last executing test programs: 34m56.868959542s ago: executing program 2 (id=2023): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000000000)=[0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xee00, 0x0, 0x0, 0xffffffffffffffff, r1, 0xee01]) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000280)) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000340), &(0x7f0000000380)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x4, &(0x7f0000000480)=[r2, r3, r4, 0x0]) getgroups(0x1, &(0x7f0000000500)=[r3]) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) syz_usb_connect$uac1(0x0, 0xc2, &(0x7f00000006c0)={{0x12, 0x1, 0x51, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x23, 0xa0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0x28, ')'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x2, 0x4, 0xe}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x3, 'g'}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x81, "a3c873"}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x3, 0x3, 'g'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x80, 0x2, 0xb6, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x2, 0x6}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0x4, "f11d", "cfc24e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x2, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x3, 0x4, {0x7, 0x25, 0x1, 0x2, 0xf4, 0xdb3d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0xe1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x6a, 0xfe, {0x7, 0x25, 0x1, 0x80, 0x10, 0x6}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x201, 0x2, 0x0, 0xfc, 0xff}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x816}}, {0x96, &(0x7f00000008c0)=@string={0x96, 0x3, "26f5bb1146fe2157b59afe0bea631f760f238aabbf1ce3736e68d7c128e70b21dffbbaea42c9b9f9277e294ddf9400aaaa449da673cb69d0be803b294960c78b83020097e88d501601da863ea373419c6433e68a0e84c4fc7c625f136a0af689b4fb37b4e19f7d1abc45f3f3a13fc55a088d6b5b91e58502e8ae954323a9523698bd94a0802bc39b2e2771617b36c4dfcf329c51"}}, {0x37, &(0x7f0000000980)=@string={0x37, 0x3, "3faeb6cafebe1f6445383c2aaf41ed4cac8b26fa65f78b6b55ccb709851f0914a9d01bfc13971fe57de49dbafb8608576214e34e45"}}]}) 34m54.64113368s ago: executing program 2 (id=2033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0xb, 0x5}, @window={0x3, 0x64, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0xc, 0x5}, @timestamp, @mss={0x2, 0x7}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r1, 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x1]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x9}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xaa8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x566}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'vlan0\x00', @random="010000201000"}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 34m53.527253434s ago: executing program 2 (id=2040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x9, 0x6, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getrlimit(0x0, &(0x7f0000000000)) 34m53.517599214s ago: executing program 2 (id=2042): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@noinline_data}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r0, 0x0, 0x0, 0x9000f4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x18e, &(0x7f00000003c0)="$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") exit(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="87edfaf32102", 0x6}, {&(0x7f0000000800)="7dc3d80fa255", 0x6}, {&(0x7f0000000180)="eb086062", 0x4}, {&(0x7f0000000280)="5bfa40", 0x3}, {&(0x7f0000000980)="9c4e527f", 0x4}], 0x5}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="f2", 0x1}, {&(0x7f0000000b80)="865b", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d40)="9d5643", 0x3}, {&(0x7f0000000e00)="ab696ef4", 0x4}, {&(0x7f0000000e80)="c73f705a", 0x4}], 0x3}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001140)="6f2970b9", 0x4}, {&(0x7f00000011c0)="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", 0xe41}, {&(0x7f0000002200)='lI', 0x2}, {&(0x7f0000002300)="e06da90f07c1", 0x6}, {&(0x7f0000002400)="354e6045ff", 0x5}], 0x5}}], 0x5, 0x4008440) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f0000000100)=0x13) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000540)='./file0\x00') fcntl$addseals(r5, 0x409, 0x0) 34m52.262676088s ago: executing program 2 (id=2048): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="b9ff03006844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 34m49.564282808s ago: executing program 2 (id=2054): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="1f57f7a037331439e05c59a2dd2ef9baae8c6d963b10d6b2937ee8e3c0c06efdf85a123648f31a5168f140c492e19b3607d3", 0x32, 0xfffffffffffffffa) keyctl$invalidate(0x15, r0) keyctl$unlink(0x9, r0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$get_security(0x11, r0, &(0x7f00000000c0)=""/4096, 0x1000) r2 = add_key$keyring(&(0x7f00000010c0), &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, r2, 0x3, r0) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x9, 0x1, &(0x7f00000011c0)=@raw=[@alu={0x4, 0x1, 0xa, 0xa, 0x3, 0x40, 0x8}], &(0x7f0000001200)='GPL\x00', 0xb, 0xb0, &(0x7f0000001240)=""/176, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0x3, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f00000013c0)=[{0x4, 0x1, 0xf, 0x7}, {0x5, 0x5, 0x8, 0x3}], 0x10, 0xb06, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000001180)='svcrdma_decode_rqst\x00', r4, 0x0, 0x4}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000001540)={0x6, &(0x7f0000001500)=[{0x5, 0x9, 0x2, 0xe}, {0x17d3, 0x7, 0x9d, 0x4}, {0x7, 0xbb, 0x0, 0x9}, {0x8, 0x5, 0x3, 0x5}, {0xffff, 0x3, 0x2}, {0x0, 0x6, 0xeb, 0x90c1}]}, 0x10) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000001580)={0x2, 0x0, @dev}, &(0x7f00000015c0)=0x10, 0xc0000) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x128, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000001600), {[{{@ip={@multicast1, @multicast2, 0xff, 0xffffffff, 'erspan0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x1, 0x0, 0x24}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x6, 0x5, 0x7, 0x1}}, @common=@icmp={{0x28}, {0xd, "dd11", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x79f0668e0c78e398, 0x2, 0x4, 0x3, 0x3, 0x1], 0x0, 0x1}, {0x4, [0x0, 0x4, 0x4, 0x5, 0xc, 0x4], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "f7aa"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x1, 0x6, 0x1, 0x6, 0xdc8656f342332242], 0x3, 0x8}, {0x2, [0x2, 0x2, 0x1, 0x4, 0x2, 0x5], 0x2, 0x2}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xffffff00, 'pim6reg\x00', 'veth0_to_team\x00', {}, {}, 0x21, 0x1, 0x22}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) syz_open_dev$tty1(0xc, 0x4, 0x4) keyctl$get_keyring_id(0x0, r2, 0xfffffffffffffff6) fstat(r1, &(0x7f0000001a00)) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x84, 0x464, 0x10, 0x70bd2b, 0x25dfdbfd, "8ce829916a35a5eb86392a67a52c02858dd4e26736f219ceaf46cb96b16c6a9c322f2c87f37fcba9a3796b92cceaf013348cf888d6dcea5b12697ba9b2772143cef700f672d9c09a8bc85f6250414db3e170af95d9ee4395a1f8479b08888f2cedc1a970b65f20666e6be5f1c76556234c", ["", "", "", "", "", "", "", "", ""]}, 0x84}}, 0x41) keyctl$search(0xa, r2, &(0x7f0000001c00)='rxrpc\x00', &(0x7f0000001c40)={'syz', 0x3}, r0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) syz_clone(0x40000000, &(0x7f0000001d80)="3c00de8d8c478812eac4a0aca8de0d4bac2e806c6792d6e74df191d44c0d0693b4489797da650eab25dd52f177b0282897874b24bc50dbbc5e9cbfa8b1d70d1a03156a34d3809ab8b6066bc8b1c0bd71bf0bd8e7a779474ac744efac3120b9a529eb6eaaa3639bca1a56bdc0acef3a2c2f32869ed0c123aa1d3e7a70b6bad8", 0x7f, &(0x7f0000001e00), &(0x7f0000001e40), &(0x7f0000001e80)="d47aa4d921cd3d4409bde5cfc3715ff1889fcc528f5659e06dc6b66a160df472e7ece7cf8ffbc9eada766e675b81fcbbdba291ffdc999853f5d468e383efaa51fc19a64931ad12a88774c9f80bf94e07af9338d1a6bb6d3ac847478d6d1d375429ea74f8fcece897cf673537b029d6dae0e122ab015255e3705584bc17594a636b582bdc8dedd85eff13eb7aa154ae50cab79f86ee448e7ea3d5455ae0dd4fbce88a98ebb52319a4924a7f927cddd901cd805094e55045f81d7935b6fc7aef8116d51e8a03293271141b743f492f9c5db39f293d31219837b3a1d4f2fe") getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000002000)={'broute\x00', 0x0, 0x3, 0x3a, [0x8, 0x3, 0x4, 0x6, 0x40, 0x5], 0x1, &(0x7f0000001f80)=[{}], &(0x7f0000001fc0)=""/58}, &(0x7f0000002080)=0x78) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000020c0)={0x0, 0x3c}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'team0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002180)={0x1b, 0x0, 0x0, 0xffffffc0, 0x0, r7, 0x1, '\x00', r8, r9, 0x3, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000002200)={r8, 0x1, 0x6, @local}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002280)={'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) 34m49.468594888s ago: executing program 32 (id=2054): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="1f57f7a037331439e05c59a2dd2ef9baae8c6d963b10d6b2937ee8e3c0c06efdf85a123648f31a5168f140c492e19b3607d3", 0x32, 0xfffffffffffffffa) keyctl$invalidate(0x15, r0) keyctl$unlink(0x9, r0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$get_security(0x11, r0, &(0x7f00000000c0)=""/4096, 0x1000) r2 = add_key$keyring(&(0x7f00000010c0), &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, r2, 0x3, r0) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x9, 0x1, &(0x7f00000011c0)=@raw=[@alu={0x4, 0x1, 0xa, 0xa, 0x3, 0x40, 0x8}], &(0x7f0000001200)='GPL\x00', 0xb, 0xb0, &(0x7f0000001240)=""/176, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0x3, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f00000013c0)=[{0x4, 0x1, 0xf, 0x7}, {0x5, 0x5, 0x8, 0x3}], 0x10, 0xb06, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000001180)='svcrdma_decode_rqst\x00', r4, 0x0, 0x4}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000001540)={0x6, &(0x7f0000001500)=[{0x5, 0x9, 0x2, 0xe}, {0x17d3, 0x7, 0x9d, 0x4}, {0x7, 0xbb, 0x0, 0x9}, {0x8, 0x5, 0x3, 0x5}, {0xffff, 0x3, 0x2}, {0x0, 0x6, 0xeb, 0x90c1}]}, 0x10) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000001580)={0x2, 0x0, @dev}, &(0x7f00000015c0)=0x10, 0xc0000) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x128, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000001600), {[{{@ip={@multicast1, @multicast2, 0xff, 0xffffffff, 'erspan0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x1, 0x0, 0x24}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x6, 0x5, 0x7, 0x1}}, @common=@icmp={{0x28}, {0xd, "dd11", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x79f0668e0c78e398, 0x2, 0x4, 0x3, 0x3, 0x1], 0x0, 0x1}, {0x4, [0x0, 0x4, 0x4, 0x5, 0xc, 0x4], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "f7aa"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x1, 0x6, 0x1, 0x6, 0xdc8656f342332242], 0x3, 0x8}, {0x2, [0x2, 0x2, 0x1, 0x4, 0x2, 0x5], 0x2, 0x2}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xffffff00, 'pim6reg\x00', 'veth0_to_team\x00', {}, {}, 0x21, 0x1, 0x22}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) syz_open_dev$tty1(0xc, 0x4, 0x4) keyctl$get_keyring_id(0x0, r2, 0xfffffffffffffff6) fstat(r1, &(0x7f0000001a00)) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x84, 0x464, 0x10, 0x70bd2b, 0x25dfdbfd, "8ce829916a35a5eb86392a67a52c02858dd4e26736f219ceaf46cb96b16c6a9c322f2c87f37fcba9a3796b92cceaf013348cf888d6dcea5b12697ba9b2772143cef700f672d9c09a8bc85f6250414db3e170af95d9ee4395a1f8479b08888f2cedc1a970b65f20666e6be5f1c76556234c", ["", "", "", "", "", "", "", "", ""]}, 0x84}}, 0x41) keyctl$search(0xa, r2, &(0x7f0000001c00)='rxrpc\x00', &(0x7f0000001c40)={'syz', 0x3}, r0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) syz_clone(0x40000000, &(0x7f0000001d80)="3c00de8d8c478812eac4a0aca8de0d4bac2e806c6792d6e74df191d44c0d0693b4489797da650eab25dd52f177b0282897874b24bc50dbbc5e9cbfa8b1d70d1a03156a34d3809ab8b6066bc8b1c0bd71bf0bd8e7a779474ac744efac3120b9a529eb6eaaa3639bca1a56bdc0acef3a2c2f32869ed0c123aa1d3e7a70b6bad8", 0x7f, &(0x7f0000001e00), &(0x7f0000001e40), &(0x7f0000001e80)="d47aa4d921cd3d4409bde5cfc3715ff1889fcc528f5659e06dc6b66a160df472e7ece7cf8ffbc9eada766e675b81fcbbdba291ffdc999853f5d468e383efaa51fc19a64931ad12a88774c9f80bf94e07af9338d1a6bb6d3ac847478d6d1d375429ea74f8fcece897cf673537b029d6dae0e122ab015255e3705584bc17594a636b582bdc8dedd85eff13eb7aa154ae50cab79f86ee448e7ea3d5455ae0dd4fbce88a98ebb52319a4924a7f927cddd901cd805094e55045f81d7935b6fc7aef8116d51e8a03293271141b743f492f9c5db39f293d31219837b3a1d4f2fe") getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000002000)={'broute\x00', 0x0, 0x3, 0x3a, [0x8, 0x3, 0x4, 0x6, 0x40, 0x5], 0x1, &(0x7f0000001f80)=[{}], &(0x7f0000001fc0)=""/58}, &(0x7f0000002080)=0x78) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000020c0)={0x0, 0x3c}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'team0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002180)={0x1b, 0x0, 0x0, 0xffffffc0, 0x0, r7, 0x1, '\x00', r8, r9, 0x3, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000002200)={r8, 0x1, 0x6, @local}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002280)={'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) 6.363134333s ago: executing program 0 (id=9417): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ftruncate(r0, 0x81ff) 6.12866941s ago: executing program 0 (id=9418): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) (fail_nth: 1) 5.665383544s ago: executing program 5 (id=9422): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (fail_nth: 1) 5.665044243s ago: executing program 5 (id=9423): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111a300000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 5.636397013s ago: executing program 0 (id=9424): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000bc0)=ANY=[@ANYRESDEC=r1], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.634924073s ago: executing program 0 (id=9426): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, 0x0, 0x1c1b42, 0x1a4) r5 = socket$nl_route(0x10, 0x3, 0x0) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getchain={0x54, 0x66, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x3, 0x2}, {0xa, 0xe}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x0) 5.593673862s ago: executing program 5 (id=9427): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d000100000000090400000503000200092100003301220500090581030000020007090502030009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xe2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) dup3(r2, r1, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0xfffffffffffffffa, 0xa400) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "02c286591f48a66c6e9e8cd0b262863306d991fe111b2196c98829898e23787697bc84826c6e3ebd7ac2401d6b57fa1c5f9d2ffd4351611d2c487e410fe427f13dee3f02a639fb3d9259fbcbcdeac3f03cbf0d4d6cb7722f9c04e6d9ee"}}, &(0x7f0000000500)={0x0, 0xf, 0x119, {0x5, 0xf, 0x119, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x4, 0xf, 0xffff, [0xf0, 0xc0, 0x3f00, 0xf, 0xcf]}, @generic={0xf4, 0x10, 0x1, "b76e05e7a5a6476772c06dc9fa72329e499a5b000350a7f0dd440f30df71b11ea89a50a47446f070d8c89fd84817812e760c32f6e4a38c3f14a0bdc25a4ba1d5d1fa123b03d1047890d009d36027f345ac611cd30f0a9623d9707d25d414b20b30dbce4696b6519a5d9dafa99d5a582872f3ca32eef4e694f319f11c835fefea9e1e3b4e534a55046d04b9dca2c21d2c3cfa4c03e91446c8707d6035e800e0080ef06bbd9a91df5b6c230313fafd98002dc94904bff10bcacad38a5dabcd92a3c85cdf71d8f48b0fa095db7f5fa531cbedb5736e99d249672aab1099fda98d45740a589e68a86c7806b563f207d3881dc3"}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xa, 0xff, "b5acd85f", 'h=$>'}}, 0x0}, &(0x7f0000000bc0)={0x84, &(0x7f0000000700)={0x40, 0x30, 0xee, "aa07ee270f5f81f2eee2734932b0bdfaf46ee2f1299f1f8e556747033b0ab5bd7286b69a346042984f79ff0f8795aec645530f79c51707b7c89b7f83772cf9764d497db8670f75469879606fea67e9d7c05456f4696dd2c6425ba1c4e0b2961a95aa5683e4544130c3bc1c07b99a0d0186de305a6785f5b1268b70955585b035b8437c6ccd0ae73ee158c72d30d3c59f30d2f620d48de1a5bfa751e3200aef5bac69d665a262f679fa5dede54d52c27610109845715fe0a35d15ac4140769320fb4882f566b29be95a10d75b22938be3841a075d05494cc2233fa0f21f001807c233bad227890db665c43d1e179d"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0xb, 0x2, 'os'}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "cc07"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x1}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x21, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.593146252s ago: executing program 4 (id=9428): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1b42, 0x1a4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getchain={0x54, 0x66, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0xb}, {0x3, 0x2}, {0xa, 0xe}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x0) 4.274405723s ago: executing program 0 (id=9430): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1b42, 0x1a4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getchain={0x54, 0x66, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0xb}, {0x3, 0x2}, {0xa, 0xe}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x0) 4.249643902s ago: executing program 4 (id=9431): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x41ca0581938ec591, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)={[], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x64, 0x32, 0x37, 0x50, 0x61, 0x35, 0x36], 0x2d, [0x65, 0x33, 0x65, 0x32], 0x2d, [0x38, 0x32, 0x64, 0x3fcdb0f66ea3a64f], 0x2d, [0x62, 0x66, 0x38, 0x37], 0x2d, [0x38, 0x38, 0x0, 0x61, 0x66, 0x65, 0x34, 0x30]}}}, {@flag='sync'}, {@uid_lt}, {@euid_lt}, {@subj_role={'subj_role', 0x3d, '[!!:]-$'}}, {@fowner_gt}]}) 3.717151585s ago: executing program 1 (id=9432): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000180)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@utf8}, {@numtail}, {@numtail}, {}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1ff}}]}, 0x1, 0x363, &(0x7f0000000280)="$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") socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) eventfd2(0x0, 0x0) 3.572106453s ago: executing program 3 (id=9436): ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="6097cc9ee0e74a45f3ebf49a85d7f5a3a96b0fbffd88df1a3bdc7764eb2779995952d8d09b7f619b494ae20bc339e922010e113e198dfbaad1836278b63fee4638fbd5ba17c523534f6319a59e899457d0f6f6cda0f8e04da21cf976410b2b5f7837103368e88deb09bee1217f5fea605c348a", &(0x7f00000000c0)="ff7cc9a68b98e5e58a3c59de9471076a48b9ad2c3f9d4ff0bb3886e99bc0c5e1c886c9cc96b9946d3a86f406604ea50cee5671050884d149646bea0d7568e84a9082a7bf61370db81cab13c35febb428bf6077b9641549942b4bd806c007e0ee804c644b83a36bb7262bb7687afecce6d2ba69f04714a5134fb42aba026289cdb4deb4095bb3c37bf430bd994d2289614704320dc29b27e498d66e937f4a38b0be3ba1b0e6420e24bec5d51f4faf61922cf54781e5cbf5be559da1946520409481842b5bd5a695f0"}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) timer_delete(r0) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x6d9800) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000300)={0x1, 0xfffffdfd, 0x401}) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000b00)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x1}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000380)="2332350ebde330d43ee20dc714788de36618d800e9c98478661ae91350e3ac25b015555149b2cc7c1b1ffa98e0783f34d23e62f7240b1d9cfa9ef52128221915b0de4e3ce424300994035912e1ee33d07f6ec990a7c43bfd9846759f35d046e1159b7d87bf5e75950df8e13415b7d38b1cab86bef3016356a66dfe7013c0ca713ad543869503357451788cd05c098956be957a28b648676331769c1bc3724d3adb0ea763ac960b1e95c0fa92e87f5a5d9d5edf2bb892f7d39ea9420652d97f9c4f8beed65345b00f128279351ad252d451f623ce06f2dcab3154a36e9b", 0xdd}, {&(0x7f0000000480)="ed0659388efb2628a56f0499b2a30820e2f75721a7b549eb1545b321003738ff5ea50adf0a4c14c6a96a9dd42801e937630dcef5d49eabb79e0a78c65c81b214d86d7827a5f5b8dbe96c226ee49a47170fbe8abe3993424e24da8132a69894ea47969e4eac4cca7d13b3020a6bbd4d64eeb79f561cd2a57c6ee087fd7d98145e88e8e9c85c8d97f567888d8945481ffa0cd09e", 0x93}, {&(0x7f0000000540)="125349175494f791ab0348b6f9a94754486888b3309998f758a1e0ce548dbf46c27016015ecfde80c74f2cdde5298948745daab25b681081c8eadb6f73c7a341188f4af096a128d96d5645b86ef9f500c85bfea499df7c50b3be1338400ac083a33ca7485aabc8cce67d3fbab0e2564fe876cfe92bee413d5cc661811771e211479c3f2c954a0aed3f58efd0", 0x8c}, {&(0x7f0000000600)="d0826fcca4e04db2564fc7177ae28a6cc60f332639e6e592a582ea6365", 0x1d}, {&(0x7f0000000640)="312ee261956446a490f6825ddc928bbfe29269fd629f658ca42009e4bd897708a8dfe176acf6d2e0689c5c60b5997f1ab94908da4a8c1238699a719723c65c394da7e35f7ba89b760b7c7b7660e9d292e105fd0f519bde6cf16dd00f6121e792dc082d7343b0340d36c57e42abad1db464f142067ed559bcb10d09802f0a39b2ef5056746f143fbd125146bdf66e8ceec5460da31f5291385763de8659f6332518d626882b25ac58fb648901cc7661fa58576ec9fc15ac9f47c2ed9356bed60ef6f8f4b43418b6b45223a513b9e2662bbeb219ed6c05ee618f7737d409e4c308ed2fdd5d39be7dca654adcb7cffc4ef015", 0xf1}, {&(0x7f0000000740)="0fab322632f29f52065036cf1dd621b69f6e00b8e579d3e1", 0x18}, {&(0x7f0000000780)="bbcedd603704030020af23e489b7152087e60a38d901fc510895c403013cde312d5294f52629cef60a1868fa026b95a3cb2e7ff273771eb51322a0fe7e66199bfbe50445eed742041d291f54e8ef878fc84abcee6931c08078b4087d8e9a1f5b7bd42b2d08f47556cda1210d15e0fa59697fe204f608884016", 0x79}, {&(0x7f0000000800)="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", 0xfc}, {&(0x7f0000000900)="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", 0xfe}], 0x9, &(0x7f0000000ac0)="194a3e7a9850dccba8f5d26f276400ed58522b4291a5fb356e372ee44aaff915382278a477f92aa37de3", 0x2a, 0x80}, 0x20000840) fcntl$getownex(r2, 0x10, &(0x7f0000000b40)={0x0, 0x0}) fcntl$lock(r1, 0x24, &(0x7f0000000b80)={0x0, 0x1, 0xfffffffffffffffb, 0xc5, r3}) r4 = syz_open_dev$usbfs(&(0x7f0000000bc0), 0x8, 0x40000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000001c00)={{{0xf}}, 0x1000, 0x1, &(0x7f0000000c00)="6ec05d21b67bfe7c2b41c66d56dda63564d8887bed65c27e4e095b925ed4695162db7ad45f0a424e2818b9cb4bc234428148978c5f6dbd76a346cfc697d7d4387abe672890d228b4f88df680f522358e1d56d3615d2291ba0b3d5fd55d3eccd1b0c6f8fc085499e8cf9c7156c3164cee3cfaebe34129422b4fa8d9e5e35bbd06a437d255932092c4f14e13eb4443efa16cddd47ec26478cab73adbaf5308199b4f235ff5940cd621877effcf0d192fe155b2cf6d9c2f04486df6d3468266583330c3fbffeba8e219d725cd4a04165fe12ba5683d70ce397fe0639c0b7f5567bfd8b8a375003b3dfb8c20148730b28a0393ee5d73f43463e2b924c0efcffaece48cd3e4408588e9b589c0bb488dd881f5164a3f6874778487408a87b7f3270f9ce22354a555fad296864eb6f90e5475449868816d7592edfd10e574c5520f0cda69bbe872ebeedc043e27a36531b6df86a08870eaef915c19f86e0167788b6cb04b506f22b3b2f7466e55ccab3a8e232e7d914a1be91fc0230c751f413b4d27f2bf166b301ddedc8324822f9f00a87bfd03bd7d6db0a9b6662de0daab582f1c992c6b47b2d100f930c4ec6f224b5636952edde0ac5035edbfbe46a819194b93c832317d78626e9e2cad6ee32c99aea9ead92bf86a371a8c2dc9d03a066c7cbad7da5549e52126daf628163b5db3c1f0d0cdc4b563278805cebf421b05b3b7529bf801c436b7d3a3d7f25147123550a3f19009a3cb79ede460624c481334bbc75b2275222a049e0b00e932908c72927dfc4026147a5a095e91da3c739d9f4982843e1d4ce77d54c9d065129c458f8f161861b2ee1efcef7634eec093e579b8a54e47feaa2665ee0d875abfdc57441fc0d088d3cb5c8776304550cae82b7fa4e08609f766aa262b6ee83cc6406b046f90a93b56a3cb9ddb5580c9f449c676d4e1f5bc6ae60e3fd85daff42461d0ce8dbe39f0ffcda5d563bb056e23c2cc601727e75b27dae901ea1dbd5c309d6c2f653ad0c21d14bea2a59aedd48753c68856b44e22ab818c8ac9de7e7cdcbc7f495b1e26b5afd30b4999f0923103c68f66cc5c40f42dba4a70feaa8c4cbf12281ee399a84dc86e6065bc1c11cec698c9798e84d4b58c088f745c07bc8530964d29949cf3018bb393f93e1dec63863e10e1d95256b5e39b14b59704ebb1efc3a44f2a4c15729c90401be03682f426016c407b74a3ec46f374a7e6a4fff5aa0921bdfbaebc9886661f9eea764d11e276cf7f54bca3f4dd792156590cb69407c3f67ff4e878ef8b64db3c14297fcdb08c927a104af96524c98fb97adf93a86d597a7c565b817e2c54d69f9cf2561df58bda5b3a3d0a895f228057cca92a5a3acffd5b8445a478a642c308c10d2a327c71d8ba5758f9e62e4e329d7f28bf700327536f0454b80ba0183135412f0b5e568714af66f54a91fc61a50c43c9b47fa02611e59d618b1dd4da0a7f5dbe69d3f5d82b74b2abccd9ca40d1cf04e8ca80b2f3317823795e00aef73fa9008ad08dc03602cae46c77484a70d4b9d43446029fe3f1d1d2aa201b6a47c39dba65c42ecdf4775ba1c5451636d24814bfb828d33b3837bce46d05ac8f126c628c46074c3dbd3edc8557d032bbb16bbea9ea6080a26ee861fc51fcc90858d42ab5ebe6f308a46340017927953b72e12f06e48f916af61b229029abab5342c57e30aecd543c52d33322a4a37f2953bac4ad234d16f94cd0fa1c0ac6dd55bcaaf78812faf443654ea13b0a4f9bde5169ee77a949f072e775474a0093508af9eb0df2fff2b3b9ca9e2850f91022f1af580a93f0242fc02756a16ea0e54a5fa23708c84938d8426d86290c84bdb2f7bddbf49c1b1b9971620890af826eeaee89e2766af1bc51d3797b882d719c09813a8108877f06ac493f805ee80a21261c56ba6eaa66654ac82e4abd2e129e4dd5b4b7c24747b28440f6135af549120d8597380431d186ef6b05b2c541b82292b41f86c96948cc37e28be6d37978585be54eaba9db954ee6bfb250c2b45306e0651d0d6b2fa09cd5b7acf38d8c17ebc3267c8ec16688d9b593d63696963315f29ec8e9ac222fa4775d5d10cee1de3d29e648f2a53bfb352f8cc8cc24b6c0ffa457761304033ea601b83ae5438ab4f9da00ba8d7d18f777fa7c056186924465b71919b366ec86a85f0d3446f484d2783d77c74ef4fcea0e19bb9a8390df782a456ce0fa03b2f2a372a73fc80b6fb1fd63f5bac69d02c64d970b491c5fe8a9699c382126629f2962c07827e87fdde57d3c22b36fc33893de5d345eefe754339c1e88c162fe385fe50670da14e71eba307328e0341580b11ba85d6b6bc605c123dd4e56673cecfb5138e29d7ed53f9fb8d089f4c887533ad58c6ee555cb3ff0c1a3ccb9087fde2298edcab084226dd46e712728bac8d1f4ce69ca2e079552d12e22956e904e7a8e5c15eeca931a039cdfa5040b2a75f2297be1359c3a9525b210f8db51069b8f9b7cd79d752ac876b28907fc2ba1c9efe932afa51b7ae7bcb14a354de2ea9362a789e2f09728f1b03df0b9fadf97e315badae4b2e06769982752a291328cfc18490008668b949f9ba6557f0217d78216ace7e7d8f6e10416be4ddbb55fa93e474bb6c07e819167607cf9f496242e196192dc1b8b16503979ed086feb7abd03b35dc29e848b005d87397efbc0bfca2a4770382873f703206cdb6d273004d5d0309b4a8c0a65fc1a4974ab126631cdd12da94d25b25d26ab46dba83a0b0bfd500659e61fccef433ed66117ddf98727b3e6446c611c146eb2350c214426deea021084780e5fde88fcdf64dfb3bacd72c11f007ec81ba090d5d3262e94c48ad593bebf615e6d1c6fb40e7e0df64786fbe231de813b8aed38de1c7d92ef250a96d06a8bbfe95b99a807fea87470b1dca4501c3c5d1cb9272ebf25c52f8f81e38bba13b9323842c2af4848d55138eb83d7c7f84d798cd132b04b5f9a4bacf5161bdac1bdae9f21bd396bb80f994d9642ddc235be4633c5e00823acc534130d498a1b9f0af2ea50d20bd40bf22b7f373a6fbaedc2767d39071be0d5b17febdcbac37d1debe3e0673b0272d2693f63e2f7a1d7967e3356d627c5e5c3b311e3338d936dfb9069c54d9add0390c418cbed7bce36e3e4b61b7dbbd69772727f9f9f5c866012cc4adc3b30fc8c6c657f4a245af46bb32c2cd57acaa48ebe03412d0a21095ebd713960659975cf748cf7b7898d1228ce934bcf43c3e7afa4d022daaf5005d905cacc4bec0e10a5b28beeba18dfd368c539f58918632ffad82cca0adf422a1edf78514be74c42325b056b349aac597ee48e9a67d47c58d5fa59ce2c8af21f666374251602fbfb26fde9a248d796e00ac4f36c53ba9ba4f61c0345e62f81d63f6abea136cbeed2b8619c7f2ef2a52c9fd579eea4cab73ba3fc5e94bcb1c4378704eecadd09cea6b7872b308102b33dda2904d2bbd6484018311f45f4c28b35e8234d3eb2d7678f2561bda7a70761a7f500d8abf4dc9dd356f198330345ab7e8293a6833aa67e195dd1f06e405f6a87ced04af4bdd33f516868da8db04ef92a2407feb8363b76e5ee036916a85ed8f337070a96ebbd8c44bcab1dc602c386dd1982b4b318bf8701bd10bcae1b62d703eb1d712be8605ac145b1d4cf159903e2e3ec3e475467a0600f5eb8e085d851034a1f5d416deb78221558899a2fbf7040183d45ed088344306653084f16b385d45145e4b0af043ada17a390d9c7526e674a9684ddc7ed62a2a39e9173f6c2d4d2f37cc7db5a5ef9adf77e902b00127e603f5808b230667aff83794d967f40888b2fd47d7a9b0fba190652d2d826981d8dfe97d8a3f37910b3f928ca6cdc379f4d6aa769810492df8a3beb96d0b5f0927d46fff2c2fbc6e772df491c186b3eb4666c440a23bc42c25fee0f50db4afb23e7a4bab32a5bf9d6b123d2a83d6fa8f0d1c1a33b548e5e015ba8a1144d4936f146eec771d0e3869b8fd580c3e8b47d91bcc0fd38d031d3951f74308f5c4d78e93716b7674e67195de72eab311ff46f8d6e960f1814c21f0c2f1e12a0e5eba6e2b0c1bb58bda706614897a14f4123bdd1980eab891530cb6bf3d53675e3ff67b95eda1b11309cbe14df8da3924af1a725d72d838b0df52b1d5d7bd0699b5338edf2b16cce13c2a7a02b08fde9c5c6ad6cfd44cef37086adbf4ffadc4879217160efeea3f9947d960be116f0f51ab0bd782752f1032c5e8f1e06d0fc6db19c5d0edfb72848a04cf26498ebd76ac5c35b1c3152c0ed978cb3028b6e3eddd9ca2f763c6b5a0ee72d8ae87ae61a3fd2ddfe38fd11a98c6e01a43aeee343179dfffaddd9f40fe1ed2cf6ed26bd6549bc55abdde646c77366ad815af2806eb4c62e60fb145066817377afedf3f0649fcfbbb800b70860ac2522a66bc6500838e26dee9ab27694c84f4f3804fa3287294843c39a1ab8cb52447b334b1df3b4685105a99aea1ac35ea1d4b8cd280392e59146d76aa47c4c46fa91f67f5a916272a7e3f48909c36bcbdf75968b2cbc33b0ee74a43c37110fad3bfe3bc9b5849297198436ed843a89bbfbf3cade25a3022b5f2ca646b134d354a998b7712385a7c9bc6d1e24c2bdd6cecb19c031c1a561706474702f025b7e04a2fe459f5c167c036bd741bb5c895b731efe07b28505bbd45d1a52baa510e8d5a9f6e7a4efccb8f2666afb8c3694e94d80e711583316adaff3d59e4848805d90e57f0c8028125436feade72824e538896f2d94f33a3b9c871f05e3c668585a8a3db53a0edc024140eacadf9fa572bb8b071ff8578f98f845a78a5dbf5c55b1e957ad5094ad9c47d5727f350989e22a9c35cb17c2219eb69d1ccf97665ae853938f7569d7425992ee320a2f0f805ce49aae14eedead05c381671770621f18dc7f8dfe82c5a93f5c189b955655fdf36acd544260836057d3d4bad656cffb30c49eecc75fbeb45c18e52ac6e50521cd4504f067ad96ffc617f1ba6492f6514549e4c4f6361eac910efdc39c6163e16e2991c64a9e71a8590041c918443eff2a7dcbfacbbd56ad624d35f6cf7a42a9490a7d524002c9badfc1d3a223e323de289815ab0f0518282f845f4c51e37eff71c9fedcd7e3a46b007c19f95aca187be5d3cf16222f2061781976514e7b1f32c26641b7c89eb4f4f642141ee803dcb04efe2a8cac59e73ad2af9645a16837b36b369e154d9a775212e5032a1d5c1c4f50559149b72509438f527dcc7dcbabb6c069c70b3f625dc8a6f862aaeb0ae717e1090abd547fb52eb63da5ef55b223d9b4e02bcec6037df73168a55c5f30700dc945af49888d7e7615bf25d9647141e9be8f6572a49587c14641aa2c01318a816d144096e7e707286239bfd4aeee9bb9bd10285a5a8262dae042fd7167d99974f11c6590021354f53af01ac60005c87989e579bfc5aae3f9af8dad619c162c767d9db31609b2254e62a97e40c148a5e1b5f7642f6c41c7bd8a9fe8d3bd80e5d97e756cfd22763fbbe803e8f13a1526a2d658f1cd1dd5b5251d4d7790a30921301b980f389f6c8e81ade9a87e197439719a9c7f129d048dfde882a36be4eab0b711fc1c1e22cdc389a649e4b01146810188dac5bedeaa5f45df167282b0443303104ba77c454d3e5f09e7e22d898ab059d26d1029b5ac0f4d27fce4304d140e788a9d38d91f5ab0193e07da249269b95238657b7a604aae1c2cb3dcf471cbcb293d521edadc7bd7e1533474b55b10b2e76607c25484c5940cebe4a0d745110eb4963c9e27dc1f2ca237f9de93"}) timer_create(0x1, &(0x7f0000002c80)={0x0, 0x3a, 0x4, @thr={&(0x7f0000001c40)="d2401e835e401295b87347a237f9bc828e1bc3a0b1ec655364e3d3b79aeb2a99bb5a658aee59cc8763843520625403103cb69b941f99bc29cd003579155020a252bd8a748217735243460ae5b36a3b98ea4f3a68276e42808bcb623c53610aaf478f18b62dbc8247cff44f62e9218110d9f302c639c306c0423e7a2ac166d558f1e8eefe0cd75e5667c1fed076f56952036f1bfa4235a11d05cb30663bff58fdf9bd839ce7e1fcbd41869884c879af29b3857497adc3ff4231f881aeb90aa8c9af329f6a8d3d6fa97f59c01c818c93045d5e3d39437ed9b6de5fbf422893f070c416d339f44b4a91d3f58968ebc295c20b642a5a165d0adc563dc339caa0d28e08f9346ffb896beee90f625db9bf87a39b76d5a644a581bcc1baa4d224a40dfc187502cac91425252812d16e7157fc52f415ddc864ce9bcaf9cb5ece95547068a13ecaf0895a89d6f0ce06fef39f36996117676e6d32a520b4e05c375c3108eeaef40160b78917c1c14d13071d08586edeb3d1df73b75c6a1b8c75353b6896ee0dfb6a418221c7eeb17d53a0cd98bfc6260ebea4242925d6e60bca1f00918d798aa3dca97bf01e4a9c1e3f6ad7d59bd70f97c1119ad063a0292571483cda76cb47d5533721540ce3f2433f02b041e46e878ddcffaf6d54e12c2f9df31f92d73a81a3ac7c994d65bce368ea709bfb00019a7ac3e3871b472fc1200a97e17560cd9b2bbfdb745564e501e8a67d8b03064d096944e28b283c47e35ada2d87f611a67d78f2ad8798d9f6711dcb56ba8aaccf519d3b97d7b4f8c5fc6e24e02307939a7ad135096a9bc87a5dc188355b7513e10f92c33e9b526934c70c9e07f730c708da7f9ac6ae7fc85d94fc82943019b3960a7194b34c1ddd7ba49404aef347a214c9443ebf393f3fbfef50add7893e79d2a5a99089da3e4b95efe7f669f1ed3a1183b18241bb987b681cf1f17e8a3b2978c9c50c0317bd71aa15fe5b93cbe285e267274defcd1c17329478875a69beea4fbe499c8cfb28144e226d6e0069859ad657768be8d70ec4bca22bff13e989e4dbaa9c9defb13b6b6a8714ce256ff4f8fabe1e17aac484d988b659a5d211909e14520fc26c9e739796de83965f8734ccb580a9d3d220fbd2bca0a3765cba1afb6f05bbb2362b614eb856315ff3eaabfa71e625d72fe22245cbbb85d70fa2b8c99fffa52b4b6675781eb721fa53d52d041cdb4302bfc806415344296a57c77fd4637fb026df6b303c891839cea7383d16cb0c0c3c5dc87242058e76027505ef9a9729a60da38ed40a388a4d1e432cfaa71a116f9919e364143b63f6e5e90827879b29eb1ff07361b92f4879284daf932ad86ccb25c38d2f7f32f72906789c245064963807c0a62a8732bf09aec3c300acf74b298b1faec316c6cb750e3b98284bc0e4151ab012fce4aac76d4b00a577026f7e864618dfd0850789c77ea6fb0acb0891802fb27a282403ae27a1e1ac875be6eaa547e4c0aa578ad91d8646a16ca353425da8834075dcfeec3e9796ee92557c13b1374b84901d322041a1fbefebac95eba9085e4b2a5106ecc61db885038565cabe809fa1cb5b7a065e9f8656dc7a0d851f268ee7044e25ae1f57f14ed92652db715dad774526ada7e3908931e40d676847a41412c0373f73b356267d998a15685eaf773f564e68fa138279b83fdbb6add4ae356c4d99dc4802fddc1ad030611bc4b2cd6f3cbf4d2bcb0d5867622a354a017e72e06aab23c6fbd7f9c03e3919a9d4f74000e6ea76826ce137023cd251a0dbb3665df95806adc2dfff29d33acf726756d6488d64019cb8ebd53ccfefcb348a8a5dd6507a9b05e45a4a8881ec332fdf6ffdcf925bb87c36820b9f96d61a2f8632430cd5f979f7471eefcc3b42facace45809104317f29ec51801fd36d0018b0a0e987effba547ef6611efe7e56bb30353cce225b3085f91982f482417d8748d2b1f12386239fd9dbd27bb2292fbb759f14789b9c1eec9257b110c49482b0d8da8880fc6fe7ddf07d77a342c55f38c40778636588cf3c54ac3f9de463889ba93aa16edb7750689f56658a6bc5bb6faaf94763caea1dd06b259c55cef33af1141a31dfdabc6d787fa7246967d2e3641875f46e4236f399ac971dde95bd563bfb67786150b1f75c4a1b00d32a957e4c039f596ca7235bcfc93ace827b16e64bb9158ca3701bdad7ac4069b6967a75c965a4d178d568371c50c5df76fd8e5836b37a0162756c51ac22af9450b4c8e2143baa5e006239bc5ef0583b71817fc2710e47e587d76aef8ed75ecf6f82242eb875ec97fb90df6846cc596621bbbef77ebe2b5cef50728612f017345b6a40a027ebc71ebc96ac33c5783e45f945f76d45860dc31bc66b8ad2c61bb6aa462c65cdc44d92c182cf81fbe8002c666e0c1419c949ec2b1885f78b9e20348fc64ab03483b324ce248327c64297bbc3421cae1d6203d7b7b8ad44ffc5ea3a89e82410e216fef1a6324596dbb1783a42ba3e5977ee69b72071c62e3edf0efee7673713ec16f2db6dc64731988471b684d0d5f05b86e6e61e4634e7dbefa70c7b857128a286d5fc707f64fe979881d6efe939cf25e15cc2e813879496d9d051e36a8f28e576377a1fc12cd4887a362fb82de9d2efdf62003da5f294887ce05ad8a53e76e8f67bac7e5e1774bb1d84b29c6e8ed777611bca0d034a9fc69c7101ee308ef1f565bdf846050bfa597b20c13dc8dbf3989b0007ec1c3e3ba847573b09bd75940a39ee06e36eee5e2997ee2db3e1162df0d7c2e601b14d13f0e2591f2ae4c4c7544f06181e86490be0a52114c6c143d2090735a458544823019225037dfc61c813ac868c7353c799d747870b0f2e7ad4e9cc9f7fee061a138749392b7d1809771d7f56cd2ca930f272db0e9ce35affd2bd16c851b6e526afd0eef9fc225a9c45ab54ce5ab108541553018bfccb6ec0724cccb8b5c73cdced6e3ebcfb4eb2cc9de79bd5cb051f0721413df7aee7a0b0bb244cfea8dac1b8791e937b194a5dac25e68f28deb75101c25db33b62d5ef8b7a300e732f2c9a28ff20fb873b4906d4484d1c3294af653a56e08c6be7ff7c98b5b57f67107da256a82cf91f7175f6baf02f42e9107a15c88d2c0072c8cc897fe6a2522f65de4e4e7d2578675dafd81fde93ed7fce76d12983e05a487adae9ec33857f9bf568811c5c0c07e98c8f07716bbdd025f24af4880d9b4fd82e496559b75e117fa252deeeaa6fe2fe31412b843899375f6102bd98060b9765af89892c2340675b81e5b290cc90931f8e632e0b2466704b96764a1cecf268aabd4e3ef8a9b7af3c86035e4d43eb3d4c15e4ef7fb2893bce6ee81cc3a8aee6790fa58d0c447c4153063ccb3d45f0403cdf162eb49cd217286c7f11f3510d804a0fea205df7acdd753724fc48edb204cfa6f857183df1060af39e8198c087b2d2672472d60a39a9df1aa82709d130c0ee5f428ea58e3bfcf986d19a86df225328d7af6fd99acf915326b66caa50fa1c6b5b6dfaf068ed2dfeadb3f5c2f98aba2b03bc2ebf873fbfa77cc1b170e020516c36bb59dbe1a93377d1fa648b65d72cc917455b0b1a06cdd8020e79302044e27ad1dbbf0963f13c286301312d08324e00b212574975006c1d61224fd198e854b690844e408062567f7a082ece8161b1b7d65fb6f0143b9c24a3eace6d1e7f276c18b9b0071c563e3bafe9cae8148b72384b445fc4597f28bbbc64f2305ae1d801f617bef429b3d31e8faf7dcda020feed102a060171b3aa68ef4195c1c43ff78c6c5a7665f94c7b28263f79119bef4e018b15c8c954fab9cbc2206b7ef6ff44ae1129e110cda61f64e439bf585b0f286fd5f00349c9cb2a95c4489a13a572ad6c63254b85c029e8700a77c83f0814358f314af9753077604d2b37ecf4e3f511f5740a90770c93624456e20c18517c9c495bb3541f81511053f584511ca85ef6ae4f1df05b3a5cefde4217d7065c30c7ab475b5ba5abb61091f6b15fae5280a9abb09a3225ed52703a94424bd3b1e330df818a7081d6000e4bd7fb148aca894b3e36edc122bde4519e6f9862dbf85e5755a57e1377553dd5d08e7ec865580789a37966c8985d90de99be6a0cf83be257778b7f43d244811f54f432303a5e43308d403e353a67e1ff30ef296e72c42ceab4caab53202da879012b848cccfcc92b63e67a857b5290b918a3eef4041ddd7844439e36359d0ef915a1af66f5489b3c0785f4b4a01bd0f38704e63beb1135ccad56838343329daf2f9506c0a5f11cd3ec7788532766467253dbbcc0ad7ca6d77919f6e09aa0a6628cec8dfbdd59225aeb9bea58d24b8e4a9725901b303f0b77ce4daee79b1acba01694bec22800789c2309425bb482c9b4ce45fc7459390cbbad67df59b9659d09fd0c55b33bf4134f779aeb56522b0977d0464c768a51f752628391e8db297bbc63ace8d89320dad9292164777768915638d1bf9bc0a7a6184bc5d0b04da8c9ae3fbc0e3b95e09098f80bd9cfc4349b00896d12f0c19c100b06dd073e4965f406931bbd867cf1fb98f36e8ab26f765bd418eaf67ca1586f0176a8463eeefa7b4c658da61f4ef5f5ef6e6bf2925fe9602d88b51f7d171637784c218bf62663c649d2d89aa8002b08b228f7dcf97c8fbdc5c56f1e185c853f1e5ef24041b81210024484472bc7acc144e8930b07ae40c01b46b6abd646dc718220ebaf2412ad66141edfcfa3b0a2ec77eaf39934a7c5033bba8e5cedda3c35f7dd6e02b78c3bf316dff632e1684e4b022fb7f856564cc7e150ef086e14a8805cab3aeefae7b34b5d7d6497591ee94895a17083ed1338195a0e7b73ff24d3e88610847d0a232d89235cfa216dfe515141c8d5f8069da028f43271f7d1fd8921702a728c5b95c432d6d88481adcb4ae74e31e4ae29ec3db792763b8e897ecb49414e6171f217ad5c2c5287a36bc4a8e2127aed60de8c7fd9050adf8aae4b214d7d6addafd4d6e108c521caf549cb5a46b4c88a66b66e085307390c371d7c3d05bd8cd45afd171508bef159ebeb1525b092f4c987bba448db38a623785b49a515159886d93094bd39d5bcf62d911ee218791825904f4ff390ed18f51bbab4e66f89ce6e76dc67456422d0b15f02dee700227f55b12a1dc2ae46f28cc6d06e0f25c41c169893070cbf54dddeead5b737037bf89583b14665fdd2830d7fc7981a6116e350681f07eee82ffebd4d9bff9d701b8f52d0319cfce24769597e7aa70b0d0ea9a82fb16c3aaa25f0883523d600d8a90b15c8de86af4c131d14fb1bffb2ad49d1d3dd894367fa1b3f6f0411aa59a47272a2e8e96aa8f384fe122374136ac12de84b9dbe77561e08c1091b108eebca357944ad741971e1923244cbb6e5db655d91cfc8b02c621ef612e682a40f77c5f91c1796ca6362f92199f7c68d437427373b3af866b62f9530b65c32c7413f9473719b29292a04eac29adc6334b7565a54aa942bb6a3063d73c5b3ad2bd5cda898719b67e36c151b3981fed9ab981e056f14bfa7693c3dd4e2db39b89e8d3f540e67272e46d3c718061b79b521b238c9245797b9a65eac7a1cb252a1207a74824c0a8c851fe40b1a92be5bab27d835954d79920a6c6d8003b24dac3ad6c8e20d3cb6a20e85fe341c0b0508f649dc666d83d3ea10b091c20cb987b46e19f548485eca55c0e0b16cc1f896b35e38f592dfb4f6efbd0c16e3cc508f2f8021c564bc89f3e0523b5ea05a508ab8db08a9b05bf4b7f5a043484c48ca16c3e28701dd2997423fe9b4edd3f", &(0x7f0000002c40)="170017f58b9046a9e09ae67bf9f5ba94d539b362596a214ac198"}}, &(0x7f0000002cc0)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002d80), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0x1400000, 0x0, r5, 0x7ff, '\x00', 0x0, r6, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) sched_setaffinity(r3, 0x8, &(0x7f0000002e40)=0x6) sendmsg$tipc(r2, &(0x7f0000003080)={&(0x7f0000002e80)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x1, 0x3}}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002ec0)="46f65df11dfe249bf26fb7b1fb93d1cd7ff240445c32a5b13cb2bb7537764576b449d7ddcb16705f", 0x28}, {&(0x7f0000002f00)="db25a80daf497f5992b518969c2d426440e957961fbc50c4159470c09f45bace2a7c176ebee0c206d02a0e0912ed4974d0396fbf1f1866e0459fb1d63088fec351103217b57481cd7591ae621d825c677be6981c7dee037a16f7dc21a6e2f6c7585be8a0fd7636f56bef9d323cf727ffc1274c5017071bfea3db8e69814477cb45a93e856040eb23ff7a309d839fd1d50719628dc9ab3a4639f1190f64a0439fdd30dfa03a0ac56e26827f67ac69279b8244258d3ea3c3b1c510c27836ba317f122439eea0cbb78d1e4d463193a1f2a1830a99fe28213cb53ef09b91777063d411b3165f8ff4de72a4d3bc53a920de", 0xef}], 0x2, &(0x7f0000003040)="a99eec095d7627", 0x7, 0x40015}, 0x5558ece873fdf22f) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000030c0), 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003140), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000003180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000031c0)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000003340)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003200)={0xc4, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44}, 0xe016) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000033c0), r7) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f00000034c0)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x64, r10, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0xc010) bpf$PROG_BIND_MAP(0x23, &(0x7f0000003500)={r7, r5}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003540)) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003580), 0x40040, 0x0) ppoll(&(0x7f00000035c0)=[{r11, 0x4000}, {r1, 0x80}], 0x2, &(0x7f0000003600)={0x77359400}, &(0x7f0000003640)={[0x5]}, 0x8) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003680), 0x2, 0x0) close_range(0xffffffffffffffff, r12, 0x2) 3.355202229s ago: executing program 0 (id=9437): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x5, 0x8, 0x4}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x60000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}], [], 0x6b}}) 3.297194758s ago: executing program 4 (id=9438): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x0, 0x4, "24cdcda3"}) (fail_nth: 1) 2.982978943s ago: executing program 1 (id=9439): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1b42, 0x1a4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getchain={0x54, 0x66, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0xb}, {0x3, 0x2}, {0xa, 0xe}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x0) 2.982625404s ago: executing program 4 (id=9440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 2.959745733s ago: executing program 4 (id=9441): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, 0x0, 0x1c1b42, 0x1a4) r6 = socket$nl_route(0x10, 0x3, 0x0) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getchain={0x54, 0x66, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x3, 0x2}, {0xa, 0xe}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x0) 2.242554983s ago: executing program 3 (id=9442): syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) stat(&(0x7f00000008c0)='./file0\x00', 0x0) 1.992251359s ago: executing program 4 (id=9443): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "69dcaf2086ec9a8545f45826cb35be51ca73845d177dd8dba7221faeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000240701700ff00000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x4000000, @mcast2, 0x5}, 0x1c) ppoll(&(0x7f00000002c0)=[{r2, 0x6}, {0xffffffffffffffff, 0x4110}], 0x2, 0x0, 0x0, 0x0) 1.990361299s ago: executing program 1 (id=9444): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy67aK3qrv4gV3KqgdPmiZpyG6SKU2a1p48eBQPnv0nRMGTR/8GD569iQfFm6BkZqpbP8ClSWPb3w8mz7xv3jzzvGFZeGZKAjiz5pNffirFtbgUEbMRcTUiOy8VR2Y1D89FxPWImHnsKBXzf0ycj4jLEXFtlDzPWSre+vTm8MbKj2/8/PW3F85d+fyr76a3a2Dano+I7lZ+vtvNY9rK48NivjZsZ7G7PCxi/kb3UTFO87jb3Mgy7NYO1tWyeLuVr0+3dvqjuNmp1Uex1d7M5rd6+QX7w9ZBnuwDD2vb2bjR3Mhiu59msbWf17W3n//ftt8f5HkaRb4PsvQxGBzEfL6518z3s/Uoi/XeoJjP86aN5t4oDotYXC7qaaeR1bFxlG/6/+3Ndm9nLxk2t/vttJesVKovVKp3ytXttNEcNJfLtW7jznKy0OqMlpUHzVp3tZWmrU6zUk+7i8lCq14vV6vJwt3mRrvWS6rVyu3KrfLKYnF2M3n1/jtJp5EsjOLL7d7OoN3pJ5vpdpJ/YjFZqtx+cTG5UU3eWltP1h/cu7e2/vZ7d9+9/9La668Ui/5WVrKwdGtpqVy9VV6qLp6h/X9UFD3G/cORlJ5s+YVJ1QFwguj/gWmYXP+//SBi8v1/6P/H4kT1vxPr/z87s/uHI3nC/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNPj+7kvXstO5vPxlWL+qWLqmWJcioiZiPjtH8zG+UM5Z4s8c/+yfu4vNXxTiizD6BoXiuNyRKwWx69PT/pbAAAAgNPryw+vf5J36/nL/LQL4jjlN21mrr4/pnyliJib/2FM2WZGL8+OKVn27/tc7I0pW3YD6+KYkuW33M6NK9t/MnsoXHwslPIwc6zlAAAAx+JwJ3C8XQgAAADH6eNpF8B0lOLgUebBs+DsL+//fCB46dAIAAAAOIFK0y4AAAAAmLis//f7fwAAAHC65b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7lpA1EcgJ8NLvSfiqru26N0B8foEbrssuIAvQRHoFfIBTgD2eUIEUR4HBSiJIrisa2Q75PMMBb8/IzwYmakAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALp0Wa0X//9+/9c2Z7dv54WX/dG2bgAAAHgLttV6Ub+Zpf7H5vzn5tTXpl9ERBkRD43dR/HuJHPU5FSPfL66V8NFRJ1wuMakOT5ExM/muP7S9a8AAAAA52uzXM3TaD29zIYuiD6lSZvy069MeUVEVLOrTGnlIe9bprD6/z2OP5nS6gmsaaawNOU2zpX2LPXjfpy1m95pitSUT38/270DAAA9Gp00/Y5CAAAA6NPvoQtgGEXcLmUelwInqWmW996f9AAAAIBXqBi6AAAAAKBz9fjf/n8AAABw3tL+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW60Xm+Vq3jZnt28nz90AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9tCoAgEIbBrezrX3j/w8YLeoYIZkB42EVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBH7hnLOLXO2BJPVbVME3vGvaqOrBJnVokrF/p4sPUPfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMvO/bzGUcUBAH8zs7NJq+IaZQ8RseBBLzbd1tbexIMSPPgnCCHd1titP9ocbClCLt4k515EjyKCEm/9H3puoZd662EPFTxX5lcy+XFYhZ3ZZD8fePO+Mwzzvm8WQr77XgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsM/5wL06yQ6+I4/Law2d317P+0YE+c3/78XLWsjhqMunj4Y36SdSvnSw2nwwAAADzIanq+xDCk3RnNevjXl7/p9U9Wc3/00tFXNXzB+v+qq9q/6z9+cfT13YH6hXjZA+9ujEanjucSmd6s5xhz1+e4KZO/ubz716S/AOJP9l6dZzm7zP64cGDj7p5uDD9dAGA/+ds1ZdB9ftQ1g/aTAyAudGpFd5V/Z/02s0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAnjrfBCFUchhOXOXpx59Ozu+lH9/e3Hy1W7dO/edv2Z2SPSEMLVjdHwXFhscDaz7dbtO9fXRqPhzeaDN0MIbY3+QTn9659NcHMIU0rjTEtvfs6CuPywZyWf4xG0+EMJAIATKS1bVtc/SXdWs2vRUgjPf95f/79di8OE9f/Tzy89rI9Vr/8Hjc1w9q1s3vh65dbtO+9u3Fi7Nrw2/PK984P3BxcuX7x4eSX/rqQ4tp0mAAAAx1i3bPX6P146vP5/uhaHCev/b34cfFcfK1H/H2lv0a/tTAAAAObbK2f++Ts64nrU7YZv1zY3bw6K4+75+eLYQqr/2ULZ6vV/stR2VgAAAEATxlvRvvX/K7U4TLj+/+Ivr/9Wf2YSQjhVrv+fXf9qdKW56cy0qfzx8EL5cDsLAAAAKOvxUwfW/9N8/3+8u+UhDiG881YRl/8GcKL6P/n4+1/rY9X3/19oboozKe4X7yPv+yF0+m1nBAAAwEm2mLdeXv//le6sfvH76U+79v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA///FdTwZ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ftruncate(r0, 0x81ff) 1.937391108s ago: executing program 3 (id=9445): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x0, 0x4, "24cdcda3"}) 1.891151787s ago: executing program 3 (id=9446): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x2, 0x40, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x400002, 0x55) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) lseek(r4, 0x40000000000000f7, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0xfffffffffffffff7, 0x4, 0xfff}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000180)={0xa3, 0x0, &(0x7f0000000080)}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x5}) 1.547371332s ago: executing program 1 (id=9447): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1b42, 0x1a4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@getchain={0x54, 0x66, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x1, 0xb}, {0x3, 0x2}, {0xa, 0xe}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}]}, 0x54}}, 0x0) 849.391052ms ago: executing program 3 (id=9448): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000006f346d2224fa9eef61eea81c8900ecffffffffffffff000050b63ca36207446f83674c9f77adb89839f37590474ccfed231d76e8ec3e16c822c06207b7d1ccf484c59dfdee8dbbed40a4889af964b55a3f8be0251e1104931731f5cbd97dd8f97260b855154e48b1f900e46c67a36bf1bc9c4f294c3f7b69ca30134455cfcf56786cafb561d291c98fcfebb98b50d4c0126c8afdb401512587734143c898d055506a6043a1ec519f6b9cf3d3a67a29aaa972134a676e0a9d929b4f477cd7ad65cd47407b21aa91859054a0f0a022b7bddb55182595c97920989b0737253227c7882da24065c102", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x20000000}, 0x20) pselect6(0x40, &(0x7f0000000600)={0x8}, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r3, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = dup(r0) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x11) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0x19, &(0x7f00000008c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6006}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x3}], &(0x7f0000000140)='syzkaller\x00', 0xc, 0xf3, &(0x7f00000009c0)=""/243, 0x41100, 0x14, '\x00', 0x0, @fallback=0x2a, r7, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x0, 0x4}, 0x10, 0xffffffffffffffff, r10, 0x9, &(0x7f0000000480)=[r8], &(0x7f0000000ac0)=[{0x4, 0x2, 0x7, 0x1}, {0x0, 0x1, 0xf, 0x8}, {0x5, 0x1, 0xb, 0x5}, {0x0, 0x4, 0xd, 0x2}, {0x3, 0x2, 0x6, 0x6}, {0x5, 0x5, 0x6, 0x8}, {0x5, 0x5, 0x8, 0x1}, {0x2, 0x3, 0x3, 0xc}, {0x0, 0x4, 0x9, 0x2}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r7, r7, 0x0, r11}, 0x10) getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r13 = socket(0x10, 0x3, 0x9) sendmsg$netlink(r13, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)={0x10, 0x1e, 0x10, 0x10000, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000840)=[@rights={{0x10}}], 0x10, 0x58041}, 0x4000010) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r12, &(0x7f0000000300), &(0x7f0000000340)=""/166}, 0x20) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 847.948072ms ago: executing program 5 (id=9449): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000180)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@utf8}, {@numtail}, {@numtail}, {}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1ff}}]}, 0x1, 0x363, &(0x7f0000000280)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a8500000005000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) eventfd2(0x0, 0x0) 591.253069ms ago: executing program 5 (id=9450): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000000000000000001c0000000801010000000000"], 0x1c}}, 0x0) 590.902218ms ago: executing program 5 (id=9451): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x1, @thr={&(0x7f0000000040)="e7bf19", &(0x7f0000000080)="bf5927d569bd1ba491b44709f66254d7cf2f9d5c3797fa93baa694483456a01146f7a0b634ca35e8dc304439501dda2269d0c23c5411ea31544e6154ff4e76f8dde51b628e4fba635884a1c170bf481311336185555881583fb98616e628509b24e8a9cc16d95783645ca042e835f439a409a137d0b1942dcf118cf5db26799c51c4fd18c92d64b98d5c880dd25a24ef056cdc90bd359ef5bb24bd2c7f7d1904a76ae6802dacf0e43cc9069a141d50a32309f4c1beae1e81e2aec4fd725c8133d1a1"}}, &(0x7f00000001c0)) 29.67831ms ago: executing program 3 (id=9452): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xbb4b5b53b6841f38, 0x5, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x6f, &(0x7f0000000280)=""/111, 0x40f00, 0x16, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1353c, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x2, 0x4, 0x2, 0x1}, {0x2, 0x2, 0x7, 0x5}, {0x2, 0x5, 0xa, 0x5}, {0x5, 0x5, 0x7, 0x7}, {0x2, 0x3, 0x401, 0xa}, {0x4, 0x1, 0x8, 0x4}, {0x1, 0x2, 0xe, 0xa}], 0x10, 0x8, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vcsn(&(0x7f0000000500), 0x5, 0x42000) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000680)={0xfffffffffffffffe, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0xe8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x95}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x4000810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r2, r3}, 0xc) syz_emit_ethernet(0x1a6, &(0x7f00000006c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x170, 0x3a, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote, [@dstopts={0x4, 0x26, '\x00', [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x1, 0x7, [0x61eb, 0x3, 0x0, 0x228000, 0x7, 0x8, 0x8000000000000000]}}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xba, 0xa9, "9a7e88afba68b8d29cc6db5bce06741b70633c8decd4606cd97f2a6a080c32c1a72df45b15aefa8cb61e20925b876515d5dc47695d02adea87810b60e3d891ff63c82ae6a92a554625acde85b85376bf8901c830eda7f219ca86c9907e2e4316cc15965f4d4e31bfa3fdfed6debde32f64a16989526d4e0b8a67b1bb94780735eef5d86c3933d42e67a8d91309225b7446c52e4918a144ee540cf8e0b2a87fb02fc818a2c8bb5cb4a2"}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2b}}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) dup3(r0, r0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="02005e00140001"], 0x5c}}, 0x40000000) 23.76694ms ago: executing program 1 (id=9462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000000801010000000000"], 0x1c}}, 0x0) 0s ago: executing program 1 (id=9453): openat$vsock(0xffffff9c, 0x0, 0x40101, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@test_dummy_encryption_v1}, {@nouid32}]}, 0x1, 0x43c, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x40000000004) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) kernel console output (not intermixed with test programs): fsck to fix. [ 2624.736173][ T9307] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 2624.744751][ T9307] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 2624.752922][ T9307] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 2624.760485][ T9307] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 2624.768075][ T9307] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 2624.775744][ T9307] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 2624.794401][ T9229] syz-executor: attempt to access beyond end of device [ 2624.794401][ T9229] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2624.795473][ T9979] 9pnet_fd: Insufficient options for proto=fd [ 2625.369343][ T9994] 9pnet_fd: Insufficient options for proto=fd [ 2625.372475][ T9996] loop4: detected capacity change from 0 to 512 [ 2625.404525][ T9998] loop0: detected capacity change from 0 to 512 [ 2625.411071][ T9998] EXT4-fs: Ignoring removed mblk_io_submit option [ 2625.419189][ T9998] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 2625.421700][ T9996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2625.430206][ T9998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 2625.436612][ T9996] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2625.444139][ T9998] System zones: 1-12 [ 2625.462263][ T9998] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.9093: corrupted in-inode xattr [ 2625.474552][ T9998] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.9093: couldn't read orphan inode 15 (err -117) [ 2625.530819][ T9998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2625.563937][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2625.566223][T10004] loop3: detected capacity change from 0 to 512 [ 2625.576586][T10004] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2625.583318][T10004] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2625.593204][T10004] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 2625.901249][T10012] loop5: detected capacity change from 0 to 512 [ 2625.926144][T10012] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2625.935772][T10012] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2626.291383][T10020] xt_CT: No such helper "syz0" [ 2626.674434][ T6489] usbhid 2-1:0.0: can't add hid device: -71 [ 2626.728434][ T6489] usbhid: probe of 2-1:0.0 failed with error -71 [ 2626.748363][ T6489] usb 2-1: USB disconnect, device number 7 [ 2626.765241][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2627.084588][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2627.192286][T10036] loop3: detected capacity change from 0 to 512 [ 2627.241296][T10036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2627.259615][T10036] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2627.294553][T10018] loop0: detected capacity change from 0 to 40427 [ 2627.318250][T10030] loop4: detected capacity change from 0 to 40427 [ 2627.357789][T10030] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2627.369857][T10030] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2627.388336][T10030] F2FS-fs (loop4): invalid crc value [ 2627.394733][T10018] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2627.685991][T10018] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2627.711954][T10030] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2627.791594][T10034] loop5: detected capacity change from 0 to 40427 [ 2627.809538][T10034] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 2627.819571][T10034] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2627.821555][T10026] loop1: detected capacity change from 0 to 40427 [ 2627.845844][T10030] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2627.850998][T10034] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2627.852850][T10030] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2627.867029][T10026] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2627.877226][ T9307] syz-executor: attempt to access beyond end of device [ 2627.877226][ T9307] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2627.945129][T10026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2627.952373][T10034] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2627.968855][T10034] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2628.011650][ T9229] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 2628.011675][ T9229] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 2628.049941][ T9596] syz-executor: attempt to access beyond end of device [ 2628.049941][ T9596] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2628.072583][ T9229] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 2628.130444][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2628.275095][T10066] loop3: detected capacity change from 0 to 256 [ 2628.303873][T10066] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2628.616500][T10070] loop0: detected capacity change from 0 to 1024 [ 2628.647098][T10070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2628.664319][T10070] ext4: Bad value for 'inode_readahead_blks' [ 2628.677127][T10066] FAT-fs (loop3): Directory bread(block 64) failed [ 2628.712663][T10066] FAT-fs (loop3): Directory bread(block 65) failed [ 2628.720281][T10066] FAT-fs (loop3): Directory bread(block 66) failed [ 2628.727836][T10074] 9pnet_fd: Insufficient options for proto=fd [ 2628.749892][T10066] FAT-fs (loop3): Directory bread(block 67) failed [ 2628.750365][T10076] loop4: detected capacity change from 0 to 256 [ 2628.756314][T10066] FAT-fs (loop3): Directory bread(block 68) failed [ 2628.773754][T10076] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2628.785464][T10066] FAT-fs (loop3): Directory bread(block 69) failed [ 2628.785527][T10066] FAT-fs (loop3): Directory bread(block 70) failed [ 2628.815132][T10076] FAT-fs (loop4): Directory bread(block 64) failed [ 2628.826187][T10076] FAT-fs (loop4): Directory bread(block 65) failed [ 2628.829620][T10066] FAT-fs (loop3): Directory bread(block 71) failed [ 2628.838374][T10076] FAT-fs (loop4): Directory bread(block 66) failed [ 2628.839047][T10066] FAT-fs (loop3): Directory bread(block 72) failed [ 2628.851920][T10076] FAT-fs (loop4): Directory bread(block 67) failed [ 2628.863782][T10076] FAT-fs (loop4): Directory bread(block 68) failed [ 2628.869601][T10066] FAT-fs (loop3): Directory bread(block 73) failed [ 2628.876724][T10076] FAT-fs (loop4): Directory bread(block 69) failed [ 2628.889823][T10076] FAT-fs (loop4): Directory bread(block 70) failed [ 2628.898952][T10076] FAT-fs (loop4): Directory bread(block 71) failed [ 2628.915220][T10076] FAT-fs (loop4): Directory bread(block 72) failed [ 2628.928250][T10076] FAT-fs (loop4): Directory bread(block 73) failed [ 2629.007859][T10080] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2629.077129][T10086] usb usb4: usbfs: process 10086 (syz.5.9112) did not claim interface 0 before use [ 2629.147906][T10088] loop0: detected capacity change from 0 to 256 [ 2629.180041][T10088] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2629.200827][T10089] loop5: detected capacity change from 0 to 2048 [ 2629.232548][T10088] FAT-fs (loop0): Directory bread(block 64) failed [ 2629.238912][T10088] FAT-fs (loop0): Directory bread(block 65) failed [ 2629.251340][T10084] loop3: detected capacity change from 0 to 40427 [ 2629.261497][T10088] FAT-fs (loop0): Directory bread(block 66) failed [ 2629.269084][T10089] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2629.269733][T10088] FAT-fs (loop0): Directory bread(block 67) failed [ 2629.284956][T10088] FAT-fs (loop0): Directory bread(block 68) failed [ 2629.291792][T10088] FAT-fs (loop0): Directory bread(block 69) failed [ 2629.298239][T10088] FAT-fs (loop0): Directory bread(block 70) failed [ 2629.304906][T10088] FAT-fs (loop0): Directory bread(block 71) failed [ 2629.306911][T10084] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2629.312248][T10088] FAT-fs (loop0): Directory bread(block 72) failed [ 2629.330902][T10088] FAT-fs (loop0): Directory bread(block 73) failed [ 2629.339224][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2629.375369][T10084] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2629.407494][T10101] loop5: detected capacity change from 0 to 512 [ 2629.456260][T10101] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2629.465326][ T9583] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2629.473510][T10101] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2629.608385][T10107] loop1: detected capacity change from 0 to 512 [ 2629.627629][T10099] loop0: detected capacity change from 0 to 40427 [ 2629.664857][T10107] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2629.853217][T10107] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2629.906547][T10099] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2629.970656][ T9583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2629.995939][ T9583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2630.022672][ T9583] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2630.038871][ T9583] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2630.044354][T10099] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2630.047932][ T9583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.049463][ T9583] usb 5-1: config 0 descriptor?? [ 2630.072138][T28823] syz-executor: attempt to access beyond end of device [ 2630.072138][T28823] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2630.415764][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2630.497883][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2630.566278][T10124] 9pnet_fd: Insufficient options for proto=fd [ 2630.574537][ T9307] syz-executor: attempt to access beyond end of device [ 2630.574537][ T9307] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2630.618663][T10126] loop3: detected capacity change from 0 to 256 [ 2630.631314][T10128] loop1: detected capacity change from 0 to 1024 [ 2630.648159][T10126] FAT-fs (loop3): Directory bread(block 64) failed [ 2630.667536][T10126] FAT-fs (loop3): Directory bread(block 65) failed [ 2630.667555][T10128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2630.667613][T10126] FAT-fs (loop3): Directory bread(block 66) failed [ 2630.674797][T10128] ext4: Bad value for 'inode_readahead_blks' [ 2630.692983][T10126] FAT-fs (loop3): Directory bread(block 67) failed [ 2630.699549][T10126] FAT-fs (loop3): Directory bread(block 68) failed [ 2630.705999][T10126] FAT-fs (loop3): Directory bread(block 69) failed [ 2630.712401][T10126] FAT-fs (loop3): Directory bread(block 70) failed [ 2630.728246][T10126] FAT-fs (loop3): Directory bread(block 71) failed [ 2630.739892][T10126] FAT-fs (loop3): Directory bread(block 72) failed [ 2630.746376][T10126] FAT-fs (loop3): Directory bread(block 73) failed [ 2630.768288][T10130] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2631.337425][T10136] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2631.451661][T10145] loop5: detected capacity change from 0 to 512 [ 2631.467274][T10144] usb usb4: usbfs: process 10144 (syz.0.9126) did not claim interface 0 before use [ 2631.486460][T10149] loop3: detected capacity change from 0 to 512 [ 2631.495887][T10145] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2631.504911][T10145] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2631.511832][T10149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2631.524844][T10149] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2631.713484][T10155] loop0: detected capacity change from 0 to 2048 [ 2631.741572][T10155] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2631.836061][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2631.859970][T10161] loop5: detected capacity change from 0 to 512 [ 2631.872077][T10161] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2631.881050][T10161] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2632.289960][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2632.355120][T10169] loop0: detected capacity change from 0 to 512 [ 2632.355989][ T9583] usbhid 5-1:0.0: can't add hid device: -71 [ 2632.372776][T10171] loop1: detected capacity change from 0 to 512 [ 2632.387107][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2632.401044][T10171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2632.413181][T10169] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2632.417221][T10171] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2632.424106][ T9583] usbhid: probe of 5-1:0.0 failed with error -71 [ 2632.443513][T10169] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2632.460088][ T9583] usb 5-1: USB disconnect, device number 91 [ 2633.315931][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2633.519174][T10191] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2633.718035][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2633.759127][T10173] loop4: detected capacity change from 0 to 40427 [ 2633.860345][T10173] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2633.867773][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2633.924188][T10200] loop0: detected capacity change from 0 to 1024 [ 2633.937972][T10200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2633.946411][T10200] ext4: Bad value for 'inode_readahead_blks' [ 2633.972036][T10173] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2634.062349][T10204] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2634.274179][T10208] loop5: detected capacity change from 0 to 256 [ 2634.296162][T10208] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2634.310002][ T9229] syz-executor: attempt to access beyond end of device [ 2634.310002][ T9229] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2634.355459][T10208] FAT-fs (loop5): Directory bread(block 64) failed [ 2634.361982][T10208] FAT-fs (loop5): Directory bread(block 65) failed [ 2634.374567][T10208] FAT-fs (loop5): Directory bread(block 66) failed [ 2634.385127][T10208] FAT-fs (loop5): Directory bread(block 67) failed [ 2634.396828][T10208] FAT-fs (loop5): Directory bread(block 68) failed [ 2634.406436][T10208] FAT-fs (loop5): Directory bread(block 69) failed [ 2634.417144][T10208] FAT-fs (loop5): Directory bread(block 70) failed [ 2634.427747][T10208] FAT-fs (loop5): Directory bread(block 71) failed [ 2634.438417][T10208] FAT-fs (loop5): Directory bread(block 72) failed [ 2634.445616][T10208] FAT-fs (loop5): Directory bread(block 73) failed [ 2634.516240][T10213] usb usb4: usbfs: process 10213 (syz.5.9141) did not claim interface 0 before use [ 2634.601593][T10218] loop4: detected capacity change from 0 to 512 [ 2634.649069][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9143'. [ 2634.651834][T10221] loop5: detected capacity change from 0 to 2048 [ 2634.670401][T10218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2634.690695][T10218] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2634.724973][T10221] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2634.725426][T10229] loop1: detected capacity change from 0 to 256 [ 2634.744136][T10229] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2634.875135][T10229] FAT-fs (loop1): Directory bread(block 64) failed [ 2634.893262][T10229] FAT-fs (loop1): Directory bread(block 65) failed [ 2634.909169][T10229] FAT-fs (loop1): Directory bread(block 66) failed [ 2635.189685][T10229] FAT-fs (loop1): Directory bread(block 67) failed [ 2635.207403][T10229] FAT-fs (loop1): Directory bread(block 68) failed [ 2635.224029][T10229] FAT-fs (loop1): Directory bread(block 69) failed [ 2635.231417][T10229] FAT-fs (loop1): Directory bread(block 70) failed [ 2635.237999][T10229] FAT-fs (loop1): Directory bread(block 71) failed [ 2635.249302][T10229] FAT-fs (loop1): Directory bread(block 72) failed [ 2635.274212][T10229] FAT-fs (loop1): Directory bread(block 73) failed [ 2635.468983][T10237] loop3: detected capacity change from 0 to 512 [ 2635.484657][T10241] loop0: detected capacity change from 0 to 512 [ 2635.529319][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2635.536236][T10241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2635.549530][T10237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2635.558664][T10237] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2635.571343][T10241] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2635.729303][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2635.775702][T10258] loop5: detected capacity change from 0 to 1024 [ 2635.796230][T10259] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2635.817785][T10258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2635.843014][T10258] ext4: Bad value for 'inode_readahead_blks' [ 2636.699645][T10251] loop1: detected capacity change from 0 to 40427 [ 2636.710758][T10266] loop4: detected capacity change from 0 to 256 [ 2636.738426][T10266] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2636.780986][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2636.781136][T10251] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2636.809595][T10266] FAT-fs (loop4): Directory bread(block 64) failed [ 2636.818621][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2636.827387][T10266] FAT-fs (loop4): Directory bread(block 65) failed [ 2636.843719][T10266] FAT-fs (loop4): Directory bread(block 66) failed [ 2636.875971][T10266] FAT-fs (loop4): Directory bread(block 67) failed [ 2636.887850][T10266] FAT-fs (loop4): Directory bread(block 68) failed [ 2636.895448][T10266] FAT-fs (loop4): Directory bread(block 69) failed [ 2636.905697][T10266] FAT-fs (loop4): Directory bread(block 70) failed [ 2636.912320][T10266] FAT-fs (loop4): Directory bread(block 71) failed [ 2636.927793][T10266] FAT-fs (loop4): Directory bread(block 72) failed [ 2636.936453][T10266] FAT-fs (loop4): Directory bread(block 73) failed [ 2636.946062][T10251] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2637.028586][T10289] loop5: detected capacity change from 0 to 512 [ 2637.029127][T10288] loop3: detected capacity change from 0 to 256 [ 2637.056475][T10289] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2637.065478][T10289] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2637.078507][T10288] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2637.162112][ T9596] syz-executor: attempt to access beyond end of device [ 2637.162112][ T9596] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2637.180079][T10288] FAT-fs (loop3): Directory bread(block 64) failed [ 2637.186696][T10288] FAT-fs (loop3): Directory bread(block 65) failed [ 2637.202171][T10288] FAT-fs (loop3): Directory bread(block 66) failed [ 2637.230001][T10288] FAT-fs (loop3): Directory bread(block 67) failed [ 2637.236608][T10291] FAULT_INJECTION: forcing a failure. [ 2637.236608][T10291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2637.252075][T10288] FAT-fs (loop3): Directory bread(block 68) failed [ 2637.363265][T10288] FAT-fs (loop3): Directory bread(block 69) failed [ 2637.370619][T10291] CPU: 1 PID: 10291 Comm: syz.4.9159 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2637.380341][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2637.390510][T10291] Call Trace: [ 2637.393633][T10291] [ 2637.396410][T10291] dump_stack_lvl+0x151/0x1b7 [ 2637.400935][T10291] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2637.406223][T10291] dump_stack+0x15/0x19 [ 2637.410212][T10291] should_fail_ex+0x3d0/0x520 [ 2637.414733][T10291] should_fail+0xb/0x10 [ 2637.418806][T10291] should_fail_usercopy+0x1a/0x20 [ 2637.423671][T10291] _copy_to_user+0x1e/0x90 [ 2637.427931][T10291] simple_read_from_buffer+0xc7/0x150 [ 2637.433226][T10291] proc_fail_nth_read+0x1a3/0x210 [ 2637.438086][T10291] ? proc_fault_inject_write+0x390/0x390 [ 2637.443564][T10291] ? fsnotify_perm+0x269/0x5b0 [ 2637.448154][T10291] ? security_file_permission+0x86/0xb0 [ 2637.453534][T10291] ? proc_fault_inject_write+0x390/0x390 [ 2637.458999][T10291] vfs_read+0x26c/0xae0 [ 2637.462992][T10291] ? kernel_read+0x1f0/0x1f0 [ 2637.467421][T10291] ? mutex_lock+0xb1/0x1e0 [ 2637.471674][T10291] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 2637.477140][T10291] ? bit_wait_io_timeout+0x120/0x120 [ 2637.480232][T10288] FAT-fs (loop3): Directory bread(block 70) failed [ 2637.482257][T10291] ? __fdget_pos+0x264/0x390 [ 2637.488607][T10288] FAT-fs (loop3): Directory bread(block 71) failed [ 2637.493022][T10291] ? __fdget_pos+0x26f/0x390 [ 2637.493056][T10291] ? __fdget_pos+0x2e2/0x390 [ 2637.508218][T10291] ? ksys_read+0x77/0x2c0 [ 2637.512380][T10291] ksys_read+0x199/0x2c0 [ 2637.516459][T10291] ? sysvec_reschedule_ipi+0x8f/0x170 [ 2637.521666][T10291] ? vfs_write+0xed0/0xed0 [ 2637.525917][T10291] ? __x64_sys_read+0x1d/0x90 [ 2637.530432][T10291] __x64_sys_read+0x7b/0x90 [ 2637.534771][T10291] x64_sys_call+0x28/0x9a0 [ 2637.539021][T10291] do_syscall_64+0x3b/0xb0 [ 2637.543277][T10291] ? clear_bhb_loop+0x55/0xb0 [ 2637.547784][T10291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2637.553526][T10291] RIP: 0033:0x7f984078472c [ 2637.557770][T10291] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2637.577210][T10291] RSP: 002b:00007f984150d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2637.585455][T10291] RAX: ffffffffffffffda RBX: 00007f9840975fa0 RCX: 00007f984078472c [ 2637.593269][T10291] RDX: 000000000000000f RSI: 00007f984150d0a0 RDI: 0000000000000004 [ 2637.601077][T10291] RBP: 00007f984150d090 R08: 0000000000000000 R09: 0000000000000000 [ 2637.608888][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2637.616699][T10291] R13: 0000000000000000 R14: 00007f9840975fa0 R15: 00007fffff57f2a8 [ 2637.624522][T10291] [ 2637.628429][T10288] FAT-fs (loop3): Directory bread(block 72) failed [ 2637.637822][T10288] FAT-fs (loop3): Directory bread(block 73) failed [ 2637.674814][T10299] loop4: detected capacity change from 0 to 512 [ 2637.726300][T10299] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2637.751574][T10299] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2637.910500][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2637.928868][T10305] loop3: detected capacity change from 0 to 512 [ 2638.326219][T10309] loop5: detected capacity change from 0 to 256 [ 2638.358049][T10309] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2638.373657][T10305] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2638.383033][T10305] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2638.486120][T10309] FAT-fs (loop5): Directory bread(block 64) failed [ 2638.495618][T10316] loop1: detected capacity change from 0 to 512 [ 2638.509592][T10309] FAT-fs (loop5): Directory bread(block 65) failed [ 2638.523008][T10309] FAT-fs (loop5): Directory bread(block 66) failed [ 2638.529374][T10309] FAT-fs (loop5): Directory bread(block 67) failed [ 2639.459911][T10309] FAT-fs (loop5): Directory bread(block 68) failed [ 2639.466329][T10309] FAT-fs (loop5): Directory bread(block 69) failed [ 2639.472998][T10309] FAT-fs (loop5): Directory bread(block 70) failed [ 2639.479934][T10309] FAT-fs (loop5): Directory bread(block 71) failed [ 2639.487104][T10309] FAT-fs (loop5): Directory bread(block 72) failed [ 2639.487229][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2639.503609][T10316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2639.513132][T10309] FAT-fs (loop5): Directory bread(block 73) failed [ 2639.532862][T10316] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2639.554262][T10324] loop4: detected capacity change from 0 to 512 [ 2639.656202][T10324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2639.665194][T10324] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2639.687232][T10331] loop0: detected capacity change from 0 to 256 [ 2639.693854][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2639.694718][T10331] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2639.925646][T10331] FAT-fs (loop0): Directory bread(block 64) failed [ 2639.938195][T10331] FAT-fs (loop0): Directory bread(block 65) failed [ 2639.945338][T10331] FAT-fs (loop0): Directory bread(block 66) failed [ 2639.952116][T10336] loop5: detected capacity change from 0 to 1024 [ 2639.971620][T10336] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2639.989930][T10336] ext4: Bad value for 'inode_readahead_blks' [ 2640.209556][T10331] FAT-fs (loop0): Directory bread(block 67) failed [ 2640.280832][T10331] FAT-fs (loop0): Directory bread(block 68) failed [ 2640.338426][T10331] FAT-fs (loop0): Directory bread(block 69) failed [ 2640.345428][T10331] FAT-fs (loop0): Directory bread(block 70) failed [ 2640.353246][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2640.359211][T10331] FAT-fs (loop0): Directory bread(block 71) failed [ 2640.371095][T10331] FAT-fs (loop0): Directory bread(block 72) failed [ 2640.414144][T10331] FAT-fs (loop0): Directory bread(block 73) failed [ 2640.449756][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2640.497172][T10342] loop1: detected capacity change from 0 to 512 [ 2640.501112][T10344] loop0: detected capacity change from 0 to 256 [ 2640.515709][T10342] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2640.524855][T10342] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2640.535081][T10344] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2640.540676][T10342] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 2640.558980][T10348] FAULT_INJECTION: forcing a failure. [ 2640.558980][T10348] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.563708][T10344] FAT-fs (loop0): Directory bread(block 64) failed [ 2640.577892][T10344] FAT-fs (loop0): Directory bread(block 65) failed [ 2640.584705][T10344] FAT-fs (loop0): Directory bread(block 66) failed [ 2640.591728][T10344] FAT-fs (loop0): Directory bread(block 67) failed [ 2640.598098][T10344] FAT-fs (loop0): Directory bread(block 68) failed [ 2640.604954][T10344] FAT-fs (loop0): Directory bread(block 69) failed [ 2640.605794][T10348] CPU: 0 PID: 10348 Comm: syz.4.9173 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2640.621011][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2640.630360][T10344] FAT-fs (loop0): Directory bread(block 70) failed [ 2640.630904][T10348] Call Trace: [ 2640.630914][T10348] [ 2640.637452][T10344] FAT-fs (loop0): Directory bread(block 71) failed [ 2640.640441][T10348] dump_stack_lvl+0x151/0x1b7 [ 2640.640473][T10348] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2640.640498][T10348] ? __kasan_check_write+0x14/0x20 [ 2640.640518][T10348] ? mutex_unlock+0xb2/0x260 [ 2640.640548][T10348] ? bit_wait_io_timeout+0x120/0x120 [ 2640.640578][T10348] dump_stack+0x15/0x19 [ 2640.640598][T10348] should_fail_ex+0x3d0/0x520 [ 2640.640630][T10348] ? getname_flags+0xba/0x520 [ 2640.644498][T10344] FAT-fs (loop0): Directory bread(block 72) failed [ 2640.649702][T10348] __should_failslab+0xaf/0xf0 [ 2640.649741][T10348] should_failslab+0x9/0x20 [ 2640.649769][T10348] kmem_cache_alloc+0x3b/0x320 [ 2640.649793][T10348] getname_flags+0xba/0x520 [ 2640.654817][T10344] FAT-fs (loop0): Directory bread(block 73) failed [ 2640.659509][T10348] getname+0x19/0x20 [ 2640.659536][T10348] __x64_sys_execve+0x78/0xb0 [ 2640.659566][T10348] x64_sys_call+0x1c5/0x9a0 [ 2640.712838][T10340] loop3: detected capacity change from 0 to 40427 [ 2640.717573][T10348] do_syscall_64+0x3b/0xb0 [ 2640.717605][T10348] ? clear_bhb_loop+0x55/0xb0 [ 2640.745186][T10348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2640.750909][T10348] RIP: 0033:0x7f9840785d19 [ 2640.755176][T10348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2640.774600][T10348] RSP: 002b:00007f98414ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2640.782842][T10348] RAX: ffffffffffffffda RBX: 00007f9840976080 RCX: 00007f9840785d19 [ 2640.790652][T10348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 2640.798462][T10348] RBP: 00007f98414ec090 R08: 0000000000000000 R09: 0000000000000000 [ 2640.806279][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2640.814090][T10348] R13: 0000000000000001 R14: 00007f9840976080 R15: 00007fffff57f2a8 [ 2640.821908][T10348] [ 2640.874540][T10340] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2640.932596][T10358] loop5: detected capacity change from 0 to 512 [ 2640.944418][T10340] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2641.099683][T10358] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2641.121954][T10368] xt_CT: No such helper "syz0" [ 2641.198317][T10367] loop0: detected capacity change from 0 to 256 [ 2641.275900][T10367] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2641.282511][T10358] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2641.424660][T10367] FAT-fs (loop0): Directory bread(block 64) failed [ 2641.433709][T10370] loop1: detected capacity change from 0 to 512 [ 2641.438594][T10367] FAT-fs (loop0): Directory bread(block 65) failed [ 2641.447065][T10367] FAT-fs (loop0): Directory bread(block 66) failed [ 2641.453694][T10367] FAT-fs (loop0): Directory bread(block 67) failed [ 2641.459053][T10370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2641.466174][T10367] FAT-fs (loop0): Directory bread(block 68) failed [ 2641.474797][T28823] syz-executor: attempt to access beyond end of device [ 2641.474797][T28823] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2641.500343][T10367] FAT-fs (loop0): Directory bread(block 69) failed [ 2641.752773][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9179'. [ 2641.813088][T10370] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2641.833395][T10378] loop4: detected capacity change from 0 to 2048 [ 2641.860328][T10367] FAT-fs (loop0): Directory bread(block 70) failed [ 2641.869076][T10367] FAT-fs (loop0): Directory bread(block 71) failed [ 2641.919951][T10367] FAT-fs (loop0): Directory bread(block 72) failed [ 2641.931450][T10367] FAT-fs (loop0): Directory bread(block 73) failed [ 2642.528818][T10383] loop3: detected capacity change from 0 to 512 [ 2642.548571][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2642.585004][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2642.591766][T10389] loop5: detected capacity change from 0 to 512 [ 2642.597574][T10383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2642.609109][T10383] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2642.627717][T10395] loop0: detected capacity change from 0 to 1024 [ 2642.634285][T10395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2642.640974][T10395] ext4: Bad value for 'inode_readahead_blks' [ 2642.651871][T10392] loop4: detected capacity change from 0 to 256 [ 2642.685516][T10392] exFAT-fs (loop4): failed to load upcase table (idx : 0x000020f2, chksum : 0xd049abaf, utbl_chksum : 0xe619d30d) [ 2642.719691][T10389] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2642.728765][T10389] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2642.732244][ T959] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2642.749650][T10400] loop1: detected capacity change from 0 to 512 [ 2643.539156][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2643.548314][T10400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2643.559651][T10400] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2643.574179][T10410] usb usb4: usbfs: process 10410 (syz.4.9186) did not claim interface 0 before use [ 2643.584014][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2643.693371][T10419] loop5: detected capacity change from 0 to 256 [ 2645.163450][T10423] loop3: detected capacity change from 0 to 40427 [ 2645.190100][T10423] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2645.197876][T10423] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2645.210544][T10423] F2FS-fs (loop3): invalid crc value [ 2645.223815][T10419] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2645.375545][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2645.384993][T10423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2645.484770][T10423] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2645.491746][T10423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2645.625742][T10419] FAT-fs (loop5): Directory bread(block 64) failed [ 2645.712391][T10419] FAT-fs (loop5): Directory bread(block 65) failed [ 2645.826135][T10426] loop4: detected capacity change from 0 to 2048 [ 2645.832529][T10419] FAT-fs (loop5): Directory bread(block 66) failed [ 2645.838960][T10419] FAT-fs (loop5): Directory bread(block 67) failed [ 2645.853485][T10419] FAT-fs (loop5): Directory bread(block 68) failed [ 2645.860601][T10419] FAT-fs (loop5): Directory bread(block 69) failed [ 2645.867028][T10419] FAT-fs (loop5): Directory bread(block 70) failed [ 2645.873837][T10419] FAT-fs (loop5): Directory bread(block 71) failed [ 2645.882732][T10419] FAT-fs (loop5): Directory bread(block 72) failed [ 2645.884708][T10426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2646.013538][T10436] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2646.810032][T10419] FAT-fs (loop5): Directory bread(block 73) failed [ 2646.832546][T11190] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2646.849437][T11190] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2646.850971][T10441] loop0: detected capacity change from 0 to 256 [ 2646.865080][T10441] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2646.922822][T10441] FAT-fs (loop0): Directory bread(block 64) failed [ 2646.929363][T10441] FAT-fs (loop0): Directory bread(block 65) failed [ 2646.947734][T10444] FAULT_INJECTION: forcing a failure. [ 2646.947734][T10444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2646.976636][T10445] loop1: detected capacity change from 0 to 512 [ 2646.988531][T10444] CPU: 0 PID: 10444 Comm: syz.5.9194 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2646.990013][T10445] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 2646.998257][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2646.998274][T10444] Call Trace: [ 2646.998281][T10444] [ 2646.998290][T10444] dump_stack_lvl+0x151/0x1b7 [ 2646.998321][T10444] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2646.998345][T10444] ? fsnotify_perm+0x6a/0x5b0 [ 2647.035935][T10444] dump_stack+0x15/0x19 [ 2647.040024][T10444] should_fail_ex+0x3d0/0x520 [ 2647.044535][T10444] should_fail+0xb/0x10 [ 2647.048533][T10444] should_fail_usercopy+0x1a/0x20 [ 2647.053393][T10444] _copy_from_user+0x1e/0xc0 [ 2647.057813][T10444] get_timespec64+0x93/0x270 [ 2647.062247][T10444] ? timespec64_add_safe+0x220/0x220 [ 2647.066828][T10447] loop3: detected capacity change from 0 to 512 [ 2647.067358][T10444] ? do_sys_open+0x220/0x220 [ 2647.077873][T10444] __se_sys_ppoll+0xcd/0x330 [ 2647.079961][T10441] FAT-fs (loop0): Directory bread(block 66) failed [ 2647.082284][T10444] ? ksys_write+0x24f/0x2c0 [ 2647.092717][T10441] FAT-fs (loop0): Directory bread(block 67) failed [ 2647.092959][T10444] ? __this_cpu_preempt_check+0x13/0x20 [ 2647.099926][T10441] FAT-fs (loop0): Directory bread(block 68) failed [ 2647.104782][T10444] ? __x64_sys_ppoll+0xd0/0xd0 [ 2647.111887][T10441] FAT-fs (loop0): Directory bread(block 69) failed [ 2647.115722][T10444] ? __ia32_sys_read+0x90/0x90 [ 2647.123913][T10447] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2647.126653][T10444] ? debug_smp_processor_id+0x17/0x20 [ 2647.135551][T10447] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2647.140542][T10444] __x64_sys_ppoll+0xbf/0xd0 [ 2647.140579][T10444] x64_sys_call+0x721/0x9a0 [ 2647.140602][T10444] do_syscall_64+0x3b/0xb0 [ 2647.151373][T10441] FAT-fs (loop0): Directory bread(block 70) failed [ 2647.155210][T10444] ? clear_bhb_loop+0x55/0xb0 [ 2647.159831][T10441] FAT-fs (loop0): Directory bread(block 71) failed [ 2647.163799][T10444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2647.163833][T10444] RIP: 0033:0x7fde45b85d19 [ 2647.180939][T10441] FAT-fs (loop0): Directory bread(block 72) failed [ 2647.181074][T10444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2647.186809][T10441] FAT-fs (loop0): Directory bread(block 73) failed [ 2647.191054][T10444] RSP: 002b:00007fde469b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2647.191079][T10444] RAX: ffffffffffffffda RBX: 00007fde45d75fa0 RCX: 00007fde45b85d19 [ 2647.191094][T10444] RDX: 0000000020000100 RSI: 0000000000000001 RDI: 0000000020000080 [ 2647.191108][T10444] RBP: 00007fde469b2090 R08: 0000000000000000 R09: 0000000000000000 [ 2647.191121][T10444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2647.191133][T10444] R13: 0000000000000000 R14: 00007fde45d75fa0 R15: 00007fff8a0533f8 [ 2647.270871][T10444] [ 2647.798445][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2647.858497][T10462] loop5: detected capacity change from 0 to 256 [ 2647.875457][T10464] loop4: detected capacity change from 0 to 512 [ 2647.890950][T10462] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2647.938436][T10462] FAT-fs (loop5): Directory bread(block 64) failed [ 2647.955552][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2647.964751][T10464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2647.974991][T10462] FAT-fs (loop5): Directory bread(block 65) failed [ 2647.985006][T10464] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2647.998484][T10457] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2648.000737][T10462] FAT-fs (loop5): Directory bread(block 66) failed [ 2648.029616][T10462] FAT-fs (loop5): Directory bread(block 67) failed [ 2648.036117][T10462] FAT-fs (loop5): Directory bread(block 68) failed [ 2648.116798][T10445] loop1: detected capacity change from 0 to 40427 [ 2648.123148][T10469] loop3: detected capacity change from 0 to 1024 [ 2648.123283][T10462] FAT-fs (loop5): Directory bread(block 69) failed [ 2648.140819][T10462] FAT-fs (loop5): Directory bread(block 70) failed [ 2648.147871][T10445] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 2648.149415][T10469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2648.159914][T10462] FAT-fs (loop5): Directory bread(block 71) failed [ 2648.179619][T10462] FAT-fs (loop5): Directory bread(block 72) failed [ 2648.186047][T10445] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2648.212360][T10462] FAT-fs (loop5): Directory bread(block 73) failed [ 2648.325478][T10445] F2FS-fs (loop1): invalid crc value [ 2648.330964][T10469] ext4: Bad value for 'inode_readahead_blks' [ 2648.511844][T10445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2648.986161][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2649.002854][T10445] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2649.049013][T10445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2649.067627][T10487] loop4: detected capacity change from 0 to 256 [ 2649.101530][T10490] loop5: detected capacity change from 0 to 256 [ 2649.116307][T10487] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2649.124808][T10490] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2649.141739][T10487] FAT-fs (loop4): Directory bread(block 64) failed [ 2649.148203][T10487] FAT-fs (loop4): Directory bread(block 65) failed [ 2649.155038][T10487] FAT-fs (loop4): Directory bread(block 66) failed [ 2649.162769][T10487] FAT-fs (loop4): Directory bread(block 67) failed [ 2649.170370][T10487] FAT-fs (loop4): Directory bread(block 68) failed [ 2649.176815][T10487] FAT-fs (loop4): Directory bread(block 69) failed [ 2649.183761][T10487] FAT-fs (loop4): Directory bread(block 70) failed [ 2649.190654][T10487] FAT-fs (loop4): Directory bread(block 71) failed [ 2649.206393][T10490] FAT-fs (loop5): Directory bread(block 64) failed [ 2649.213151][T10487] FAT-fs (loop4): Directory bread(block 72) failed [ 2649.214893][T10490] FAT-fs (loop5): Directory bread(block 65) failed [ 2649.219919][T10487] FAT-fs (loop4): Directory bread(block 73) failed [ 2649.257806][T10490] FAT-fs (loop5): Directory bread(block 66) failed [ 2649.278680][T10490] FAT-fs (loop5): Directory bread(block 67) failed [ 2649.301747][T10490] FAT-fs (loop5): Directory bread(block 68) failed [ 2649.369613][T10490] FAT-fs (loop5): Directory bread(block 69) failed [ 2649.376009][T10490] FAT-fs (loop5): Directory bread(block 70) failed [ 2649.385795][T10496] usb usb4: usbfs: process 10496 (syz.0.9209) did not claim interface 0 before use [ 2649.401638][T10497] loop3: detected capacity change from 0 to 512 [ 2649.408390][T10490] FAT-fs (loop5): Directory bread(block 71) failed [ 2649.432788][T10501] loop4: detected capacity change from 0 to 512 [ 2649.439203][T10490] FAT-fs (loop5): Directory bread(block 72) failed [ 2649.447219][T10490] FAT-fs (loop5): Directory bread(block 73) failed [ 2649.455166][T10497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2649.481221][T10497] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2649.496857][T10501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2649.515160][T10501] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2649.611947][T10507] loop0: detected capacity change from 0 to 2048 [ 2650.609281][T10507] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2650.775563][T10518] loop4: detected capacity change from 0 to 256 [ 2650.833646][T10518] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2650.896257][T10518] FAT-fs (loop4): Directory bread(block 64) failed [ 2650.909596][T10518] FAT-fs (loop4): Directory bread(block 65) failed [ 2650.917009][T10518] FAT-fs (loop4): Directory bread(block 66) failed [ 2650.925649][T10511] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2650.937038][T10518] FAT-fs (loop4): Directory bread(block 67) failed [ 2650.943550][T10518] FAT-fs (loop4): Directory bread(block 68) failed [ 2650.959593][T10518] FAT-fs (loop4): Directory bread(block 69) failed [ 2650.966239][T10518] FAT-fs (loop4): Directory bread(block 70) failed [ 2650.986441][T10518] FAT-fs (loop4): Directory bread(block 71) failed [ 2651.006617][T10518] FAT-fs (loop4): Directory bread(block 72) failed [ 2651.013677][T10518] FAT-fs (loop4): Directory bread(block 73) failed [ 2651.083763][ T28] audit: type=1400 audit(2000000609.600:7515): avc: denied { watch watch_reads } for pid=10520 comm="syz.5.9214" path="/253" dev="tmpfs" ino=1515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2651.241750][T10530] loop5: detected capacity change from 0 to 1024 [ 2651.277285][T10530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2651.288679][T10530] ext4: Bad value for 'inode_readahead_blks' [ 2651.456038][T10543] loop3: detected capacity change from 0 to 256 [ 2651.475113][T10545] loop0: detected capacity change from 0 to 512 [ 2651.489988][T10543] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2651.527889][ T7729] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2651.538001][T10543] FAT-fs (loop3): Directory bread(block 64) failed [ 2651.549890][ T7729] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 2651.560070][T10545] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2651.565185][T10543] FAT-fs (loop3): Directory bread(block 65) failed [ 2651.648242][T10543] FAT-fs (loop3): Directory bread(block 66) failed [ 2651.667713][T10543] FAT-fs (loop3): Directory bread(block 67) failed [ 2651.674369][T10543] FAT-fs (loop3): Directory bread(block 68) failed [ 2651.680995][T10543] FAT-fs (loop3): Directory bread(block 69) failed [ 2651.693216][T10543] FAT-fs (loop3): Directory bread(block 70) failed [ 2651.699921][T10543] FAT-fs (loop3): Directory bread(block 71) failed [ 2651.707491][T10543] FAT-fs (loop3): Directory bread(block 72) failed [ 2651.811289][T10543] FAT-fs (loop3): Directory bread(block 73) failed [ 2652.119889][T10557] loop3: detected capacity change from 0 to 256 [ 2652.127541][T10557] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2652.148582][T10557] FAT-fs (loop3): Directory bread(block 64) failed [ 2652.156002][T10557] FAT-fs (loop3): Directory bread(block 65) failed [ 2652.164228][T10557] FAT-fs (loop3): Directory bread(block 66) failed [ 2652.170870][T10557] FAT-fs (loop3): Directory bread(block 67) failed [ 2652.177306][T10557] FAT-fs (loop3): Directory bread(block 68) failed [ 2652.184002][T10557] FAT-fs (loop3): Directory bread(block 69) failed [ 2652.190606][T10557] FAT-fs (loop3): Directory bread(block 70) failed [ 2652.196996][T10557] FAT-fs (loop3): Directory bread(block 71) failed [ 2652.205082][T10557] FAT-fs (loop3): Directory bread(block 72) failed [ 2652.211711][T10557] FAT-fs (loop3): Directory bread(block 73) failed [ 2652.259243][T10561] FAULT_INJECTION: forcing a failure. [ 2652.259243][T10561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2652.272283][T10561] CPU: 0 PID: 10561 Comm: syz.3.9227 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2652.282023][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2652.291915][T10561] Call Trace: [ 2652.295031][T10561] [ 2652.297811][T10561] dump_stack_lvl+0x151/0x1b7 [ 2652.302321][T10561] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2652.307617][T10561] ? __kasan_check_write+0x14/0x20 [ 2652.312564][T10561] dump_stack+0x15/0x19 [ 2652.316552][T10561] should_fail_ex+0x3d0/0x520 [ 2652.321065][T10561] should_fail+0xb/0x10 [ 2652.325155][T10561] should_fail_usercopy+0x1a/0x20 [ 2652.330004][T10561] _copy_to_user+0x1e/0x90 [ 2652.334259][T10561] simple_read_from_buffer+0xc7/0x150 [ 2652.339466][T10561] proc_fail_nth_read+0x1a3/0x210 [ 2652.344327][T10561] ? proc_fault_inject_write+0x390/0x390 [ 2652.349791][T10561] ? fsnotify_perm+0x269/0x5b0 [ 2652.354399][T10561] ? security_file_permission+0x86/0xb0 [ 2652.359774][T10561] ? proc_fault_inject_write+0x390/0x390 [ 2652.365245][T10561] vfs_read+0x26c/0xae0 [ 2652.369377][T10561] ? kernel_read+0x1f0/0x1f0 [ 2652.372954][T10523] loop4: detected capacity change from 0 to 131072 [ 2652.373790][T10561] ? mutex_lock+0xb1/0x1e0 [ 2652.384389][T10561] ? bit_wait_io_timeout+0x120/0x120 [ 2652.389504][T10561] ? __fdget_pos+0x2e2/0x390 [ 2652.393928][T10561] ? ksys_read+0x77/0x2c0 [ 2652.398103][T10561] ksys_read+0x199/0x2c0 [ 2652.402177][T10561] ? __this_cpu_preempt_check+0x13/0x20 [ 2652.407562][T10561] ? vfs_write+0xed0/0xed0 [ 2652.410887][T10523] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2652.411808][T10561] __x64_sys_read+0x7b/0x90 [ 2652.422233][T10561] x64_sys_call+0x28/0x9a0 [ 2652.426482][T10561] do_syscall_64+0x3b/0xb0 [ 2652.430734][T10561] ? clear_bhb_loop+0x55/0xb0 [ 2652.435245][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2652.440974][T10561] RIP: 0033:0x7f0b7bb8472c [ 2652.445322][T10561] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2652.461406][T10523] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 2652.464835][T10561] RSP: 002b:00007f0b7c9af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2652.480464][T10561] RAX: ffffffffffffffda RBX: 00007f0b7bd75fa0 RCX: 00007f0b7bb8472c [ 2652.488280][T10561] RDX: 000000000000000f RSI: 00007f0b7c9af0a0 RDI: 0000000000000006 [ 2652.496081][T10561] RBP: 00007f0b7c9af090 R08: 0000000000000000 R09: 0000000000000000 [ 2652.503981][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2652.511889][T10561] R13: 0000000000000000 R14: 00007f0b7bd75fa0 R15: 00007ffd3f5a8678 [ 2652.519705][T10561] [ 2652.589569][ T9350] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2652.673406][T10570] loop0: detected capacity change from 0 to 512 [ 2652.680294][T10570] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2652.691269][T10570] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 2652.701346][T10570] EXT4-fs (loop0): group descriptors corrupted! [ 2652.784309][T10576] FAULT_INJECTION: forcing a failure. [ 2652.784309][T10576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2652.797625][T10576] CPU: 0 PID: 10576 Comm: syz.3.9232 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2652.807357][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2652.817253][T10576] Call Trace: [ 2652.820387][T10576] [ 2652.823152][T10576] dump_stack_lvl+0x151/0x1b7 [ 2652.827667][T10576] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2652.832984][T10576] dump_stack+0x15/0x19 [ 2652.836960][T10576] should_fail_ex+0x3d0/0x520 [ 2652.841508][T10576] should_fail+0xb/0x10 [ 2652.845457][T10576] should_fail_usercopy+0x1a/0x20 [ 2652.850313][T10576] _copy_to_user+0x1e/0x90 [ 2652.854571][T10576] simple_read_from_buffer+0xc7/0x150 [ 2652.859778][T10576] proc_fail_nth_read+0x1a3/0x210 [ 2652.864734][T10576] ? proc_fault_inject_write+0x390/0x390 [ 2652.870291][T10576] ? fsnotify_perm+0x269/0x5b0 [ 2652.874891][T10576] ? security_file_permission+0x86/0xb0 [ 2652.880272][T10576] ? proc_fault_inject_write+0x390/0x390 [ 2652.885744][T10576] vfs_read+0x26c/0xae0 [ 2652.889733][T10576] ? do_preadv+0x232/0x350 [ 2652.893984][T10576] ? kernel_read+0x1f0/0x1f0 [ 2652.898409][T10576] ? do_preadv+0x2a5/0x350 [ 2652.902663][T10576] ? vfs_writev+0x590/0x590 [ 2652.907003][T10576] ? __kasan_check_read+0x11/0x20 [ 2652.911862][T10576] ? __fdget_pos+0x2e9/0x390 [ 2652.916297][T10576] ksys_read+0x199/0x2c0 [ 2652.920366][T10576] ? vfs_write+0xed0/0xed0 [ 2652.924618][T10576] ? debug_smp_processor_id+0x17/0x20 [ 2652.929838][T10576] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2652.935733][T10576] __x64_sys_read+0x7b/0x90 [ 2652.940068][T10576] x64_sys_call+0x28/0x9a0 [ 2652.944327][T10576] do_syscall_64+0x3b/0xb0 [ 2652.948575][T10576] ? clear_bhb_loop+0x55/0xb0 [ 2652.953090][T10576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2652.958820][T10576] RIP: 0033:0x7f0b7bb8472c [ 2652.963072][T10576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2652.982520][T10576] RSP: 002b:00007f0b7c9af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2652.988696][T10580] usb usb4: usbfs: process 10580 (syz.4.9230) did not claim interface 0 before use [ 2652.990755][T10576] RAX: ffffffffffffffda RBX: 00007f0b7bd75fa0 RCX: 00007f0b7bb8472c [ 2652.990777][T10576] RDX: 000000000000000f RSI: 00007f0b7c9af0a0 RDI: 0000000000000006 [ 2652.990792][T10576] RBP: 00007f0b7c9af090 R08: 0000000000000000 R09: 0000000000000000 [ 2652.990805][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2652.990818][T10576] R13: 0000000000000000 R14: 00007f0b7bd75fa0 R15: 00007ffd3f5a8678 [ 2652.990836][T10576] [ 2652.993040][ T9350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2653.052012][ T9350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2653.062756][ T9350] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2653.075743][ T9350] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 2653.084741][ T9350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2653.093381][ T9350] usb 2-1: config 0 descriptor?? [ 2653.176408][T10587] loop3: detected capacity change from 0 to 512 [ 2653.179234][T10588] loop4: detected capacity change from 0 to 2048 [ 2653.233145][T10587] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2653.264228][T10594] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2654.026115][ T9350] keytouch 0003:0926:3333.021C: fixing up Keytouch IEC report descriptor [ 2654.036088][ T9350] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.021C/input/input443 [ 2654.130652][ T9350] keytouch 0003:0926:3333.021C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2654.160378][T28823] EXT4-fs unmount: 8 callbacks suppressed [ 2654.160396][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2654.239767][T10610] loop0: detected capacity change from 0 to 256 [ 2654.253344][T10608] loop3: detected capacity change from 0 to 1024 [ 2654.257097][T10610] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2654.260701][T10608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2654.281261][T13300] usb 2-1: USB disconnect, device number 8 [ 2654.287908][T10610] FAT-fs (loop0): Directory bread(block 64) failed [ 2654.288233][T10608] ext4: Bad value for 'inode_readahead_blks' [ 2654.294653][T10610] FAT-fs (loop0): Directory bread(block 65) failed [ 2654.306887][T10610] FAT-fs (loop0): Directory bread(block 66) failed [ 2654.313932][T10610] FAT-fs (loop0): Directory bread(block 67) failed [ 2654.320440][T10610] FAT-fs (loop0): Directory bread(block 68) failed [ 2654.326874][T10610] FAT-fs (loop0): Directory bread(block 69) failed [ 2654.334380][T10610] FAT-fs (loop0): Directory bread(block 70) failed [ 2654.341616][T10610] FAT-fs (loop0): Directory bread(block 71) failed [ 2654.348279][T10610] FAT-fs (loop0): Directory bread(block 72) failed [ 2654.357550][T10610] FAT-fs (loop0): Directory bread(block 73) failed [ 2654.397830][T10613] syz.0.9239[10613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2654.397921][T10613] syz.0.9239[10613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2654.504107][T10621] syz.0.9241[10621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2654.515687][T10621] syz.0.9241[10621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2654.540783][T10621] FAULT_INJECTION: forcing a failure. [ 2654.540783][T10621] name failslab, interval 1, probability 0, space 0, times 0 [ 2654.564517][T10621] CPU: 0 PID: 10621 Comm: syz.0.9241 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2654.574231][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2654.584127][T10621] Call Trace: [ 2654.587249][T10621] [ 2654.590033][T10621] dump_stack_lvl+0x151/0x1b7 [ 2654.594541][T10621] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2654.599890][T10621] ? _parse_integer+0x40/0x40 [ 2654.604441][T10621] dump_stack+0x15/0x19 [ 2654.608428][T10621] should_fail_ex+0x3d0/0x520 [ 2654.612947][T10621] ? kvm_vm_ioctl_create_vcpu+0x130/0x8b0 [ 2654.618495][T10621] __should_failslab+0xaf/0xf0 [ 2654.623099][T10621] should_failslab+0x9/0x20 [ 2654.627435][T10621] kmem_cache_alloc+0x3b/0x320 [ 2654.632114][T10621] kvm_vm_ioctl_create_vcpu+0x130/0x8b0 [ 2654.637415][T10621] ? __x64_compat_sys_ioctl+0x90/0x90 [ 2654.642627][T10621] kvm_vm_ioctl+0x608/0xb60 [ 2654.646969][T10621] ? kvm_device_release+0x210/0x210 [ 2654.652256][T10621] ? __kasan_check_write+0x14/0x20 [ 2654.657202][T10621] ? ioctl_has_perm+0x1f8/0x560 [ 2654.661890][T10621] ? memcpy+0x56/0x70 [ 2654.665715][T10621] ? ioctl_has_perm+0x44d/0x560 [ 2654.670400][T10621] ? has_cap_mac_admin+0x3c0/0x3c0 [ 2654.675344][T10621] ? vfs_write+0x952/0xed0 [ 2654.679601][T10621] ? selinux_file_ioctl+0x3cc/0x540 [ 2654.684630][T10621] ? __mutex_lock_slowpath+0x10/0x10 [ 2654.689752][T10621] ? selinux_file_alloc_security+0x120/0x120 [ 2654.695570][T10621] ? __fget_files+0x2cb/0x330 [ 2654.700081][T10621] ? security_file_ioctl+0x84/0xb0 [ 2654.705033][T10621] ? kvm_device_release+0x210/0x210 [ 2654.710061][T10621] __se_sys_ioctl+0x114/0x190 [ 2654.714575][T10621] __x64_sys_ioctl+0x7b/0x90 [ 2654.719003][T10621] x64_sys_call+0x98/0x9a0 [ 2654.723252][T10621] do_syscall_64+0x3b/0xb0 [ 2654.727506][T10621] ? clear_bhb_loop+0x55/0xb0 [ 2654.732021][T10621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2654.737835][T10621] RIP: 0033:0x7f612a985d19 [ 2654.742088][T10621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2654.761617][T10621] RSP: 002b:00007f612b808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2654.769956][T10621] RAX: ffffffffffffffda RBX: 00007f612ab75fa0 RCX: 00007f612a985d19 [ 2654.777773][T10621] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 2654.785689][T10621] RBP: 00007f612b808090 R08: 0000000000000000 R09: 0000000000000000 [ 2654.793501][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2654.801396][T10621] R13: 0000000000000000 R14: 00007f612ab75fa0 R15: 00007fff2f97d898 [ 2654.809216][T10621] [ 2654.932770][T10630] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2654.984663][T10634] loop4: detected capacity change from 0 to 512 [ 2654.997448][T10634] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2654.999725][T10636] loop0: detected capacity change from 0 to 512 [ 2655.004496][T10634] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2655.025977][T10634] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 2655.041472][T10636] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2655.050422][T10636] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2655.177498][T10646] loop5: detected capacity change from 0 to 256 [ 2655.184225][T10646] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2655.465525][T10646] FAT-fs (loop5): Directory bread(block 64) failed [ 2655.500617][T10646] FAT-fs (loop5): Directory bread(block 65) failed [ 2655.536411][T10646] FAT-fs (loop5): Directory bread(block 66) failed [ 2655.543401][T10646] FAT-fs (loop5): Directory bread(block 67) failed [ 2655.550138][T10646] FAT-fs (loop5): Directory bread(block 68) failed [ 2655.556559][T10646] FAT-fs (loop5): Directory bread(block 69) failed [ 2655.563200][T10646] FAT-fs (loop5): Directory bread(block 70) failed [ 2655.569815][T10646] FAT-fs (loop5): Directory bread(block 71) failed [ 2655.576297][T10646] FAT-fs (loop5): Directory bread(block 72) failed [ 2655.582952][T10646] FAT-fs (loop5): Directory bread(block 73) failed [ 2655.620770][T10651] loop5: detected capacity change from 0 to 512 [ 2655.634145][T10651] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2655.643694][T10651] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2656.235041][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2656.271853][T10668] loop0: detected capacity change from 0 to 1024 [ 2656.278513][T10668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2656.285566][T10668] ext4: Bad value for 'inode_readahead_blks' [ 2656.527840][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2656.533946][T10670] FAULT_INJECTION: forcing a failure. [ 2656.533946][T10670] name failslab, interval 1, probability 0, space 0, times 0 [ 2656.554947][T10670] CPU: 0 PID: 10670 Comm: syz.1.9253 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2656.564696][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2656.574587][T10670] Call Trace: [ 2656.577713][T10670] [ 2656.580489][T10670] dump_stack_lvl+0x151/0x1b7 [ 2656.585004][T10670] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2656.590384][T10670] ? __kernel_text_address+0xd/0x40 [ 2656.595420][T10670] ? arch_stack_walk+0xf3/0x140 [ 2656.600106][T10670] dump_stack+0x15/0x19 [ 2656.604093][T10670] should_fail_ex+0x3d0/0x520 [ 2656.608704][T10670] __should_failslab+0xaf/0xf0 [ 2656.613304][T10670] ? kvmalloc_node+0x221/0x640 [ 2656.617912][T10670] should_failslab+0x9/0x20 [ 2656.622245][T10670] __kmem_cache_alloc_node+0x3d/0x2a0 [ 2656.627543][T10670] ? kvmalloc_node+0x221/0x640 [ 2656.630867][T10677] loop0: detected capacity change from 0 to 512 [ 2656.632147][T10670] __kmalloc_node+0xa3/0x1e0 [ 2656.642663][T10670] kvmalloc_node+0x221/0x640 [ 2656.647087][T10670] ? vm_mmap+0xb0/0xb0 [ 2656.650992][T10670] ? timer_migration_handler+0xe0/0x100 [ 2656.656371][T10670] ? debug_smp_processor_id+0x17/0x20 [ 2656.661577][T10670] ? get_nohz_timer_target+0x79/0x740 [ 2656.666051][T10677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2656.666871][T10670] __kvm_mmu_topup_memory_cache+0x317/0x4a0 [ 2656.675834][T10677] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2656.681278][T10670] ? __kasan_check_write+0x14/0x20 [ 2656.681310][T10670] kvm_mmu_topup_memory_cache+0x22/0x30 [ 2656.681334][T10670] kvm_mmu_load+0x111/0x2970 [ 2656.706211][T10670] ? __kasan_check_write+0x14/0x20 [ 2656.711219][T10670] ? mutex_unlock+0xb2/0x260 [ 2656.715650][T10670] ? kvm_mmu_unload+0x120/0x120 [ 2656.720331][T10670] ? xa_find+0x2e0/0x2e0 [ 2656.724409][T10670] ? memset+0x35/0x40 [ 2656.728229][T10670] ? vmx_flush_tlb_all+0xc2/0x380 [ 2656.733177][T10670] ? vmx_get_if_flag+0x40/0x40 [ 2656.737776][T10670] ? queue_delayed_work_on+0x13f/0x180 [ 2656.743078][T10670] ? kvm_apic_has_interrupt+0x9d0/0xa70 [ 2656.748457][T10670] ? kvm_hv_activate_synic+0x100/0x100 [ 2656.753748][T10670] ? vmx_nmi_blocked+0x108/0x280 [ 2656.758521][T10670] vcpu_enter_guest+0x6c7d/0x9490 [ 2656.763382][T10670] ? avc_has_perm+0x16f/0x260 [ 2656.767900][T10670] ? pvclock_gtod_update_fn+0x2b0/0x2b0 [ 2656.773280][T10670] ? is_bpf_text_address+0x172/0x190 [ 2656.778391][T10670] ? stack_trace_save+0x1c0/0x1c0 [ 2656.783252][T10670] ? kernel_text_address+0xa9/0xe0 [ 2656.788305][T10670] ? __kernel_text_address+0xd/0x40 [ 2656.793319][T10670] ? unwind_get_return_address+0x4d/0x90 [ 2656.798789][T10670] ? arch_stack_walk+0xf3/0x140 [ 2656.803478][T10670] ? _parse_integer_limit+0x19b/0x1e0 [ 2656.808796][T10670] ? memset+0x35/0x40 [ 2656.812613][T10670] ? vmx_vcpu_pi_load+0x12b/0x7f0 [ 2656.817473][T10670] ? _parse_integer+0x40/0x40 [ 2656.821987][T10670] ? nested_vmx_inject_exception_vmexit+0x4d0/0x4d0 [ 2656.828404][T10670] ? __stack_depot_save+0x36/0x480 [ 2656.833348][T10670] ? kasan_save_free_info+0x2b/0x40 [ 2656.838381][T10670] ? read_msr+0x50/0x50 [ 2656.842373][T10670] ? do_vfs_ioctl+0xba7/0x29a0 [ 2656.846974][T10670] ? __this_cpu_preempt_check+0x13/0x20 [ 2656.852355][T10670] ? xfd_validate_state+0x6f/0x170 [ 2656.857305][T10670] ? __local_bh_enable_ip+0x58/0x80 [ 2656.862339][T10670] ? fpu_swap_kvm_fpstate+0x4e2/0x5d0 [ 2656.867543][T10670] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 2656.872667][T10670] kvm_arch_vcpu_ioctl_run+0x1478/0x2270 [ 2656.878135][T10670] ? __kvm_request_immediate_exit+0x70/0x70 [ 2656.883865][T10670] ? vfs_write+0x952/0xed0 [ 2656.888123][T10670] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 2656.892631][T10670] ? xa_release+0x40/0x40 [ 2656.896799][T10670] ? selinux_file_ioctl+0x3cc/0x540 [ 2656.901826][T10670] ? __mutex_lock_slowpath+0x10/0x10 [ 2656.906947][T10670] ? selinux_file_alloc_security+0x120/0x120 [ 2656.912763][T10670] ? __fget_files+0x2cb/0x330 [ 2656.917282][T10670] ? security_file_ioctl+0x84/0xb0 [ 2656.922226][T10670] ? xa_release+0x40/0x40 [ 2656.926493][T10670] __se_sys_ioctl+0x114/0x190 [ 2656.930989][T10670] __x64_sys_ioctl+0x7b/0x90 [ 2656.935425][T10670] x64_sys_call+0x98/0x9a0 [ 2656.939758][T10670] do_syscall_64+0x3b/0xb0 [ 2656.944007][T10670] ? clear_bhb_loop+0x55/0xb0 [ 2656.948543][T10670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2656.954254][T10670] RIP: 0033:0x7f9454785d19 [ 2656.958529][T10670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2656.978042][T10670] RSP: 002b:00007f94555d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2656.986273][T10670] RAX: ffffffffffffffda RBX: 00007f9454975fa0 RCX: 00007f9454785d19 [ 2656.994096][T10670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 2657.001899][T10670] RBP: 00007f94555d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2657.009710][T10670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2657.017530][T10670] R13: 0000000000000000 R14: 00007f9454975fa0 R15: 00007ffdf5c40568 [ 2657.025631][T10670] [ 2657.223045][T10687] loop1: detected capacity change from 0 to 256 [ 2657.267488][T10687] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2657.467580][T10687] FAT-fs (loop1): Directory bread(block 64) failed [ 2657.480326][T10687] FAT-fs (loop1): Directory bread(block 65) failed [ 2657.486807][T10687] FAT-fs (loop1): Directory bread(block 66) failed [ 2657.494676][T10687] FAT-fs (loop1): Directory bread(block 67) failed [ 2657.501164][T10687] FAT-fs (loop1): Directory bread(block 68) failed [ 2657.507585][T10687] FAT-fs (loop1): Directory bread(block 69) failed [ 2657.514269][T10687] FAT-fs (loop1): Directory bread(block 70) failed [ 2657.520788][T10687] FAT-fs (loop1): Directory bread(block 71) failed [ 2657.527291][T10687] FAT-fs (loop1): Directory bread(block 72) failed [ 2657.535912][T10687] FAT-fs (loop1): Directory bread(block 73) failed [ 2657.547047][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2657.581285][T10692] loop0: detected capacity change from 0 to 256 [ 2657.587872][T10692] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2657.606633][T10692] FAT-fs (loop0): Directory bread(block 64) failed [ 2657.613309][T10692] FAT-fs (loop0): Directory bread(block 65) failed [ 2657.620233][T10692] FAT-fs (loop0): Directory bread(block 66) failed [ 2657.626931][T10692] FAT-fs (loop0): Directory bread(block 67) failed [ 2657.633521][T10692] FAT-fs (loop0): Directory bread(block 68) failed [ 2657.640149][T10692] FAT-fs (loop0): Directory bread(block 69) failed [ 2657.646904][T10692] FAT-fs (loop0): Directory bread(block 70) failed [ 2657.649646][T10695] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9259'. [ 2657.659698][T10692] FAT-fs (loop0): Directory bread(block 71) failed [ 2657.668371][T10695] device gretap0 entered promiscuous mode [ 2657.668462][T10692] FAT-fs (loop0): Directory bread(block 72) failed [ 2657.681390][T10692] FAT-fs (loop0): Directory bread(block 73) failed [ 2657.687971][T10695] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9259'. [ 2657.696972][T10695] 0ªX¹¦D: renamed from gretap0 [ 2657.702835][T10695] device 30ªX¹¦D left promiscuous mode [ 2657.709081][T10695] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 2657.839551][ T8901] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2657.845732][T10704] loop3: detected capacity change from 0 to 256 [ 2657.852713][T10704] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2657.872714][T10704] FAT-fs (loop3): Directory bread(block 64) failed [ 2657.881201][T10705] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2657.895551][T10704] FAT-fs (loop3): Directory bread(block 65) failed [ 2657.902747][T10704] FAT-fs (loop3): Directory bread(block 66) failed [ 2657.909400][T10704] FAT-fs (loop3): Directory bread(block 67) failed [ 2657.923101][T10704] FAT-fs (loop3): Directory bread(block 68) failed [ 2657.937772][T10708] loop5: detected capacity change from 0 to 512 [ 2657.945517][T10704] FAT-fs (loop3): Directory bread(block 69) failed [ 2657.952883][T10704] FAT-fs (loop3): Directory bread(block 70) failed [ 2657.959406][T10704] FAT-fs (loop3): Directory bread(block 71) failed [ 2657.966051][T10704] FAT-fs (loop3): Directory bread(block 72) failed [ 2657.972942][T10704] FAT-fs (loop3): Directory bread(block 73) failed [ 2657.980865][T10708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2657.989729][T10708] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2658.026044][T10715] loop4: detected capacity change from 0 to 1024 [ 2658.032233][T10717] loop3: detected capacity change from 0 to 512 [ 2658.045063][T10715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2658.051795][T10715] ext4: Bad value for 'inode_readahead_blks' [ 2658.072967][T10717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2658.082151][T10717] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2658.787885][T10732] loop4: detected capacity change from 0 to 256 [ 2658.819687][T10728] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2658.855099][T10732] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2658.893252][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9272'. [ 2658.919419][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2658.928156][T10732] FAT-fs (loop4): Directory bread(block 64) failed [ 2658.939353][T10732] FAT-fs (loop4): Directory bread(block 65) failed [ 2658.946543][T10732] FAT-fs (loop4): Directory bread(block 66) failed [ 2658.953298][T10732] FAT-fs (loop4): Directory bread(block 67) failed [ 2658.959749][T10732] FAT-fs (loop4): Directory bread(block 68) failed [ 2658.966264][T10732] FAT-fs (loop4): Directory bread(block 69) failed [ 2658.967528][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2658.972873][T10732] FAT-fs (loop4): Directory bread(block 70) failed [ 2658.984744][T10732] FAT-fs (loop4): Directory bread(block 71) failed [ 2658.991187][T10732] FAT-fs (loop4): Directory bread(block 72) failed [ 2658.997556][T10732] FAT-fs (loop4): Directory bread(block 73) failed [ 2659.013944][T10740] loop0: detected capacity change from 0 to 256 [ 2659.020530][T10740] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2659.054425][T10740] FAT-fs (loop0): Directory bread(block 64) failed [ 2659.060936][T10740] FAT-fs (loop0): Directory bread(block 65) failed [ 2659.067335][T10740] FAT-fs (loop0): Directory bread(block 66) failed [ 2659.077557][T10740] FAT-fs (loop0): Directory bread(block 67) failed [ 2659.084233][T10740] FAT-fs (loop0): Directory bread(block 68) failed [ 2659.090780][T10740] FAT-fs (loop0): Directory bread(block 69) failed [ 2659.097247][T10740] FAT-fs (loop0): Directory bread(block 70) failed [ 2659.113581][T10740] FAT-fs (loop0): Directory bread(block 71) failed [ 2659.131255][T10740] FAT-fs (loop0): Directory bread(block 72) failed [ 2659.137625][T10740] FAT-fs (loop0): Directory bread(block 73) failed [ 2659.146924][T10749] loop1: detected capacity change from 0 to 512 [ 2659.248059][T10749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2659.278774][T10749] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2659.350783][T10763] loop4: detected capacity change from 0 to 512 [ 2659.356025][T10762] loop0: detected capacity change from 0 to 1024 [ 2659.364392][T10762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2659.372499][T10762] ext4: Bad value for 'inode_readahead_blks' [ 2659.429887][T10763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2659.454629][T10765] loop3: detected capacity change from 0 to 256 [ 2659.460893][T10763] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2659.498601][T10765] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2660.320472][T10765] FAT-fs (loop3): Directory bread(block 64) failed [ 2660.330903][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2660.353308][T10765] FAT-fs (loop3): Directory bread(block 65) failed [ 2660.385288][T10765] FAT-fs (loop3): Directory bread(block 66) failed [ 2660.391855][T10765] FAT-fs (loop3): Directory bread(block 67) failed [ 2660.398228][T10765] FAT-fs (loop3): Directory bread(block 68) failed [ 2660.405128][T10765] FAT-fs (loop3): Directory bread(block 69) failed [ 2660.411756][T10765] FAT-fs (loop3): Directory bread(block 70) failed [ 2660.413116][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2660.418100][T10765] FAT-fs (loop3): Directory bread(block 71) failed [ 2660.418161][T10765] FAT-fs (loop3): Directory bread(block 72) failed [ 2660.437008][T10765] FAT-fs (loop3): Directory bread(block 73) failed [ 2660.520981][T10778] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2660.581005][T10783] FAULT_INJECTION: forcing a failure. [ 2660.581005][T10783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2660.595178][T10783] CPU: 0 PID: 10783 Comm: syz.0.9287 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2660.605019][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2660.613134][T10789] netlink: 'syz.5.9288': attribute type 16 has an invalid length. [ 2660.614904][T10783] Call Trace: [ 2660.614914][T10783] [ 2660.628537][T10783] dump_stack_lvl+0x151/0x1b7 [ 2660.633052][T10783] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2660.638355][T10783] ? avc_denied+0x1b0/0x1b0 [ 2660.642686][T10783] dump_stack+0x15/0x19 [ 2660.646686][T10783] should_fail_ex+0x3d0/0x520 [ 2660.651199][T10783] should_fail+0xb/0x10 [ 2660.655194][T10783] should_fail_usercopy+0x1a/0x20 [ 2660.660042][T10783] _copy_from_user+0x1e/0xc0 [ 2660.661825][T10789] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.9288'. [ 2660.664463][T10783] sk_setsockopt+0x2cf/0x3160 [ 2660.664493][T10783] ? sockopt_capable+0x60/0x60 [ 2660.677108][T10791] loop4: detected capacity change from 0 to 256 [ 2660.678092][T10783] ? selinux_socket_setsockopt+0x25b/0x360 [ 2660.694599][T10783] ? selinux_socket_setsockopt+0x260/0x360 [ 2660.695051][T10791] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2660.700230][T10783] ? __fget_files+0x2cb/0x330 [ 2660.700269][T10783] sock_setsockopt+0x59/0x70 [ 2660.700292][T10783] __sys_setsockopt+0x423/0x8b0 [ 2660.700322][T10783] ? fput+0x15b/0x1b0 [ 2660.713883][T10785] loop1: detected capacity change from 0 to 256 [ 2660.716281][T10783] ? __ia32_sys_recv+0xb0/0xb0 [ 2660.735638][T10785] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2660.739901][T10783] ? debug_smp_processor_id+0x17/0x20 [ 2660.739939][T10783] __x64_sys_setsockopt+0xbf/0xd0 [ 2660.739970][T10783] x64_sys_call+0x1a2/0x9a0 [ 2660.765854][T10783] do_syscall_64+0x3b/0xb0 [ 2660.770094][T10783] ? clear_bhb_loop+0x55/0xb0 [ 2660.773640][T10794] loop5: detected capacity change from 0 to 256 [ 2660.774604][T10783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2660.785463][T10794] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 2660.786409][T10783] RIP: 0033:0x7f612a985d19 [ 2660.797176][T10783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2660.816619][T10783] RSP: 002b:00007f612b808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2660.818033][T10791] FAT-fs (loop4): Directory bread(block 64) failed [ 2660.824866][T10783] RAX: ffffffffffffffda RBX: 00007f612ab75fa0 RCX: 00007f612a985d19 [ 2660.824890][T10783] RDX: 000000000000001d RSI: 0000000000000001 RDI: 0000000000000006 [ 2660.824902][T10783] RBP: 00007f612b808090 R08: 0000000000000004 R09: 0000000000000000 [ 2660.824916][T10783] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2660.824928][T10783] R13: 0000000000000000 R14: 00007f612ab75fa0 R15: 00007fff2f97d898 [ 2660.831986][T10785] FAT-fs (loop1): Directory bread(block 64) failed [ 2660.839094][T10783] [ 2660.857223][T10791] FAT-fs (loop4): Directory bread(block 65) failed [ 2660.863772][T10785] FAT-fs (loop1): Directory bread(block 65) failed [ 2660.887866][T10791] FAT-fs (loop4): Directory bread(block 66) failed [ 2660.895297][T10785] FAT-fs (loop1): Directory bread(block 66) failed [ 2660.908228][T10791] FAT-fs (loop4): Directory bread(block 67) failed [ 2660.914904][T10785] FAT-fs (loop1): Directory bread(block 67) failed [ 2660.923636][T10791] FAT-fs (loop4): Directory bread(block 68) failed [ 2660.927786][T10801] loop5: detected capacity change from 0 to 512 [ 2660.930417][T10791] FAT-fs (loop4): Directory bread(block 69) failed [ 2660.937343][T10802] loop3: detected capacity change from 0 to 512 [ 2660.943106][T10791] FAT-fs (loop4): Directory bread(block 70) failed [ 2660.948646][T10785] FAT-fs (loop1): Directory bread(block 68) failed [ 2660.948672][T10785] FAT-fs (loop1): Directory bread(block 69) failed [ 2660.948707][T10785] FAT-fs (loop1): Directory bread(block 70) failed [ 2660.948728][T10785] FAT-fs (loop1): Directory bread(block 71) failed [ 2660.955905][T10791] FAT-fs (loop4): Directory bread(block 71) failed [ 2660.963510][T10785] FAT-fs (loop1): Directory bread(block 72) failed [ 2660.996673][T10791] FAT-fs (loop4): Directory bread(block 72) failed [ 2660.998947][T10785] FAT-fs (loop1): Directory bread(block 73) failed [ 2661.013574][T10802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2661.014348][T10791] FAT-fs (loop4): Directory bread(block 73) failed [ 2661.025810][T10802] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2661.041118][T10801] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2661.049955][T10801] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2661.134842][T10811] loop1: detected capacity change from 0 to 512 [ 2661.189130][T10811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2661.216339][T10811] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2661.243052][T10817] loop4: detected capacity change from 0 to 1024 [ 2661.272438][T10817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2661.279155][T10817] ext4: Bad value for 'inode_readahead_blks' [ 2662.006654][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2662.029417][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2662.057976][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2662.192433][T10839] loop0: detected capacity change from 0 to 512 [ 2662.219126][T10839] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2662.229619][T10839] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2662.286301][T10846] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2662.370732][T10849] loop1: detected capacity change from 0 to 256 [ 2662.460014][T10849] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2662.489914][T10849] FAT-fs (loop1): Directory bread(block 64) failed [ 2662.496487][T10849] FAT-fs (loop1): Directory bread(block 65) failed [ 2662.503895][T10849] FAT-fs (loop1): Directory bread(block 66) failed [ 2662.510701][T10849] FAT-fs (loop1): Directory bread(block 67) failed [ 2662.517218][T10849] FAT-fs (loop1): Directory bread(block 68) failed [ 2662.526135][T10849] FAT-fs (loop1): Directory bread(block 69) failed [ 2662.532851][T10849] FAT-fs (loop1): Directory bread(block 70) failed [ 2662.611459][T10849] FAT-fs (loop1): Directory bread(block 71) failed [ 2662.767431][T10849] FAT-fs (loop1): Directory bread(block 72) failed [ 2662.794277][T10849] FAT-fs (loop1): Directory bread(block 73) failed [ 2662.940995][T10864] loop1: detected capacity change from 0 to 256 [ 2662.947658][T10864] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2662.964409][T10864] FAT-fs (loop1): Directory bread(block 64) failed [ 2662.978129][T10866] loop3: detected capacity change from 0 to 512 [ 2662.984894][T10864] FAT-fs (loop1): Directory bread(block 65) failed [ 2662.994248][T10864] FAT-fs (loop1): Directory bread(block 66) failed [ 2663.001107][T10864] FAT-fs (loop1): Directory bread(block 67) failed [ 2663.009235][T10866] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2663.018429][T10866] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2663.109540][T10864] FAT-fs (loop1): Directory bread(block 68) failed [ 2663.115990][T10864] FAT-fs (loop1): Directory bread(block 69) failed [ 2663.122527][T10864] FAT-fs (loop1): Directory bread(block 70) failed [ 2663.128743][T10864] FAT-fs (loop1): Directory bread(block 71) failed [ 2663.141882][T10864] FAT-fs (loop1): Directory bread(block 72) failed [ 2663.148458][T10864] FAT-fs (loop1): Directory bread(block 73) failed [ 2663.166183][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2663.189836][T10874] loop1: detected capacity change from 0 to 512 [ 2663.195761][T10873] loop0: detected capacity change from 0 to 512 [ 2663.415312][T10874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2663.455060][T10874] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2663.495304][T10873] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2663.507823][T10873] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2664.852043][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2664.864573][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2664.871263][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2664.890977][T10891] loop4: detected capacity change from 0 to 1024 [ 2664.905358][T10891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2664.912386][T10891] ext4: Bad value for 'inode_readahead_blks' [ 2664.975317][T10901] loop3: detected capacity change from 0 to 256 [ 2664.991264][T10901] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2665.008958][T10901] FAT-fs (loop3): Directory bread(block 64) failed [ 2665.016028][T10901] FAT-fs (loop3): Directory bread(block 65) failed [ 2665.022751][T10901] FAT-fs (loop3): Directory bread(block 66) failed [ 2665.029265][T10901] FAT-fs (loop3): Directory bread(block 67) failed [ 2665.035987][T10901] FAT-fs (loop3): Directory bread(block 68) failed [ 2665.042647][T10901] FAT-fs (loop3): Directory bread(block 69) failed [ 2665.049071][T10901] FAT-fs (loop3): Directory bread(block 70) failed [ 2665.056120][T10901] FAT-fs (loop3): Directory bread(block 71) failed [ 2665.062735][T10901] FAT-fs (loop3): Directory bread(block 72) failed [ 2665.069225][T10901] FAT-fs (loop3): Directory bread(block 73) failed [ 2665.130625][T10907] FAULT_INJECTION: forcing a failure. [ 2665.130625][T10907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2665.179528][T10907] CPU: 0 PID: 10907 Comm: syz.3.9321 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2665.189281][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2665.199163][T10907] Call Trace: [ 2665.202286][T10907] [ 2665.205067][T10907] dump_stack_lvl+0x151/0x1b7 [ 2665.209579][T10907] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2665.214871][T10907] ? is_bpf_text_address+0x172/0x190 [ 2665.220008][T10907] dump_stack+0x15/0x19 [ 2665.223992][T10907] should_fail_ex+0x3d0/0x520 [ 2665.228497][T10907] should_fail+0xb/0x10 [ 2665.232502][T10907] should_fail_usercopy+0x1a/0x20 [ 2665.237437][T10907] _copy_from_user+0x1e/0xc0 [ 2665.241865][T10907] copy_msghdr_from_user+0xaa/0x670 [ 2665.246900][T10907] ? _parse_integer+0x2a/0x40 [ 2665.251416][T10907] ? sendmsg_copy_msghdr+0x70/0x70 [ 2665.256364][T10907] __sys_sendmmsg+0x375/0x6f0 [ 2665.260869][T10907] ? kasan_set_track+0x4b/0x70 [ 2665.265472][T10907] ? __ia32_sys_sendmsg+0x90/0x90 [ 2665.270327][T10907] ? __kasan_check_write+0x14/0x20 [ 2665.275285][T10907] ? __kasan_check_write+0x14/0x20 [ 2665.280291][T10907] ? proc_fail_nth_write+0x20b/0x290 [ 2665.285349][T10907] ? selinux_file_permission+0x2bb/0x560 [ 2665.290815][T10907] ? proc_fail_nth_read+0x210/0x210 [ 2665.295851][T10907] ? fsnotify_perm+0x6a/0x5b0 [ 2665.300365][T10907] ? vfs_write+0x952/0xed0 [ 2665.304708][T10907] ? __kasan_slab_free+0x11/0x20 [ 2665.309479][T10907] ? __kasan_check_write+0x14/0x20 [ 2665.314420][T10907] ? mutex_unlock+0xb2/0x260 [ 2665.318907][T10907] ? __ia32_sys_read+0x90/0x90 [ 2665.323456][T10907] ? debug_smp_processor_id+0x17/0x20 [ 2665.328660][T10907] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2665.334561][T10907] __x64_sys_sendmmsg+0xa0/0xb0 [ 2665.334748][T10918] loop4: detected capacity change from 0 to 256 [ 2665.339241][T10907] x64_sys_call+0x81d/0x9a0 [ 2665.339270][T10907] do_syscall_64+0x3b/0xb0 [ 2665.345954][T10918] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2665.349654][T10907] ? clear_bhb_loop+0x55/0xb0 [ 2665.349690][T10907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2665.349716][T10907] RIP: 0033:0x7f0b7bb85d19 [ 2665.365170][T10918] FAT-fs (loop4): Directory bread(block 64) failed [ 2665.365452][T10907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2665.365475][T10907] RSP: 002b:00007f0b7c9af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2665.365498][T10907] RAX: ffffffffffffffda RBX: 00007f0b7bd75fa0 RCX: 00007f0b7bb85d19 [ 2665.365514][T10907] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000003 [ 2665.365529][T10907] RBP: 00007f0b7c9af090 R08: 0000000000000000 R09: 0000000000000000 [ 2665.365543][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2665.370425][T10918] FAT-fs (loop4): Directory bread(block 65) failed [ 2665.375698][T10907] R13: 0000000000000000 R14: 00007f0b7bd75fa0 R15: 00007ffd3f5a8678 [ 2665.375724][T10907] [ 2665.383427][T10690] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2665.397356][T10918] FAT-fs (loop4): Directory bread(block 66) failed [ 2665.460541][T10921] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2665.462925][T10918] FAT-fs (loop4): Directory bread(block 67) failed [ 2665.491448][T10918] FAT-fs (loop4): Directory bread(block 68) failed [ 2665.498031][T10918] FAT-fs (loop4): Directory bread(block 69) failed [ 2665.505480][T10918] FAT-fs (loop4): Directory bread(block 70) failed [ 2665.512288][T10918] FAT-fs (loop4): Directory bread(block 71) failed [ 2665.518781][T10918] FAT-fs (loop4): Directory bread(block 72) failed [ 2665.521329][T10923] loop3: detected capacity change from 0 to 512 [ 2665.525167][T10918] FAT-fs (loop4): Directory bread(block 73) failed [ 2665.551775][T10923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2665.561107][T10923] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2665.580645][T10690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2665.592614][T10690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2665.602571][T10690] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2665.615573][T10690] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2665.624558][T10690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2665.651147][T10690] usb 2-1: config 0 descriptor?? [ 2665.766961][T10930] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2665.869834][T10933] loop0: detected capacity change from 0 to 512 [ 2665.883363][T10933] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2665.892264][T10933] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2666.541808][T10941] loop4: detected capacity change from 0 to 512 [ 2666.551733][T28823] EXT4-fs (loop3): unmounting filesystem. [ 2666.570960][T10941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2666.580103][T10941] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2666.746008][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2667.138491][T10957] loop0: detected capacity change from 0 to 1024 [ 2667.145256][T10957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2667.152325][T10957] ext4: Bad value for 'inode_readahead_blks' [ 2667.456975][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2667.906775][T10972] loop0: detected capacity change from 0 to 512 [ 2667.971524][T10972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2667.980660][T10972] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2667.996895][T10690] usbhid 2-1:0.0: can't add hid device: -71 [ 2668.003024][T10690] usbhid: probe of 2-1:0.0 failed with error -71 [ 2668.018757][T10690] usb 2-1: USB disconnect, device number 9 [ 2668.185279][T10979] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2668.570360][T10982] loop4: detected capacity change from 0 to 512 [ 2668.599706][T10982] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2668.609102][T10982] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2668.736119][T10984] loop5: detected capacity change from 0 to 40427 [ 2668.755824][T10984] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2669.065733][T10984] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2669.073650][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2669.118565][T10997] loop0: detected capacity change from 0 to 512 [ 2669.145561][T10997] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2669.172043][T10997] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2669.198391][T11003] loop1: detected capacity change from 0 to 1024 [ 2669.227581][T11003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2669.243430][T11003] ext4: Bad value for 'inode_readahead_blks' [ 2669.805766][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2669.993865][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2670.009277][ T4958] syz-executor: attempt to access beyond end of device [ 2670.009277][ T4958] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2670.042590][T11020] usb usb4: usbfs: process 11020 (syz.0.9348) did not claim interface 0 before use [ 2670.107574][T11025] loop1: detected capacity change from 0 to 512 [ 2670.139641][ T331] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2670.144143][T11027] loop0: detected capacity change from 0 to 2048 [ 2670.163551][T11027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2670.177602][T11025] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2670.189862][T11025] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2670.200229][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 2670.212189][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 2670.261852][T11018] device bridge_slave_0 entered promiscuous mode [ 2670.268990][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 2670.276277][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 2670.283888][T11018] device bridge_slave_1 entered promiscuous mode [ 2670.370937][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2670.760053][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2670.772945][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2670.788719][ T331] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2670.799726][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2671.019845][ T331] usb 5-1: config 0 descriptor?? [ 2671.039956][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.046847][T11018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2671.053963][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.060727][T11018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2671.077147][ T955] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.088415][ T955] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.096686][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2671.192666][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2671.200748][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2671.218937][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2671.227924][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2671.265508][ T955] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.272466][ T955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2671.280178][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2671.294280][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2671.303396][ T955] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.310475][ T955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2671.320574][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2671.332854][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2671.361646][T11047] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2671.443441][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2671.699696][T11190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2671.709815][T11190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2671.720559][T11049] loop5: detected capacity change from 0 to 512 [ 2671.738581][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2671.758361][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2671.932784][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2671.944294][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2671.956916][T11018] device veth0_vlan entered promiscuous mode [ 2672.064387][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2672.079195][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2672.085661][T11049] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2672.096146][T11049] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2672.118526][T11061] loop1: detected capacity change from 0 to 512 [ 2672.123130][T11018] device veth1_macvtap entered promiscuous mode [ 2672.132668][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2672.143759][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2672.152158][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2672.164680][T11061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2672.173934][T11061] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2672.222673][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2672.231806][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2672.240720][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2672.249206][ T955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2672.296577][T11067] loop3: detected capacity change from 0 to 512 [ 2672.321499][T11067] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2672.330794][T11067] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2672.964994][ T4958] EXT4-fs (loop5): unmounting filesystem. [ 2673.123878][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2673.131419][ T331] usbhid 5-1:0.0: can't add hid device: -71 [ 2673.165901][T11080] loop4: detected capacity change from 0 to 512 [ 2673.175742][ T331] usbhid: probe of 5-1:0.0 failed with error -71 [ 2673.187224][ T331] usb 5-1: USB disconnect, device number 92 [ 2673.195188][T11018] EXT4-fs (loop3): unmounting filesystem. [ 2673.208616][T11080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2673.216908][T11084] loop1: detected capacity change from 0 to 1024 [ 2673.223651][T11080] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2673.235960][T11084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2673.273791][T11084] ext4: Bad value for 'inode_readahead_blks' [ 2673.327372][ T9231] device bridge_slave_1 left promiscuous mode [ 2673.341449][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 2673.376749][ T9231] device bridge_slave_0 left promiscuous mode [ 2673.786831][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2673.833683][ T9231] device veth1_macvtap left promiscuous mode [ 2673.864047][ T9231] device veth0_vlan left promiscuous mode [ 2674.123462][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2674.258264][T11107] FAULT_INJECTION: forcing a failure. [ 2674.258264][T11107] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.270794][T11107] CPU: 1 PID: 11107 Comm: syz.1.9368 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2674.280536][T11107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2674.290433][T11107] Call Trace: [ 2674.293557][T11107] [ 2674.296333][T11107] dump_stack_lvl+0x151/0x1b7 [ 2674.300846][T11107] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2674.306167][T11107] dump_stack+0x15/0x19 [ 2674.310133][T11107] should_fail_ex+0x3d0/0x520 [ 2674.314647][T11107] ? getname_flags+0xba/0x520 [ 2674.319194][T11107] __should_failslab+0xaf/0xf0 [ 2674.323760][T11107] should_failslab+0x9/0x20 [ 2674.328097][T11107] kmem_cache_alloc+0x3b/0x320 [ 2674.332698][T11107] ? vfs_write+0x952/0xed0 [ 2674.336954][T11107] ? __kasan_slab_free+0x11/0x20 [ 2674.341726][T11107] getname_flags+0xba/0x520 [ 2674.346156][T11107] getname+0x19/0x20 [ 2674.349891][T11107] do_sys_openat2+0xe0/0x870 [ 2674.354313][T11107] ? bit_wait_io_timeout+0x120/0x120 [ 2674.359438][T11107] ? __mutex_lock_slowpath+0x10/0x10 [ 2674.359823][T11108] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2674.364552][T11107] ? do_sys_open+0x220/0x220 [ 2674.377058][T11107] ? fput+0x15b/0x1b0 [ 2674.380872][T11107] ? ksys_write+0x260/0x2c0 [ 2674.385208][T11107] ? __this_cpu_preempt_check+0x13/0x20 [ 2674.390699][T11107] __x64_sys_openat+0x243/0x290 [ 2674.395371][T11107] ? __ia32_sys_open+0x270/0x270 [ 2674.400141][T11107] ? debug_smp_processor_id+0x17/0x20 [ 2674.405342][T11107] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2674.411245][T11107] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2674.416712][T11107] x64_sys_call+0x6bf/0x9a0 [ 2674.421052][T11107] do_syscall_64+0x3b/0xb0 [ 2674.425569][T11107] ? clear_bhb_loop+0x55/0xb0 [ 2674.430083][T11107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2674.435842][T11107] RIP: 0033:0x7f9454785d19 [ 2674.440075][T11107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2674.459510][T11107] RSP: 002b:00007f94555d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2674.467746][T11107] RAX: ffffffffffffffda RBX: 00007f9454975fa0 RCX: 00007f9454785d19 [ 2674.475690][T11107] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 2674.483493][T11107] RBP: 00007f94555d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2674.491306][T11107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2674.499119][T11107] R13: 0000000000000000 R14: 00007f9454975fa0 R15: 00007ffdf5c40568 [ 2674.506928][T11107] [ 2674.524731][T11110] loop1: detected capacity change from 0 to 512 [ 2674.541952][T11110] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2674.551005][T11110] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2674.910163][T11116] loop0: detected capacity change from 0 to 512 [ 2674.944740][T11116] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2674.953631][T11116] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2675.237590][T11127] loop4: detected capacity change from 0 to 512 [ 2675.329637][T11127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2675.339440][T11127] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2675.422348][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2675.597502][T11136] loop1: detected capacity change from 0 to 512 [ 2675.853905][T11136] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2675.863112][T11136] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2675.884720][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2677.249971][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2677.284087][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2677.288202][T11155] loop0: detected capacity change from 0 to 512 [ 2677.451883][T11155] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2677.515597][T11155] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2677.874851][T11169] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2678.405771][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2678.426722][T11176] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2678.428684][T11177] loop0: detected capacity change from 0 to 512 [ 2678.464385][T11182] loop5: detected capacity change from 0 to 512 [ 2678.482813][T11177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2678.485234][T11186] loop3: detected capacity change from 0 to 512 [ 2678.499355][T11177] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2678.556110][T11182] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2678.566676][T11186] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2680.573255][T11207] loop0: detected capacity change from 0 to 512 [ 2680.627624][T11203] loop4: detected capacity change from 0 to 40427 [ 2680.641273][T11207] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2680.652231][T11203] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2680.697221][T11221] loop1: detected capacity change from 0 to 512 [ 2680.719797][T11203] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2680.741901][T11221] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2681.643768][T11232] loop0: detected capacity change from 0 to 512 [ 2681.651204][ T9229] syz-executor: attempt to access beyond end of device [ 2681.651204][ T9229] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2681.676971][T11232] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2681.772580][T11235] kvm: pic: non byte write [ 2681.777331][T11235] FAULT_INJECTION: forcing a failure. [ 2681.777331][T11235] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.790176][T11235] CPU: 0 PID: 11235 Comm: syz.1.9397 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2681.799892][T11235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2681.809791][T11235] Call Trace: [ 2681.812912][T11235] [ 2681.815688][T11235] dump_stack_lvl+0x151/0x1b7 [ 2681.820202][T11235] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2681.825501][T11235] dump_stack+0x15/0x19 [ 2681.829483][T11235] should_fail_ex+0x3d0/0x520 [ 2681.834002][T11235] __should_failslab+0xaf/0xf0 [ 2681.838600][T11235] ? kvm_vcpu_ioctl+0x2ca/0xcf0 [ 2681.843286][T11235] should_failslab+0x9/0x20 [ 2681.847623][T11235] __kmem_cache_alloc_node+0x3d/0x2a0 [ 2681.852836][T11235] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 2681.859166][T11235] ? vfs_write+0x952/0xed0 [ 2681.863436][T11235] ? kvm_vcpu_ioctl+0x2ca/0xcf0 [ 2681.868105][T11235] kmalloc_trace+0x2a/0xa0 [ 2681.872363][T11235] kvm_vcpu_ioctl+0x2ca/0xcf0 [ 2681.876876][T11235] ? xa_release+0x40/0x40 [ 2681.881040][T11235] ? selinux_file_ioctl+0x3cc/0x540 [ 2681.886072][T11235] ? __mutex_lock_slowpath+0x10/0x10 [ 2681.891193][T11235] ? selinux_file_alloc_security+0x120/0x120 [ 2681.897012][T11235] ? __fget_files+0x2cb/0x330 [ 2681.901644][T11235] ? security_file_ioctl+0x84/0xb0 [ 2681.906614][T11235] ? xa_release+0x40/0x40 [ 2681.910754][T11235] __se_sys_ioctl+0x114/0x190 [ 2681.915330][T11235] __x64_sys_ioctl+0x7b/0x90 [ 2681.919694][T11235] x64_sys_call+0x98/0x9a0 [ 2681.923946][T11235] do_syscall_64+0x3b/0xb0 [ 2681.928202][T11235] ? clear_bhb_loop+0x55/0xb0 [ 2681.932714][T11235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2681.938535][T11235] RIP: 0033:0x7f945478591b [ 2681.942795][T11235] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 2681.962231][T11235] RSP: 002b:00007f94555cf490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2681.970489][T11235] RAX: ffffffffffffffda RBX: 00007f94555cfbe0 RCX: 00007f945478591b [ 2681.978302][T11235] RDX: 00007f94555cfaa0 RSI: 000000008138ae83 RDI: 0000000000000005 [ 2681.986102][T11235] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000000000000 [ 2681.994003][T11235] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000018 [ 2682.001807][T11235] R13: 0000000020018000 R14: 0000000020000000 R15: 00000000fec00000 [ 2682.009636][T11235] [ 2682.271844][T11241] 9pnet_fd: Insufficient options for proto=fd [ 2682.321209][T11244] overlayfs: missing 'lowerdir' [ 2682.342290][T11247] loop4: detected capacity change from 0 to 512 [ 2682.359224][T11247] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2682.894883][T11257] loop0: detected capacity change from 0 to 512 [ 2682.911333][T11257] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2683.019575][T27235] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 2683.560709][T27235] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2683.571666][T27235] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2683.582421][T27235] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 2683.593214][T27235] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2683.609934][T27235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2683.618968][T11251] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2683.626086][T11251] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2683.679549][T10690] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2683.791069][T11272] loop0: detected capacity change from 0 to 512 [ 2683.828026][T11272] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2683.974555][T10690] usb 5-1: Using ep0 maxpacket: 16 [ 2683.976149][ T6489] usb 2-1: USB disconnect, device number 10 [ 2684.001199][T10690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2684.027816][T10690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2684.037641][T10690] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2684.046632][T10690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2684.057152][T10690] usb 5-1: config 0 descriptor?? [ 2684.694787][T11280] loop3: detected capacity change from 0 to 512 [ 2684.721516][T11280] EXT4-fs mount: 16 callbacks suppressed [ 2684.721540][T11280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2684.736660][T11280] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2684.776792][T10690] savu 0003:1E7D:2D5A.021D: item fetching failed at offset 2/5 [ 2684.784445][T10690] savu 0003:1E7D:2D5A.021D: parse failed [ 2684.789970][T10690] savu: probe of 0003:1E7D:2D5A.021D failed with error -22 [ 2684.806484][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2684.836802][T11284] 9pnet_fd: Insufficient options for proto=fd [ 2684.879193][T10690] usb 5-1: USB disconnect, device number 93 [ 2685.177939][T11292] FAULT_INJECTION: forcing a failure. [ 2685.177939][T11292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2685.190862][T11292] CPU: 0 PID: 11292 Comm: syz.1.9411 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2685.200603][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2685.210495][T11292] Call Trace: [ 2685.213619][T11292] [ 2685.216394][T11292] dump_stack_lvl+0x151/0x1b7 [ 2685.220910][T11292] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2685.226289][T11292] ? fsnotify_perm+0x6a/0x5b0 [ 2685.230813][T11292] dump_stack+0x15/0x19 [ 2685.234801][T11292] should_fail_ex+0x3d0/0x520 [ 2685.239317][T11292] should_fail+0xb/0x10 [ 2685.243303][T11292] should_fail_usercopy+0x1a/0x20 [ 2685.248318][T11292] strncpy_from_user+0x24/0x2b0 [ 2685.253011][T11292] strncpy_from_user_nofault+0x73/0x150 [ 2685.258386][T11292] bpf_probe_read_compat_str+0xec/0x180 [ 2685.263772][T11292] bpf_prog_6a35714066c6d2e1+0x35/0x37 [ 2685.269074][T11292] bpf_trace_run2+0x133/0x290 [ 2685.273660][T11292] ? bpf_trace_run1+0x240/0x240 [ 2685.278349][T11292] ? __ia32_sys_read+0x90/0x90 [ 2685.283122][T11292] __bpf_trace_sys_enter+0x62/0x70 [ 2685.288066][T11292] __traceiter_sys_enter+0x2a/0x40 [ 2685.293018][T11292] syscall_enter_from_user_mode+0x176/0x190 [ 2685.298742][T11292] do_syscall_64+0x1e/0xb0 [ 2685.302992][T11292] ? clear_bhb_loop+0x55/0xb0 [ 2685.307513][T11292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2685.313262][T11292] RIP: 0033:0x7f9454785d19 [ 2685.317498][T11292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2685.336931][T11292] RSP: 002b:00007f94555d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 2685.345176][T11292] RAX: ffffffffffffffda RBX: 00007f9454975fa0 RCX: 00007f9454785d19 [ 2685.353005][T11292] RDX: 0000000000000001 RSI: 00000000208c9fc4 RDI: 0000000000000007 [ 2685.360885][T11292] RBP: 00007f94555d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2685.368711][T11292] R10: 00000000fffffff3 R11: 0000000000000246 R12: 0000000000000001 [ 2685.376606][T11292] R13: 0000000000000000 R14: 00007f9454975fa0 R15: 00007ffdf5c40568 [ 2685.384598][T11292] [ 2685.461057][T11299] loop1: detected capacity change from 0 to 512 [ 2685.481390][T11299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2685.490325][T11299] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2685.530144][T11300] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2685.591816][T11018] EXT4-fs (loop3): unmounting filesystem. [ 2686.025112][T11311] loop0: detected capacity change from 0 to 40427 [ 2686.034662][T11311] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2686.070948][T11311] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2686.193789][ T9307] syz-executor: attempt to access beyond end of device [ 2686.193789][ T9307] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2686.336376][ T28] audit: type=1400 audit(2000000644.850:7516): avc: denied { write } for pid=11319 comm="syz.0.9418" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2686.343619][T11320] FAULT_INJECTION: forcing a failure. [ 2686.343619][T11320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2686.372189][T11320] CPU: 0 PID: 11320 Comm: syz.0.9418 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2686.381816][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2686.391711][T11320] Call Trace: [ 2686.394831][T11320] [ 2686.397706][T11320] dump_stack_lvl+0x151/0x1b7 [ 2686.402221][T11320] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2686.407526][T11320] dump_stack+0x15/0x19 [ 2686.411646][T11320] should_fail_ex+0x3d0/0x520 [ 2686.416123][T11320] should_fail+0xb/0x10 [ 2686.420114][T11320] should_fail_usercopy+0x1a/0x20 [ 2686.425106][T11320] _copy_to_user+0x1e/0x90 [ 2686.429442][T11320] simple_read_from_buffer+0xc7/0x150 [ 2686.434644][T11320] proc_fail_nth_read+0x1a3/0x210 [ 2686.439512][T11320] ? proc_fault_inject_write+0x390/0x390 [ 2686.444969][T11320] ? fsnotify_perm+0x269/0x5b0 [ 2686.449571][T11320] ? security_file_permission+0x86/0xb0 [ 2686.454952][T11320] ? proc_fault_inject_write+0x390/0x390 [ 2686.460424][T11320] vfs_read+0x26c/0xae0 [ 2686.464412][T11320] ? asm_exc_page_fault+0x27/0x30 [ 2686.469370][T11320] ? kernel_read+0x1f0/0x1f0 [ 2686.473976][T11320] ? mutex_lock+0xb1/0x1e0 [ 2686.478234][T11320] ? bit_wait_io_timeout+0x120/0x120 [ 2686.483562][T11320] ? __fdget_pos+0x2e2/0x390 [ 2686.487946][T11320] ? ksys_read+0x77/0x2c0 [ 2686.492113][T11320] ksys_read+0x199/0x2c0 [ 2686.496191][T11320] ? vfs_write+0xed0/0xed0 [ 2686.500444][T11320] ? debug_smp_processor_id+0x17/0x20 [ 2686.505655][T11320] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2686.511557][T11320] __x64_sys_read+0x7b/0x90 [ 2686.515898][T11320] x64_sys_call+0x28/0x9a0 [ 2686.520145][T11320] do_syscall_64+0x3b/0xb0 [ 2686.524396][T11320] ? clear_bhb_loop+0x55/0xb0 [ 2686.528908][T11320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2686.534638][T11320] RIP: 0033:0x7f612a98472c [ 2686.538893][T11320] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2686.558423][T11320] RSP: 002b:00007f612b808030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2686.566662][T11320] RAX: ffffffffffffffda RBX: 00007f612ab75fa0 RCX: 00007f612a98472c [ 2686.574481][T11320] RDX: 000000000000000f RSI: 00007f612b8080a0 RDI: 0000000000000004 [ 2686.582288][T11320] RBP: 00007f612b808090 R08: 0000000000000000 R09: 0000000000000000 [ 2686.590103][T11320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2686.598084][T11320] R13: 0000000000000000 R14: 00007f612ab75fa0 R15: 00007fff2f97d898 [ 2686.606115][T11320] [ 2686.619264][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2686.652860][T11327] loop1: detected capacity change from 0 to 512 [ 2686.702020][T11327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2686.713390][T11339] loop0: detected capacity change from 0 to 512 [ 2686.717553][T11327] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2686.744935][T11342] loop4: detected capacity change from 0 to 512 [ 2686.778516][T11339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2686.787507][T11339] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2686.812749][T11342] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2686.825365][T11342] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2688.057102][ T9307] EXT4-fs (loop0): unmounting filesystem. [ 2688.065145][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2688.083135][T11354] loop0: detected capacity change from 0 to 512 [ 2688.106465][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2688.124459][T11354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2688.133424][T11354] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2688.270052][T11362] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2688.293510][T11356] loop1: detected capacity change from 0 to 40427 [ 2688.303479][T11356] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2688.353036][T11356] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2688.605021][ T9596] syz-executor: attempt to access beyond end of device [ 2688.605021][ T9596] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2688.915759][T11380] loop1: detected capacity change from 0 to 256 [ 2688.922588][T11380] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2688.946352][T11380] FAT-fs (loop1): Directory bread(block 64) failed [ 2688.952833][T11380] FAT-fs (loop1): Directory bread(block 65) failed [ 2688.959331][T11380] FAT-fs (loop1): Directory bread(block 66) failed [ 2688.968137][T11380] FAT-fs (loop1): Directory bread(block 67) failed [ 2688.974661][T11380] FAT-fs (loop1): Directory bread(block 68) failed [ 2688.981230][T11380] FAT-fs (loop1): Directory bread(block 69) failed [ 2689.028017][T11380] FAT-fs (loop1): Directory bread(block 70) failed [ 2689.034582][T11380] FAT-fs (loop1): Directory bread(block 71) failed [ 2689.041258][T11382] FAULT_INJECTION: forcing a failure. [ 2689.041258][T11382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2689.054658][T11380] FAT-fs (loop1): Directory bread(block 72) failed [ 2689.061050][T11380] FAT-fs (loop1): Directory bread(block 73) failed [ 2689.067471][T11382] CPU: 1 PID: 11382 Comm: syz.4.9438 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2689.077191][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2689.087274][T11382] Call Trace: [ 2689.090371][T11382] [ 2689.093146][T11382] dump_stack_lvl+0x151/0x1b7 [ 2689.097661][T11382] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2689.102952][T11382] ? avc_flush+0x290/0x290 [ 2689.107205][T11382] ? kstrtouint+0xf6/0x180 [ 2689.111470][T11382] dump_stack+0x15/0x19 [ 2689.115447][T11382] should_fail_ex+0x3d0/0x520 [ 2689.119966][T11382] should_fail+0xb/0x10 [ 2689.123956][T11382] should_fail_usercopy+0x1a/0x20 [ 2689.128813][T11382] copyin+0x1e/0x90 [ 2689.132509][T11382] _copy_from_iter+0x3c9/0xe00 [ 2689.137065][T11382] ? copyout_mc+0x80/0x80 [ 2689.141229][T11382] ? selinux_capable+0x2f1/0x430 [ 2689.145999][T11382] ? selinux_capset+0xf0/0xf0 [ 2689.150615][T11382] write_pool_user+0xe8/0x2b0 [ 2689.155122][T11382] ? get_random_bytes_user+0x400/0x400 [ 2689.160419][T11382] ? security_capable+0x87/0xb0 [ 2689.165189][T11382] ? import_single_range+0xcd/0x250 [ 2689.170315][T11382] random_ioctl+0x457/0x570 [ 2689.174669][T11382] ? random_poll+0xa0/0xa0 [ 2689.178911][T11382] ? __fget_files+0x2cb/0x330 [ 2689.183510][T11382] ? security_file_ioctl+0x84/0xb0 [ 2689.188454][T11382] ? random_poll+0xa0/0xa0 [ 2689.192793][T11382] __se_sys_ioctl+0x114/0x190 [ 2689.197308][T11382] __x64_sys_ioctl+0x7b/0x90 [ 2689.201730][T11382] x64_sys_call+0x98/0x9a0 [ 2689.205983][T11382] do_syscall_64+0x3b/0xb0 [ 2689.210322][T11382] ? clear_bhb_loop+0x55/0xb0 [ 2689.214835][T11382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2689.220563][T11382] RIP: 0033:0x7f9840785d19 [ 2689.224820][T11382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2689.244348][T11382] RSP: 002b:00007f984150d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2689.252586][T11382] RAX: ffffffffffffffda RBX: 00007f9840975fa0 RCX: 00007f9840785d19 [ 2689.260401][T11382] RDX: 0000000020000240 RSI: 0000000040085203 RDI: 0000000000000003 [ 2689.268212][T11382] RBP: 00007f984150d090 R08: 0000000000000000 R09: 0000000000000000 [ 2689.276026][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2689.284016][T11382] R13: 0000000000000000 R14: 00007f9840975fa0 R15: 00007fffff57f2a8 [ 2689.291837][T11382] [ 2689.333549][T11385] loop1: detected capacity change from 0 to 512 [ 2689.382436][T11385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2689.391325][T11385] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2689.397653][T11391] loop4: detected capacity change from 0 to 512 [ 2689.491340][T11391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2689.500637][T11391] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2690.343570][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2690.350898][ T9229] EXT4-fs (loop4): unmounting filesystem. [ 2690.440031][ T28] audit: type=1326 audit(2000000648.960:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11411 comm="syz.3.9446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4de0b85d19 code=0x0 [ 2690.558324][T11406] loop1: detected capacity change from 0 to 40427 [ 2690.583850][T11406] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2690.632809][T11406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2690.679511][ T590] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2690.774666][ T9596] syz-executor: attempt to access beyond end of device [ 2690.774666][ T9596] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2690.870567][ T590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2690.889510][ T590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2690.899073][ T590] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2690.921022][T11420] loop1: detected capacity change from 0 to 512 [ 2690.932082][ T590] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2690.945488][ T590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2690.955044][T11420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2690.964024][T11420] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2690.973270][ T590] usb 5-1: config 0 descriptor?? [ 2691.482792][T11431] loop5: detected capacity change from 0 to 256 [ 2691.495049][T11431] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2691.519265][T11431] FAT-fs (loop5): Directory bread(block 64) failed [ 2691.525836][T11431] FAT-fs (loop5): Directory bread(block 65) failed [ 2691.532564][T11431] FAT-fs (loop5): Directory bread(block 66) failed [ 2691.538937][T11431] FAT-fs (loop5): Directory bread(block 67) failed [ 2691.545600][T11431] FAT-fs (loop5): Directory bread(block 68) failed [ 2691.552137][T11431] FAT-fs (loop5): Directory bread(block 69) failed [ 2691.558563][T11431] FAT-fs (loop5): Directory bread(block 70) failed [ 2691.567229][T11431] FAT-fs (loop5): Directory bread(block 71) failed [ 2691.649366][T11431] FAT-fs (loop5): Directory bread(block 72) failed [ 2691.656068][T11431] FAT-fs (loop5): Directory bread(block 73) failed [ 2691.992477][ T9596] EXT4-fs (loop1): unmounting filesystem. [ 2692.333083][T11444] loop1: detected capacity change from 0 to 512 [ 2692.354207][T11444] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2692.361401][T11444] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2692.371126][T11444] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 2692.643728][T12927] Bluetooth: hci0: sending frame failed (-49) [ 2692.649891][ T8901] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 2692.699554][T11448] xt_CT: No such helper "syz0" [ 2693.119841][T11357] ------------[ cut here ]------------ [ 2693.125202][T11357] kernel BUG at fs/buffer.c:2714! [ 2693.137251][T11357] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2693.143255][T11357] CPU: 1 PID: 11357 Comm: kmmpd-loop0 Not tainted 6.1.115-syzkaller-00017-g22b7ded8b55b #0 [ 2693.153063][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2693.163040][T11357] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 2693.168343][T11357] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e4 ce e6 ff e9 b0 fe ff ff e8 da 5c 9f ff 0f 0b e8 d3 5c 9f ff <0f> 0b e8 cc 5c 9f ff 0f 0b e8 c5 5c 9f ff 0f 0b e8 be 5c 9f ff 0f [ 2693.187788][T11357] RSP: 0018:ffffc90003537c20 EFLAGS: 00010293 [ 2693.193683][T11357] RAX: ffffffff81d629dd RBX: 0000000000000000 RCX: ffff888119289440 [ 2693.201500][T11357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2693.209305][T11357] RBP: ffffc90003537c70 R08: ffffffff81d625b0 R09: ffffed1027ea4512 [ 2693.217205][T11357] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2693.225129][T11357] R13: 1ffff11027ea4511 R14: ffff88813f522888 R15: 0000000000003801 [ 2693.232941][T11357] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2693.241916][T11357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2693.248345][T11357] CR2: 0000001b33210ff8 CR3: 000000010ed41000 CR4: 00000000003506a0 [ 2693.256149][T11357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2693.264045][T11357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2693.271852][T11357] Call Trace: [ 2693.274997][T11357] [ 2693.277765][T11357] ? __die_body+0x62/0xb0 [ 2693.281920][T11357] ? die+0x88/0xb0 [ 2693.285481][T11357] ? do_trap+0x103/0x330 [ 2693.289555][T11357] ? notify_die+0x1b0/0x280 [ 2693.293897][T11357] ? submit_bh_wbc+0x4cd/0x4f0 [ 2693.298496][T11357] ? handle_invalid_op+0x95/0xc0 [ 2693.303268][T11357] ? submit_bh_wbc+0x4cd/0x4f0 [ 2693.307867][T11357] ? exc_invalid_op+0x32/0x50 [ 2693.312385][T11357] ? asm_exc_invalid_op+0x1b/0x20 [ 2693.317329][T11357] ? submit_bh_wbc+0xa0/0x4f0 [ 2693.321841][T11357] ? submit_bh_wbc+0x4cd/0x4f0 [ 2693.326442][T11357] ? submit_bh_wbc+0x4cd/0x4f0 [ 2693.331040][T11357] ? __kasan_check_read+0x11/0x20 [ 2693.335905][T11357] submit_bh+0x1d/0x30 [ 2693.339809][T11357] write_mmp_block_thawed+0x3a0/0x570 [ 2693.345017][T11357] ? read_mmp_block+0x7d0/0x7d0 [ 2693.349701][T11357] ? update_process_times+0x1b0/0x1b0 [ 2693.354912][T11357] write_mmp_block+0x12b/0x2a0 [ 2693.359509][T11357] kmmpd+0x40c/0xa10 [ 2693.363247][T11357] ? write_mmp_block_thawed+0x570/0x570 [ 2693.368621][T11357] ? __kthread_parkme+0x12d/0x180 [ 2693.373484][T11357] kthread+0x26d/0x300 [ 2693.377389][T11357] ? write_mmp_block_thawed+0x570/0x570 [ 2693.382772][T11357] ? kthread_blkcg+0xd0/0xd0 [ 2693.387197][T11357] ret_from_fork+0x1f/0x30 [ 2693.391456][T11357] [ 2693.394311][T11357] Modules linked in: [ 2693.458784][ T590] usbhid 5-1:0.0: can't add hid device: -71 [ 2693.464608][ T590] usbhid: probe of 5-1:0.0 failed with error -71 [ 2693.472209][ T590] usb 5-1: USB disconnect, device number 94 [ 2693.478138][T11357] ---[ end trace 0000000000000000 ]--- [ 2693.483450][T11357] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 2693.488646][T11357] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 e4 ce e6 ff e9 b0 fe ff ff e8 da 5c 9f ff 0f 0b e8 d3 5c 9f ff <0f> 0b e8 cc 5c 9f ff 0f 0b e8 c5 5c 9f ff 0f 0b e8 be 5c 9f ff 0f [ 2693.508346][T11357] RSP: 0018:ffffc90003537c20 EFLAGS: 00010293 [ 2693.517411][T11357] RAX: ffffffff81d629dd RBX: 0000000000000000 RCX: ffff888119289440 [ 2693.525439][T11357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2693.533845][T11357] RBP: ffffc90003537c70 R08: ffffffff81d625b0 R09: ffffed1027ea4512 [ 2693.541737][T11357] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 2693.550095][T11357] R13: 1ffff11027ea4511 R14: ffff88813f522888 R15: 0000000000003801 [ 2693.558049][T11357] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2693.567367][T11357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2693.573868][T11357] CR2: 00007f9454947ab8 CR3: 0000000127bb8000 CR4: 00000000003506b0 [ 2693.581645][T11357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2693.589437][T11357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2693.597353][T11357] Kernel panic - not syncing: Fatal exception [ 2693.603524][T11357] Kernel Offset: disabled [ 2693.607656][T11357] Rebooting in 86400 seconds..