring removed nobh option [ 270.161027][ T5412] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,nobh,errors=remount-ro, [ 270.244630][ T5424] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 270.255161][ T5412] EXT4-fs error (device loop2): ext4_find_extent:928: inode #2: comm syz.2.1365: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 270.255494][ T5424] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 270.280686][ T5424] F2FS-fs (loop7): invalid crc value [ 270.282380][ T5434] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1363'. [ 270.293984][ T5424] F2FS-fs (loop7): Found nat_bits in checkpoint [ 270.301639][ T5412] EXT4-fs (loop2): Remounting filesystem read-only [ 270.340616][ T54] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 270.356227][ T5424] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 270.363558][ T5424] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 270.730727][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.820886][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.965761][ T54] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 271.039832][ T24] kauditd_printk_skb: 154 callbacks suppressed [ 271.039852][ T24] audit: type=1326 audit(1734714128.726:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 271.093303][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.248767][ T54] usb 1-1: config 0 descriptor?? [ 271.291693][ T5442] EXT4-fs (loop9): orphan cleanup on readonly fs [ 271.301017][ T5442] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1371: bg 0: block 248: padding at end of block bitmap is not set [ 271.315445][ T5442] Quota error (device loop9): write_blk: dquota write failed [ 271.316938][ T24] audit: type=1326 audit(1734714128.766:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 271.322817][ T5442] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 271.355998][ T5442] EXT4-fs error (device loop9): ext4_acquire_dquot:6219: comm syz.9.1371: Failed to acquire dquot type 1 [ 271.368525][ T5442] EXT4-fs (loop9): 1 truncate cleaned up [ 271.383072][ T5442] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue [ 271.432132][ T24] audit: type=1326 audit(1734714128.766:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 271.455599][ T24] audit: type=1326 audit(1734714128.776:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 271.479156][ T24] audit: type=1326 audit(1734714128.776:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 271.502604][ T24] audit: type=1326 audit(1734714128.776:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 271.529494][ T5459] FAULT_INJECTION: forcing a failure. [ 271.529494][ T5459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.543770][ T5459] CPU: 1 PID: 5459 Comm: syz.8.1376 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 271.553472][ T5459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.563371][ T5459] Call Trace: [ 271.566761][ T5459] dump_stack_lvl+0x1e2/0x24b [ 271.571281][ T5459] ? panic+0x812/0x812 [ 271.575189][ T5459] ? kmem_cache_free+0x1c0/0x1e0 [ 271.579943][ T5459] ? bfq_pos_tree_add_move+0x43b/0x43b [ 271.585235][ T5459] dump_stack+0x15/0x17 [ 271.589233][ T5459] should_fail+0x3c6/0x510 [ 271.593476][ T5459] should_fail_usercopy+0x1a/0x20 [ 271.598340][ T5459] _copy_from_user+0x20/0xd0 [ 271.602770][ T5459] strndup_user+0xb3/0x150 [ 271.607030][ T5459] __se_sys_mount+0x9b/0x3b0 [ 271.611446][ T5459] ? __x64_sys_mount+0xd0/0xd0 [ 271.616048][ T5459] __x64_sys_mount+0xbf/0xd0 [ 271.620472][ T5459] do_syscall_64+0x34/0x70 [ 271.624730][ T5459] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 271.630456][ T5459] RIP: 0033:0x7f683fbe1d29 [ 271.634710][ T5459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.654144][ T5459] RSP: 002b:00007f683e253038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.662390][ T5459] RAX: ffffffffffffffda RBX: 00007f683fdd1fa0 RCX: 00007f683fbe1d29 [ 271.670198][ T5459] RDX: 0000000020000340 RSI: 0000000020000400 RDI: 0000000000000000 [ 271.678138][ T5459] RBP: 00007f683e253090 R08: 0000000020000940 R09: 0000000000000000 [ 271.685939][ T5459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.693749][ T5459] R13: 0000000000000000 R14: 00007f683fdd1fa0 R15: 00007ffd4e37f4b8 [ 271.712281][ T24] audit: type=1326 audit(1734714128.776:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 271.735723][ T5460] erofs: (device loop2): erofs_init_devices: extra devices don't match (ondisk 31, given 0) [ 271.735773][ T24] audit: type=1326 audit(1734714128.776:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5453 comm="syz.2.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af0cd7d29 code=0x7ffc0000 [ 271.783500][ T5465] FAULT_INJECTION: forcing a failure. [ 271.783500][ T5465] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.786023][ T49] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 271.805420][ T5465] CPU: 1 PID: 5465 Comm: syz.9.1377 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 271.805427][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.805430][ T5465] Call Trace: [ 271.805448][ T5465] dump_stack_lvl+0x1e2/0x24b [ 271.805467][ T5465] ? bfq_pos_tree_add_move+0x43b/0x43b [ 271.815712][ T49] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 271.825051][ T5465] ? __this_cpu_preempt_check+0x13/0x20 [ 271.825060][ T5465] dump_stack+0x15/0x17 [ 271.825070][ T5465] should_fail+0x3c6/0x510 [ 271.825080][ T5465] should_fail_alloc_page+0x52/0x60 [ 271.825087][ T5465] __alloc_pages_nodemask+0x1b3/0xaf0 [ 271.825098][ T5465] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 271.825108][ T5465] ? pagevec_lru_move_fn+0x1e3/0x270 [ 271.825117][ T5465] ? lru_cache_add+0x15e/0x380 [ 271.825129][ T5465] ? __lru_cache_add_inactive_or_unevictable+0x37/0x160 [ 271.825142][ T5465] wp_page_copy+0x201/0x1940 [ 271.825157][ T5465] ? trace_spf_pte_lock+0x130/0x130 [ 271.825170][ T5465] ? _raw_spin_trylock+0xcd/0x1a0 [ 271.825181][ T5465] ? __cpuidle_text_end+0x2/0x2 [ 271.825193][ T5465] do_wp_page+0x71b/0xca0 [ 271.825204][ T5465] handle_pte_fault+0x165d/0x3e10 [ 271.825218][ T5465] ? vmf_allows_speculation+0x6f0/0x6f0 [ 271.825227][ T5465] ? __handle_speculative_fault+0xd03/0x1e90 [ 271.825237][ T5465] ? memcpy+0x56/0x70 [ 271.825247][ T5465] __handle_speculative_fault+0x1370/0x1e90 [ 271.825259][ T5465] ? finish_fault+0xaf0/0xaf0 [ 271.825277][ T5465] ? __kasan_check_write+0x14/0x20 [ 271.951417][ T5465] ? down_read_trylock+0x179/0x1d0 [ 271.956354][ T5465] ? debug_smp_processor_id+0x17/0x20 [ 271.961560][ T5465] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 271.967459][ T5465] exc_page_fault+0x234/0x5b0 [ 271.971973][ T5465] ? asm_exc_page_fault+0x8/0x30 [ 271.976745][ T5465] asm_exc_page_fault+0x1e/0x30 [ 271.981440][ T5465] RIP: 0033:0x7f53646abc50 [ 271.985686][ T5465] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 272.005144][ T5465] RSP: 002b:00007f5362e594a0 EFLAGS: 00010202 [ 272.011025][ T5465] RAX: 0000000000005005 RBX: 00007f5362e59540 RCX: 0000000000000013 [ 272.018839][ T5465] RDX: 00000000000003ff RSI: 0000000000000800 RDI: 00007f5362e595e0 [ 272.026649][ T5465] RBP: 0000000000000014 R08: 00007f535aa3a000 R09: 0000000000000004 [ 272.034458][ T5465] R10: 00000000200010c2 R11: 0000000000000459 R12: 0000000000000601 [ 272.042283][ T5465] R13: 00007f536487bfe0 R14: 0000000000000015 R15: 00007f5362e595e0 [ 272.050702][ T5465] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 272.071962][ T54] uclogic 0003:5543:0522.0028: item fetching failed at offset 2/5 [ 272.080088][ T54] uclogic 0003:5543:0522.0028: parse failed [ 272.087297][ T54] uclogic: probe of 0003:5543:0522.0028 failed with error -22 [ 272.161195][ T5465] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 272.173589][ T5465] EXT4-fs (loop9): 1 orphan inode deleted [ 272.179249][ T5465] EXT4-fs (loop9): 1 truncate cleaned up [ 272.184900][ T5465] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=, [ 272.287104][ T5474] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1381'. [ 272.497244][ T54] usb 1-1: USB disconnect, device number 19 [ 272.570722][ T5482] EXT4-fs (loop9): Ignoring removed nobh option [ 272.587821][ T5482] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,lazytime,nobh,errors=remount-ro, [ 272.930622][ T386] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 272.994575][ T5491] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 273.058481][ T5482] EXT4-fs error (device loop9): ext4_find_extent:928: inode #2: comm syz.9.1382: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 273.410826][ T5482] EXT4-fs (loop9): Remounting filesystem read-only [ 273.434820][ T386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.513271][ T386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.524299][ T386] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 273.533414][ T386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.745945][ T386] usb 3-1: config 0 descriptor?? [ 273.806836][ T5509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5509 comm=syz.0.1392 [ 273.836734][ T5507] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.868526][ T5516] syz.0.1394[5516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.868586][ T5516] syz.0.1394[5516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.964460][ T5516] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 274.011366][ T5518] erofs: (device loop7): erofs_init_devices: extra devices don't match (ondisk 31, given 0) [ 274.011401][ T5511] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 274.028905][ T5511] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 274.037771][ T5511] F2FS-fs (loop9): invalid crc value [ 274.044266][ T5511] F2FS-fs (loop9): Found nat_bits in checkpoint [ 274.067315][ T5511] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 274.074282][ T5511] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 274.167387][ T305] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 274.176291][ T305] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 274.290567][ T386] usbhid 3-1:0.0: can't add hid device: -71 [ 274.296459][ T386] usbhid: probe of 3-1:0.0 failed with error -71 [ 274.313918][ T386] usb 3-1: USB disconnect, device number 23 [ 274.687751][ T5532] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 274.695412][ T5532] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 274.705670][ T5532] F2FS-fs (loop0): invalid crc value [ 274.717487][ T5532] F2FS-fs (loop0): Found nat_bits in checkpoint [ 274.754227][ T5532] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 274.760777][ T5532] F2FS-fs (loop0): Start checkpoint disabled! [ 274.772670][ T5532] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 274.779810][ T5532] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 274.797026][ T5543] EXT4-fs (loop2): Ignoring removed nobh option [ 274.812461][ T5543] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,nobh,errors=remount-ro, [ 274.844753][ T49] attempt to access beyond end of device [ 274.844753][ T49] loop0: rw=2049, want=40992, limit=40427 [ 274.860034][ T5543] EXT4-fs error (device loop2): ext4_find_extent:928: inode #2: comm syz.2.1400: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 274.877212][ T5543] EXT4-fs (loop2): Remounting filesystem read-only [ 275.040530][ T1007] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 275.070928][ T5558] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 275.155295][ T5558] EXT4-fs (loop8): 1 orphan inode deleted [ 275.161184][ T5558] EXT4-fs (loop8): 1 truncate cleaned up [ 275.166763][ T5558] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=, [ 275.470593][ T1007] usb 8-1: Using ep0 maxpacket: 16 [ 275.646795][ T5556] F2FS-fs (loop0): fault_injection options not supported [ 275.703725][ T5556] F2FS-fs (loop0): invalid crc value [ 275.717820][ T5556] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.745903][ T5556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 275.781032][ T5556] attempt to access beyond end of device [ 275.781032][ T5556] loop0: rw=10241, want=45208, limit=40427 [ 275.840332][ T1007] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.852113][ T1007] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.862087][ T1007] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 275.871128][ T1007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.883343][ T1007] usb 8-1: config 0 descriptor?? [ 275.903563][ T5580] erofs: (device loop8): erofs_init_devices: extra devices don't match (ondisk 31, given 0) [ 276.141409][ T5592] EXT4-fs (loop0): Ignoring removed nobh option [ 276.151836][ T5585] F2FS-fs (loop2): invalid crc value [ 276.156102][ T5592] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,nobh,errors=remount-ro, [ 276.158056][ T5585] F2FS-fs (loop2): Found nat_bits in checkpoint [ 276.207235][ T5592] EXT4-fs error (device loop0): ext4_find_extent:928: inode #2: comm syz.0.1412: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 276.224369][ T5585] F2FS-fs (loop2): recover fsync data on readonly fs [ 276.231165][ T5585] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 276.237672][ T5585] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 276.250661][ T5592] EXT4-fs (loop0): Remounting filesystem read-only [ 276.342973][ T5599] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 276.354443][ T5599] EXT4-fs (loop9): 1 truncate cleaned up [ 276.359937][ T5599] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nojournal_checksum,quota,,errors=continue [ 276.383396][ T1007] lua 0003:1E7D:2C2E.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.7-1/input0 [ 276.394333][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 276.394345][ T24] audit: type=1400 audit(1734714134.076:3179): avc: denied { create } for pid=5598 comm="syz.9.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.441480][ T5603] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 276.465373][ T24] audit: type=1400 audit(1734714134.156:3180): avc: denied { execute } for pid=5605 comm="syz.2.1415" path="/278/cgroup.stat" dev="tmpfs" ino=1550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 276.595268][ T24] audit: type=1400 audit(1734714134.266:3181): avc: denied { read write } for pid=5608 comm="syz.8.1416" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 276.618823][ T24] audit: type=1400 audit(1734714134.266:3182): avc: denied { open } for pid=5608 comm="syz.8.1416" path="/54/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 276.643136][ T5611] FAULT_INJECTION: forcing a failure. [ 276.643136][ T5611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.645161][ T24] audit: type=1400 audit(1734714134.286:3183): avc: denied { write } for pid=5545 comm="syz.7.1399" name="hidraw0" dev="devtmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 276.679454][ T5611] CPU: 0 PID: 5611 Comm: syz.0.1417 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 276.679461][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.679465][ T5611] Call Trace: [ 276.679480][ T5611] dump_stack_lvl+0x1e2/0x24b [ 276.679498][ T5611] ? bfq_pos_tree_add_move+0x43b/0x43b [ 276.695800][ T5546] overlayfs: missing 'lowerdir' [ 276.699090][ T5611] ? bpf_ringbuf_reserve+0x5c/0x70 [ 276.721632][ T5611] dump_stack+0x15/0x17 [ 276.725622][ T5611] should_fail+0x3c6/0x510 [ 276.729873][ T5611] should_fail_usercopy+0x1a/0x20 [ 276.734735][ T5611] _copy_to_user+0x20/0x90 [ 276.738984][ T5611] simple_read_from_buffer+0xc7/0x150 [ 276.744196][ T5611] proc_fail_nth_read+0x1a3/0x210 [ 276.746694][ T5616] udc-core: couldn't find an available UDC or it's busy [ 276.749071][ T5611] ? proc_fault_inject_write+0x390/0x390 [ 276.756303][ T5616] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 276.761392][ T5611] ? security_file_permission+0x86/0xb0 [ 276.774060][ T5611] ? rw_verify_area+0x1c3/0x360 [ 276.778753][ T5611] ? proc_fault_inject_write+0x390/0x390 [ 276.784218][ T5611] vfs_read+0x200/0xba0 [ 276.788203][ T5611] ? kernel_read+0x70/0x70 [ 276.792571][ T5611] ? __kasan_check_write+0x14/0x20 [ 276.797521][ T5611] ? mutex_lock+0xa5/0x110 [ 276.801769][ T5611] ? mutex_trylock+0xa0/0xa0 [ 276.806197][ T5611] ? __fdget_pos+0x2e7/0x3a0 [ 276.810618][ T5611] ? ksys_read+0x77/0x2c0 [ 276.814797][ T5611] ksys_read+0x199/0x2c0 [ 276.818870][ T5611] ? vfs_write+0xe70/0xe70 [ 276.823131][ T5611] ? debug_smp_processor_id+0x17/0x20 [ 276.828330][ T5611] __x64_sys_read+0x7b/0x90 [ 276.832682][ T5611] do_syscall_64+0x34/0x70 [ 276.836927][ T5611] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 276.842652][ T5611] RIP: 0033:0x7fb10b2fe73c [ 276.846896][ T5611] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 276.866431][ T5611] RSP: 002b:00007fb109971030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.874670][ T5611] RAX: ffffffffffffffda RBX: 00007fb10b4effa0 RCX: 00007fb10b2fe73c [ 276.882491][ T5611] RDX: 000000000000000f RSI: 00007fb1099710a0 RDI: 0000000000000006 [ 276.890292][ T5611] RBP: 00007fb109971090 R08: 0000000000000000 R09: 0000000000000000 [ 276.898193][ T5611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.906000][ T5611] R13: 0000000000000000 R14: 00007fb10b4effa0 R15: 00007ffc33cecb48 [ 276.923258][ T386] usb 8-1: USB disconnect, device number 10 [ 277.041533][ T24] audit: type=1326 audit(1734714134.736:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.8.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683fbe1d29 code=0x7ffc0000 [ 277.064921][ T24] audit: type=1400 audit(1734714134.746:3185): avc: denied { name_bind } for pid=5625 comm="syz.2.1422" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 277.087492][ T24] audit: type=1326 audit(1734714134.746:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.8.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f683fbe1d29 code=0x7ffc0000 [ 277.111042][ T24] audit: type=1326 audit(1734714134.746:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.8.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683fbe1d29 code=0x7ffc0000 [ 277.391883][ T24] audit: type=1326 audit(1734714134.746:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.8.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f683fbe1d29 code=0x7ffc0000 [ 277.616350][ T5633] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 277.966623][ T5643] futex_wake_op: syz.7.1426 tries to shift op by -1; fix this program [ 278.195553][ T5652] hub 2-0:1.0: USB hub found [ 278.200609][ T5652] hub 2-0:1.0: 1 port detected [ 278.452909][ T5641] F2FS-fs (loop2): invalid crc value [ 278.491415][ T5641] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.538633][ T5641] F2FS-fs (loop2): recover fsync data on readonly fs [ 278.546589][ T5661] FAT-fs (loop9): Unrecognized mount option "codepage=865rset=koi8-ru" or missing value [ 278.560866][ T5641] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 278.567692][ T5641] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 278.697163][ T5661] netlink: 'syz.9.1431': attribute type 1 has an invalid length. [ 279.127043][ T5668] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 279.163484][ T5668] EXT4-fs (loop9): 1 truncate cleaned up [ 279.169121][ T5668] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 279.419625][ T5683] futex_wake_op: syz.0.1440 tries to shift op by -1; fix this program [ 279.450309][ T5686] FAULT_INJECTION: forcing a failure. [ 279.450309][ T5686] name failslab, interval 1, probability 0, space 0, times 0 [ 279.463672][ T5686] CPU: 0 PID: 5686 Comm: syz.8.1437 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 279.473586][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.483564][ T5686] Call Trace: [ 279.486699][ T5686] dump_stack_lvl+0x1e2/0x24b [ 279.491387][ T5686] ? panic+0x812/0x812 [ 279.495301][ T5686] ? bfq_pos_tree_add_move+0x43b/0x43b [ 279.500574][ T5686] dump_stack+0x15/0x17 [ 279.504564][ T5686] should_fail+0x3c6/0x510 [ 279.508816][ T5686] ? __alloc_skb+0x80/0x510 [ 279.513241][ T5686] __should_failslab+0xa4/0xe0 [ 279.517842][ T5686] should_failslab+0x9/0x20 [ 279.522184][ T5686] kmem_cache_alloc+0x3d/0x2e0 [ 279.526783][ T5686] __alloc_skb+0x80/0x510 [ 279.530948][ T5686] ? kmem_cache_alloc+0x168/0x2e0 [ 279.535814][ T5686] ? audit_log_start+0x48c/0x9b0 [ 279.540579][ T5686] audit_log_start+0x4ae/0x9b0 [ 279.545175][ T5686] ? _kstrtoull+0x3a0/0x4a0 [ 279.549519][ T5686] ? audit_serial+0x30/0x30 [ 279.553943][ T5686] ? kstrtol_from_user+0x310/0x310 [ 279.558901][ T5686] ? memset+0x35/0x40 [ 279.562712][ T5686] ? __fsnotify_parent+0x4b9/0x6c0 [ 279.567661][ T5686] audit_seccomp+0x61/0x1e0 [ 279.571997][ T5686] __seccomp_filter+0xd03/0x1e10 [ 279.576861][ T5686] ? vfs_write+0x852/0xe70 [ 279.581114][ T5686] ? __secure_computing+0x300/0x300 [ 279.586147][ T5686] ? kmem_cache_free+0x1c0/0x1e0 [ 279.590923][ T5686] ? kernel_write+0x3d0/0x3d0 [ 279.595434][ T5686] ? __kasan_check_write+0x14/0x20 [ 279.600380][ T5686] ? mutex_lock+0xa5/0x110 [ 279.604715][ T5686] ? mutex_trylock+0xa0/0xa0 [ 279.609147][ T5686] ? fput_many+0x160/0x1b0 [ 279.613407][ T5686] ? fput+0x1a/0x20 [ 279.617043][ T5686] ? __kasan_check_write+0x14/0x20 [ 279.621994][ T5686] ? switch_fpu_return+0x1e4/0x3c0 [ 279.626938][ T5686] __secure_computing+0xf0/0x300 [ 279.631711][ T5686] syscall_enter_from_user_mode+0xbf/0x1a0 [ 279.637353][ T5686] do_syscall_64+0x13/0x70 [ 279.641606][ T5686] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 279.647359][ T5686] RIP: 0033:0x7f683fbe1d29 [ 279.651598][ T5686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.671031][ T5686] RSP: 002b:00007f683e253038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.679283][ T5686] RAX: ffffffffffffffda RBX: 00007f683fdd1fa0 RCX: 00007f683fbe1d29 [ 279.687083][ T5686] RDX: 0000000020000400 RSI: 0000000000004b72 RDI: 000000000000000b [ 279.694890][ T5686] RBP: 00007f683e253090 R08: 0000000000000000 R09: 0000000000000000 [ 279.702701][ T5686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.710515][ T5686] R13: 0000000000000000 R14: 00007f683fdd1fa0 R15: 00007ffd4e37f4b8 [ 279.748699][ T5679] ================================================================== [ 279.756613][ T5679] BUG: KASAN: use-after-free in __ext4_iget+0x3a0/0x41f0 [ 279.763535][ T5679] Read of size 8 at addr ffff8881284ebf18 by task syz.9.1435/5679 [ 279.771170][ T5679] [ 279.773351][ T5679] CPU: 0 PID: 5679 Comm: syz.9.1435 Not tainted 5.10.231-syzkaller-00700-g4055d754db6f #0 [ 279.783075][ T5679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.792955][ T5679] Call Trace: [ 279.796092][ T5679] dump_stack_lvl+0x1e2/0x24b [ 279.800606][ T5679] ? bfq_pos_tree_add_move+0x43b/0x43b [ 279.805905][ T5679] ? panic+0x812/0x812 [ 279.809796][ T5679] print_address_description+0x81/0x3b0 [ 279.815175][ T5679] kasan_report+0x179/0x1c0 [ 279.819508][ T5679] ? __ext4_iget+0x3a0/0x41f0 [ 279.824021][ T5679] ? __ext4_iget+0x3a0/0x41f0 [ 279.828543][ T5679] __asan_report_load8_noabort+0x14/0x20 [ 279.834014][ T5679] __ext4_iget+0x3a0/0x41f0 [ 279.838351][ T5679] ? ida_alloc_range+0x9c3/0xa30 [ 279.843121][ T5679] ? ext4_get_projid+0x140/0x140 [ 279.847892][ T5679] ? _raw_write_lock+0xa4/0x170 [ 279.852596][ T5679] ? _raw_write_trylock+0x1a0/0x1a0 [ 279.857614][ T5679] ? __proc_create+0x65a/0xa00 [ 279.862214][ T5679] ext4_enable_quotas+0x56f/0x9f0 [ 279.867070][ T5679] ? ext4_fill_flex_info+0x5b0/0x5b0 [ 279.872190][ T5679] ? proc_create_single_data+0x1de/0x240 [ 279.877661][ T5679] ? proc_create_seq_private+0x280/0x280 [ 279.883127][ T5679] ? __kasan_check_write+0x14/0x20 [ 279.888073][ T5679] ? ext4_register_sysfs+0x253/0x290 [ 279.893205][ T5679] ext4_fill_super+0x86dc/0x9150 [ 279.897972][ T5679] ? ext4_mount+0x40/0x40 [ 279.902134][ T5679] ? vscnprintf+0x80/0x80 [ 279.906301][ T5679] ? sb_set_blocksize+0xa8/0xf0 [ 279.910986][ T5679] mount_bdev+0x262/0x370 [ 279.915150][ T5679] ? ext4_mount+0x40/0x40 [ 279.919319][ T5679] ext4_mount+0x34/0x40 [ 279.923313][ T5679] legacy_get_tree+0xf1/0x190 [ 279.927822][ T5679] ? ext4_chksum+0x210/0x210 [ 279.932250][ T5679] vfs_get_tree+0x88/0x290 [ 279.936505][ T5679] do_new_mount+0x2ba/0xb30 [ 279.940843][ T5679] ? do_move_mount_old+0x160/0x160 [ 279.945793][ T5679] ? security_capable+0x87/0xb0 [ 279.950488][ T5679] ? ns_capable+0x89/0xe0 [ 279.954645][ T5679] path_mount+0x56f/0xcb0 [ 279.958808][ T5679] __se_sys_mount+0x2c4/0x3b0 [ 279.963324][ T5679] ? __x64_sys_mount+0xd0/0xd0 [ 279.968192][ T5679] __x64_sys_mount+0xbf/0xd0 [ 279.972707][ T5679] do_syscall_64+0x34/0x70 [ 279.976959][ T5679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 279.982679][ T5679] RIP: 0033:0x7f53647ea4ca [ 279.986929][ T5679] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.006488][ T5679] RSP: 002b:00007f5362e59e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 280.014700][ T5679] RAX: ffffffffffffffda RBX: 00007f5362e59ef0 RCX: 00007f53647ea4ca [ 280.022532][ T5679] RDX: 00000000200004c0 RSI: 00000000200000c0 RDI: 00007f5362e59eb0 [ 280.030335][ T5679] RBP: 00000000200004c0 R08: 00007f5362e59ef0 R09: 0000000000000000 [ 280.038133][ T5679] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 280.045946][ T5679] R13: 00007f5362e59eb0 R14: 0000000000000500 R15: 0000000020000100 [ 280.053754][ T5679] [ 280.055924][ T5679] Allocated by task 5424: [ 280.060101][ T5679] __kasan_slab_alloc+0xb1/0xe0 [ 280.064783][ T5679] slab_post_alloc_hook+0x61/0x2f0 [ 280.069725][ T5679] kmem_cache_alloc+0x168/0x2e0 [ 280.074419][ T5679] f2fs_alloc_inode+0x26/0x420 [ 280.079020][ T5679] new_inode_pseudo+0x64/0x220 [ 280.083617][ T5679] new_inode+0x28/0x1c0 [ 280.087607][ T5679] f2fs_new_inode+0x126/0x14d0 [ 280.092215][ T5679] __f2fs_tmpfile+0x109/0x4c0 [ 280.096717][ T5679] f2fs_tmpfile+0x148/0x520 [ 280.101061][ T5679] vfs_tmpfile+0x1e4/0x2b0 [ 280.105312][ T5679] ovl_get_workdir+0x562/0xe60 [ 280.109912][ T5679] ovl_fill_super+0x1968/0x26d0 [ 280.114600][ T5679] mount_nodev+0x57/0xf0 [ 280.118684][ T5679] ovl_mount+0x2c/0x40 [ 280.122584][ T5679] legacy_get_tree+0xf1/0x190 [ 280.127097][ T5679] vfs_get_tree+0x88/0x290 [ 280.131377][ T5679] do_new_mount+0x2ba/0xb30 [ 280.135688][ T5679] path_mount+0x56f/0xcb0 [ 280.139855][ T5679] __se_sys_mount+0x2c4/0x3b0 [ 280.144374][ T5679] __x64_sys_mount+0xbf/0xd0 [ 280.148797][ T5679] do_syscall_64+0x34/0x70 [ 280.153047][ T5679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 280.158769][ T5679] [ 280.160939][ T5679] Freed by task 5424: [ 280.164766][ T5679] kasan_set_track+0x4b/0x70 [ 280.169189][ T5679] kasan_set_free_info+0x23/0x40 [ 280.174226][ T5679] ____kasan_slab_free+0x121/0x160 [ 280.179170][ T5679] __kasan_slab_free+0x11/0x20 [ 280.183771][ T5679] slab_free_freelist_hook+0xc0/0x190 [ 280.189067][ T5679] kmem_cache_free+0xa9/0x1e0 [ 280.193582][ T5679] f2fs_free_inode+0x24/0x30 [ 280.198011][ T5679] i_callback+0x4b/0x70 [ 280.202084][ T5679] rcu_do_batch+0x597/0xc40 [ 280.206433][ T5679] rcu_core+0x5ad/0xe40 [ 280.210425][ T5679] rcu_core_si+0x9/0x10 [ 280.214423][ T5679] __do_softirq+0x268/0x5bb [ 280.218743][ T5679] [ 280.220910][ T5679] Last potentially related work creation: [ 280.226475][ T5679] kasan_save_stack+0x3b/0x60 [ 280.230987][ T5679] __kasan_record_aux_stack+0xd3/0x100 [ 280.236287][ T5679] kasan_record_aux_stack_noalloc+0xb/0x10 [ 280.241921][ T5679] call_rcu+0x135/0x11f0 [ 280.245999][ T5679] evict+0x8e8/0x9c0 [ 280.249734][ T5679] iput+0x632/0x7e0 [ 280.253378][ T5679] dentry_unlink_inode+0x2ea/0x3d0 [ 280.258411][ T5679] __dentry_kill+0x447/0x650 [ 280.262840][ T5679] dentry_kill+0xc0/0x2a0 [ 280.267004][ T5679] dput+0x40/0x80 [ 280.270490][ T5679] ovl_get_workdir+0x5ad/0xe60 [ 280.275081][ T5679] ovl_fill_super+0x1968/0x26d0 [ 280.279761][ T5679] mount_nodev+0x57/0xf0 [ 280.283839][ T5679] ovl_mount+0x2c/0x40 [ 280.287750][ T5679] legacy_get_tree+0xf1/0x190 [ 280.292258][ T5679] vfs_get_tree+0x88/0x290 [ 280.296513][ T5679] do_new_mount+0x2ba/0xb30 [ 280.300851][ T5679] path_mount+0x56f/0xcb0 [ 280.305017][ T5679] __se_sys_mount+0x2c4/0x3b0 [ 280.309531][ T5679] __x64_sys_mount+0xbf/0xd0 [ 280.313957][ T5679] do_syscall_64+0x34/0x70 [ 280.318210][ T5679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 280.323979][ T5679] [ 280.326102][ T5679] Second to last potentially related work creation: [ 280.332538][ T5679] kasan_save_stack+0x3b/0x60 [ 280.337045][ T5679] __kasan_record_aux_stack+0xd3/0x100 [ 280.342340][ T5679] kasan_record_aux_stack_noalloc+0xb/0x10 [ 280.347983][ T5679] call_rcu+0x135/0x11f0 [ 280.352068][ T5679] evict+0x8e8/0x9c0 [ 280.355792][ T5679] iput+0x632/0x7e0 [ 280.359452][ T5679] dentry_unlink_inode+0x2ea/0x3d0 [ 280.364392][ T5679] __dentry_kill+0x447/0x650 [ 280.368810][ T5679] dentry_kill+0xc0/0x2a0 [ 280.372978][ T5679] dput+0x40/0x80 [ 280.376446][ T5679] ovl_get_workdir+0x5ad/0xe60 [ 280.381046][ T5679] ovl_fill_super+0x1968/0x26d0 [ 280.385732][ T5679] mount_nodev+0x57/0xf0 [ 280.389813][ T5679] ovl_mount+0x2c/0x40 [ 280.393719][ T5679] legacy_get_tree+0xf1/0x190 [ 280.398230][ T5679] vfs_get_tree+0x88/0x290 [ 280.402483][ T5679] do_new_mount+0x2ba/0xb30 [ 280.406822][ T5679] path_mount+0x56f/0xcb0 [ 280.410995][ T5679] __se_sys_mount+0x2c4/0x3b0 [ 280.415521][ T5679] __x64_sys_mount+0xbf/0xd0 [ 280.419928][ T5679] do_syscall_64+0x34/0x70 [ 280.424183][ T5679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 280.429913][ T5679] [ 280.432079][ T5679] The buggy address belongs to the object at ffff8881284eb9f0 [ 280.432079][ T5679] which belongs to the cache f2fs_inode_cache of size 1520 [ 280.446524][ T5679] The buggy address is located 1320 bytes inside of [ 280.446524][ T5679] 1520-byte region [ffff8881284eb9f0, ffff8881284ebfe0) [ 280.459767][ T5679] The buggy address belongs to the page: [ 280.465300][ T5679] page:ffffea0004a13a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881284ecd40 pfn:0x1284e8 [ 280.476705][ T5679] head:ffffea0004a13a00 order:3 compound_mapcount:0 compound_pincount:0 [ 280.484938][ T5679] flags: 0x4000000000010200(slab|head) [ 280.490757][ T5679] raw: 4000000000010200 ffffea0004c67600 0000000200000002 ffff888102783200 [ 280.499262][ T5679] raw: ffff8881284ecd40 0000000080130012 00000001ffffffff 0000000000000000 [ 280.507673][ T5679] page dumped because: kasan: bad access detected [ 280.513929][ T5679] page_owner tracks the page as allocated [ 280.519505][ T5679] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 422, ts 26695883045, free_ts 23737717136 [ 280.540667][ T5679] prep_new_page+0x166/0x180 [ 280.545080][ T5679] get_page_from_freelist+0x2d8c/0x2f30 [ 280.550475][ T5679] __alloc_pages_nodemask+0x435/0xaf0 [ 280.555669][ T5679] new_slab+0x80/0x400 [ 280.559578][ T5679] ___slab_alloc+0x302/0x4b0 [ 280.563999][ T5679] __slab_alloc+0x63/0xa0 [ 280.568171][ T5679] kmem_cache_alloc+0x1b9/0x2e0 [ 280.572855][ T5679] f2fs_alloc_inode+0x26/0x420 [ 280.577454][ T5679] new_inode_pseudo+0x64/0x220 [ 280.582053][ T5679] new_inode+0x28/0x1c0 [ 280.586133][ T5679] f2fs_new_inode+0x126/0x14d0 [ 280.590735][ T5679] __f2fs_tmpfile+0x109/0x4c0 [ 280.595246][ T5679] f2fs_rename2+0xaf9/0x2a40 [ 280.599683][ T5679] vfs_rename+0x9fb/0xeb0 [ 280.603841][ T5679] ovl_get_workdir+0x726/0xe60 [ 280.608438][ T5679] ovl_fill_super+0x1968/0x26d0 [ 280.613120][ T5679] page last free stack trace: [ 280.618173][ T5679] free_unref_page_prepare+0x2ae/0x2d0 [ 280.623456][ T5679] free_unref_page_list+0x122/0xb20 [ 280.628491][ T5679] release_pages+0xea0/0xef0 [ 280.632913][ T5679] __pagevec_release+0x84/0x100 [ 280.637608][ T5679] shmem_undo_range+0x7d1/0x1a60 [ 280.642386][ T5679] shmem_evict_inode+0x215/0x9d0 [ 280.647149][ T5679] evict+0x526/0x9c0 [ 280.650885][ T5679] iput+0x632/0x7e0 [ 280.654525][ T5679] dentry_unlink_inode+0x2ea/0x3d0 [ 280.659478][ T5679] __dentry_kill+0x447/0x650 [ 280.663987][ T5679] dentry_kill+0xc0/0x2a0 [ 280.668147][ T5679] dput+0x40/0x80 [ 280.671625][ T5679] __fput+0x52e/0x7b0 [ 280.675445][ T5679] ____fput+0x15/0x20 [ 280.679349][ T5679] task_work_run+0x129/0x190 [ 280.683779][ T5679] do_exit+0xc83/0x2a50 [ 280.687762][ T5679] [ 280.689941][ T5679] Memory state around the buggy address: [ 280.695406][ T5679] ffff8881284ebe00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.703439][ T5679] ffff8881284ebe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.711326][ T5679] >ffff8881284ebf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.719214][ T5679] ^ [ 280.723906][ T5679] ffff8881284ebf80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 280.731812][ T5679] ffff8881284ec000: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 00 [ 280.739698][ T5679] ================================================================== [ 280.747596][ T5679] Disabling lock debugging due to kernel taint [ 280.767971][ T5679] EXT4-fs warning (device loop9): ext4_enable_quotas:6467: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 280.783028][ T5679] EXT4-fs (loop9): mount failed [ 280.930570][ T386] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 281.290670][ T386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.301356][ T386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.310929][ T386] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 281.319731][ T386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.328176][ T386] usb 8-1: config 0 descriptor?? [ 281.811443][ T386] uclogic 0003:5543:0522.002A: item fetching failed at offset 2/5 [ 281.819199][ T386] uclogic 0003:5543:0522.002A: parse failed [ 281.825016][ T386] uclogic: probe of 0003:5543:0522.002A failed with error -22 [ 282.012110][ T386] usb 8-1: USB disconnect, device number 11