last executing test programs: 1m0.563070613s ago: executing program 3 (id=188): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8936, 0x0) r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="000d05"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd2(0x40004, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x550, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000000000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f0000000080)=""/16, 0x10}], 0x2) 1m0.034644511s ago: executing program 3 (id=191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) 1m0.033743491s ago: executing program 3 (id=192): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x63a39000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xe0, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x81, 0xa8, @random="46102158b0f9800948a679b31bc0033bce1d834e61eacd77e38081f0feaeb7547d3d22914c0f77be190b8ec563489016c252a79e4e927f79967d5d4097d367710808a840a4b8d2412974e81f04f4124065f2f7bd8ada56ac8fde7bd4f8a23eb09463dd0772656fd84aa355ee848f4472903d7fdd9ca1627e77a44a6163"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb6c}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40400c4}, 0xc004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r5 = epoll_create(0x2) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x22800, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000300)={0x3, 0x1, {0x1, 0x31, 0x0, 0xd, 0x3, 0x60, 0x0, 0x0, 0x1}}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, 0x0, 0x4001) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0x11}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r7, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x100) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000300)={0x7, 0x279f394c, 0x4, 0x9, 0x7, "8c5bfde10f9a505d4b7d4831481e62877cc153", 0x9, 0x4}) 59.710883405s ago: executing program 3 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'dummy0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$unix(0x1, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x1, 0x6, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x80000006, 0x9, 0x2, 0x1, 0x7f, 0x6, 0xf, 0xfffffff2, 0x5f, 0xa, 0x7, 0xffff2d33, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0xca, 0x7, 0x5, 0x3c5b, 0x6, 0x22, 0x2, 0xfffffffe, 0x1f461e2c, 0x2, 0x727, 0x4, 0x3, 0x0, 0x107fff, 0x4e74, 0x9, 0x0, 0xd, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x102, 0x0, 0x3, 0x39, 0x2, 0x6, 0x81, 0x3, 0x5, 0x0, 0x43, 0xe1, 0x7f, 0x9, 0x5, 0x5, 0xa, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x10, 0x129432e6, 0xcb, 0x2, 0xd, 0x22d8, 0x1, 0x9, 0xfffffffc, 0x8, 0xfffffffe, 0x7, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xb840, 0x7ffffffc, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x753, 0x3, 0xfffffffd, 0xff, 0x1005, 0x801, 0x7, 0x4, 0x2009, 0x106, 0x2, 0x1ff, 0x27, 0x9, 0x8, 0x9, 0x8000, 0x1, 0x0, 0x2, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x74ec1f9b, 0x4, 0x2, 0x7, 0xd, 0x9, 0x48c93690, 0x802, 0xff], [0x7, 0x4, 0x0, 0x652, 0xfffffdfe, 0xd, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x4, 0xc, 0x4, 0x5, 0x76, 0x0, 0x1ef, 0x5, 0x7, 0x87, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0xb7, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x7, 0x9, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x10000, 0xa2, 0x7, 0x53cf6b7b, 0x8001, 0x6, 0x54fe12d5, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x5, 0x10000005, 0x5, 0x6, 0xffbffffb, 0x4, 0x3, 0x8, 0x9, 0x8, 0x3], [0x10009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x9, 0xce5, 0x1fd, 0x7669b26e, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0xffffffff, 0x2, 0x8, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffb, 0x1, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0xfffffff9, 0x7fffffff, 0x9602, 0xa, 0x8, 0x4, 0xffffffff, 0x1, 0x10002, 0x5, 0x8, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0xffff3441, 0x9]}, 0x45c) unshare(0x20000e00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018010000202070250000000000226e37cbfdc458f6d5542c8cf5142020207b1af8ff08fcffffbea100000000000007010000f8ffffffb702000008000000b7030000000000008500c0f21eccbf2a3f4c82bf6e447778c5bef9ff758b935ca224eeff202261a5d2afb1b19e6962127253ad896e522ced97d402c33e46df6c1888919423feeaa492ba33ab0c421097ddaeb553c668c6e13b69863699a98592a43ac147f7801d7f9f2c3c95e929a34b46ab06fd805eb831ca8c4b5cacd6a9084f9e8f5abffe47f7647669e1afcd06dabf05a6a450c8a8de3c33be82ece89dfe070cfc90f1bd8ee01553b36073f8b95725a895deaabfc2c288cfa11eef9981f415f76d7d80e60a334bffba370698824f02fa5e42e2bc81ba30fda760b230530f173a83ed361c1564c7c0e8a17fbcc3b8c762a03b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/2, 0x2) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 59.620496217s ago: executing program 3 (id=195): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x109200, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000100)=0x2) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf000201061ae3bb8b6d481d50000904000001020d00000524060001052400a9b30d240f01020000000300ffefceb54935232f2042cf6e1c000606241a0c001407240a0509"], 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1100) (async) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24010000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000340)=0x40) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x5a, &(0x7f0000000000), 0x1, 0x2b0, &(0x7f0000001780)="$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") (async) getrusage(0xffffffffffffffff, &(0x7f0000000340)) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 59.235996362s ago: executing program 3 (id=201): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000002380)) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4095, 0xfff}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0x1, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x5}, [@RTA_NH_ID={0x8, 0x1e, 0x9ff}]}, 0x24}}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 59.141741484s ago: executing program 32 (id=201): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000002380)) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4095, 0xfff}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0x1, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x5}, [@RTA_NH_ID={0x8, 0x1e, 0x9ff}]}, 0x24}}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 39.352479737s ago: executing program 1 (id=273): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120900000000000000102109040000218300400122059b3fa249575f2b13ddfb356c8d7f7af28402080000000200000000000000000000000000000000000000000000b3ad7487847737aab0179f3884a26474ae989df7c6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) ftruncate(0xffffffffffffffff, 0xc17a) (async) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x40, 0x11, 0x2b, {0x2b, 0x6, "c604df4c14f8b21593cc550bda55911dbca89239d54bf48c087c1842af3564246dfb792bd05bfe92bc"}}, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 35.793605888s ago: executing program 1 (id=284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000fd09"], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x80, 0x8000, 0x0, 0xb9ff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000080)={@val={0x6f01, 0x800}, @val={0x1, 0x4, 0x0, 0xfffd, 0x20}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @multicast, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@arp={0x806, @generic={0x109, 0x80f3, 0x6, 0xc, 0x3, @random="e7732da540f1", "ab416a41fb33b966f91178f1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, ']}'}}}}}, 0x42) 35.322521284s ago: executing program 1 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) execve(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}]}}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)) mount$incfs(0x0, 0x0, 0x0, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) open(0x0, 0x141242, 0x40) syz_usb_connect(0x2, 0x24, &(0x7f00000036c0)={{0x12, 0x1, 0x201, 0x41, 0x31, 0xf8, 0x20, 0xc45, 0x62bc, 0xa4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x0, 0x100, 0x7f, [{{0x9, 0x4, 0xd0, 0x58, 0x0, 0xf5, 0xe0, 0xc7, 0xe1}}]}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) 31.568444478s ago: executing program 1 (id=314): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4008, 0x20000000000008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="66617374626f6f742c6e6f696e6c696e655f64656e7472792c70726a6a71756f74613d000000080000000000000007cd2c6a71666d743d76667376312c636865636b706f696e743d6d657267652c6d656d6f72793d6e6f726d616c2c6661756c745f747970653d30303030303030303030303030303030343031322c7768696e745f6d6f64653d66732d62617365642c6e6f7265236f766572792c646973636172645f756e69743d73656374696f6e2c00"], 0x21, 0x555b, &(0x7f0000006500)="$eJzs3M2LG2UYAPAnu91+Wxfx4K0jRdiFZmm2H+itaosf2FKqHjxpNklD2iQTNmm67knBo3jwPxEFTx79Gzx49iYeFG+CknlntVstVjabuO3vB5Nn3nfePPO+w7LwzIQJ4Im1nP36cyVOxbGIWIyIkxHFfqXcCpdTeC4iTkfEwn1bpez/s+NwRByPiFOT5ClnpTz0+dnxmYs/vfnLN98dOXTii6+/n9+qgXl7ISJ6g7R/r5di3k7xdtlfH3eK2LswLmM60LtTtvMU77U2igz36jvj6kU8307j88Hd4STe6tYbk9ju3Cr6B/10wuG4vZNnELEUEZtFu9naKGJnmBexvZ3mtbWd/rdtD0cpTzP1Dz4s0sdotBPTeVpbrbSewZ0iNvqjsj/lzZutrUkcl7E8XTTybpG5ubGXK/2/9vxbnf7drWzc2hx28n52ca324lrtUrW2mTdbo9aFar3XvHQhW2l3J8Oqo1a9d7md5+1ua62R91azlXajUa3VspUrrY1OvZ/Vamvn185VL66We2ez166/m3Wb2cokvtLp3x11usPsVr6ZpW+sZutr519azc7Usrev3chu3Lx69dqNd96/8t71l6+98Wo56G/TylbWz62vV2vnquu11b1dgAO1/k/KSU9x/bAnlXlPAODgUf8D87B/9f/mzYi91P8Rt+v/Xv/Hrvq/zKf+/88OVP37pNf/+7B+2JNHrv8/3t95AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwcz8sffl6sbOc2ifK/qfKrmfKdiUiFiLi93+wGId35Vws8yw9ZPzSA3P4thJFhsk5jpTb8Yi4XG6/Pb3fVwEAAAAeX199dPqzVK2nj+V5T4hZSjdtFk5+MKV8lYhYWv5xStkWJh/PTilZ8fd9KLamlK24gXV0SsnSLbdD08r2SBZ3haP3hUoKCw9+Y2qrBQAA5mZ3JTDbKgQAAIBZ+vShR+7MdB7MWCV2HmXuPAsufnn/18O+Y6nt0R8AAAAcXJV5TwAAAADYd0X97/1/AAAA8HhL7/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YuZ9cpYE4DuC/Firgn0iMiUuv4g6O4RFcujQcwEtwBLyCSzecAXcewYChU4kYeO9Bp+Xl5fNJ2qFN+c6UP4uZaQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NLPajX/9uX917Y52107ee4GAAAAOGVTreb1i2k6ftGcf9WcetMcFxFRRsSpvvsgnh1lDpqc6sz11X9t+B5RJ+zrGDXb84j4kLZdvO76UwAAAIAnabjfrRfLWeqtp9301q2itQu+wzRoU778mKnqIiKq6a9MaeU+722msPr3PYzPmdLqAaxxprA05DbMlfYg9d/9MGo3/qcoUlHe/f5s9w4AAPRocFT02wsBAACgT59u3QC6MLn3iiL+TmUepgJHqRgfRZjsAwAAgEfv3blneYueGwIAAAD0r+7/X7L+X7Rb/+/Hlev/xW/r/wEAAMDV0vp/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdGlTrebrxXLWNme7a2VyRZWjtm0GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/sz8sJhEAYhMHe9X2TyT9YadAYPFgFwsffeBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuZ3f/k/MTXOJHOvjaXnkWTt1Ng6NfbOjaM/jLdfAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB80e9++T8xNc4kc6eNpeORZO2qsXXV2HvQOHow3v4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bvIUcUBAH8zs7PJRcXzlCtORMFCG3PZxMR0YqEcFv4JwnHZi2c2/kiuMCEI19jJ1WlESxFBObv8A1bphATSxC7FFRFsbFbe7MztbC7gJiEz693nA2/edyez875vFpZ8580eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBl971xnMXN/ChOy3237l9bi/3tB/roxvadpdhinDSZ9P/DK/UXyWJ7iQAAAHB4ZFV9H0K4m++sxD6dL+r/vDom1vzfPzeKq3r+wbq/6qvaP7bffr330t5A86Nx4knXNwb9E/tT6Ty9Wc625//ziE5x5Yt7L1nxgaQfbr24mxfXM/n25s33u0V4pIlsAYDHcbzqy6D6/1Dse20mBsCh0akV3lX9n823mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAE3a3wjNVnIQQljrjOLp9/9raw/ob23eWqnbm+vXt+jnjKfIQwvrGoH+iwbnMustXrl5YHQz6l5oPXg0htDX6u+X0L3w8xcEhtHJ9nlbwz3A4fKR3HW0/5ycK0vLDfoy3zzWaajorVywGk98Tc01/MQEAcODkZYt1/d18ZyXuSxZCGP4wWf+/UYvDlPX/vU/O3KqPVa//e43NcPYtb178YvnylatvbVxcPd8/3//s7ZO9d3qnzp4+fXa5uFey7I4JAAAAT6Zbtnr9ny7sX/8/VovDlPX/l9/1vh6P9EexVf/vN170azsTAACAw+2F1/7+K3nI/qTbDV+tbm5e6o22e69PjrYtpPrIjpStXv9nC21nBQAAADRhdyuZWP8/V4vDlOv/z/748s/1c2blb1jXNwb942ufD841N52Z1sTPidueIwAAAO2aK1t9/T8vnv9P9x55SEMIb74+iss/AzhV/Z998M1P9bGy2vP/p5qb4kxKF0fXo+gXQ+gsTvzz760lBgAAwIF0tGyx2P8z31n59JdjH3U9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQtH8DAAD//4woQCk=") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) 30.600354762s ago: executing program 1 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d1430df285133dc06d358598"], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000480)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$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") r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4, &(0x7f0000000280)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@data_ordered}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 30.437222654s ago: executing program 1 (id=327): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) close(r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000340)={0xff00, 0x0, 0x0, 0x7, 0x0, "00000000e100"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) 30.431359714s ago: executing program 33 (id=327): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) close(r4) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000340)={0xff00, 0x0, 0x0, 0x7, 0x0, "00000000e100"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) 5.873167906s ago: executing program 6 (id=428): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000109c0000000000002000000000000000"], 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x3, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095", @ANYRESHEX=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xfffffffffffffc67, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r7 = gettid() write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "20704dd16e858237ba5c00001000000000000000a92a"}, 0x21) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = inotify_init1(0x0) read(r8, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000000000)) mremap(&(0x7f00003bc000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000774000/0x2000)=nil) 5.849810566s ago: executing program 0 (id=429): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x63a39000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xe0, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x81, 0xa8, @random="46102158b0f9800948a679b31bc0033bce1d834e61eacd77e38081f0feaeb7547d3d22914c0f77be190b8ec563489016c252a79e4e927f79967d5d4097d367710808a840a4b8d2412974e81f04f4124065f2f7bd8ada56ac8fde7bd4f8a23eb09463dd0772656fd84aa355ee848f4472903d7fdd9ca1627e77a44a6163"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb6c}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40400c4}, 0xc004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r5 = epoll_create(0x2) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x22800, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000300)={0x3, 0x1, {0x1, 0x31, 0x0, 0xd, 0x3, 0x60, 0x0, 0x0, 0x1}}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0x11}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r7, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x100) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000300)={0x7, 0x279f394c, 0x4, 0x9, 0x7, "8c5bfde10f9a505d4b7d4831481e62877cc153", 0x9, 0x4}) 5.56819243s ago: executing program 0 (id=431): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss={0x2, 0x4}, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x100000000000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 5.200798306s ago: executing program 5 (id=433): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x63a39000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xe0, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x81, 0xa8, @random="46102158b0f9800948a679b31bc0033bce1d834e61eacd77e38081f0feaeb7547d3d22914c0f77be190b8ec563489016c252a79e4e927f79967d5d4097d367710808a840a4b8d2412974e81f04f4124065f2f7bd8ada56ac8fde7bd4f8a23eb09463dd0772656fd84aa355ee848f4472903d7fdd9ca1627e77a44a6163"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb6c}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40400c4}, 0xc004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r5 = epoll_create(0x2) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x22800, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000300)={0x3, 0x1, {0x1, 0x31, 0x0, 0xd, 0x3, 0x60, 0x0, 0x0, 0x1}}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0x11}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r7, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x100) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000300)={0x7, 0x279f394c, 0x4, 0x9, 0x7, "8c5bfde10f9a505d4b7d4831481e62877cc153", 0x9, 0x4}) 4.943478039s ago: executing program 5 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000200)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc6f}}, {@debug}, {@nobh}, {}, {@delalloc}]}, 0x23, 0x46a, &(0x7f00000006c0)="$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") r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011"], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000000000000000000001820700000000000002030207b1a0000f8ffffffb70200000047cf0bff03000000000100850000002d000000249d9500"/83], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) request_key(&(0x7f0000000340)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x100000000000, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r8 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) fcntl$dupfd(r8, 0x406, r8) unlinkat(r8, &(0x7f0000000000)='./file0\x00', 0x200) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c020000100001000000000000000000fc01000000000000000000000000000100000000000000000000ffffe000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x22c}}, 0x0) 4.91396073s ago: executing program 6 (id=437): munlock(&(0x7f0000f5c000/0x3000)=nil, 0x3000) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) close_range(r3, 0xffffffffffffffff, 0x0) bind$802154_raw(r0, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff}}, 0x14) 4.848354611s ago: executing program 6 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000180), 0x1004) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket(0xa, 0x2, 0x2) fsopen(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503003c00000000002990780000000000d89cfa2bc060b3f1029dfd0d85f200000000000000002890780400000000000000000000000500008520020000002d86c92d0000000000fdff77a053ff470a5a6a3e9447246ea062beafd362f52a2ed5ac92b6f6e8e8911657"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r3) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x64, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x64}}, 0x0) 3.894884154s ago: executing program 5 (id=439): socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) close(r4) close(r5) 3.544797949s ago: executing program 0 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) socket$can_raw(0x1d, 0x3, 0x1) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r6, 0x0, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.455659525s ago: executing program 6 (id=443): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) syz_pidfd_open(r4, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.333711676s ago: executing program 2 (id=446): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) (async) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8709af21", @ANYRES16=r7, @ANYBLOB="8b332000000000000000150000000c009900fcffffff00000000"], 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r7, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7}}}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x84) (async) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_getoverrun(r9) 2.332832407s ago: executing program 6 (id=447): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="75bcc24dd29d5455a374a41b30f7d8aed96651d79c16c19a9ad970f29c0c13d596ff8a08f6ba48d9a3294da9bc7a792eeab325c0de3dcdf6591b0220b3a2075f4499f51348aec1ad3b53b0ae90808c6c8a7af0d7c78f1ece528bfd6712b4f9b510b5c115d51147274909b56e477adae867891851db22bd710dbfa84cc93844df35a5a14115e1512e2f3d63fa0c96302587a45ef0766a92862a2826a9a31bff9fcff8c0facee689955ab8a0b079043fe1b02ea54cc6a85158c50c751559cda8dcc0dd8fb65bf1fd3b8ab3bc20c01bade37978", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], 0x15) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r7}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r6, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x0, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="2b70fffffcffffff007cff0308000017f2560000050000000000000000000000183700000500000000000000000000011839000001000000000000000000000085200000020000007f50030003000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10}, 0x0, &(0x7f0000000040)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x10) sendfile(r9, r9, 0x0, 0xe0000000) 2.323862927s ago: executing program 0 (id=448): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000009c0)={[{@inlinecrypt}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc78c}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8000000000000000}}, {@sb={'sb', 0x3d, 0x8}}, {@nouser_xattr}]}, 0x0, 0x45d, &(0x7f00000004c0)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fcntl$addseals(r3, 0x409, 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES16=r3, @ANYRESHEX=r6, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r10, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='task_newtask\x00', r11}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.09268072s ago: executing program 6 (id=449): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x600c1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0xfffffe00) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="66617374626f6f742c6e6f696e6c696e655f64656e7472792c70726a6a71756f74613d000000080000000000000007cd2c6a71666d743d76667376312c636865636b706f696e743d6d657267652c6d656d6f72793d6e6f726d616c2c6661756c745f747970653d30303030303030303030303030303030343031322c7768696e745f6d6f64653d66732d62617365642c6e6f7265236f766572792c646973636172645f756e69743d73656374696f6e2c00"], 0x21, 0x555b, &(0x7f0000006500)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) chdir(0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) creat(&(0x7f00000001c0)='./bus\x00', 0x4e) mkdir(&(0x7f0000000140)='./control\x00', 0x14) close(r1) inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) fcntl$setown(r1, 0x8, 0x0) 2.043358361s ago: executing program 2 (id=450): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x192c000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000007240)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000071c0)}], 0x7, 0x0, 0x0, 0x800}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000008c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x52}, 0x0) 2.042913761s ago: executing program 0 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r5, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xd, 0x8, 0x6, 0x800000, 0x40000, 0xffffffffffffffff, 0xfff, '\x00', 0x0, r5, 0x1, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0xfffffffc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @exit, @ringbuf_query, @map_fd={0x18, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', r7, 0x25, r6, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, r6, r8, r9], 0x0, 0x10, 0xc89e, @void, @value}, 0x94) 761.648539ms ago: executing program 0 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f00000001c0)=0x93) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRES16=r1, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX=r5, @ANYRES32=r4, @ANYBLOB="6f87414a37b99a3b10b614e231948221203630043a970efd59a701059e5e9cb6900adaecc3f6b4"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/145, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r9 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407a, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) statx(r9, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r10, 0x2, 0x43, @broadcast}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 674.24039ms ago: executing program 4 (id=453): socketpair(0x29, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 673.48122ms ago: executing program 2 (id=454): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) 464.788203ms ago: executing program 4 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 440.857683ms ago: executing program 4 (id=456): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 397.386124ms ago: executing program 2 (id=457): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 192.806677ms ago: executing program 4 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 158.412198ms ago: executing program 5 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') 109.431458ms ago: executing program 2 (id=460): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r2 = getpid() r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x280201, 0x0) r4 = getpid() sendmsg$unix(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="ce3240", 0x3}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x70, 0x8805}, 0x40080) 798.78µs ago: executing program 2 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000, @value}, 0x28) 487.47µs ago: executing program 5 (id=462): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000cd19006a0120000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 270.86µs ago: executing program 4 (id=463): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061109c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 134.84µs ago: executing program 4 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 0s ago: executing program 5 (id=465): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) kernel console output (not intermixed with test programs): e corrupt. Please run fsck. [ 57.095431][ T755] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 57.113467][ T755] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 57.172558][ T5] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 57.193200][ T763] fuse: Bad value for 'fd' [ 57.616514][ T5] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 57.624699][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.637551][ T5] usb 4-1: config 0 has no interface number 0 [ 57.782278][ T773] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 57.796561][ T773] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.982960][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 58.109463][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.444129][ T5] usb 4-1: Product: syz [ 58.448418][ T5] usb 4-1: Manufacturer: syz [ 58.453822][ T5] usb 4-1: SerialNumber: syz [ 58.463300][ T5] usb 4-1: config 0 descriptor?? [ 58.502893][ T5] hub 4-1:0.31: bad descriptor, ignoring hub [ 58.508918][ T5] hub: probe of 4-1:0.31 failed with error -5 [ 58.525602][ T5] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 58.532096][ T5] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 58.578468][ T5] uvcvideo: Failed to create links for entity 6 [ 58.602653][ T5] uvcvideo: Failed to register entities (-22). [ 59.247698][ T24] kauditd_printk_skb: 73 callbacks suppressed [ 59.250053][ T5] usb 4-1: USB disconnect, device number 4 [ 59.312655][ T24] audit: type=1400 audit(1747118238.390:399): avc: denied { mount } for pid=776 comm="syz.1.118" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.447057][ T792] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.465100][ T792] EXT4-fs error (device loop4): __ext4_iget:5007: inode #11: block 1: comm syz.4.121: invalid block [ 59.476582][ T792] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.121: couldn't read orphan inode 11 (err -117) [ 59.489631][ T792] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 59.653170][ T792] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 59.882779][ T24] audit: type=1400 audit(1747118239.420:400): avc: denied { set_context_mgr } for pid=797 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.905687][ T801] FAULT_INJECTION: forcing a failure. [ 59.905687][ T801] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 59.918950][ T801] CPU: 0 PID: 801 Comm: syz.3.124 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 59.928652][ T801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.938706][ T801] Call Trace: [ 59.941995][ T801] __dump_stack+0x21/0x24 [ 59.946319][ T801] dump_stack_lvl+0x169/0x1d8 [ 59.950997][ T801] ? show_regs_print_info+0x18/0x18 [ 59.956189][ T801] ? netif_skb_features+0x831/0xb90 [ 59.961376][ T801] dump_stack+0x15/0x1c [ 59.965521][ T801] should_fail+0x3c1/0x510 [ 59.969932][ T801] should_fail_alloc_page+0x4f/0x60 [ 59.975129][ T801] __alloc_pages_nodemask+0x109/0x5f0 [ 59.980498][ T801] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 59.986033][ T801] ? __local_bh_enable_ip+0x53/0x80 [ 59.991223][ T801] ? local_bh_enable+0x1f/0x30 [ 59.995975][ T801] ? __dev_queue_xmit+0x15a0/0x2540 [ 60.001163][ T801] new_slab+0x84/0x3f0 [ 60.005222][ T801] ? dev_queue_xmit+0x20/0x20 [ 60.009909][ T801] ___slab_alloc+0x2a6/0x450 [ 60.014491][ T801] ? skb_clone+0x1e9/0x380 [ 60.018925][ T801] __slab_alloc+0x63/0xa0 [ 60.023257][ T801] ? skb_clone+0x1e9/0x380 [ 60.027693][ T801] ? skb_clone+0x1e9/0x380 [ 60.032121][ T801] kmem_cache_alloc+0x1af/0x2e0 [ 60.036975][ T801] ? skb_clone+0x1e9/0x380 [ 60.041394][ T801] skb_clone+0x1e9/0x380 [ 60.045628][ T801] bpf_clone_redirect+0xa7/0x380 [ 60.050562][ T801] bpf_prog_6893982b85ceadf7+0x56/0x908 [ 60.056112][ T801] ? rcu_read_unlock_special+0x170/0x420 [ 60.061756][ T801] ? preempt_schedule+0xa7/0xb0 [ 60.066603][ T801] ? schedule_preempt_disabled+0x20/0x20 [ 60.072239][ T801] ? __rcu_read_unlock+0xa0/0xa0 [ 60.077169][ T801] ? ktime_get+0x10e/0x140 [ 60.081577][ T801] ? __kasan_check_read+0x11/0x20 [ 60.086592][ T801] ? bpf_test_timer_continue+0x147/0x410 [ 60.092217][ T801] bpf_test_run+0x310/0x9b0 [ 60.096722][ T801] ? convert___skb_to_skb+0x4f0/0x4f0 [ 60.102090][ T801] ? eth_get_headlen+0x1f0/0x1f0 [ 60.107027][ T801] ? convert___skb_to_skb+0x41/0x4f0 [ 60.112302][ T801] bpf_prog_test_run_skb+0x9c2/0x10b0 [ 60.117669][ T801] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 60.123554][ T801] bpf_prog_test_run+0x350/0x3c0 [ 60.128486][ T801] __se_sys_bpf+0x49f/0x680 [ 60.132988][ T801] ? __x64_sys_bpf+0x90/0x90 [ 60.137572][ T801] ? fpu__clear_all+0x20/0x20 [ 60.142228][ T801] ? __kasan_check_read+0x11/0x20 [ 60.147231][ T801] __x64_sys_bpf+0x7b/0x90 [ 60.151642][ T801] do_syscall_64+0x31/0x40 [ 60.156049][ T801] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.161922][ T801] RIP: 0033:0x7f57873ab969 [ 60.166331][ T801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.185911][ T801] RSP: 002b:00007f5785a14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.194311][ T801] RAX: ffffffffffffffda RBX: 00007f57875d2fa0 RCX: 00007f57873ab969 [ 60.202260][ T801] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 60.210208][ T801] RBP: 00007f5785a14090 R08: 0000000000000000 R09: 0000000000000000 [ 60.218152][ T801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.226098][ T801] R13: 0000000000000000 R14: 00007f57875d2fa0 R15: 00007fff15d325c8 [ 60.443860][ T803] EXT4-fs (loop1): Test dummy encryption mode enabled [ 60.500863][ T24] audit: type=1400 audit(1747118240.040:401): avc: denied { read } for pid=806 comm="syz.3.127" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.535518][ T803] EXT4-fs error (device loop1): __ext4_iget:5007: inode #11: block 1: comm syz.1.123: invalid block [ 60.547264][ T803] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.123: couldn't read orphan inode 11 (err -117) [ 60.559837][ T803] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 60.597864][ T24] audit: type=1400 audit(1747118240.070:402): avc: denied { open } for pid=806 comm="syz.3.127" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.836085][ T24] audit: type=1326 audit(1747118240.380:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=811 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324ea07969 code=0x7ffc0000 [ 60.888259][ T24] audit: type=1326 audit(1747118240.410:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=811 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f324ea07969 code=0x7ffc0000 [ 60.941910][ T24] audit: type=1326 audit(1747118240.410:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=811 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324ea07969 code=0x7ffc0000 [ 60.995557][ T810] erofs: (device loop2): mounted with root inode @ nid 36. [ 61.005528][ T812] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 61.017968][ T24] audit: type=1326 audit(1747118240.410:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=811 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f324ea07969 code=0x7ffc0000 [ 61.055337][ T812] EXT4-fs (loop0): write access will be enabled during recovery [ 61.063380][ T812] EXT4-fs (loop0): barriers disabled [ 61.068832][ T812] JBD2: no valid journal superblock found [ 61.074403][ T24] audit: type=1326 audit(1747118240.410:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=811 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f324ea07969 code=0x7ffc0000 [ 61.075177][ T812] EXT4-fs (loop0): error loading journal [ 61.097930][ T24] audit: type=1326 audit(1747118240.410:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=811 comm="syz.0.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f324ea07969 code=0x7ffc0000 [ 61.111337][ T810] attempt to access beyond end of device [ 61.111337][ T810] loop2: rw=0, want=40, limit=16 [ 61.168808][ T810] attempt to access beyond end of device [ 61.168808][ T810] loop2: rw=0, want=40, limit=16 [ 61.180232][ T810] attempt to access beyond end of device [ 61.180232][ T810] loop2: rw=0, want=40, limit=16 [ 61.338172][ T819] netlink: 'syz.4.125': attribute type 12 has an invalid length. [ 61.394772][ T807] F2FS-fs (loop3): invalid crc value [ 61.433058][ T807] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 62.117772][ T821] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 62.132443][ T807] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 62.139739][ T807] F2FS-fs (loop3): Start checkpoint disabled! [ 62.146701][ T807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 62.170310][ T830] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.180932][ T830] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 62.194511][ T830] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 63.231217][ T841] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 63.245252][ T841] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.108534][ T852] FAULT_INJECTION: forcing a failure. [ 64.108534][ T852] name failslab, interval 1, probability 0, space 0, times 0 [ 64.121186][ T852] CPU: 0 PID: 852 Comm: syz.4.137 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 64.130895][ T852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.140942][ T852] Call Trace: [ 64.144246][ T852] __dump_stack+0x21/0x24 [ 64.148570][ T852] dump_stack_lvl+0x169/0x1d8 [ 64.153234][ T852] ? thaw_kernel_threads+0x220/0x220 [ 64.158508][ T852] ? show_regs_print_info+0x18/0x18 [ 64.163707][ T852] ? __kasan_check_write+0x14/0x20 [ 64.168807][ T852] ? skb_release_data+0x3b3/0x670 [ 64.173816][ T852] dump_stack+0x15/0x1c [ 64.177953][ T852] should_fail+0x3c1/0x510 [ 64.182348][ T852] ? skb_clone+0x1e9/0x380 [ 64.186745][ T852] __should_failslab+0xa4/0xe0 [ 64.191488][ T852] should_failslab+0x9/0x20 [ 64.195975][ T852] kmem_cache_alloc+0x3d/0x2e0 [ 64.200720][ T852] ? __bpf_redirect+0x6a7/0xe30 [ 64.205551][ T852] skb_clone+0x1e9/0x380 [ 64.209770][ T852] bpf_clone_redirect+0xa7/0x380 [ 64.214693][ T852] bpf_prog_6893982b85ceadf7+0x56/0x7c [ 64.220131][ T852] ? proto_register+0x5e0/0x880 [ 64.224961][ T852] ? bpf_prog_test_run_skb+0x31d/0x10b0 [ 64.230487][ T852] ? bpf_prog_test_run+0x350/0x3c0 [ 64.235571][ T852] ? __se_sys_bpf+0x49f/0x680 [ 64.240223][ T852] ? __x64_sys_bpf+0x7b/0x90 [ 64.244799][ T852] ? do_syscall_64+0x31/0x40 [ 64.249369][ T852] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 64.255423][ T852] ? __kasan_check_read+0x11/0x20 [ 64.260436][ T852] ? bpf_test_timer_continue+0x147/0x410 [ 64.266043][ T852] bpf_test_run+0x310/0x9b0 [ 64.270524][ T852] ? convert___skb_to_skb+0x4f0/0x4f0 [ 64.275872][ T852] ? eth_get_headlen+0x1f0/0x1f0 [ 64.280792][ T852] ? convert___skb_to_skb+0x41/0x4f0 [ 64.286053][ T852] bpf_prog_test_run_skb+0x9c2/0x10b0 [ 64.291406][ T852] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 64.297277][ T852] bpf_prog_test_run+0x350/0x3c0 [ 64.302189][ T852] __se_sys_bpf+0x49f/0x680 [ 64.306666][ T852] ? __x64_sys_bpf+0x90/0x90 [ 64.311236][ T852] ? fpu__clear_all+0x20/0x20 [ 64.315893][ T852] __x64_sys_bpf+0x7b/0x90 [ 64.320287][ T852] do_syscall_64+0x31/0x40 [ 64.324687][ T852] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 64.330558][ T852] RIP: 0033:0x7fd39aaca969 [ 64.334956][ T852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.354545][ T852] RSP: 002b:00007fd399133038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.362966][ T852] RAX: ffffffffffffffda RBX: 00007fd39acf1fa0 RCX: 00007fd39aaca969 [ 64.370915][ T852] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 64.378875][ T852] RBP: 00007fd399133090 R08: 0000000000000000 R09: 0000000000000000 [ 64.386822][ T852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.394780][ T852] R13: 0000000000000000 R14: 00007fd39acf1fa0 R15: 00007fffc48864a8 [ 64.418372][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 64.418385][ T24] audit: type=1326 audit(1747118243.950:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.470456][ T24] audit: type=1326 audit(1747118243.950:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.495476][ T24] audit: type=1326 audit(1747118244.010:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.519817][ T24] audit: type=1326 audit(1747118244.010:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.521556][ T861] netlink: 'syz.0.135': attribute type 3 has an invalid length. [ 64.557620][ T24] audit: type=1326 audit(1747118244.010:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.742088][ T24] audit: type=1326 audit(1747118244.010:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.766125][ T24] audit: type=1326 audit(1747118244.010:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.789801][ T24] audit: type=1326 audit(1747118244.010:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.822752][ T24] audit: type=1326 audit(1747118244.010:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.832814][ T859] EXT4-fs (loop3): Test dummy encryption mode enabled [ 64.852970][ T24] audit: type=1326 audit(1747118244.010:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=853 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 64.965111][ T859] EXT4-fs error (device loop3): __ext4_iget:5007: inode #11: block 1: comm syz.3.136: invalid block [ 64.977307][ T859] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.136: couldn't read orphan inode 11 (err -117) [ 64.989227][ T859] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 65.040691][ T859] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 65.194694][ T874] EXT4-fs (loop0): Unrecognized mount option "uid<00000000000000000000" or missing value [ 65.460666][ T892] netlink: 'syz.3.144': attribute type 12 has an invalid length. [ 65.549393][ T896] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.560179][ T896] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 65.570526][ T896] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 65.613939][ T874] erofs: (device loop0): mounted with root inode @ nid 36. [ 65.825231][ T911] erofs: Unknown parameter 'ÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000000184467440737095516150xffffffffffffffffÿÿÿÿ' [ 66.003798][ T915] cgroup: syz.4.149 (915) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 66.035008][ T915] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 66.526418][ T920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 66.551009][ T920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 66.627851][ T927] syz.4.151[927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.628146][ T927] syz.4.151[927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.982617][ T927] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,,errors=continue [ 67.005112][ T927] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.712719][ T934] FAULT_INJECTION: forcing a failure. [ 67.712719][ T934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.732504][ T934] CPU: 1 PID: 934 Comm: syz.1.153 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 67.742223][ T934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.752281][ T934] Call Trace: [ 67.755577][ T934] __dump_stack+0x21/0x24 [ 67.759907][ T934] dump_stack_lvl+0x169/0x1d8 [ 67.764587][ T934] ? show_regs_print_info+0x18/0x18 [ 67.769780][ T934] ? stack_trace_save+0x98/0xe0 [ 67.774633][ T934] dump_stack+0x15/0x1c [ 67.778789][ T934] should_fail+0x3c1/0x510 [ 67.783206][ T934] should_fail_usercopy+0x1a/0x20 [ 67.788231][ T934] _copy_from_user+0x20/0xd0 [ 67.792825][ T934] ___sys_recvmsg+0x129/0x4f0 [ 67.797502][ T934] ? __sys_recvmsg+0x250/0x250 [ 67.802279][ T934] ? __fsnotify_parent+0x5f5/0x6c0 [ 67.807384][ T934] ? __fdget+0x1a1/0x230 [ 67.811617][ T934] ? do_recvmmsg+0x15b/0x790 [ 67.816203][ T934] do_recvmmsg+0x347/0x790 [ 67.820623][ T934] ? __sys_recvmmsg+0x280/0x280 [ 67.825466][ T934] ? __kasan_check_write+0x14/0x20 [ 67.830575][ T934] ? mutex_lock+0x8c/0xe0 [ 67.834906][ T934] ? fput_many+0x15a/0x1a0 [ 67.839315][ T934] __x64_sys_recvmmsg+0x18d/0x240 [ 67.844335][ T934] ? do_recvmmsg+0x790/0x790 [ 67.848928][ T934] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 67.854995][ T934] do_syscall_64+0x31/0x40 [ 67.859410][ T934] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 67.865289][ T934] RIP: 0033:0x7f369310c969 [ 67.869695][ T934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.889287][ T934] RSP: 002b:00007f3691754038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 67.897693][ T934] RAX: ffffffffffffffda RBX: 00007f3693334080 RCX: 00007f369310c969 [ 67.905655][ T934] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000003 [ 67.913621][ T934] RBP: 00007f3691754090 R08: 0000000000000000 R09: 0000000000000000 [ 67.921589][ T934] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 67.929556][ T934] R13: 0000000000000001 R14: 00007f3693334080 R15: 00007fff60248588 [ 68.065028][ T945] syz.2.156[945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.065086][ T945] syz.2.156[945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.354546][ T944] EXT4-fs (loop4): Test dummy encryption mode enabled [ 68.395351][ T944] EXT4-fs error (device loop4): __ext4_iget:5007: inode #11: block 1: comm syz.4.154: invalid block [ 68.407678][ T944] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.154: couldn't read orphan inode 11 (err -117) [ 68.420498][ T944] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 68.672257][ T944] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 69.106286][ T945] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,,errors=continue [ 69.117357][ T945] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.278588][ T951] erofs: (device loop1): mounted with root inode @ nid 36. [ 69.287344][ T951] attempt to access beyond end of device [ 69.287344][ T951] loop1: rw=0, want=40, limit=16 [ 69.340832][ T951] attempt to access beyond end of device [ 69.340832][ T951] loop1: rw=0, want=40, limit=16 [ 69.370021][ T951] attempt to access beyond end of device [ 69.370021][ T951] loop1: rw=0, want=40, limit=16 [ 69.638149][ T969] netlink: 92 bytes leftover after parsing attributes in process `syz.0.158'. [ 69.984518][ T971] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.995302][ T971] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 70.017092][ T971] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 70.172701][ T980] exfat: Unknown parameter '«>mÀÍÖ^ŽÜ6îH¥Çýô¡{¬N{Flª›´`À´¥`LW¼È쟛'9‡ ' [ 70.238371][ T978] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue [ 70.275241][ T980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 70.284277][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 70.284289][ T24] audit: type=1400 audit(1747118249.820:499): avc: denied { write } for pid=979 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.310589][ T980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 70.588266][ T978] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.164: bg 0: block 234: padding at end of block bitmap is not set [ 70.612524][ T24] audit: type=1326 audit(1747118250.150:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369310c969 code=0x7ffc0000 [ 70.647598][ T978] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 70.664270][ T978] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.664270][ T978] [ 70.675240][ T978] EXT4-fs (loop4): Total free blocks count 0 [ 70.681770][ T978] EXT4-fs (loop4): Free/Dirty block details [ 70.687957][ T24] audit: type=1326 audit(1747118250.150:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369310c969 code=0x7ffc0000 [ 70.711718][ T978] EXT4-fs (loop4): free_blocks=0 [ 70.720038][ T24] audit: type=1326 audit(1747118250.150:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f369310b1d7 code=0x7ffc0000 [ 70.743444][ T978] EXT4-fs (loop4): dirty_blocks=2480 [ 70.748787][ T978] EXT4-fs (loop4): Block reservation details [ 70.757948][ T996] device pim6reg1 entered promiscuous mode [ 70.763839][ T24] audit: type=1326 audit(1747118250.150:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369310c969 code=0x7ffc0000 [ 70.765581][ T994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 70.787037][ T978] EXT4-fs (loop4): i_reserved_data_blocks=155 [ 70.801444][ T24] audit: type=1326 audit(1747118250.150:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369310c969 code=0x7ffc0000 [ 70.829407][ T7] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 416 with error 28 [ 70.842434][ T7] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.842434][ T7] [ 70.881142][ T997] overlayfs: './file1' not a directory [ 71.174790][ T1003] EXT4-fs (loop2): Test dummy encryption mode enabled [ 71.275358][ T1003] EXT4-fs error (device loop2): __ext4_iget:5007: inode #11: block 1: comm syz.2.169: invalid block [ 71.287150][ T1003] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.169: couldn't read orphan inode 11 (err -117) [ 71.299762][ T1003] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 71.462550][ T24] audit: type=1400 audit(1747118251.000:505): avc: denied { create } for pid=995 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.497149][ T24] audit: type=1400 audit(1747118251.000:506): avc: denied { getopt } for pid=995 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.791084][ T362] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 72.016145][ T24] audit: type=1326 audit(1747118251.560:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 72.041920][ T24] audit: type=1326 audit(1747118251.580:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1013 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 72.307681][ T1023] syz.4.171[1023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.307739][ T1023] syz.4.171[1023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.332554][ T362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.424734][ T362] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 72.485569][ T1018] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,,errors=continue [ 72.496491][ T1018] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.672939][ T362] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 72.701931][ T362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.760981][ T362] usb 4-1: Product: syz [ 72.799491][ T362] usb 4-1: Manufacturer: syz [ 72.832828][ T362] usb 4-1: SerialNumber: syz [ 72.856401][ T362] usb 4-1: config 0 descriptor?? [ 73.267219][ T1035] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.278008][ T1035] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 73.296219][ T1035] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 73.562629][ T1043] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.591781][ T1043] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.099894][ T1061] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 74.249444][ T1058] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 74.263461][ T1058] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.907699][ T1068] EXT4-fs (loop1): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 74.953253][ T362] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 74.964646][ T362] asix: probe of 4-1:0.0 failed with error -71 [ 74.972860][ T362] usb 4-1: USB disconnect, device number 5 [ 75.130666][ T1076] FAULT_INJECTION: forcing a failure. [ 75.130666][ T1076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.143765][ T1076] CPU: 1 PID: 1076 Comm: syz.3.186 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 75.153545][ T1076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.163595][ T1076] Call Trace: [ 75.166885][ T1076] __dump_stack+0x21/0x24 [ 75.171195][ T1076] dump_stack_lvl+0x169/0x1d8 [ 75.175850][ T1076] ? thaw_kernel_threads+0x220/0x220 [ 75.181108][ T1076] ? vsnprintf+0x1871/0x1960 [ 75.185701][ T1076] ? show_regs_print_info+0x18/0x18 [ 75.190895][ T1076] dump_stack+0x15/0x1c [ 75.195034][ T1076] should_fail+0x3c1/0x510 [ 75.199429][ T1076] should_fail_usercopy+0x1a/0x20 [ 75.204429][ T1076] _copy_to_user+0x20/0x90 [ 75.208822][ T1076] simple_read_from_buffer+0xe9/0x160 [ 75.214167][ T1076] proc_fail_nth_read+0x19a/0x210 [ 75.219163][ T1076] ? proc_fault_inject_write+0x2f0/0x2f0 [ 75.224772][ T1076] ? rw_verify_area+0x1c0/0x360 [ 75.229609][ T1076] ? proc_fault_inject_write+0x2f0/0x2f0 [ 75.235217][ T1076] vfs_read+0x1fe/0xa10 [ 75.239361][ T1076] ? kernel_read+0x70/0x70 [ 75.243756][ T1076] ? ldsem_down_read+0x158/0x650 [ 75.248672][ T1076] ? __kasan_check_write+0x14/0x20 [ 75.253785][ T1076] ? mutex_lock+0x8c/0xe0 [ 75.258090][ T1076] ? mutex_trylock+0xa0/0xa0 [ 75.262655][ T1076] ? __fget_files+0x2c4/0x320 [ 75.267309][ T1076] ? __fdget_pos+0x2d2/0x380 [ 75.271874][ T1076] ? ksys_read+0x71/0x240 [ 75.276189][ T1076] ksys_read+0x140/0x240 [ 75.280408][ T1076] ? vfs_write+0xd60/0xd60 [ 75.284803][ T1076] __x64_sys_read+0x7b/0x90 [ 75.289294][ T1076] do_syscall_64+0x31/0x40 [ 75.293704][ T1076] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 75.299572][ T1076] RIP: 0033:0x7f57873aa37c [ 75.303961][ T1076] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 75.323562][ T1076] RSP: 002b:00007f5785a14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.331969][ T1076] RAX: ffffffffffffffda RBX: 00007f57875d2fa0 RCX: 00007f57873aa37c [ 75.339923][ T1076] RDX: 000000000000000f RSI: 00007f5785a140a0 RDI: 0000000000000004 [ 75.347882][ T1076] RBP: 00007f5785a14090 R08: 0000000000000000 R09: 0000000000000000 [ 75.355839][ T1076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.363803][ T1076] R13: 0000000000000000 R14: 00007f57875d2fa0 R15: 00007fff15d325c8 [ 75.469596][ T1067] netlink: 'syz.2.183': attribute type 4 has an invalid length. [ 75.757067][ T1094] fuse: Unknown parameter 'fd¦01777777777777777777777' [ 76.247787][ T1107] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 76.255622][ T1107] netlink: 'syz.3.194': attribute type 2 has an invalid length. [ 76.273280][ T24] kauditd_printk_skb: 46 callbacks suppressed [ 76.273291][ T24] audit: type=1400 audit(1747118255.820:555): avc: denied { unmount } for pid=268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.635576][ T24] audit: type=1400 audit(1747118256.140:556): avc: denied { execute } for pid=1104 comm="syz.4.193" name="file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.659554][ T24] audit: type=1400 audit(1747118256.140:557): avc: denied { execute_no_trans } for pid=1104 comm="syz.4.193" path="/43/file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.740279][ T24] audit: type=1400 audit(1747118256.270:558): avc: denied { write } for pid=1115 comm="syz.2.198" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.833147][ T1117] EXT4-fs (loop2): Ignoring removed orlov option [ 76.859469][ T1117] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue [ 76.902302][ T1131] syz.0.200[1131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.902536][ T1131] syz.0.200[1131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.051440][ T24] audit: type=1400 audit(1747118256.590:559): avc: denied { mounton } for pid=1132 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.287155][ T1131] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,,errors=continue [ 77.298438][ T1131] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.939377][ T24] audit: type=1400 audit(1747118257.460:560): avc: denied { append } for pid=1115 comm="syz.2.198" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.015625][ T1140] syz.1.199[1140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.016279][ T1140] syz.1.199[1140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.189648][ T1141] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 78.214818][ T1141] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.917983][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.925086][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.932899][ T1132] device bridge_slave_0 entered promiscuous mode [ 78.939877][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.947173][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.954746][ T1132] device bridge_slave_1 entered promiscuous mode [ 78.973444][ T7] device bridge_slave_1 left promiscuous mode [ 78.979572][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.987358][ T7] device bridge_slave_0 left promiscuous mode [ 78.993622][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.001535][ T7] device veth1_macvtap left promiscuous mode [ 79.007925][ T7] device veth0_vlan left promiscuous mode [ 79.274123][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.282921][ T24] audit: type=1400 audit(1747118258.830:561): avc: denied { create } for pid=1154 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.304132][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.314053][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.322597][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.337549][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.344696][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.357092][ T24] audit: type=1400 audit(1747118258.870:562): avc: denied { connect } for pid=1154 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.392762][ T1169] netlink: 'syz.4.206': attribute type 12 has an invalid length. [ 79.402676][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.425716][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.440008][ T24] audit: type=1400 audit(1747118258.870:563): avc: denied { write } for pid=1154 comm="syz.2.205" path="socket:[18570]" dev="sockfs" ino=18570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 79.465675][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.474160][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.481199][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.488864][ T24] audit: type=1400 audit(1747118258.870:564): avc: denied { nlmsg_read } for pid=1154 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 79.510109][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.525901][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.540061][ T1132] device veth0_vlan entered promiscuous mode [ 79.547737][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.557214][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.566725][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.575414][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.588940][ T1132] device veth1_macvtap entered promiscuous mode [ 79.600796][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.623645][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.632004][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.651536][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.665813][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.962526][ T437] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 80.177683][ T1177] F2FS-fs (loop0): invalid crc value [ 80.184144][ T1177] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 80.309818][ T437] usb 6-1: Using ep0 maxpacket: 16 [ 80.356303][ T1177] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 80.363220][ T1177] F2FS-fs (loop0): Start checkpoint disabled! [ 80.369906][ T1177] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 80.472557][ T437] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 80.480875][ T437] usb 6-1: config 0 has no interface number 0 [ 80.487281][ T437] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 80.497868][ T1191] FAULT_INJECTION: forcing a failure. [ 80.497868][ T1191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.510951][ T437] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 80.521290][ T1191] CPU: 0 PID: 1191 Comm: syz.0.211 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 80.531081][ T1191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.541124][ T1191] Call Trace: [ 80.544421][ T1191] __dump_stack+0x21/0x24 [ 80.548744][ T1191] dump_stack_lvl+0x169/0x1d8 [ 80.553411][ T1191] ? thaw_kernel_threads+0x220/0x220 [ 80.558693][ T1191] ? show_regs_print_info+0x18/0x18 [ 80.563888][ T1191] dump_stack+0x15/0x1c [ 80.568034][ T1191] should_fail+0x3c1/0x510 [ 80.572444][ T1191] should_fail_usercopy+0x1a/0x20 [ 80.577460][ T1191] _copy_from_user+0x20/0xd0 [ 80.582044][ T1191] proc_do_submiturb+0xaa1/0x3640 [ 80.587063][ T1191] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 80.593646][ T1191] ? proc_do_submiturb+0x501/0x3640 [ 80.598839][ T1191] ? __kasan_check_write+0x14/0x20 [ 80.603944][ T1191] proc_submiturb+0xda/0x130 [ 80.608526][ T1191] ? proc_setconfig+0x590/0x590 [ 80.613375][ T1191] ? selinux_file_ioctl+0x377/0x480 [ 80.618564][ T1191] ? mutex_trylock+0xa0/0xa0 [ 80.623151][ T1191] ? __fget_files+0x2c4/0x320 [ 80.627842][ T1191] usbdev_ioctl+0x14a0/0x1e40 [ 80.632515][ T1191] ? usbdev_poll+0x200/0x200 [ 80.637104][ T1191] ? security_file_ioctl+0x84/0xa0 [ 80.642213][ T1191] ? usbdev_poll+0x200/0x200 [ 80.646798][ T1191] __se_sys_ioctl+0x121/0x1a0 [ 80.651470][ T1191] __x64_sys_ioctl+0x7b/0x90 [ 80.656057][ T1191] do_syscall_64+0x31/0x40 [ 80.660472][ T1191] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 80.666354][ T1191] RIP: 0033:0x7f324ea07969 [ 80.670763][ T1191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.690367][ T1191] RSP: 002b:00007f324d04f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.698774][ T1191] RAX: ffffffffffffffda RBX: 00007f324ec2f080 RCX: 00007f324ea07969 [ 80.706728][ T1191] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000007 [ 80.714683][ T1191] RBP: 00007f324d04f090 R08: 0000000000000000 R09: 0000000000000000 [ 80.722640][ T1191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.730590][ T1191] R13: 0000000000000000 R14: 00007f324ec2f080 R15: 00007ffd04d20418 [ 80.872555][ T437] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 80.883794][ T437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.912536][ T437] usb 6-1: Product: syz [ 80.917865][ T437] usb 6-1: Manufacturer: syz [ 80.922471][ T437] usb 6-1: SerialNumber: syz [ 80.928862][ T437] usb 6-1: config 0 descriptor?? [ 80.952511][ T357] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 80.952615][ T1175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.977172][ T1175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.004387][ T1196] netlink: 'syz.0.215': attribute type 3 has an invalid length. [ 81.251941][ T1175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.307263][ T1175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.333007][ T357] usb 2-1: config 0 has no interfaces? [ 81.513425][ T357] usb 2-1: New USB device found, idVendor=0ccd, idProduct=8bb3, bcdDevice=2d.ee [ 81.656997][ T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.780512][ T1202] EXT4-fs (loop2): Test dummy encryption mode enabled [ 82.483476][ T1202] EXT4-fs error (device loop2): __ext4_iget:5007: inode #11: block 1: comm syz.2.217: invalid block [ 82.495435][ T1202] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.217: couldn't read orphan inode 11 (err -117) [ 82.507860][ T1202] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 83.433020][ T357] usb 2-1: Product: syz [ 83.442807][ T357] usb 2-1: Manufacturer: syz [ 83.447521][ T357] usb 2-1: SerialNumber: syz [ 83.452649][ T437] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 83.511771][ T437] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 83.521928][ T437] asix: probe of 6-1:0.251 failed with error -5 [ 83.567558][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 83.576608][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 83.846868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 83.871158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.912782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 84.164418][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.200009][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.236302][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.272923][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.307683][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.422698][ T357] usb 2-1: config 0 descriptor?? [ 84.442553][ T357] usb 2-1: can't set config #0, error -71 [ 84.449075][ T357] usb 2-1: USB disconnect, device number 3 [ 84.603902][ T437] usb 6-1: USB disconnect, device number 2 [ 84.719944][ T1211] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 84.731794][ T1215] FAULT_INJECTION: forcing a failure. [ 84.731794][ T1215] name failslab, interval 1, probability 0, space 0, times 0 [ 84.744527][ T1215] CPU: 0 PID: 1215 Comm: syz.5.220 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 84.754308][ T1215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.764356][ T1215] Call Trace: [ 84.767628][ T1215] __dump_stack+0x21/0x24 [ 84.771929][ T1215] dump_stack_lvl+0x169/0x1d8 [ 84.776606][ T1215] ? show_regs_print_info+0x18/0x18 [ 84.781874][ T1215] dump_stack+0x15/0x1c [ 84.786007][ T1215] should_fail+0x3c1/0x510 [ 84.790418][ T1215] ? skb_ensure_writable+0x2e7/0x460 [ 84.795678][ T1215] __should_failslab+0xa4/0xe0 [ 84.800413][ T1215] should_failslab+0x9/0x20 [ 84.804890][ T1215] __kmalloc_track_caller+0x5f/0x320 [ 84.810149][ T1215] ? skb_ensure_writable+0x2e7/0x460 [ 84.815411][ T1215] pskb_expand_head+0x123/0x1110 [ 84.820332][ T1215] ? __kasan_check_write+0x14/0x20 [ 84.825415][ T1215] ? __skb_clone+0x469/0x780 [ 84.830007][ T1215] skb_ensure_writable+0x2e7/0x460 [ 84.835093][ T1215] bpf_clone_redirect+0x10b/0x380 [ 84.840094][ T1215] bpf_prog_6893982b85ceadf7+0x56/0x164 [ 84.845628][ T1215] ? proto_register+0x5e0/0x880 [ 84.850462][ T1215] ? bpf_prog_test_run_skb+0x31d/0x10b0 [ 84.855985][ T1215] ? bpf_prog_test_run+0x350/0x3c0 [ 84.861073][ T1215] ? __se_sys_bpf+0x49f/0x680 [ 84.865732][ T1215] ? __x64_sys_bpf+0x7b/0x90 [ 84.870301][ T1215] ? do_syscall_64+0x31/0x40 [ 84.874871][ T1215] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 84.880924][ T1215] ? __kasan_check_read+0x11/0x20 [ 84.885926][ T1215] ? bpf_test_timer_continue+0x147/0x410 [ 84.891532][ T1215] bpf_test_run+0x310/0x9b0 [ 84.896010][ T1215] ? convert___skb_to_skb+0x4f0/0x4f0 [ 84.901530][ T1215] ? eth_get_headlen+0x1f0/0x1f0 [ 84.906462][ T1215] ? convert___skb_to_skb+0x41/0x4f0 [ 84.911726][ T1215] bpf_prog_test_run_skb+0x9c2/0x10b0 [ 84.917111][ T1215] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 84.922995][ T1215] bpf_prog_test_run+0x350/0x3c0 [ 84.927931][ T1215] __se_sys_bpf+0x49f/0x680 [ 84.932430][ T1215] ? __x64_sys_bpf+0x90/0x90 [ 84.937006][ T1215] ? fpu__clear_all+0x20/0x20 [ 84.941662][ T1215] __x64_sys_bpf+0x7b/0x90 [ 84.946057][ T1215] do_syscall_64+0x31/0x40 [ 84.950453][ T1215] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 84.956330][ T1215] RIP: 0033:0x7f6a55d2c969 [ 84.960719][ T1215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.980331][ T1215] RSP: 002b:00007f6a54395038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.988725][ T1215] RAX: ffffffffffffffda RBX: 00007f6a55f53fa0 RCX: 00007f6a55d2c969 [ 84.996682][ T1215] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 85.004633][ T1215] RBP: 00007f6a54395090 R08: 0000000000000000 R09: 0000000000000000 [ 85.012585][ T1215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.020530][ T1215] R13: 0000000000000000 R14: 00007f6a55f53fa0 R15: 00007ffffab51e08 [ 85.037967][ T1208] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.044805][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 85.044817][ T24] audit: type=1400 audit(1747118264.590:587): avc: denied { audit_read } for pid=1217 comm="syz.4.222" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.077655][ T24] audit: type=1400 audit(1747118264.620:588): avc: denied { setopt } for pid=1216 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.103332][ T24] audit: type=1400 audit(1747118264.620:589): avc: denied { write } for pid=1216 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.128696][ T1208] EXT4-fs error (device loop0): __ext4_iget:5007: inode #11: block 1: comm syz.0.218: invalid block [ 85.140043][ T1208] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.218: couldn't read orphan inode 11 (err -117) [ 85.152432][ T1208] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 85.307401][ T1220] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 85.318985][ T1220] EXT4-fs (loop2): Test dummy encryption mode enabled [ 85.339763][ T1207] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.344696][ T24] audit: type=1400 audit(1747118264.890:590): avc: denied { create } for pid=1210 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 85.380920][ T1220] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 85.388523][ T1220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.417072][ T1220] EXT4-fs (loop2): 1 truncate cleaned up [ 85.426099][ T1230] netlink: 'syz.5.223': attribute type 12 has an invalid length. [ 85.470147][ T1220] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 85.572556][ T24] audit: type=1400 audit(1747118264.990:591): avc: denied { block_suspend } for pid=1210 comm="syz.1.219" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.793598][ T24] audit: type=1400 audit(1747118265.290:592): avc: denied { getopt } for pid=1237 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.622460][ T1243] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.227: inode #1: comm syz.0.227: iget: illegal inode # [ 86.638758][ T1243] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.227: error while reading EA inode 1 err=-117 [ 86.652760][ T1243] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.666019][ T1243] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.227: inode #1: comm syz.0.227: iget: illegal inode # [ 86.680263][ T1243] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.227: error while reading EA inode 1 err=-117 [ 86.694227][ T1243] EXT4-fs (loop0): 1 orphan inode deleted [ 86.700040][ T1243] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue [ 86.964742][ T1244] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 87.839687][ T1244] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.677481][ T1256] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 88.691598][ T1256] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.912544][ T437] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.963792][ T1270] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 89.983788][ T24] audit: type=1400 audit(1747118269.530:593): avc: denied { ioctl } for pid=1269 comm="syz.2.235" path="/dev/usbmon0" dev="devtmpfs" ino=154 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.058547][ T1274] FAULT_INJECTION: forcing a failure. [ 90.058547][ T1274] name failslab, interval 1, probability 0, space 0, times 0 [ 90.071221][ T1274] CPU: 0 PID: 1274 Comm: syz.5.236 Not tainted 5.10.237-syzkaller-00309-g7e2543346ff7 #0 [ 90.081022][ T1274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.091068][ T1274] Call Trace: [ 90.094373][ T1274] __dump_stack+0x21/0x24 [ 90.098698][ T1274] dump_stack_lvl+0x169/0x1d8 [ 90.103368][ T1274] ? thaw_kernel_threads+0x220/0x220 [ 90.108646][ T1274] ? show_regs_print_info+0x18/0x18 [ 90.113831][ T1274] ? __kasan_check_write+0x14/0x20 [ 90.118931][ T1274] ? skb_release_data+0x3b3/0x670 [ 90.123944][ T1274] dump_stack+0x15/0x1c [ 90.128089][ T1274] should_fail+0x3c1/0x510 [ 90.132525][ T1274] ? skb_clone+0x1e9/0x380 [ 90.136928][ T1274] __should_failslab+0xa4/0xe0 [ 90.141678][ T1274] should_failslab+0x9/0x20 [ 90.146169][ T1274] kmem_cache_alloc+0x3d/0x2e0 [ 90.150929][ T1274] ? __bpf_redirect+0x6a7/0xe30 [ 90.155790][ T1274] skb_clone+0x1e9/0x380 [ 90.160028][ T1274] bpf_clone_redirect+0xa7/0x380 [ 90.164956][ T1274] bpf_prog_6893982b85ceadf7+0x56/0xd8 [ 90.170409][ T1274] ? proto_register+0x5e0/0x880 [ 90.175251][ T1274] ? bpf_prog_test_run_skb+0x31d/0x10b0 [ 90.180787][ T1274] ? bpf_prog_test_run+0x350/0x3c0 [ 90.185888][ T1274] ? __se_sys_bpf+0x49f/0x680 [ 90.190562][ T1274] ? __x64_sys_bpf+0x7b/0x90 [ 90.195141][ T1274] ? do_syscall_64+0x31/0x40 [ 90.199723][ T1274] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 90.205789][ T1274] ? __kasan_check_read+0x11/0x20 [ 90.210802][ T1274] ? bpf_test_timer_continue+0x147/0x410 [ 90.216422][ T1274] bpf_test_run+0x310/0x9b0 [ 90.220921][ T1274] ? convert___skb_to_skb+0x4f0/0x4f0 [ 90.226285][ T1274] ? eth_get_headlen+0x1f0/0x1f0 [ 90.231214][ T1274] ? convert___skb_to_skb+0x41/0x4f0 [ 90.236484][ T1274] bpf_prog_test_run_skb+0x9c2/0x10b0 [ 90.241866][ T1274] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 90.247750][ T1274] bpf_prog_test_run+0x350/0x3c0 [ 90.252679][ T1274] __se_sys_bpf+0x49f/0x680 [ 90.257180][ T1274] ? __x64_sys_bpf+0x90/0x90 [ 90.261762][ T1274] ? fpu__clear_all+0x20/0x20 [ 90.266432][ T1274] __x64_sys_bpf+0x7b/0x90 [ 90.270847][ T1274] do_syscall_64+0x31/0x40 [ 90.275260][ T1274] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 90.281141][ T1274] RIP: 0033:0x7f6a55d2c969 [ 90.285551][ T1274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.305154][ T1274] RSP: 002b:00007f6a54395038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.313564][ T1274] RAX: ffffffffffffffda RBX: 00007f6a55f53fa0 RCX: 00007f6a55d2c969 [ 90.321535][ T1274] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 90.329504][ T1274] RBP: 00007f6a54395090 R08: 0000000000000000 R09: 0000000000000000 [ 90.337474][ T1274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.345442][ T1274] R13: 0000000000000000 R14: 00007f6a55f53fa0 R15: 00007ffffab51e08 [ 90.379360][ T1276] EXT4-fs (loop1): Invalid log block size: 33554433 [ 90.502611][ T403] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 90.542616][ T437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.554327][ T1281] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 90.580263][ T437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.593105][ T437] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.606351][ T437] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.615585][ T437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.627345][ T437] usb 1-1: config 0 descriptor?? [ 90.798036][ T24] audit: type=1400 audit(1747118270.320:594): avc: denied { read write } for pid=1280 comm="syz.5.237" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.921047][ T24] audit: type=1400 audit(1747118270.320:595): avc: denied { open } for pid=1280 comm="syz.5.237" path="/4/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.954693][ T24] audit: type=1400 audit(1747118270.340:596): avc: denied { mounton } for pid=1280 comm="syz.5.237" path="/4/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.034045][ T1276] F2FS-fs (loop1): invalid crc value [ 91.040348][ T1276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.068676][ T1276] F2FS-fs (loop1): Start checkpoint disabled! [ 91.089864][ T1276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 91.102572][ T403] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 91.115233][ T403] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.125468][ T403] usb 5-1: config 0 has no interface number 0 [ 91.133006][ T1296] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.141156][ T1296] x_tables: duplicate underflow at hook 1 [ 91.213527][ T437] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4 [ 91.221359][ T437] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 14/15 [ 91.229906][ T437] plantronics 0003:047F:FFFF.0002: parse failed [ 91.236401][ T437] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 91.308366][ T1300] syz.5.239[1300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.308739][ T1300] syz.5.239[1300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.501144][ T1298] FAT-fs (loop2): Directory bread(block 64) failed [ 91.518990][ T1298] FAT-fs (loop2): Directory bread(block 65) failed [ 91.525560][ T1298] FAT-fs (loop2): Directory bread(block 66) failed [ 91.532062][ T1298] FAT-fs (loop2): Directory bread(block 67) failed [ 91.538613][ T1298] FAT-fs (loop2): Directory bread(block 68) failed [ 91.545134][ T1298] FAT-fs (loop2): Directory bread(block 69) failed [ 91.551651][ T1298] FAT-fs (loop2): Directory bread(block 70) failed [ 91.558166][ T1298] FAT-fs (loop2): Directory bread(block 71) failed [ 91.564713][ T1298] FAT-fs (loop2): Directory bread(block 72) failed [ 91.571211][ T1298] FAT-fs (loop2): Directory bread(block 73) failed [ 91.603472][ T403] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 91.617790][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.626740][ T1300] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,,errors=continue [ 91.638130][ T1300] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.015938][ T404] attempt to access beyond end of device [ 92.015938][ T404] loop1: rw=2049, want=40968, limit=40427 [ 92.157713][ T403] usb 5-1: Product: syz [ 92.161916][ T403] usb 5-1: Manufacturer: syz [ 92.166571][ T403] usb 5-1: SerialNumber: syz [ 92.171746][ T403] usb 5-1: config 0 descriptor?? [ 92.233211][ T24] audit: type=1400 audit(1747118271.780:597): avc: denied { bind } for pid=1303 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.233458][ T403] hub 5-1:0.31: bad descriptor, ignoring hub [ 92.259119][ T403] hub: probe of 5-1:0.31 failed with error -5 [ 92.266784][ T403] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 92.272548][ T24] audit: type=1400 audit(1747118271.810:598): avc: denied { create } for pid=1303 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 92.283335][ T403] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 92.301659][ T403] uvcvideo: Failed to create links for entity 6 [ 92.308011][ T403] uvcvideo: Failed to register entities (-22). [ 92.373259][ T1313] netlink: 'syz.1.244': attribute type 3 has an invalid length. [ 92.381665][ T1315] incfs: Options parsing error. -22 [ 92.387079][ T1315] incfs: mount failed -22 [ 92.772275][ T437] usb 5-1: USB disconnect, device number 2 [ 94.234391][ T437] usb 1-1: USB disconnect, device number 3 [ 94.237642][ T24] audit: type=1400 audit(1747118273.780:599): avc: denied { map } for pid=1328 comm="syz.5.248" path="socket:[18781]" dev="sockfs" ino=18781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 94.278323][ T1338] netlink: 4316 bytes leftover after parsing attributes in process `syz.0.250'. [ 94.283674][ T1326] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 94.295633][ T1326] System zones: 0-2, 18-18, 34-34 [ 94.301639][ T1326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.246: bg 0: block 248: padding at end of block bitmap is not set [ 94.316143][ T1326] Quota error (device loop1): write_blk: dquota write failed [ 94.323971][ T1326] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 94.336274][ T1326] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.246: Failed to acquire dquot type 1 [ 94.348088][ T1326] EXT4-fs (loop1): 1 truncate cleaned up [ 94.353958][ T1326] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noload,,errors=continue [ 94.364441][ T1326] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.456348][ T1325] F2FS-fs (loop4): invalid crc value [ 94.469301][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.496274][ T1325] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 94.600356][ T1345] syz.5.252[1345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.600638][ T1345] syz.5.252[1345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.722932][ T1325] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 94.751196][ T1325] F2FS-fs (loop4): Start checkpoint disabled! [ 94.768563][ T1325] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 95.007719][ T1359] exfat: Unknown parameter 'fsi_master_gpio_break' [ 95.144527][ T1368] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 95.163436][ T24] audit: type=1400 audit(1747118274.710:600): avc: denied { bind } for pid=1365 comm="syz.5.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.182850][ T24] audit: type=1400 audit(1747118274.710:601): avc: denied { name_bind } for pid=1365 comm="syz.5.255" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 95.623076][ T1381] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.634197][ T1381] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 95.635882][ T1381] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 95.734562][ T1389] erofs: (device loop4): mounted with root inode @ nid 36. [ 95.747419][ T1389] attempt to access beyond end of device [ 95.747419][ T1389] loop4: rw=0, want=40, limit=16 [ 95.779145][ T1389] attempt to access beyond end of device [ 95.779145][ T1389] loop4: rw=0, want=40, limit=16 [ 95.790298][ T1389] attempt to access beyond end of device [ 95.790298][ T1389] loop4: rw=0, want=40, limit=16 [ 95.823449][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 95.823460][ T24] audit: type=1400 audit(1747118275.370:620): avc: denied { bind } for pid=1399 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.127916][ T24] audit: type=1400 audit(1747118275.510:621): avc: denied { bind } for pid=1402 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.326796][ T1409] kvm: MONITOR instruction emulated as NOP! [ 96.334217][ T24] audit: type=1400 audit(1747118275.880:622): avc: denied { load_policy } for pid=1408 comm="syz.5.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 96.355212][ T1409] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 96.363091][ T1409] SELinux: failed to load policy [ 96.403119][ T1407] F2FS-fs (loop2): Unrecognized mount option "nodi" or missing value [ 96.544502][ T24] audit: type=1400 audit(1747118276.090:623): avc: denied { audit_write } for pid=1417 comm="syz.1.272" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 96.589447][ T24] audit: type=1107 audit(1747118276.110:624): pid=1417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 96.599920][ T1416] device pim6reg1 entered promiscuous mode [ 96.624427][ T24] audit: type=1326 audit(1747118276.160:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 96.653285][ T24] audit: type=1326 audit(1747118276.160:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 96.676785][ T24] audit: type=1326 audit(1747118276.160:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 96.877623][ T24] audit: type=1326 audit(1747118276.160:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 96.910050][ T1423] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 97.068857][ T24] audit: type=1326 audit(1747118276.160:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.5.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 97.093762][ T1423] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 97.102211][ T1423] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.109624][ T1423] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.274: Failed to acquire dquot type 1 [ 97.121558][ T1423] EXT4-fs (loop0): 1 truncate cleaned up [ 97.127534][ T1423] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,jqfmt=vfsv0,grpjquota=,nomblk_io_submit,noquota,abort,noload,norecovery,,errors=continue [ 97.145670][ T440] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.560812][ T1448] netlink: 92 bytes leftover after parsing attributes in process `syz.4.276'. [ 97.610205][ T440] usb 2-1: device descriptor read/64, error -71 [ 98.081825][ T1443] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.555598][ T1443] EXT4-fs error (device loop2): __ext4_iget:5007: inode #11: block 1: comm syz.2.278: invalid block [ 98.974133][ T1443] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.278: couldn't read orphan inode 11 (err -117) [ 98.986536][ T1443] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 99.322334][ T1455] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.388061][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 99.445250][ T1455] EXT4-fs error (device loop4): __ext4_iget:5007: inode #11: block 1: comm syz.4.280: invalid block [ 99.532917][ T1455] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.280: couldn't read orphan inode 11 (err -117) [ 99.736853][ T1455] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 100.104424][ T1455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.513182][ T1488] EXT4-fs (loop5): Test dummy encryption mode enabled [ 100.659051][ T1488] EXT4-fs error (device loop5): __ext4_iget:5007: inode #11: block 1: comm syz.5.287: invalid block [ 100.670755][ T1488] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.287: couldn't read orphan inode 11 (err -117) [ 100.683381][ T1488] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 100.860472][ T1488] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 101.487028][ T1514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.295'. [ 101.822973][ T440] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 101.914923][ T437] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 101.986802][ T1519] EXT4-fs (loop5): Test dummy encryption mode enabled [ 102.025761][ T1513] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 102.049631][ T1519] EXT4-fs error (device loop5): __ext4_iget:5007: inode #11: block 1: comm syz.5.297: invalid block [ 102.061620][ T1519] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.297: couldn't read orphan inode 11 (err -117) [ 102.081165][ T1519] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 102.215132][ T1519] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.340644][ T24] kauditd_printk_skb: 83 callbacks suppressed [ 102.340667][ T24] audit: type=1400 audit(1747118281.880:711): avc: denied { mounton } for pid=1522 comm="syz.4.298" path="/63/file0" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 102.369995][ T437] usb 3-1: device descriptor read/64, error -71 [ 102.529164][ T24] audit: type=1400 audit(1747118282.070:712): avc: denied { write } for pid=1510 comm="syz.0.296" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.574021][ T24] audit: type=1400 audit(1747118282.070:713): avc: denied { add_name } for pid=1510 comm="syz.0.296" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.595158][ T24] audit: type=1400 audit(1747118282.070:714): avc: denied { associate } for pid=1510 comm="syz.0.296" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 102.617358][ T24] audit: type=1400 audit(1747118282.070:715): avc: denied { read open } for pid=1510 comm="syz.0.296" path="/64/file2/bus" dev="loop0" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.656712][ T24] audit: type=1400 audit(1747118282.070:716): avc: denied { write } for pid=1510 comm="syz.0.296" name="bus" dev="loop0" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.679102][ T24] audit: type=1400 audit(1747118282.070:717): avc: denied { ioctl } for pid=1510 comm="syz.0.296" path="/64/file2/bus" dev="loop0" ino=1048604 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.102851][ T440] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.212604][ T437] usb 3-1: device descriptor read/64, error -71 [ 103.232578][ T440] usb 2-1: not running at top speed; connect to a high speed hub [ 103.283502][ T1531] F2FS-fs (loop5): Unrecognized mount option "000000000000000000000030xffffffffffffffff" or missing value [ 103.322633][ T440] usb 2-1: config 247 has an invalid interface number: 208 but max is 0 [ 103.334247][ T440] usb 2-1: config 247 has no interface number 0 [ 103.346726][ T440] usb 2-1: config 247 interface 208 has no altsetting 0 [ 103.512547][ T437] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 103.555153][ T24] audit: type=1400 audit(1747118283.100:718): avc: denied { bind } for pid=1540 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.574399][ T440] usb 2-1: New USB device found, idVendor=0c45, idProduct=62bc, bcdDevice= a.4e [ 103.584255][ T440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.592917][ T440] usb 2-1: Product: syz [ 103.597332][ T440] usb 2-1: Manufacturer: syz [ 103.601957][ T440] usb 2-1: SerialNumber: syz [ 103.683540][ T1543] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 103.696245][ T1543] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3342: comm syz.0.304: Allocating blocks 385-513 which overlap fs metadata [ 103.710744][ T24] audit: type=1400 audit(1747118283.250:719): avc: denied { ioctl } for pid=1542 comm="syz.0.304" path="/67/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.710892][ T1543] EXT4-fs (loop0): pa ffff888131a4c348: logic 16, phys. 129, len 24 [ 103.743199][ T1543] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 8 [ 103.772503][ T20] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 103.802550][ T437] usb 3-1: device descriptor read/64, error -71 [ 103.893595][ T440] usb 2-1: USB disconnect, device number 5 [ 103.921974][ T1550] bridge0: port 1(macsec1) entered blocking state [ 103.928545][ T1550] bridge0: port 1(macsec1) entered disabled state [ 103.940287][ T24] audit: type=1400 audit(1747118283.480:720): avc: denied { mounton } for pid=1551 comm="syz.5.306" path="/20/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.942363][ T1553] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.974179][ T1553] FAT-fs (loop11): unable to read boot sector [ 104.152523][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.222525][ T437] usb 3-1: device descriptor read/64, error -71 [ 104.272522][ T20] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 104.280238][ T20] usb 5-1: can't read configurations, error -71 [ 104.343063][ T437] usb usb3-port1: attempt power cycle [ 104.496523][ T1578] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 104.503806][ T1578] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 104.513587][ T1578] F2FS-fs (loop1): invalid crc value [ 104.520797][ T1578] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.566025][ T1578] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 104.573325][ T1578] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.854918][ T1588] FAT-fs (loop0): Directory bread(block 64) failed [ 104.903647][ T1588] FAT-fs (loop0): Directory bread(block 65) failed [ 104.932782][ T1588] FAT-fs (loop0): Directory bread(block 66) failed [ 104.939339][ T1588] FAT-fs (loop0): Directory bread(block 67) failed [ 104.946134][ T1588] FAT-fs (loop0): Directory bread(block 68) failed [ 104.952685][ T1588] FAT-fs (loop0): Directory bread(block 69) failed [ 104.959218][ T1588] FAT-fs (loop0): Directory bread(block 70) failed [ 104.965802][ T1588] FAT-fs (loop0): Directory bread(block 71) failed [ 104.972326][ T1588] FAT-fs (loop0): Directory bread(block 72) failed [ 104.978871][ T1588] FAT-fs (loop0): Directory bread(block 73) failed [ 105.133001][ T1603] exfat: Deprecated parameter 'utf8' [ 105.138345][ T1603] exfat: Deprecated parameter 'utf8' [ 105.146180][ T1603] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 105.294956][ T269] attempt to access beyond end of device [ 105.294956][ T269] loop1: rw=2049, want=45104, limit=40427 [ 105.389062][ T1612] syz.5.326 (1612): attempted to duplicate a private mapping with mremap. This is not supported. [ 105.402543][ T20] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.493812][ T1612] erofs: (device loop5): mounted with root inode @ nid 36. [ 105.616753][ T1619] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.623949][ T1619] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.631503][ T1619] device bridge_slave_0 entered promiscuous mode [ 105.638869][ T1619] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.646272][ T1619] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.654707][ T1619] device bridge_slave_1 entered promiscuous mode [ 105.902778][ T20] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 105.929210][ T20] usb 5-1: config 0 has no interface number 0 [ 105.935920][ T20] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 106.000032][ T1619] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.007099][ T1619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.014370][ T1619] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.021380][ T1619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.046680][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.054502][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.061663][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.084926][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.093580][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.101725][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.108774][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.117076][ T20] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 106.126759][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.129737][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.135030][ T20] usb 5-1: Product: syz [ 106.143169][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.147700][ T20] usb 5-1: Manufacturer: syz [ 106.155431][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.160607][ T20] usb 5-1: SerialNumber: syz [ 106.166638][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.182240][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.183628][ T20] usb 5-1: config 0 descriptor?? [ 106.195734][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.212549][ T1595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.215715][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.228126][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.244636][ T1619] device veth0_vlan entered promiscuous mode [ 106.250958][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.260148][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.268616][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.276734][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.285069][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.292730][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.307321][ T1619] device veth1_macvtap entered promiscuous mode [ 106.314403][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.322729][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.330863][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.339271][ T404] device bridge_slave_1 left promiscuous mode [ 106.345620][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.353119][ T404] device bridge_slave_0 left promiscuous mode [ 106.359259][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.367368][ T404] device veth1_macvtap left promiscuous mode [ 106.373435][ T404] device veth0_vlan left promiscuous mode [ 106.425603][ T1640] syz.2.334 uses obsolete (PF_INET,SOCK_PACKET) [ 106.884350][ T1644] FAT-fs (loop2): Unrecognized mount option "allow_utime000000000000077" or missing value [ 106.913046][ T20] usb 5-1: MIDIStreaming interface descriptor not found [ 107.205501][ T20] usb 5-1: USB disconnect, device number 4 [ 107.620033][ T440] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 107.628280][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.647852][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.661986][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.680511][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.703895][ T24] kauditd_printk_skb: 67 callbacks suppressed [ 107.703908][ T24] audit: type=1326 audit(1747118287.250:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1655 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 108.032542][ T24] audit: type=1326 audit(1747118287.320:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1655 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 108.082538][ T24] audit: type=1326 audit(1747118287.320:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1655 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 108.132613][ T440] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 108.172522][ T24] audit: type=1326 audit(1747118287.320:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1655 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 108.200084][ T24] audit: type=1326 audit(1747118287.330:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1655 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a55d2c969 code=0x7ffc0000 [ 108.312788][ T440] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.325028][ T440] usb 3-1: can't read configurations, error -61 [ 108.336511][ T1670] netlink: 56 bytes leftover after parsing attributes in process `syz.4.337'. [ 108.524079][ T1666] capability: warning: `syz.4.337' uses deprecated v2 capabilities in a way that may be insecure [ 108.607129][ T1668] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 108.624193][ T1668] SELinux: Context : is not valid (left unmapped). [ 108.631420][ T24] audit: type=1400 audit(1747118288.170:793): avc: denied { mac_admin } for pid=1667 comm="syz.5.339" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.652679][ T1668] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.339: bg 0: block 496: padding at end of block bitmap is not set [ 108.826372][ T24] audit: type=1400 audit(1747118288.170:794): avc: denied { relabelto } for pid=1667 comm="syz.5.339" name="rdma.current" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 108.855884][ T440] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 109.051146][ T1679] 9pnet: Insufficient options for proto=fd [ 109.370806][ T1676] EXT4-fs (loop6): Test dummy encryption mode enabled [ 109.395054][ T24] audit: type=1400 audit(1747118288.510:795): avc: denied { read } for pid=1667 comm="syz.5.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 109.668978][ T1676] EXT4-fs error (device loop6): __ext4_iget:5007: inode #11: block 1: comm syz.6.340: invalid block [ 109.680787][ T1676] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.340: couldn't read orphan inode 11 (err -117) [ 109.693367][ T1676] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 110.710857][ T1684] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 110.724903][ T1684] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.415568][ T1693] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.475649][ T1693] EXT4-fs error (device loop2): __ext4_iget:5007: inode #11: block 1: comm syz.2.343: invalid block [ 111.487330][ T1693] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.343: couldn't read orphan inode 11 (err -117) [ 111.499890][ T1693] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 112.097147][ T24] audit: type=1326 audit(1747118291.640:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1710 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 112.162157][ T24] audit: type=1326 audit(1747118291.640:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1710 comm="syz.2.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 112.308327][ T1728] loop2: p1 < > p3 [ 112.315840][ T1728] loop2: p3 size 134217728 extends beyond EOD, truncated [ 112.370430][ T1705] EXT4-fs error (device loop5): ext4_orphan_get:1395: inode #15: comm syz.5.342: casefold flag without casefold feature [ 112.512613][ T1705] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.342: couldn't read orphan inode 15 (err -117) [ 112.545434][ T1738] EXT4-fs (loop6): Test dummy encryption mode enabled [ 112.680156][ T1738] EXT4-fs error (device loop6): __ext4_iget:5007: inode #11: block 1: comm syz.6.354: invalid block [ 112.691743][ T1738] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.354: couldn't read orphan inode 11 (err -117) [ 112.704931][ T1738] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 113.102086][ T1738] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 113.213063][ T1705] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 113.439185][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 113.439198][ T24] audit: type=1400 audit(1747118292.980:877): avc: denied { create } for pid=1704 comm="syz.5.342" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 113.570023][ T24] audit: type=1400 audit(1747118293.110:878): avc: denied { lock } for pid=1704 comm="syz.5.342" path="/35/file0/file0" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.773896][ T1748] F2FS-fs (loop6): invalid crc value [ 113.792450][ T1748] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 114.214597][ T440] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.236437][ T1759] EXT4-fs (loop4): Test dummy encryption mode enabled [ 114.291635][ T1759] EXT4-fs error (device loop4): __ext4_iget:5007: inode #11: block 1: comm syz.4.358: invalid block [ 114.303543][ T1759] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.358: couldn't read orphan inode 11 (err -117) [ 114.316714][ T1759] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 114.435932][ T1748] F2FS-fs (loop6): Start checkpoint disabled! [ 114.467448][ T1748] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 114.602613][ T24] audit: type=1400 audit(1747118294.120:879): avc: denied { create } for pid=1747 comm="syz.6.356" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 114.626167][ T24] audit: type=1400 audit(1747118294.120:880): avc: denied { create } for pid=1747 comm="syz.6.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.682519][ T440] usb 3-1: Using ep0 maxpacket: 16 [ 114.699215][ T24] audit: type=1400 audit(1747118294.240:881): avc: denied { read } for pid=1747 comm="syz.6.356" name="file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 114.722186][ T1748] overlayfs: './bus' not a directory [ 114.737279][ T24] audit: type=1400 audit(1747118294.270:882): avc: denied { watch } for pid=1747 comm="syz.6.356" path="/5/bus" dev="loop6" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.760035][ T24] audit: type=1400 audit(1747118294.270:883): avc: denied { mounton } for pid=1747 comm="syz.6.356" path="/5/bus/bus" dev="loop6" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.783393][ T325] attempt to access beyond end of device [ 114.783393][ T325] loop6: rw=2049, want=45120, limit=40427 [ 114.822667][ T440] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 52750, setting to 64 [ 114.839270][ T440] usb 3-1: config 0 interface 0 has no altsetting 0 [ 114.846435][ T440] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 114.855824][ T440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.864721][ T440] usb 3-1: config 0 descriptor?? [ 114.903074][ T440] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 115.134622][ T1775] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.145288][ T1775] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 115.156187][ T1775] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 115.169096][ T1771] EXT4-fs (loop0): Ignoring removed orlov option [ 115.203899][ T1771] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000008,grpid,orlov,,errors=continue [ 115.344635][ T1788] syz.4.364[1788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.345763][ T1788] syz.4.364[1788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.699106][ T1789] EXT4-fs (loop5): Test dummy encryption mode enabled [ 116.595072][ T1789] EXT4-fs error (device loop5): __ext4_iget:5007: inode #11: block 1: comm syz.5.365: invalid block [ 116.606546][ T1789] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.365: couldn't read orphan inode 11 (err -117) [ 116.619976][ T1789] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 116.691296][ T1728] kvm: emulating exchange as write [ 117.183006][ T1789] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.439816][ T362] usb 3-1: USB disconnect, device number 10 [ 117.509621][ T1799] netlink: 'syz.6.369': attribute type 3 has an invalid length. [ 117.614966][ T1801] 9pnet: Insufficient options for proto=fd [ 117.680785][ T1807] EXT4-fs (loop2): Ignoring removed orlov option [ 117.726623][ T1810] EXT4-fs (loop5): Ignoring removed orlov option [ 117.762786][ T54] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.808318][ T1810] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,quota,errors=remount-ro,grpid,orlov, [ 118.069541][ T1807] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 118.107025][ T1818] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 118.252857][ T54] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 118.280509][ T54] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 118.803849][ T1820] overlayfs: './file1' not a directory [ 118.942621][ T54] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 118.951677][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.062526][ T54] usb 5-1: Product: syz [ 119.066923][ T54] usb 5-1: Manufacturer: syz [ 119.071659][ T54] usb 5-1: SerialNumber: syz [ 119.097083][ T54] usb 5-1: config 0 descriptor?? [ 119.132793][ T1797] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.148218][ T1797] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.216289][ T1824] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.226998][ T1824] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 119.239231][ T1824] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 119.301507][ T24] audit: type=1400 audit(1747118298.840:884): avc: denied { ioctl } for pid=1826 comm="syz.5.374" path="socket:[20998]" dev="sockfs" ino=20998 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.389416][ T1830] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 119.406135][ T1830] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.446459][ T1797] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.453645][ T24] audit: type=1326 audit(1747118298.990:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39aaca969 code=0x7ffc0000 [ 119.485770][ T1830] EXT4-fs error (device loop5): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 119.501610][ T1797] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.527363][ T24] audit: type=1326 audit(1747118298.990:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd39aaca969 code=0x7ffc0000 [ 119.553041][ T1830] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 119.595335][ T24] audit: type=1326 audit(1747118298.990:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39aaca969 code=0x7ffc0000 [ 119.621349][ T1830] EXT4-fs (loop5): This should not happen!! Data will be lost [ 119.621349][ T1830] [ 119.710281][ T1830] EXT4-fs (loop5): Total free blocks count 0 [ 119.717689][ T24] audit: type=1326 audit(1747118298.990:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fd39aaca969 code=0x7ffc0000 [ 119.741839][ T1830] EXT4-fs (loop5): Free/Dirty block details [ 119.759342][ T24] audit: type=1326 audit(1747118298.990:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39aaca969 code=0x7ffc0000 [ 119.784478][ T24] audit: type=1326 audit(1747118298.990:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd39aaca56b code=0x7ffc0000 [ 119.807627][ T1830] EXT4-fs (loop5): free_blocks=4293918720 [ 119.813920][ T1830] EXT4-fs (loop5): dirty_blocks=16 [ 119.819224][ T24] audit: type=1326 audit(1747118298.990:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd39aaca56b code=0x7ffc0000 [ 119.819299][ T1830] EXT4-fs (loop5): Block reservation details [ 119.849289][ T24] audit: type=1326 audit(1747118298.990:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd39aaca56b code=0x7ffc0000 [ 119.873156][ T24] audit: type=1326 audit(1747118298.990:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1796 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd39aaca56b code=0x7ffc0000 [ 119.896416][ T1830] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 119.902824][ T1834] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 119.917838][ T1834] EXT4-fs (loop5): This should not happen!! Data will be lost [ 119.917838][ T1834] [ 119.953484][ T1841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.376'. [ 119.962775][ T1841] device veth1_macvtap left promiscuous mode [ 119.993089][ T1849] syz.2.378[1849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.993172][ T1849] syz.2.378[1849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.005790][ T1849] syz.2.378[1849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.017373][ T1849] syz.2.378[1849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.045868][ T54] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 120.118207][ T1856] x_tables: duplicate underflow at hook 1 [ 120.440345][ T1860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=1860 comm=syz.0.380 [ 120.886544][ T1867] netlink: 'syz.6.383': attribute type 16 has an invalid length. [ 120.894837][ T1867] netlink: 'syz.6.383': attribute type 17 has an invalid length. [ 120.919655][ T1866] netlink: 'syz.6.383': attribute type 16 has an invalid length. [ 120.927412][ T1866] netlink: 'syz.6.383': attribute type 17 has an invalid length. [ 121.020752][ T1849] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 121.032650][ T1849] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 121.102248][ T1849] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.112625][ T54] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 121.123517][ T54] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 86:b7:d4:ea:16:a6 [ 121.137156][ T54] usb 5-1: USB disconnect, device number 5 [ 121.140193][ T1849] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 121.143829][ T54] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 121.150431][ T1878] exfat: Unknown parameter '' [ 121.161088][ T1849] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.394056][ T1888] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.404736][ T1888] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 121.415889][ T1888] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 121.432364][ T1848] attempt to access beyond end of device [ 121.432364][ T1848] loop2: rw=10241, want=45104, limit=40427 [ 121.685077][ T1897] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.765098][ T1897] EXT4-fs error (device loop0): __ext4_iget:5007: inode #11: block 1: comm syz.0.388: invalid block [ 121.776915][ T1897] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.388: couldn't read orphan inode 11 (err -117) [ 121.789892][ T1897] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 121.889721][ T1897] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 121.929879][ T325] attempt to access beyond end of device [ 121.929879][ T325] loop2: rw=1, want=45104, limit=40427 [ 122.960406][ T1917] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.972771][ T1917] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.983636][ T1920] F2FS-fs (loop2): invalid crc value [ 122.990477][ T1920] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 123.002080][ T1917] EXT4-fs (loop0): 1 truncate cleaned up [ 123.007932][ T1917] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,dioread_nolock, [ 123.019819][ T1920] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 123.031473][ T1920] F2FS-fs (loop2): Start checkpoint disabled! [ 123.038231][ T1920] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 123.054709][ T1917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 123.063540][ T1917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 123.081504][ T1917] EXT4-fs error (device loop0): ext4_find_extent:892: inode #15: comm syz.0.396: inode has invalid extent depth: 25964 [ 123.094499][ T1917] EXT4-fs (loop0): Remounting filesystem read-only [ 123.101108][ T1917] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 124.305031][ T1942] EXT4-fs (loop0): Test dummy encryption mode enabled [ 124.365964][ T1942] EXT4-fs error (device loop0): __ext4_iget:5007: inode #11: block 1: comm syz.0.398: invalid block [ 124.377596][ T1942] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.398: couldn't read orphan inode 11 (err -117) [ 124.390095][ T1942] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 125.191878][ T1942] device veth0_vlan left promiscuous mode [ 125.197974][ T1942] device veth0_vlan entered promiscuous mode [ 125.205564][ T1942] device veth1_macvtap left promiscuous mode [ 125.212255][ T1942] device veth1_macvtap entered promiscuous mode [ 125.218072][ T49] attempt to access beyond end of device [ 125.218072][ T49] loop2: rw=2049, want=45104, limit=40427 [ 125.230137][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.248901][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.267422][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.275751][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.284148][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.292399][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.299438][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.325516][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.337078][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 125.348808][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.357074][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 125.365783][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.366340][ T1961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31252 sclass=netlink_route_socket pid=1961 comm=syz.0.405 [ 125.374238][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.395738][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.407426][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.416750][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.426156][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.436054][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.472605][ T54] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 125.482627][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.491507][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.502083][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.511764][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.524084][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.533828][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.543397][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.551766][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.565097][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.573892][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.581814][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.589751][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.602706][ T1963] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.605672][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.613435][ T1963] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 125.617294][ T1963] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 125.670931][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.679860][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.689151][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.854709][ T1976] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 126.076290][ T24] kauditd_printk_skb: 219 callbacks suppressed [ 126.076302][ T24] audit: type=1400 audit(1747118305.620:1113): avc: denied { compute_member } for pid=1978 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 126.182598][ T54] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.193937][ T54] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.206686][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 126.215063][ T54] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 126.224208][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.232996][ T54] usb 6-1: config 0 descriptor?? [ 126.284107][ T1983] EXT4-fs (loop4): orphan cleanup on readonly fs [ 126.286248][ T1980] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 126.292293][ T1983] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 126.310014][ T1983] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 126.320198][ T1983] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.411: Failed to acquire dquot type 0 [ 126.327131][ T1979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 126.331647][ T1983] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 126.349215][ T1983] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 126.349474][ T24] audit: type=1326 audit(1747118305.890:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1978 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 126.358956][ T1983] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.411: Failed to acquire dquot type 0 [ 126.359327][ T1983] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.411: bg 0: block 64: padding at end of block bitmap is not set [ 126.390503][ T24] audit: type=1326 audit(1747118305.930:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1978 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 126.393997][ T1983] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 126.408176][ T24] audit: type=1326 audit(1747118305.930:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1978 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 126.489931][ T24] audit: type=1326 audit(1747118305.930:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1978 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 126.513861][ T24] audit: type=1400 audit(1747118305.930:1118): avc: denied { nlmsg_read } for pid=1978 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.572960][ T1983] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.411: Failed to acquire dquot type 0 [ 126.650713][ T1983] EXT4-fs (loop4): 1 orphan inode deleted [ 126.688862][ T1990] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 126.703004][ T1990] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.871639][ T1983] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 127.422506][ T361] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 127.646326][ T1998] FAT-fs (loop4): Directory bread(block 64) failed [ 127.653370][ T1998] FAT-fs (loop4): Directory bread(block 65) failed [ 127.660129][ T1998] FAT-fs (loop4): Directory bread(block 66) failed [ 127.667945][ T1998] FAT-fs (loop4): Directory bread(block 67) failed [ 127.674692][ T1998] FAT-fs (loop4): Directory bread(block 68) failed [ 127.681279][ T1998] FAT-fs (loop4): Directory bread(block 69) failed [ 127.688024][ T1998] FAT-fs (loop4): Directory bread(block 70) failed [ 127.694744][ T1998] FAT-fs (loop4): Directory bread(block 71) failed [ 127.701268][ T1998] FAT-fs (loop4): Directory bread(block 72) failed [ 127.708022][ T1998] FAT-fs (loop4): Directory bread(block 73) failed [ 127.728871][ T361] usb 7-1: device descriptor read/64, error -71 [ 127.762670][ T54] usbhid 6-1:0.0: can't add hid device: -71 [ 127.769231][ T54] usbhid: probe of 6-1:0.0 failed with error -71 [ 127.785172][ T54] usb 6-1: USB disconnect, device number 3 [ 127.902826][ T357] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 128.132567][ T361] usb 7-1: device descriptor read/64, error -71 [ 128.172638][ T357] usb 3-1: Using ep0 maxpacket: 16 [ 128.292586][ T357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.309036][ T357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.351303][ T357] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 128.383272][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.396640][ T2033] erofs: (device loop5): mounted with root inode @ nid 36. [ 128.404068][ T361] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 128.425356][ T2033] attempt to access beyond end of device [ 128.425356][ T2033] loop5: rw=0, want=40, limit=16 [ 128.429147][ T357] usb 3-1: config 0 descriptor?? [ 128.457661][ T2033] attempt to access beyond end of device [ 128.457661][ T2033] loop5: rw=0, want=40, limit=16 [ 128.469502][ T2033] attempt to access beyond end of device [ 128.469502][ T2033] loop5: rw=0, want=40, limit=16 [ 128.682514][ T361] usb 7-1: device descriptor read/64, error -71 [ 128.740182][ T2040] syz.5.423[2040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.740466][ T2040] syz.5.423[2040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.793392][ T357] sony 0003:054C:05C4.0003: ignoring exceeding usage max [ 128.885114][ T357] sony 0003:054C:05C4.0003: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 128.995198][ T2040] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,,errors=continue [ 129.006542][ T2040] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.741529][ T357] sony 0003:054C:05C4.0003: failed to claim input [ 129.762629][ T357] usb 3-1: USB disconnect, device number 11 [ 130.093180][ T327] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.189646][ T2051] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 130.304581][ T2061] binder: 2054:2061 ioctl 8004af80 200000000000 returned -22 [ 130.332508][ T327] usb 5-1: Using ep0 maxpacket: 32 [ 130.452525][ T327] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.522596][ T327] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 130.530311][ T327] usb 5-1: can't read configurations, error -71 [ 130.665218][ T2070] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.432: casefold flag without casefold feature [ 130.678827][ T2070] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.432: couldn't read orphan inode 15 (err -117) [ 130.693171][ T2070] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 130.885121][ T2077] F2FS-fs (loop2): invalid crc value [ 130.891795][ T2077] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 130.923218][ T2077] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 130.930020][ T2077] F2FS-fs (loop2): Start checkpoint disabled! [ 130.936969][ T2077] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 131.081094][ T2085] EXT4-fs (loop5): Test dummy encryption mode enabled [ 131.088317][ T2085] EXT4-fs (loop5): Invalid want_extra_isize 3183 [ 131.159250][ T2093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 131.174045][ T2093] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 131.688700][ T2085] netlink: 80 bytes leftover after parsing attributes in process `syz.5.436'. [ 131.719879][ T2097] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.807222][ T2096] xt_hashlimit: overflow, try lower: 17592186044416/9 [ 131.814867][ T2096] netlink: 316 bytes leftover after parsing attributes in process `syz.5.436'. [ 132.082569][ T24] kauditd_printk_skb: 430 callbacks suppressed [ 132.082581][ T24] audit: type=1400 audit(1747118311.350:1547): avc: denied { write } for pid=2084 comm="syz.5.436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 132.108998][ T2102] netlink: 'syz.4.440': attribute type 3 has an invalid length. [ 133.513829][ T2113] erofs: (device loop4): mounted with root inode @ nid 36. [ 133.524176][ T2116] tipc: Started in network mode [ 133.529353][ T2116] tipc: Own node identity ac14140f, cluster identity 4711 [ 133.537233][ T2116] tipc: New replicast peer: 255.255.255.255 [ 133.543507][ T2116] tipc: Enabled bearer , priority 10 [ 133.557904][ T2111] erofs: (device loop6): mounted with root inode @ nid 36. [ 133.652141][ T24] audit: type=1326 audit(1747118313.190:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2120 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 133.675772][ T24] audit: type=1326 audit(1747118313.190:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2120 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 133.708751][ T24] audit: type=1326 audit(1747118313.220:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2120 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 133.732611][ T24] audit: type=1326 audit(1747118313.220:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2120 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 133.762778][ T24] audit: type=1326 audit(1747118313.220:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2120 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 133.800651][ T24] audit: type=1326 audit(1747118313.220:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2120 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 133.824363][ T2121] syz.4.445[2121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.824421][ T2121] syz.4.445[2121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.842546][ T24] audit: type=1326 audit(1747118313.220:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2120 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 133.905022][ T24] audit: type=1326 audit(1747118313.220:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2120 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 133.929053][ T24] audit: type=1326 audit(1747118313.220:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2120 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe626378969 code=0x7ffc0000 [ 134.077693][ T2121] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 134.193352][ T2121] EXT4-fs (loop4): Test dummy encryption mode enabled [ 134.241775][ T2121] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 134.391945][ T2121] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.433927][ T2145] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 134.448189][ T2145] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.655773][ T2121] EXT4-fs (loop4): 1 truncate cleaned up [ 134.662543][ T441] tipc: 32-bit node address hash set to f1414ac [ 134.724700][ T2121] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 135.389148][ T2132] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 135.398158][ T2132] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 135.448027][ T2132] F2FS-fs (loop6): invalid crc value [ 135.520026][ T2132] F2FS-fs (loop6): Found nat_bits in checkpoint [ 135.672212][ T2132] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 135.679695][ T2132] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 235.932410][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 235.939472][ C1] (detected by 1, t=10002 jiffies, g=10409, q=677) [ 235.946052][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294960817-4294950814), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 235.959502][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g10409 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 235.970675][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 235.980624][ C1] rcu: RCU grace-period kthread stack dump: [ 235.986500][ C1] task:rcu_preempt state:R running task stack: 0 pid: 13 ppid: 2 flags:0x10004000 [ 235.997264][ C1] Call Trace: [ 236.000549][ C1] __schedule+0xb47/0x1310 [ 236.004963][ C1] ? release_firmware_map_entry+0x190/0x190 [ 236.010845][ C1] ? __mod_timer+0x7ae/0xb30 [ 236.015428][ C1] schedule+0x13c/0x1d0 [ 236.019574][ C1] schedule_timeout+0x12c/0x2d0 [ 236.024420][ C1] ? console_conditional_schedule+0x10/0x10 [ 236.030303][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 236.035749][ C1] ? run_local_timers+0x160/0x160 [ 236.040760][ C1] ? prepare_to_swait_event+0x320/0x340 [ 236.046293][ C1] rcu_gp_kthread+0x100a/0x26a0 [ 236.051133][ C1] ? rcu_barrier_callback+0x50/0x50 [ 236.056325][ C1] ? __kasan_check_read+0x11/0x20 [ 236.061338][ C1] ? __kthread_parkme+0xb9/0x1c0 [ 236.066263][ C1] kthread+0x346/0x3d0 [ 236.070319][ C1] ? rcu_barrier_callback+0x50/0x50 [ 236.075509][ C1] ? kthread_blkcg+0xd0/0xd0 [ 236.080089][ C1] ret_from_fork+0x1f/0x30 [ 285.372709][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 149s! [ 285.381702][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 149s! [ 285.390137][ C0] Showing busy workqueues and worker pools: [ 285.396027][ C0] workqueue events: flags=0x0 [ 285.400701][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.408338][ C0] pending: kfree_rcu_monitor [ 285.413295][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 285.420931][ C0] in-flight: 437:bpf_map_free_deferred [ 285.426741][ C0] pending: vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor, key_garbage_collector [ 285.436517][ C0] workqueue events_long: flags=0x0 [ 285.441609][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.449241][ C0] pending: br_fdb_cleanup, br_fdb_cleanup [ 285.455338][ C0] workqueue events_unbound: flags=0x2 [ 285.460692][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 285.467886][ C0] pending: fsnotify_mark_destroy_workfn, toggle_allocation_gate [ 285.475893][ C0] workqueue events_power_efficient: flags=0x80 [ 285.482030][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.489666][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, gc_worker [ 285.498113][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.505761][ C0] pending: neigh_periodic_work, check_lifetime [ 285.512296][ C0] workqueue rcu_gp: flags=0x8 [ 285.516973][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.524610][ C0] pending: srcu_invoke_callbacks [ 285.529934][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.537575][ C0] pending: srcu_invoke_callbacks, process_srcu, wait_rcu_exp_gp [ 285.545587][ C0] workqueue mm_percpu_wq: flags=0x8 [ 285.550774][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.558407][ C0] pending: vmstat_update [ 285.563008][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.570647][ C0] pending: vmstat_update [ 285.575257][ C0] workqueue writeback: flags=0x4a [ 285.580265][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 285.587461][ C0] pending: wb_workfn, wb_workfn, wb_workfn [ 285.593645][ C0] workqueue kblockd: flags=0x18 [ 285.598477][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 285.606289][ C0] pending: blk_mq_timeout_work [ 285.611416][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 285.619223][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 285.626205][ C0] workqueue dm_bufio_cache: flags=0x8 [ 285.631563][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.639210][ C0] pending: work_fn [ 285.643314][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 285.648929][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 285.656400][ C0] pending: addrconf_verify_work [ 285.661627][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.666664][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 285.673878][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 285.682938][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.688208][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.695856][ C0] pending: wg_packet_encrypt_worker [ 285.701430][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.709072][ C0] pending: wg_packet_encrypt_worker [ 285.714641][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.719918][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.727555][ C0] pending: wg_packet_encrypt_worker [ 285.733114][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.740756][ C0] pending: wg_packet_encrypt_worker [ 285.746313][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.751579][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.759211][ C0] pending: wg_packet_encrypt_worker [ 285.764772][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.772425][ C0] pending: wg_packet_encrypt_worker [ 285.777980][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.783257][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.790892][ C0] pending: wg_packet_encrypt_worker [ 285.796454][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.804089][ C0] pending: wg_packet_encrypt_worker [ 285.809649][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.814931][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.822570][ C0] pending: wg_packet_encrypt_worker [ 285.828133][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.835767][ C0] pending: wg_packet_encrypt_worker [ 285.841323][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.846599][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.854393][ C0] pending: wg_packet_encrypt_worker [ 285.859984][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.867630][ C0] pending: wg_packet_encrypt_worker [ 285.873206][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.878220][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.885421][ C0] pending: wg_packet_handshake_send_worker [ 285.891611][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.896904][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.904544][ C0] pending: wg_packet_encrypt_worker [ 285.910108][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.917745][ C0] pending: wg_packet_encrypt_worker [ 285.923314][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.928324][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.935529][ C0] pending: wg_packet_handshake_send_worker [ 285.941698][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.946987][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.954620][ C0] pending: wg_packet_encrypt_worker [ 285.960184][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.967820][ C0] pending: wg_packet_encrypt_worker [ 285.973377][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.978662][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.986305][ C0] pending: wg_packet_encrypt_worker [ 285.991859][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.999507][ C0] pending: wg_packet_encrypt_worker [ 286.005091][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.010365][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.018006][ C0] pending: wg_packet_encrypt_worker [ 286.023569][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.031217][ C0] pending: wg_packet_encrypt_worker [ 286.036782][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.041788][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.048986][ C0] pending: wg_packet_handshake_send_worker [ 286.055165][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.060439][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.068075][ C0] pending: wg_packet_encrypt_worker [ 286.073638][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.081278][ C0] pending: wg_packet_encrypt_worker [ 286.086841][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.091851][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.099053][ C0] pending: wg_packet_handshake_send_worker [ 286.105224][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.110490][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.118125][ C0] pending: wg_packet_encrypt_worker [ 286.123681][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.131312][ C0] pending: wg_packet_encrypt_worker [ 286.136880][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.141898][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.149094][ C0] pending: wg_packet_handshake_send_worker [ 286.155267][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.160538][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.168177][ C0] pending: wg_packet_encrypt_worker [ 286.173769][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.181418][ C0] pending: wg_packet_encrypt_worker [ 286.186996][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.192268][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.199907][ C0] pending: wg_packet_encrypt_worker [ 286.205470][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.213113][ C0] pending: wg_packet_encrypt_worker [ 286.218674][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=150s workers=10 idle: 441 327 328 280 5 15 403 1778 293