last executing test programs: 13.871108296s ago: executing program 0 (id=1901): bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xccf4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x4}]}]}}, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x1e, 0x1, 0x0) 13.027458757s ago: executing program 0 (id=1904): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x1, 0x6, 0xfffffff2, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff0000000000000070472918e9d05b6e5fab0b8ca279416194342ab87f21d42458ee475b25ad415f8d643163741465aa22c42261dad192a8654bc02a9bdbe55d2e899d3ea2e84eb8918ca614ca6d65aea1c9d2bce4c823353fa3b12dd51968a409dbaace9787dbbb6ad4ae77f64b3a2d080139eb8e65c32f5ec21e737a6f9db7fb8ba8b473fb1daf54bce65e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003b110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10.251451785s ago: executing program 3 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000bc9c2e56cadf1df9ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r0}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x1c}, 0x1c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x8b) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="006edce369371699329ff69300000000a948ea2d00dfff00000008673c4a14cf8d1a000000000000"], 0x48) 9.775921015s ago: executing program 3 (id=1921): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='tlb_flush\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r7, &(0x7f000000a300)={0x2020}, 0x204c) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000300)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 8.823730086s ago: executing program 3 (id=1925): sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x0) 7.697498792s ago: executing program 3 (id=1931): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000620fedb80000000000000056b383a0bf9913e48d00802fe700"/41], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) sendfile(r6, r4, 0x0, 0x578410eb) 7.203063165s ago: executing program 2 (id=1936): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x200c410, &(0x7f0000001f80)=ANY=[@ANYRES64=0x0, @ANYRESDEC], 0x21, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x3, 0x7943e7b4, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f00000003c0)=[r0, r0, 0x1, r0, r0, r0], &(0x7f0000000500)=[{0x5, 0x2, 0x8}, {0x4, 0x2, 0x5, 0x1}, {0x3, 0x2, 0x1, 0x5}, {0x2, 0x5, 0x4, 0x1}, {0x5, 0x3, 0xd, 0x4}, {0x3, 0x2, 0x0, 0x8}, {0x0, 0x3, 0x9, 0x6}, {0x2, 0x2, 0x1, 0x8}, {0x4, 0x4, 0xd, 0x1}, {0x5, 0x5, 0xd, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff7d7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x1, 0x3, 0xb, 0xc, 0xfffffffffffffff4, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000780)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x200}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0xa, 0x3, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000008c0)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000900)=[{0x0, 0x3, 0xc, 0x3}, {0x0, 0x3, 0x0, 0x5}, {0x2, 0x3, 0x1, 0xc}, {0x0, 0x1, 0x8, 0xc}, {0x2, 0x1, 0xd}, {0x2, 0x2, 0x10, 0x9}, {0x4, 0x5, 0x2, 0x1}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@map=r0, 0xd, 0x1, 0xa1c4, &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000bc0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000c00)='GPL\x00', 0x7, 0x4f, &(0x7f0000000d40)=""/79, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x3, 0x400, 0x2}, 0x10, 0x22354, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)=[r0, r0], &(0x7f0000000e40)=[{0x1, 0x3, 0x10, 0x4}, {0x1, 0x1, 0xa, 0x7}, {0x2, 0x3, 0x5, 0xa}, {0x5, 0x1, 0x10, 0x3}, {0x1, 0x1, 0x0, 0x3}, {0x4, 0x3, 0x5, 0x8}, {0x4, 0x3, 0x6, 0x7}, {0x1, 0x4, 0xf, 0xc}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)={@fallback=r0, r2, 0x35, 0xc, r3, @void, @value=r5, @void, @void, r4}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 6.683291889s ago: executing program 3 (id=1938): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000771fc2144d63119eba97440d13533be0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x90) creat(&(0x7f0000000240)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 6.337594818s ago: executing program 2 (id=1940): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) 6.327500799s ago: executing program 4 (id=1941): sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x0) 6.120565447s ago: executing program 2 (id=1942): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00ffffdf"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0003020000000203ed73d5f3e72324440bf82a56f8ad"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="03bb3eb54c801692466b89af601d2f022a860bee60dd20e9cc58197c5ad5bca953d3a30a857f47087000972af84af95ab26826ba87a248aab57f84662d174eefe60015b1182cccaaa80e1473e5ca78e806079fdeda097e324ac80aa9bbfb02b67021862246ad8fa540da55fc620c9abe202b8bb00715a537c571d2497954488c00f975c811b4204eb205f1e621bda87e2660037b229cbf1610fa"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385200000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="8179385547794475691a2f93182052f784317902f123c98c2a6df66d173f13edb568683c98d938a3f9b8ee7ce63071f4149aea227def5bc037823de60500"/76], 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8200, &(0x7f0000000180), 0x83, 0x5dc, &(0x7f0000000bc0)="$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") r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2Ch4oHESwU9GxdNttQs8mW7KY0IaAighdBxYOgl579UW/exB9X/S88SEvVtFjxIJHZzKbbZrfJpkmWup8PTPt9M7N5892Zee/tzrATQM8aTf/JRRyOiA+TiOFsfhIRA/WoP+Lk2no3V5aL6ZTE6uqrfyT1dW6sLBej6TWpg1nh0Yj48b2II7mN9VYXl2YK5XJpPiuP12bPj1cXl46emy1Ml6ZLc8cnJiePnXjmxPGdy/WvX5YOXf3opSe/PvnPu49c/uCnJE7GoWxZcx47ZTRGs/dkIH0Lb/PiTlfWZUm3N4BtSU/NvrWzPA7HcPTVIwDg/+ytiFgFAHpMov8HgB7T+B7gxspysTF19xuJvXXthYjYv5Z/4/rm2pL+7Jrd/vp10KEbyW1XRpKIGNmB+kcj4vNvX/8ynWKXrkMCtPL2d1mwof1PNtyz0KmntrDO6B1l7R/sne/T8c+zrcZ/ufXxT7QY/wy2OHe3Y/PzP3dlB6ppKx3/Pd90b9vNpvwzI31Z6YH6mG8gOXuuXErbtgcjYiwGBtPyxF3qGLv+7/V2y5rHf39+/OYXaf3p/7fWyF3pH7z9NVOFWuFecm527Z2Ix/pb5Z+s7/+kzfj39BbrePm59z9rtyzNP823MW3Mf3etXop4ouX+v3VHW3LX+xPH64fDeOOgaOGbXz8dald/8/5Pp7T+xmeBvZDu/6G75z+SNN+vWe28jp8vDf/Qbtnm+bc+/vclr9Xjfdm8i4VabX4iYl/yysb5x269tlFurJ/mP/Z4Pf8D2Sob2r9Wx3/6mfCNzRLPNqL/6u9fbT//3ZXmP9XR/u88uHxzpq9d/Vvb/5P1aCybs5X2b6sbeC/vHQAAAAAAAAAAAAAAAAAAAAAAAABsVS4iDkWSy6/HuVw+v/YM74djKFeuVGtHzlYW5qai/qzskRjINX7qcrjp91Anst/Db5SP3VF+OiIeiohPBg/Uy/lipTzV7eQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHOwzfP/U78NdnvrAIBds7/bGwAA7Dn9PwD0nk77f+MFALj/6c8BoPfo/wGg9+j/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2GWnT51Kp9W/V5aLaXnqwuLCTOXC0alSdSY/u1DMFyvz5/PTlcp0uZQvVmY3+3vlSuX8ZMwtXByvlaq18eri0pnZysJc7cy52cJ06UxpYE+yAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDOVBeXZgrlcmleIBAI1oNut0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA94f/AgAA///tuiN0") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r5, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) getresuid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f000038a000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_snmp6\x00') 5.351965823s ago: executing program 4 (id=1945): bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xccf4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x4}]}]}}, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x1e, 0x1, 0x0) 4.530231863s ago: executing program 4 (id=1949): syz_usb_connect(0x0, 0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (fail_nth: 6) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 3.991192569s ago: executing program 1 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="6181b543406e59cc29ac1f56c317248e6193fb5a66dd6d37dc2e8343d2104a68c626b3994cbbe2217933a7c27fd3414adbfc181115ca206c3a36178baefedbe7980a0ced5df46a7b6199a38931849fa1506ca46859b26917c863440baa9a825c8aab81343809858560ba91c2bfdcc383b714a707e22a09720af6d3197c9c388d256dc40435590606c6c0a9b91c3790da3262506bdb4e9a04505c3b349a59df0a71de568b8b9ba1497f49a2d274bca43f73aff56109bd0e760c61e5c153c52f3d4be3552f9ff472553b58cae5f31d6fc147821e4846e5f35b17fcf21ccb4901bb2e896462a672f5444fbe", @ANYBLOB="2e02ffae0f7392de933d524a35def44c4a132014c4c7774a52f614f7b1384e49be554a30bebeadd99391ffdb6f34d9ffa386736f18ad7628f353878b9bfbb6f304dfd2feef25c8ed6f63a1dfb1e57c0df2607c76", @ANYRESOCT=r0], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_clone3(&(0x7f00000004c0)={0x8000000, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x36}, &(0x7f0000000280)=""/23, 0x17, &(0x7f0000000300)=""/220, &(0x7f0000000400)=[r2], 0x1}, 0x58) sched_setaffinity(r3, 0xffffffffffffff5f, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) ftruncate(r6, 0x8800000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) sendfile(r7, r6, 0x0, 0x578410eb) 3.495952151s ago: executing program 3 (id=1951): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0486c0000000000001090224000100"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 2.835101078s ago: executing program 1 (id=1952): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) 2.752150235s ago: executing program 2 (id=1954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) fsetxattr$security_capability(r3, &(0x7f0000000140), &(0x7f0000000240)=@v1={0x1000000, [{0x92f, 0x63f}]}, 0xc, 0x1) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x75) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 2.699399669s ago: executing program 1 (id=1955): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0xd005, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = gettid() r7 = gettid() tkill(r6, 0x12) tkill(r6, 0x1) tkill(r7, 0x14) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x1670e68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.584180719s ago: executing program 2 (id=1956): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000540)={[{@norecovery}, {@nogrpid}, {@grpjquota_path}, {@bh}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@inlinecrypt}, {@nodiscard}]}, 0xff, 0x468, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x9, 0x10001, 0xfffffff8, 0xff, 0x200, 0x3, 0xa9, 0x5}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) close(r6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, 0x0) 1.543368078s ago: executing program 1 (id=1957): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() tkill(r1, 0x25) 1.459921225s ago: executing program 4 (id=1958): io_submit(0x0, 0x2, &(0x7f00000001c0)=[0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xa, 0xffffffffffffffff, &(0x7f0000000940)="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", 0x370, 0x80, 0x0, 0x6}]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = dup(r0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c000000000000000000000007"], 0x40}, 0x0) 1.452025845s ago: executing program 4 (id=1959): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="48b7d6688a58f333282342070db1a1e8", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.350583484s ago: executing program 0 (id=1953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xda57}, 0x8) 1.040207651s ago: executing program 1 (id=1960): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x1b, 0x9, 0x2, 0x8, 0x1050, r0, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3000000, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpquota}, {@sysvgroups}, {@data_ordered}, {@init_itable}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5e4, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) 641.328485ms ago: executing program 1 (id=1961): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000771fc2144d63119eba97440d13533be0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x90) creat(&(0x7f0000000240)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 419.980684ms ago: executing program 0 (id=1962): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) open(0x0, 0x121342, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0xa4}}, @TCA_TBF_BURST={0x8, 0x6, 0xd206}]}}]}, 0x60}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x4000, @auto="de60e4b8e8c640437d02438081fc0e47"}}) 418.453824ms ago: executing program 4 (id=1963): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) futex(&(0x7f000000cffc)=0x1, 0x6, 0xfffffff2, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff0000000000000070472918e9d05b6e5fab0b8ca279416194342ab87f21d42458ee475b25ad415f8d643163741465aa22c42261dad192a8654bc02a9bdbe55d2e899d3ea2e84eb8918ca614ca6d65aea1c9d2bce4c823353fa3b12dd51968a409dbaace9787dbbb6ad4ae77f64b3a2d080139eb8e65c32f5ec21e737a6f9db7fb8ba8b473fb1daf54bce65e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003b110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000000000bfa20000c9ed531dad0ed90f53ffffffb703000008000000b70400000000000085000000590000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007b573922ab015584d2c902fdd5658f6b2a4220da544c3cfdedcc481e093695d8ef378f46de645f57401cfb702cab6401dd0a29cb6142fc32d322423dc2efb76dd7ab4c693da718aa5491849615e05e3dc13324fc0eb868316c9f8754087879c117fa215b82d096920ef25424d0823ae4d547978f15a142e66c392195f7235e158e65ecd08b7ddc9dd1f24af3e563fc2747a96b05b6cb1cce6f847b0651c1af2c5b91f31a816aa8d4cd1cf43dd7cfe513ee7c4deb2d0b32ff98b0d8bb90519d693f3ef463a9b72c4828800da0989f84884d50df509c4280690d1d3b4021007459e75c20e8cad8bd29a1261e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 328.083422ms ago: executing program 0 (id=1964): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) 291.081185ms ago: executing program 0 (id=1966): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000540)={[{@norecovery}, {@nogrpid}, {@grpjquota_path}, {@bh}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@inlinecrypt}, {@nodiscard}]}, 0xff, 0x468, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_batadv\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x9, 0x10001, 0xfffffff8, 0xff, 0x200, 0x3, 0xa9, 0x5}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @dev}, 0x2}}, 0x2e) close(r7) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) 0s ago: executing program 2 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00') write$FUSE_INIT(r2, &(0x7f00000006c0)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000006400)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9a7e5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4d30ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a1314ec3bf1929ad1ac844685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4fa0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c64e2645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43aa06951e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c138360c277ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fa421a39943513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b70fa8eae6fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b45896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f20000bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c6061be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x20000000, 0x0, 0x200000000000, 0x1}}}, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): SB disconnect, device number 52 [ 453.025896][ T6170] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 453.034751][ T6170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.042677][ T6170] usb 4-1: Product: syz [ 453.046568][ T6170] usb 4-1: Manufacturer: syz [ 453.050981][ T6170] usb 4-1: SerialNumber: syz [ 453.056127][ T6170] usb 4-1: config 0 descriptor?? [ 453.064882][ T7246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7246 comm=syz.1.1769 [ 453.096392][ T6170] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 453.102606][ T6170] usb 4-1: No valid video chain found. [ 453.144519][ T7248] syz.0.1770[7248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.144597][ T7248] syz.0.1770[7248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.158426][ T7248] loop0: detected capacity change from 0 to 128 [ 453.256229][ T7248] EXT4-fs (loop0): Test dummy encryption mode enabled [ 453.264013][ T7248] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 453.276450][ T7248] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038 (0x7fffffff) [ 453.606826][ T7256] loop2: detected capacity change from 0 to 2048 [ 453.677107][ T7256] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 454.069538][ T7265] loop0: detected capacity change from 0 to 256 [ 454.093081][ T7265] FAT-fs (loop0): Directory bread(block 64) failed [ 454.099685][ T7265] FAT-fs (loop0): Directory bread(block 65) failed [ 454.106442][ T7265] FAT-fs (loop0): Directory bread(block 66) failed [ 454.112801][ T7265] FAT-fs (loop0): Directory bread(block 67) failed [ 454.119264][ T7265] FAT-fs (loop0): Directory bread(block 68) failed [ 454.125595][ T7265] FAT-fs (loop0): Directory bread(block 69) failed [ 454.131989][ T7265] FAT-fs (loop0): Directory bread(block 70) failed [ 454.138310][ T7265] FAT-fs (loop0): Directory bread(block 71) failed [ 454.144619][ T7265] FAT-fs (loop0): Directory bread(block 72) failed [ 454.150962][ T7265] FAT-fs (loop0): Directory bread(block 73) failed [ 454.162430][ T7265] SELinux: policydb magic number 0x529abf7b does not match expected magic number 0xf97cff8c [ 454.172477][ T7265] SELinux: failed to load policy [ 454.458204][ T6871] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 454.609116][ T7271] loop2: detected capacity change from 0 to 1024 [ 454.687867][ T7271] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 454.698579][ T7271] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,auto_da_alloc,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 454.911509][ T7278] input: syz0 as /devices/virtual/input/input47 [ 455.014614][ T750] usb 4-1: USB disconnect, device number 54 [ 455.134112][ T434] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 455.148184][ T7283] syz.3.1779 uses obsolete (PF_INET,SOCK_PACKET) [ 455.289693][ T7288] loop3: detected capacity change from 0 to 512 [ 455.359531][ T7288] EXT4-fs (loop3): Ignoring removed bh option [ 455.376906][ T7288] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1780: inline data xattr refers to an external xattr inode [ 455.391574][ T434] usb 3-1: Using ep0 maxpacket: 16 [ 455.396018][ T7288] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1780: couldn't read orphan inode 12 (err -117) [ 455.432148][ T7288] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nodiscard,,errors=continue. Quota mode: writeback. [ 455.561170][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.579607][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.589254][ T434] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.602007][ T434] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 455.610896][ T434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.626014][ T434] usb 3-1: config 0 descriptor?? [ 455.683808][ T7292] loop1: detected capacity change from 0 to 512 [ 455.779775][ T7292] EXT4-fs (loop1): Ignoring removed bh option [ 455.923946][ T7292] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1781: inline data xattr refers to an external xattr inode [ 455.966556][ T7292] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1781: couldn't read orphan inode 12 (err -117) [ 455.995947][ T7292] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nodiscard,,errors=continue. Quota mode: writeback. [ 456.115477][ T7276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=7276 comm=syz.2.1776 [ 456.141308][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.156192][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.165656][ T7296] device bridge_slave_0 entered promiscuous mode [ 456.175579][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.182511][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.189805][ T7296] device bridge_slave_1 entered promiscuous mode [ 457.178515][ T7313] loop3: detected capacity change from 0 to 512 [ 457.220185][ T7276] loop2: detected capacity change from 0 to 40427 [ 457.226612][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.234231][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.245609][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.253705][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.261687][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.268539][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.275903][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.284383][ T7276] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 457.292562][ T7313] EXT4-fs (loop3): Ignoring removed oldalloc option [ 457.300135][ T7276] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 457.309023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.314079][ T7276] F2FS-fs (loop2): invalid crc value [ 457.322721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.324026][ T7313] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1786: inode #11614: comm syz.3.1786: iget: illegal inode # [ 457.330812][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.344136][ T7313] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1786: error while reading EA inode 11614 err=-117 [ 457.350482][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.358835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 457.363989][ T7276] F2FS-fs (loop2): Found nat_bits in checkpoint [ 457.370296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.386060][ T7313] EXT4-fs (loop3): 1 truncate cleaned up [ 457.391780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 457.404597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 457.415734][ T7313] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,stripe=0x0000000000000e49,jqfmt=vfsv0,oldalloc,,errors=continue. Quota mode: none. [ 457.425175][ T7276] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 457.451122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 457.451427][ T7276] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 457.461041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 457.475505][ T7313] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1786: inode #11614: comm syz.3.1786: iget: illegal inode # [ 457.484155][ T7296] device veth0_vlan entered promiscuous mode [ 457.490025][ T7313] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1786: error while reading EA inode 11614 err=-117 [ 457.501131][ T7296] device veth1_macvtap entered promiscuous mode [ 457.508106][ T6755] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 457.520987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 457.528783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 457.535814][ T434] usbhid 3-1:0.0: can't add hid device: -71 [ 457.543446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 457.551881][ T434] usbhid: probe of 3-1:0.0 failed with error -71 [ 457.552081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.561261][ T434] usb 3-1: USB disconnect, device number 53 [ 457.566448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 457.580849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.588557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 457.605454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 457.613708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 457.622177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 457.631232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.641961][ T10] device bridge_slave_1 left promiscuous mode [ 457.648002][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.655287][ T10] device bridge_slave_0 left promiscuous mode [ 457.661331][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.669170][ T10] device veth1_macvtap left promiscuous mode [ 457.674965][ T10] device veth0_vlan left promiscuous mode [ 457.682587][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 457.682601][ T30] audit: type=1400 audit(1729182816.373:7213): avc: denied { setopt } for pid=7310 comm="syz.3.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 457.795758][ T6755] usb 2-1: Using ep0 maxpacket: 16 [ 457.925782][ T7324] IPv6: sit1: Disabled Multicast RS [ 458.156130][ T6871] attempt to access beyond end of device [ 458.156130][ T6871] loop2: rw=524288, want=45072, limit=40427 [ 458.160199][ T7327] input: syz0 as /devices/virtual/input/input48 [ 458.177700][ T6871] attempt to access beyond end of device [ 458.177700][ T6871] loop2: rw=0, want=45072, limit=40427 [ 458.212854][ T8] attempt to access beyond end of device [ 458.212854][ T8] loop2: rw=2049, want=45120, limit=40427 [ 458.265556][ T7329] device syzkaller0 entered promiscuous mode [ 458.386180][ T6755] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 458.395041][ T6755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.415728][ T6755] usb 2-1: Product: syz [ 458.419713][ T6755] usb 2-1: Manufacturer: syz [ 458.424139][ T6755] usb 2-1: SerialNumber: syz [ 458.457493][ T6755] usb 2-1: config 0 descriptor?? [ 458.544311][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.551492][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.559012][ T7332] device bridge_slave_0 entered promiscuous mode [ 458.566664][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.573579][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.581169][ T7332] device bridge_slave_1 entered promiscuous mode [ 458.648915][ T7337] loop0: detected capacity change from 0 to 256 [ 458.679015][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.685891][ T7332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.693002][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.698185][ T434] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 458.699778][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.723525][ T7337] FAT-fs (loop0): Directory bread(block 64) failed [ 458.730407][ T6755] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 458.741933][ T6755] usb 2-1: Detected FT232H [ 458.746622][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.746626][ T7337] FAT-fs (loop0): Directory bread(block 65) failed [ 458.746690][ T7337] FAT-fs (loop0): Directory bread(block 66) failed [ 458.766772][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.767503][ T7337] FAT-fs (loop0): Directory bread(block 67) failed [ 458.780136][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.787193][ T7337] FAT-fs (loop0): Directory bread(block 68) failed [ 458.858735][ T7341] syz.4.1794[7341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.859092][ T7341] syz.4.1794[7341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.916658][ T7337] FAT-fs (loop0): Directory bread(block 69) failed [ 458.946218][ T434] usb 4-1: Using ep0 maxpacket: 32 [ 458.976339][ T7337] FAT-fs (loop0): Directory bread(block 70) failed [ 458.983022][ T7337] FAT-fs (loop0): Directory bread(block 71) failed [ 458.989754][ T7337] FAT-fs (loop0): Directory bread(block 72) failed [ 458.996268][ T7337] FAT-fs (loop0): Directory bread(block 73) failed [ 459.003505][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.011872][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.018738][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.027540][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.035759][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.042620][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.049889][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.057799][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.065806][ T434] usb 4-1: config 0 has no interfaces? [ 459.074839][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 459.085997][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 459.093772][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 459.101383][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 459.109543][ T7332] device veth0_vlan entered promiscuous mode [ 459.121828][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 459.130983][ T7332] device veth1_macvtap entered promiscuous mode [ 459.140168][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 459.150107][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 459.158722][ T7316] UDC core: couldn't find an available UDC or it's busy: -16 [ 459.166107][ T7316] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 459.196379][ T10] device bridge_slave_1 left promiscuous mode [ 459.202422][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.210054][ T10] device bridge_slave_0 left promiscuous mode [ 459.216069][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.223703][ T10] device veth1_macvtap left promiscuous mode [ 459.229680][ T434] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 459.229807][ T10] device veth0_vlan left promiscuous mode [ 459.238583][ T434] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.252003][ T434] usb 4-1: Product: syz [ 459.256045][ T434] usb 4-1: Manufacturer: syz [ 459.260432][ T30] audit: type=1326 audit(1729182817.943:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688ef71ff9 code=0x7ffc0000 [ 459.283676][ T434] usb 4-1: SerialNumber: syz [ 459.284403][ T30] audit: type=1326 audit(1729182817.943:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688ef71ff9 code=0x7ffc0000 [ 459.291348][ T434] usb 4-1: config 0 descriptor?? [ 459.311587][ T519] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 459.316868][ T30] audit: type=1326 audit(1729182817.943:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688ef71ff9 code=0x7ffc0000 [ 459.347412][ T30] audit: type=1326 audit(1729182817.943:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688ef71ff9 code=0x7ffc0000 [ 459.370911][ T30] audit: type=1326 audit(1729182817.943:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688ef71ff9 code=0x7ffc0000 [ 459.394393][ T6755] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 459.400953][ T30] audit: type=1326 audit(1729182817.943:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688ef71ff9 code=0x7ffc0000 [ 459.425034][ T30] audit: type=1326 audit(1729182817.943:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688ef71ff9 code=0x7ffc0000 [ 459.426362][ T6755] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 459.448688][ T30] audit: type=1326 audit(1729182817.943:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688ef71ff9 code=0x7ffc0000 [ 459.464013][ T6755] usb 2-1: USB disconnect, device number 44 [ 459.489285][ T30] audit: type=1326 audit(1729182817.943:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688ef71ff9 code=0x7ffc0000 [ 459.525998][ T6755] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 459.536545][ T6755] ftdi_sio 2-1:0.0: device disconnected [ 459.575797][ T20] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 459.615782][ T519] usb 1-1: Using ep0 maxpacket: 16 [ 459.746206][ T519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.758164][ T519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.767735][ T519] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 459.780402][ T519] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 459.789281][ T519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.798619][ T519] usb 1-1: config 0 descriptor?? [ 459.845777][ T20] usb 3-1: device descriptor read/64, error -71 [ 459.951023][ T7350] loop1: detected capacity change from 0 to 512 [ 460.026244][ T7350] EXT4-fs (loop1): Ignoring removed bh option [ 460.033337][ T7350] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1796: inline data xattr refers to an external xattr inode [ 460.048124][ T7350] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1796: couldn't read orphan inode 12 (err -117) [ 460.059930][ T7350] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nodiscard,,errors=continue. Quota mode: writeback. [ 460.350548][ T519] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input49 [ 460.363795][ T519] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 460.425939][ T20] usb 3-1: device descriptor read/64, error -71 [ 461.165932][ T20] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 461.248570][ T6755] usb 4-1: USB disconnect, device number 55 [ 461.278292][ T7370] loop3: detected capacity change from 0 to 512 [ 461.346060][ T7370] EXT4-fs (loop3): Unrecognized mount option "smackfsfloor=ext4" or missing value [ 461.435772][ T20] usb 3-1: device descriptor read/64, error -71 [ 461.535739][ T60] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 461.607719][ T7372] loop3: detected capacity change from 0 to 40427 [ 461.696102][ T7372] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 461.702354][ T7372] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 461.712555][ T7372] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 461.733128][ T7372] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 461.740285][ T7372] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 461.795785][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 461.825737][ T20] usb 3-1: device descriptor read/64, error -71 [ 461.884789][ T7378] FAULT_INJECTION: forcing a failure. [ 461.884789][ T7378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.897815][ T7378] CPU: 0 PID: 7378 Comm: syz.3.1801 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 461.907515][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.917407][ T7378] Call Trace: [ 461.920531][ T7378] [ 461.923308][ T7378] dump_stack_lvl+0x151/0x1c0 [ 461.927822][ T7378] ? io_uring_drop_tctx_refs+0x190/0x190 [ 461.933290][ T7378] ? kstrtouint_from_user+0x20a/0x2a0 [ 461.938511][ T7378] dump_stack+0x15/0x20 [ 461.942491][ T7378] should_fail+0x3c6/0x510 [ 461.946745][ T7378] should_fail_usercopy+0x1a/0x20 [ 461.951603][ T7378] _copy_to_user+0x20/0x90 [ 461.955856][ T7378] simple_read_from_buffer+0xc7/0x150 [ 461.961065][ T7378] proc_fail_nth_read+0x1a3/0x210 [ 461.965924][ T7378] ? proc_fault_inject_write+0x390/0x390 [ 461.971391][ T7378] ? fsnotify_perm+0x269/0x5b0 [ 461.975994][ T7378] ? security_file_permission+0x86/0xb0 [ 461.981370][ T7378] ? proc_fault_inject_write+0x390/0x390 [ 461.986846][ T7378] vfs_read+0x27d/0xd40 [ 461.990833][ T7378] ? kernel_read+0x1f0/0x1f0 [ 461.995258][ T7378] ? __kasan_check_write+0x14/0x20 [ 462.000209][ T7378] ? mutex_lock+0xb6/0x1e0 [ 462.004456][ T7378] ? wait_for_completion_killable_timeout+0x10/0x10 [ 462.011007][ T7378] ? __fdget_pos+0x2e7/0x3a0 [ 462.015426][ T7378] ? ksys_read+0x77/0x2c0 [ 462.019594][ T7378] ksys_read+0x199/0x2c0 [ 462.023673][ T7378] ? vfs_write+0x1110/0x1110 [ 462.028102][ T7378] ? debug_smp_processor_id+0x17/0x20 [ 462.033308][ T7378] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 462.039211][ T7378] __x64_sys_read+0x7b/0x90 [ 462.043549][ T7378] x64_sys_call+0x28/0x9a0 [ 462.047802][ T7378] do_syscall_64+0x3b/0xb0 [ 462.052400][ T7378] ? clear_bhb_loop+0x35/0x90 [ 462.056914][ T7378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 462.062641][ T7378] RIP: 0033:0x7fdc35b44a3c [ 462.066898][ T7378] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 462.086342][ T7378] RSP: 002b:00007fdc3477d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.094588][ T7378] RAX: ffffffffffffffda RBX: 00007fdc35cfe130 RCX: 00007fdc35b44a3c [ 462.102390][ T7378] RDX: 000000000000000f RSI: 00007fdc3477d0a0 RDI: 0000000000000009 [ 462.105855][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.110205][ T7378] RBP: 00007fdc3477d090 R08: 0000000000000000 R09: 0000000000000000 [ 462.110220][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.110231][ T7378] R13: 0000000000000000 R14: 00007fdc35cfe130 R15: 00007ffde81ffe28 [ 462.110249][ T7378] [ 462.144826][ T407] usb 1-1: USB disconnect, device number 54 [ 462.154482][ T20] usb usb3-port1: attempt power cycle [ 462.189875][ T7381] input: syz0 as /devices/virtual/input/input50 [ 462.232209][ T7385] syz.0.1804[7385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.232279][ T7385] syz.0.1804[7385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.243641][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.268189][ T7104] attempt to access beyond end of device [ 462.268189][ T7104] loop3: rw=2049, want=45104, limit=40427 [ 462.285734][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.301508][ T60] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 462.301523][ T7385] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1804'. [ 462.319682][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.328399][ T60] usb 5-1: config 0 descriptor?? [ 462.341033][ T7385] loop0: detected capacity change from 0 to 128 [ 462.416785][ T7385] EXT4-fs (loop0): Test dummy encryption mode enabled [ 462.448692][ T7385] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 462.478244][ T7385] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038 (0x7fffffff) [ 462.565762][ T20] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 462.725943][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 462.726034][ T30] audit: type=1326 audit(1729182821.343:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 462.801582][ T7368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=7368 comm=syz.4.1800 [ 462.833766][ T30] audit: type=1326 audit(1729182821.443:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 462.857718][ T30] audit: type=1326 audit(1729182821.543:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 462.888014][ T30] audit: type=1326 audit(1729182821.573:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 462.915779][ T20] usb 3-1: device descriptor read/8, error -71 [ 462.955866][ T30] audit: type=1326 audit(1729182821.593:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 463.019236][ T30] audit: type=1326 audit(1729182821.603:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 463.111040][ T30] audit: type=1326 audit(1729182821.793:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 463.139708][ T7397] loop1: detected capacity change from 0 to 1024 [ 463.152901][ T30] audit: type=1326 audit(1729182821.823:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 463.177049][ T30] audit: type=1326 audit(1729182821.843:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 463.201111][ T30] audit: type=1326 audit(1729182821.863:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.2.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f688ef71bfb code=0x7ffc0000 [ 463.215894][ T20] usb 3-1: device descriptor read/8, error -71 [ 463.230500][ T7397] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 463.252175][ T7397] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 463.273827][ T7405] loop0: detected capacity change from 0 to 1024 [ 463.286900][ T7397] JBD2: no valid journal superblock found [ 463.298054][ T7397] EXT4-fs (loop1): error loading journal [ 463.306503][ T7368] loop4: detected capacity change from 0 to 40427 [ 463.339486][ T7405] EXT4-fs (loop0): Mount option "norecovery" incompatible with ext2 [ 463.359534][ T7368] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 463.372083][ T7368] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 463.381386][ T7368] F2FS-fs (loop4): invalid crc value [ 463.404020][ T7368] F2FS-fs (loop4): Found nat_bits in checkpoint [ 463.515740][ T20] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 463.515975][ T7368] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 463.549827][ T7368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 463.827430][ T7408] loop1: detected capacity change from 0 to 512 [ 463.875777][ T60] usbhid 5-1:0.0: can't add hid device: -71 [ 463.881537][ T60] usbhid: probe of 5-1:0.0 failed with error -71 [ 463.888623][ T60] usb 5-1: USB disconnect, device number 55 [ 463.918881][ T7408] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 463.929755][ T7408] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038 (0x7fffffff) [ 463.943510][ T7408] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.1809: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 463.945883][ T20] usb 3-1: device descriptor read/8, error -71 [ 463.969659][ T7418] FAULT_INJECTION: forcing a failure. [ 463.969659][ T7418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.998186][ T7418] CPU: 0 PID: 7418 Comm: syz.3.1810 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 464.007904][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 464.017805][ T7418] Call Trace: [ 464.020921][ T7418] [ 464.023697][ T7418] dump_stack_lvl+0x151/0x1c0 [ 464.028211][ T7418] ? io_uring_drop_tctx_refs+0x190/0x190 [ 464.033680][ T7418] dump_stack+0x15/0x20 [ 464.037669][ T7418] should_fail+0x3c6/0x510 [ 464.041924][ T7418] should_fail_usercopy+0x1a/0x20 [ 464.046784][ T7418] _copy_from_user+0x20/0xd0 [ 464.051211][ T7418] __se_sys_mount+0x179/0x3b0 [ 464.055855][ T7418] ? __x64_sys_mount+0xd0/0xd0 [ 464.060456][ T7418] ? debug_smp_processor_id+0x17/0x20 [ 464.065665][ T7418] __x64_sys_mount+0xbf/0xd0 [ 464.070092][ T7418] x64_sys_call+0x49d/0x9a0 [ 464.074425][ T7418] do_syscall_64+0x3b/0xb0 [ 464.078680][ T7418] ? clear_bhb_loop+0x35/0x90 [ 464.083190][ T7418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 464.088927][ T7418] RIP: 0033:0x7fdc35b45ff9 [ 464.093172][ T7418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.112614][ T7418] RSP: 002b:00007fdc3477d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 464.120943][ T7418] RAX: ffffffffffffffda RBX: 00007fdc35cfe130 RCX: 00007fdc35b45ff9 [ 464.128756][ T7418] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 464.136566][ T7418] RBP: 00007fdc3477d090 R08: 0000000020000140 R09: 0000000000000000 [ 464.144376][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.152709][ T7418] R13: 0000000000000000 R14: 00007fdc35cfe130 R15: 00007ffde81ffe28 [ 464.160527][ T7418] [ 464.182234][ T7418] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 464.191078][ T7418] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 464.325798][ T20] usb 3-1: device descriptor read/8, error -71 [ 464.370352][ T7427] loop3: detected capacity change from 0 to 256 [ 464.445812][ T20] usb usb3-port1: unable to enumerate USB device [ 464.483540][ T7296] attempt to access beyond end of device [ 464.483540][ T7296] loop4: rw=524288, want=45072, limit=40427 [ 464.495454][ T7296] attempt to access beyond end of device [ 464.495454][ T7296] loop4: rw=0, want=45072, limit=40427 [ 464.515680][ T464] attempt to access beyond end of device [ 464.515680][ T464] loop4: rw=2049, want=45120, limit=40427 [ 464.515897][ T60] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 464.710962][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.717910][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.724914][ T7430] device bridge_slave_0 entered promiscuous mode [ 464.731687][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.738830][ T7430] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.746187][ T7430] device bridge_slave_1 entered promiscuous mode [ 464.789850][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.796721][ T7430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.803802][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.810593][ T7430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.832061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.839490][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.846972][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.856508][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.864621][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.871474][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.881497][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.889670][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.896510][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.909103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.920194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.933684][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.945882][ T60] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 464.947847][ T7430] device veth0_vlan entered promiscuous mode [ 464.961884][ T60] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 464.969033][ T7430] device veth1_macvtap entered promiscuous mode [ 464.976868][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.978083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.992812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.000232][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.007865][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.016477][ T60] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 465.028275][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.036594][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.046749][ T464] device bridge_slave_1 left promiscuous mode [ 465.053216][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.060801][ T464] device bridge_slave_0 left promiscuous mode [ 465.067321][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.075295][ T464] device veth1_macvtap left promiscuous mode [ 465.086076][ T7435] input: syz0 as /devices/virtual/input/input52 [ 465.088677][ T464] device veth0_vlan left promiscuous mode [ 465.233398][ T7437] loop4: detected capacity change from 0 to 2048 [ 465.421547][ T7441] loop0: detected capacity change from 0 to 16 [ 465.548598][ T7441] erofs: (device loop0): mounted with root inode @ nid 36. [ 465.625056][ T7437] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 465.634387][ T7444] device syzkaller0 entered promiscuous mode [ 465.780057][ T7446] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 465.795965][ T7446] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 465.808498][ T7446] EXT4-fs (loop4): This should not happen!! Data will be lost [ 465.808498][ T7446] [ 465.818443][ T7446] EXT4-fs (loop4): Total free blocks count 0 [ 465.824373][ T7446] EXT4-fs (loop4): Free/Dirty block details [ 465.830232][ T7446] EXT4-fs (loop4): free_blocks=2415919104 [ 465.837920][ T7446] EXT4-fs (loop4): dirty_blocks=16 [ 465.849388][ T7446] EXT4-fs (loop4): Block reservation details [ 465.856142][ T7446] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 466.458397][ T7463] FAULT_INJECTION: forcing a failure. [ 466.458397][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 466.470864][ T7463] CPU: 1 PID: 7463 Comm: syz.4.1822 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 466.480525][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 466.490515][ T7463] Call Trace: [ 466.493631][ T7463] [ 466.496409][ T7463] dump_stack_lvl+0x151/0x1c0 [ 466.500925][ T7463] ? io_uring_drop_tctx_refs+0x190/0x190 [ 466.506391][ T7463] dump_stack+0x15/0x20 [ 466.510380][ T7463] should_fail+0x3c6/0x510 [ 466.514635][ T7463] __should_failslab+0xa4/0xe0 [ 466.519235][ T7463] ? __proc_create+0x419/0xa00 [ 466.523835][ T7463] should_failslab+0x9/0x20 [ 466.528175][ T7463] slab_pre_alloc_hook+0x37/0xd0 [ 466.532949][ T7463] ? __proc_create+0x419/0xa00 [ 466.537549][ T7463] kmem_cache_alloc+0x44/0x200 [ 466.542150][ T7463] __proc_create+0x419/0xa00 [ 466.546576][ T7463] ? proc_symlink+0x290/0x290 [ 466.551090][ T7463] _proc_mkdir+0xd3/0x200 [ 466.555256][ T7463] ? __proc_create+0xa00/0xa00 [ 466.559852][ T7463] ? proc_net_ns_init+0x52/0x3a0 [ 466.564626][ T7463] proc_net_ns_init+0x29a/0x3a0 [ 466.569310][ T7463] ops_init+0x1cd/0x4a0 [ 466.573305][ T7463] setup_net+0x34b/0xb50 [ 466.577382][ T7463] ? copy_net_ns+0x5b0/0x5b0 [ 466.581808][ T7463] ? __kasan_kmalloc+0x9/0x10 [ 466.586322][ T7463] ? kmem_cache_alloc_trace+0x115/0x210 [ 466.591701][ T7463] ? copy_net_ns+0x188/0x5b0 [ 466.596129][ T7463] copy_net_ns+0x35f/0x5b0 [ 466.600384][ T7463] create_new_namespaces+0x416/0x670 [ 466.605503][ T7463] unshare_nsproxy_namespaces+0x126/0x180 [ 466.611058][ T7463] ksys_unshare+0x542/0xa00 [ 466.615404][ T7463] ? fput+0x1a/0x20 [ 466.619047][ T7463] ? unshare_fd+0x240/0x240 [ 466.623385][ T7463] ? debug_smp_processor_id+0x17/0x20 [ 466.628600][ T7463] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 466.634494][ T7463] __x64_sys_unshare+0x38/0x40 [ 466.639092][ T7463] x64_sys_call+0x728/0x9a0 [ 466.643433][ T7463] do_syscall_64+0x3b/0xb0 [ 466.647685][ T7463] ? clear_bhb_loop+0x35/0x90 [ 466.652199][ T7463] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 466.657934][ T7463] RIP: 0033:0x7f80d0ab3ff9 [ 466.662178][ T7463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.681621][ T7463] RSP: 002b:00007f80cf6eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 466.689948][ T7463] RAX: ffffffffffffffda RBX: 00007f80d0c6c130 RCX: 00007f80d0ab3ff9 [ 466.697763][ T7463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 466.705572][ T7463] RBP: 00007f80cf6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 466.713382][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.721199][ T7463] R13: 0000000000000000 R14: 00007f80d0c6c130 R15: 00007ffe84265f98 [ 466.729014][ T7463] [ 467.638184][ T7477] input: syz0 as /devices/virtual/input/input53 [ 467.654913][ T6755] usb 1-1: USB disconnect, device number 55 [ 467.699583][ T7481] loop0: detected capacity change from 0 to 512 [ 467.745111][ T7481] EXT4-fs (loop0): Ignoring removed bh option [ 467.777026][ T7481] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1827: inline data xattr refers to an external xattr inode [ 467.795926][ T7481] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1827: couldn't read orphan inode 12 (err -117) [ 467.820609][ T7481] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nodiscard,,errors=continue. Quota mode: writeback. [ 467.986339][ T7479] loop4: detected capacity change from 0 to 40427 [ 468.026935][ T7479] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 468.034527][ T7479] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 468.065794][ T7479] F2FS-fs (loop4): invalid crc value [ 468.157539][ T7479] F2FS-fs (loop4): Found nat_bits in checkpoint [ 468.311946][ T7487] device syzkaller0 entered promiscuous mode [ 468.358641][ T7479] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 468.365588][ T7479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 468.421438][ T7495] input: syz0 as /devices/virtual/input/input54 [ 468.497651][ T7496] futex_wake_op: syz.4.1828 tries to shift op by 32; fix this program [ 468.651581][ T7501] loop0: detected capacity change from 0 to 1024 [ 468.727692][ T7501] EXT4-fs (loop0): Mount option "norecovery" incompatible with ext2 [ 469.090292][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 469.090337][ T30] audit: type=1326 audit(1729182827.713:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.169976][ T30] audit: type=1326 audit(1729182827.713:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.215914][ T30] audit: type=1326 audit(1729182827.723:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.259615][ T30] audit: type=1326 audit(1729182827.723:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.285261][ T7509] loop4: detected capacity change from 0 to 256 [ 469.291691][ T30] audit: type=1326 audit(1729182827.723:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.315030][ T30] audit: type=1326 audit(1729182827.733:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.346052][ T30] audit: type=1326 audit(1729182827.733:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.378091][ T30] audit: type=1326 audit(1729182827.733:7334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.410218][ T7509] FAT-fs (loop4): Directory bread(block 64) failed [ 469.420171][ T7509] FAT-fs (loop4): Directory bread(block 65) failed [ 469.429537][ T7509] FAT-fs (loop4): Directory bread(block 66) failed [ 469.437856][ T7509] FAT-fs (loop4): Directory bread(block 67) failed [ 469.444272][ T7509] FAT-fs (loop4): Directory bread(block 68) failed [ 469.451102][ T7509] FAT-fs (loop4): Directory bread(block 69) failed [ 469.473142][ T30] audit: type=1326 audit(1729182827.743:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.496520][ T7509] FAT-fs (loop4): Directory bread(block 70) failed [ 469.502871][ T7509] FAT-fs (loop4): Directory bread(block 71) failed [ 469.517910][ T7509] FAT-fs (loop4): Directory bread(block 72) failed [ 469.535772][ T7509] FAT-fs (loop4): Directory bread(block 73) failed [ 469.552300][ T30] audit: type=1326 audit(1729182827.743:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bac2ff9 code=0x7ffc0000 [ 469.645009][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.652741][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.660571][ T7516] device bridge_slave_0 entered promiscuous mode [ 469.672340][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.680516][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.687917][ T7516] device bridge_slave_1 entered promiscuous mode [ 469.771069][ T7529] FAULT_INJECTION: forcing a failure. [ 469.771069][ T7529] name failslab, interval 1, probability 0, space 0, times 0 [ 469.783541][ T7529] CPU: 1 PID: 7529 Comm: syz.0.1839 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 469.793215][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 469.803106][ T7529] Call Trace: [ 469.806231][ T7529] [ 469.809009][ T7529] dump_stack_lvl+0x151/0x1c0 [ 469.813531][ T7529] ? io_uring_drop_tctx_refs+0x190/0x190 [ 469.818994][ T7529] dump_stack+0x15/0x20 [ 469.822981][ T7529] should_fail+0x3c6/0x510 [ 469.827251][ T7529] __should_failslab+0xa4/0xe0 [ 469.831835][ T7529] should_failslab+0x9/0x20 [ 469.836183][ T7529] slab_pre_alloc_hook+0x37/0xd0 [ 469.840950][ T7529] __kmalloc+0x6d/0x270 [ 469.844940][ T7529] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 469.850410][ T7529] ? genl_family_rcv_msg_attrs_parse+0xa5/0x290 [ 469.856484][ T7529] genl_family_rcv_msg_attrs_parse+0xa5/0x290 [ 469.862396][ T7529] genl_rcv_msg+0xbe9/0x1490 [ 469.866814][ T7529] ? genl_bind+0x370/0x370 [ 469.871066][ T7529] ? __kasan_check_read+0x11/0x20 [ 469.875925][ T7529] ? preempt_schedule_irq+0xe7/0x140 [ 469.881044][ T7529] ? __cond_resched+0x20/0x20 [ 469.885556][ T7529] ? __schedule+0xcd4/0x1590 [ 469.889987][ T7529] ? irqentry_exit_cond_resched+0x2a/0x30 [ 469.895540][ T7529] ? irqentry_exit+0x30/0x40 [ 469.899965][ T7529] ? sysvec_reschedule_ipi+0x7d/0x150 [ 469.905174][ T7529] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 469.910643][ T7529] ? nl80211_req_set_reg+0x210/0x210 [ 469.915761][ T7529] ? netlink_rcv_skb+0x1b0/0x410 [ 469.920645][ T7529] ? genl_rcv_msg+0x6/0x1490 [ 469.925069][ T7529] netlink_rcv_skb+0x1cf/0x410 [ 469.929666][ T7529] ? genl_bind+0x370/0x370 [ 469.933919][ T7529] ? netlink_ack+0xb10/0xb10 [ 469.938346][ T7529] ? __netlink_lookup+0x37b/0x3a0 [ 469.943206][ T7529] genl_rcv+0x28/0x40 [ 469.947026][ T7529] netlink_unicast+0x8df/0xac0 [ 469.951627][ T7529] ? netlink_detachskb+0x90/0x90 [ 469.956398][ T7529] ? security_netlink_send+0x7b/0xa0 [ 469.961519][ T7529] netlink_sendmsg+0xa0a/0xd20 [ 469.966122][ T7529] ? netlink_getsockopt+0x560/0x560 [ 469.971154][ T7529] ? security_socket_sendmsg+0x82/0xb0 [ 469.976445][ T7529] ? netlink_getsockopt+0x560/0x560 [ 469.981486][ T7529] ____sys_sendmsg+0x59e/0x8f0 [ 469.986084][ T7529] ? __sys_sendmsg_sock+0x40/0x40 [ 469.990943][ T7529] ? import_iovec+0xe5/0x120 [ 469.995368][ T7529] ___sys_sendmsg+0x252/0x2e0 [ 469.999883][ T7529] ? __sys_sendmsg+0x260/0x260 [ 470.004483][ T7529] ? __switch_to+0x62a/0x1190 [ 470.009004][ T7529] __se_sys_sendmsg+0x19a/0x260 [ 470.013689][ T7529] ? __x64_sys_sendmsg+0x90/0x90 [ 470.018453][ T7529] ? ksys_write+0x260/0x2c0 [ 470.022882][ T7529] ? __kasan_check_write+0x14/0x20 [ 470.027825][ T7529] ? switch_fpu_return+0x15f/0x2e0 [ 470.032775][ T7529] __x64_sys_sendmsg+0x7b/0x90 [ 470.037379][ T7529] x64_sys_call+0x16a/0x9a0 [ 470.041719][ T7529] do_syscall_64+0x3b/0xb0 [ 470.045967][ T7529] ? clear_bhb_loop+0x35/0x90 [ 470.050482][ T7529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 470.056212][ T7529] RIP: 0033:0x7fdd9bac2ff9 [ 470.060468][ T7529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.079901][ T7529] RSP: 002b:00007fdd9a6fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.088146][ T7529] RAX: ffffffffffffffda RBX: 00007fdd9bc7b130 RCX: 00007fdd9bac2ff9 [ 470.095954][ T7529] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000008 [ 470.103852][ T7529] RBP: 00007fdd9a6fa090 R08: 0000000000000000 R09: 0000000000000000 [ 470.111666][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.119475][ T7529] R13: 0000000000000000 R14: 00007fdd9bc7b130 R15: 00007ffcf9b358b8 [ 470.127291][ T7529] [ 470.166102][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.172972][ T7516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.180076][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.186856][ T7516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.195858][ T2938] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 470.215979][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.223460][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.230761][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.241844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.250106][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.256961][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.302857][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.342887][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.349771][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.366748][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.374664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.392392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 470.403775][ T7516] device veth0_vlan entered promiscuous mode [ 470.410158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.252729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.259940][ T2938] usb 5-1: Using ep0 maxpacket: 16 [ 471.270325][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.294919][ T7516] device veth1_macvtap entered promiscuous mode [ 471.311820][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.326140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.341380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.361041][ T7544] loop3: detected capacity change from 0 to 1024 [ 471.370812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.378710][ T2938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.389503][ T2938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.406620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.414608][ T2938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.427851][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.436148][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.444235][ T2938] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.455899][ T2938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.470759][ T7544] EXT4-fs (loop3): Mount option "norecovery" incompatible with ext2 [ 471.489118][ T7540] loop0: detected capacity change from 0 to 40427 [ 471.495454][ T2938] usb 5-1: config 0 descriptor?? [ 471.503952][ T464] device bridge_slave_1 left promiscuous mode [ 471.510088][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.517542][ T464] device bridge_slave_0 left promiscuous mode [ 471.523477][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.530356][ T802] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 471.538430][ T464] device veth1_macvtap left promiscuous mode [ 471.544244][ T464] device veth0_vlan left promiscuous mode [ 471.586520][ T7540] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 471.592682][ T7540] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 471.614659][ T7540] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 471.655451][ T7540] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 471.662458][ T7540] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 472.015780][ T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.042656][ T2938] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000B/input/input55 [ 472.085568][ T2938] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 472.365812][ T802] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 472.374678][ T802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.388083][ T802] usb 2-1: Product: syz [ 472.392109][ T802] usb 2-1: Manufacturer: syz [ 472.401584][ T802] usb 2-1: SerialNumber: syz [ 472.410946][ T802] usb 2-1: config 0 descriptor?? [ 472.565847][ T802] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 472.577444][ T6880] attempt to access beyond end of device [ 472.577444][ T6880] loop0: rw=2049, want=45104, limit=40427 [ 472.666564][ T6755] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 472.668706][ T7569] loop2: detected capacity change from 0 to 256 [ 472.702013][ T7571] input: syz0 as /devices/virtual/input/input56 [ 472.717367][ T7569] FAT-fs (loop2): Directory bread(block 64) failed [ 472.723868][ T802] usb 2-1: USB disconnect, device number 45 [ 472.724194][ T7569] FAT-fs (loop2): Directory bread(block 65) failed [ 472.736935][ T7569] FAT-fs (loop2): Directory bread(block 66) failed [ 472.744888][ T7569] FAT-fs (loop2): Directory bread(block 67) failed [ 472.751740][ T7569] FAT-fs (loop2): Directory bread(block 68) failed [ 472.758488][ T7569] FAT-fs (loop2): Directory bread(block 69) failed [ 472.764908][ T7569] FAT-fs (loop2): Directory bread(block 70) failed [ 472.771429][ T7569] FAT-fs (loop2): Directory bread(block 71) failed [ 472.778399][ T7569] FAT-fs (loop2): Directory bread(block 72) failed [ 472.784758][ T7569] FAT-fs (loop2): Directory bread(block 73) failed [ 472.945746][ T6755] usb 4-1: device descriptor read/64, error -71 [ 472.993746][ T7573] loop0: detected capacity change from 0 to 128 [ 473.075774][ T519] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 473.295214][ T7578] loop1: detected capacity change from 0 to 512 [ 473.315739][ T519] usb 3-1: Using ep0 maxpacket: 16 [ 473.326694][ T7578] EXT4-fs (loop1): Ignoring removed bh option [ 473.333733][ T7578] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1853: inline data xattr refers to an external xattr inode [ 473.348595][ T6755] usb 4-1: device descriptor read/64, error -71 [ 473.348701][ T7578] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1853: couldn't read orphan inode 12 (err -117) [ 473.366482][ T7578] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nodiscard,,errors=continue. Quota mode: writeback. [ 473.420385][ T802] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 473.445784][ T519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.456531][ T519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.466228][ T519] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 473.479217][ T519] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 473.673567][ T519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.686227][ T750] usb 5-1: USB disconnect, device number 56 [ 473.687812][ T519] usb 3-1: config 0 descriptor?? [ 473.725744][ T6755] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 473.740786][ T802] usb 1-1: Using ep0 maxpacket: 16 [ 473.905968][ T802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.915915][ T802] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 473.924659][ T802] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 473.933521][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.941869][ T802] usb 1-1: config 0 descriptor?? [ 473.995765][ T6755] usb 4-1: device descriptor read/64, error -71 [ 474.186857][ T519] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000C/input/input57 [ 474.221269][ T519] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 474.395761][ T6755] usb 4-1: device descriptor read/64, error -71 [ 474.559157][ T750] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 474.730576][ T6755] usb usb4-port1: attempt power cycle [ 474.730914][ T7592] FAULT_INJECTION: forcing a failure. [ 474.730914][ T7592] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 474.745388][ T7594] loop4: detected capacity change from 0 to 512 [ 474.749121][ T7592] CPU: 1 PID: 7592 Comm: syz.0.1852 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 474.764779][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 474.774659][ T7592] Call Trace: [ 474.777779][ T7592] [ 474.780557][ T7592] dump_stack_lvl+0x151/0x1c0 [ 474.785070][ T7592] ? io_uring_drop_tctx_refs+0x190/0x190 [ 474.790536][ T7592] ? __kasan_slab_alloc+0x63/0xe0 [ 474.795398][ T7592] dump_stack+0x15/0x20 [ 474.799389][ T7592] should_fail+0x3c6/0x510 [ 474.803641][ T7592] should_fail_alloc_page+0x5a/0x80 [ 474.808675][ T7592] prepare_alloc_pages+0x15c/0x700 [ 474.813626][ T7592] ? __alloc_pages_bulk+0xe40/0xe40 [ 474.818660][ T7592] __alloc_pages+0x18c/0x8f0 [ 474.823082][ T7592] ? prep_new_page+0x110/0x110 [ 474.827684][ T7592] ? __kasan_kmalloc+0x9/0x10 [ 474.832197][ T7592] ? __kmalloc+0x13a/0x270 [ 474.836449][ T7592] ? __vmalloc_node_range+0x2d6/0x8d0 [ 474.841658][ T7592] __vmalloc_node_range+0x482/0x8d0 [ 474.846693][ T7592] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 474.852070][ T7592] __vmalloc+0x7a/0x90 [ 474.855978][ T7592] ? bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 474.861360][ T7592] bpf_prog_alloc_no_stats+0x3b/0x2f0 [ 474.866570][ T7592] ? bpf_prog_alloc+0x15/0x1e0 [ 474.871172][ T7592] bpf_prog_alloc+0x1f/0x1e0 [ 474.875599][ T7592] bpf_prog_load+0x800/0x1b50 [ 474.880108][ T7592] ? map_freeze+0x370/0x370 [ 474.884448][ T7592] ? selinux_bpf+0xcb/0x100 [ 474.888785][ T7592] ? security_bpf+0x82/0xb0 [ 474.893125][ T7592] __sys_bpf+0x4bc/0x760 [ 474.897202][ T7592] ? fput_many+0x160/0x1b0 [ 474.901456][ T7592] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 474.906666][ T7592] ? debug_smp_processor_id+0x17/0x20 [ 474.911873][ T7592] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 474.917776][ T7592] __x64_sys_bpf+0x7c/0x90 [ 474.922025][ T7592] x64_sys_call+0x87f/0x9a0 [ 474.926366][ T7592] do_syscall_64+0x3b/0xb0 [ 474.930617][ T7592] ? clear_bhb_loop+0x35/0x90 [ 474.935129][ T7592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 474.940857][ T7592] RIP: 0033:0x7fdd9bac2ff9 [ 474.945113][ T7592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.964554][ T7592] RSP: 002b:00007fdd9a71b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.972797][ T7592] RAX: ffffffffffffffda RBX: 00007fdd9bc7b058 RCX: 00007fdd9bac2ff9 [ 474.980609][ T7592] RDX: 0000000000000080 RSI: 0000000020000280 RDI: 0000000000000005 [ 474.988419][ T7592] RBP: 00007fdd9a71b090 R08: 0000000000000000 R09: 0000000000000000 [ 474.996237][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.004044][ T7592] R13: 0000000000000001 R14: 00007fdd9bc7b058 R15: 00007ffcf9b358b8 [ 475.011861][ T7592] [ 475.068557][ T7594] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.1856: corrupted inode contents [ 475.080431][ T7594] EXT4-fs error (device loop4): ext4_dirty_inode:6038: inode #3: comm syz.4.1856: mark_inode_dirty error [ 475.092512][ T7594] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.1856: corrupted inode contents [ 475.104364][ T7594] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.1856: mark_inode_dirty error [ 475.115900][ T7594] __quota_error: 56 callbacks suppressed [ 475.115916][ T7594] Quota error (device loop4): write_blk: dquota write failed [ 475.128706][ T7594] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 475.138583][ T7594] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.1856: Failed to acquire dquot type 0 [ 475.150243][ T7594] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.1856: corrupted inode contents [ 475.162023][ T7594] EXT4-fs error (device loop4): ext4_dirty_inode:6038: inode #16: comm syz.4.1856: mark_inode_dirty error [ 475.173391][ T7594] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.1856: corrupted inode contents [ 475.185419][ T7594] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.1856: mark_inode_dirty error [ 475.196798][ T7594] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.1856: corrupted inode contents [ 475.208707][ T7594] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 475.217293][ T7594] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.1856: corrupted inode contents [ 475.229105][ T7594] EXT4-fs error (device loop4): ext4_truncate:4303: inode #16: comm syz.4.1856: mark_inode_dirty error [ 475.240171][ T7594] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 475.249644][ T7594] EXT4-fs (loop4): 1 truncate cleaned up [ 475.255392][ T7594] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 475.266539][ T7594] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 475.267845][ T7598] loop3: detected capacity change from 0 to 1024 [ 475.284770][ T30] audit: type=1400 audit(1729182833.963:7393): avc: denied { read } for pid=7593 comm="syz.4.1856" name="usbmon0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 475.308144][ T30] audit: type=1400 audit(1729182833.963:7394): avc: denied { open } for pid=7593 comm="syz.4.1856" path="/dev/usbmon0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 475.332102][ T30] audit: type=1400 audit(1729182833.963:7395): avc: denied { ioctl } for pid=7593 comm="syz.4.1856" path="/dev/usbmon0" dev="devtmpfs" ino=135 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 475.388152][ T7598] EXT4-fs (loop3): Mount option "norecovery" incompatible with ext2 [ 475.435821][ T750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.446712][ T750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.456487][ T750] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 475.465403][ T750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.474216][ T750] usb 2-1: config 0 descriptor?? [ 475.677596][ T30] audit: type=1326 audit(1729182834.323:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc35b45ff9 code=0x7ffc0000 [ 475.806517][ T30] audit: type=1326 audit(1729182834.323:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc35b45ff9 code=0x7ffc0000 [ 475.878281][ T583] usb 3-1: USB disconnect, device number 58 [ 475.932218][ T30] audit: type=1326 audit(1729182834.323:7398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdc35b45ff9 code=0x7ffc0000 [ 475.960881][ T7607] loop2: detected capacity change from 0 to 128 [ 475.962042][ T30] audit: type=1326 audit(1729182834.323:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc35b45ff9 code=0x7ffc0000 [ 475.991179][ T30] audit: type=1326 audit(1729182834.323:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc35b45ff9 code=0x7ffc0000 [ 475.997179][ T750] hid-led 0003:1D34:000A.000D: unknown main item tag 0x0 [ 476.129994][ T7613] input: syz0 as /devices/virtual/input/input59 [ 476.139798][ T519] usb 1-1: USB disconnect, device number 56 [ 476.305823][ T750] hid-led: probe of 0003:1D34:000A.000D failed with error -71 [ 476.330066][ T750] usb 2-1: USB disconnect, device number 46 [ 476.422233][ T7618] syz.3.1862[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.422311][ T7618] syz.3.1862[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.525757][ T7622] FAULT_INJECTION: forcing a failure. [ 476.525757][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.549938][ T7622] CPU: 1 PID: 7622 Comm: syz.4.1864 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 476.559642][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.569540][ T7622] Call Trace: [ 476.572660][ T7622] [ 476.575439][ T7622] dump_stack_lvl+0x151/0x1c0 [ 476.579951][ T7622] ? io_uring_drop_tctx_refs+0x190/0x190 [ 476.585418][ T7622] dump_stack+0x15/0x20 [ 476.589412][ T7622] should_fail+0x3c6/0x510 [ 476.593665][ T7622] should_fail_usercopy+0x1a/0x20 [ 476.598524][ T7622] _copy_to_user+0x20/0x90 [ 476.602778][ T7622] simple_read_from_buffer+0xc7/0x150 [ 476.607991][ T7622] proc_fail_nth_read+0x1a3/0x210 [ 476.612844][ T7622] ? proc_fault_inject_write+0x390/0x390 [ 476.618309][ T7622] ? fsnotify_perm+0x269/0x5b0 [ 476.622913][ T7622] ? security_file_permission+0x86/0xb0 [ 476.628290][ T7622] ? proc_fault_inject_write+0x390/0x390 [ 476.633761][ T7622] vfs_read+0x27d/0xd40 [ 476.637757][ T7622] ? kernel_read+0x1f0/0x1f0 [ 476.642177][ T7622] ? __kasan_check_write+0x14/0x20 [ 476.647123][ T7622] ? mutex_lock+0xb6/0x1e0 [ 476.651377][ T7622] ? wait_for_completion_killable_timeout+0x10/0x10 [ 476.657803][ T7622] ? __fdget_pos+0x2e7/0x3a0 [ 476.662226][ T7622] ? ksys_read+0x77/0x2c0 [ 476.666394][ T7622] ksys_read+0x199/0x2c0 [ 476.670469][ T7622] ? anon_inode_getfd+0x40/0x40 [ 476.675158][ T7622] ? vfs_write+0x1110/0x1110 [ 476.679585][ T7622] ? __kasan_check_write+0x14/0x20 [ 476.684530][ T7622] ? switch_fpu_return+0x15f/0x2e0 [ 476.689478][ T7622] __x64_sys_read+0x7b/0x90 [ 476.693818][ T7622] x64_sys_call+0x28/0x9a0 [ 476.698077][ T7622] do_syscall_64+0x3b/0xb0 [ 476.702323][ T7622] ? clear_bhb_loop+0x35/0x90 [ 476.706836][ T7622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 476.712564][ T7622] RIP: 0033:0x7f80d0ab2a3c [ 476.716817][ T7622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 476.736257][ T7622] RSP: 002b:00007f80cf6eb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.744503][ T7622] RAX: ffffffffffffffda RBX: 00007f80d0c6c130 RCX: 00007f80d0ab2a3c [ 476.752314][ T7622] RDX: 000000000000000f RSI: 00007f80cf6eb0a0 RDI: 0000000000000006 [ 476.760131][ T7622] RBP: 00007f80cf6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 476.767937][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.775749][ T7622] R13: 0000000000000001 R14: 00007f80d0c6c130 R15: 00007ffe84265f98 [ 476.783566][ T7622] [ 476.786633][ T519] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 476.838432][ T7624] input: syz0 as /devices/virtual/input/input60 [ 477.065739][ T519] usb 1-1: Using ep0 maxpacket: 16 [ 477.185813][ T519] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.202562][ T519] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 477.221747][ T519] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 477.241255][ T519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.253153][ T519] usb 1-1: config 0 descriptor?? [ 477.405857][ T750] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 477.665762][ T750] usb 2-1: Using ep0 maxpacket: 16 [ 477.785810][ T750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.796666][ T750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.806153][ T750] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 477.815112][ T750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.823832][ T750] usb 2-1: config 0 descriptor?? [ 478.015620][ T7650] loop2: detected capacity change from 0 to 1024 [ 478.057191][ T7650] EXT4-fs (loop2): Mount option "norecovery" incompatible with ext2 [ 478.209154][ T7654] syz.2.1873[7654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.209474][ T7654] syz.2.1873[7654] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.412346][ T7658] input: syz0 as /devices/virtual/input/input61 [ 478.429602][ T60] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 478.665774][ T750] usbhid 2-1:0.0: can't add hid device: -71 [ 478.671618][ T750] usbhid: probe of 2-1:0.0 failed with error -71 [ 478.677871][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 478.686108][ T750] usb 2-1: USB disconnect, device number 47 [ 478.835848][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.839183][ T7665] loop4: detected capacity change from 0 to 40427 [ 478.855451][ T60] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 478.877360][ T7665] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 478.884986][ T7665] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 478.898999][ T60] usb 4-1: config 1 has no interface number 1 [ 478.904493][ T7665] F2FS-fs (loop4): Found nat_bits in checkpoint [ 478.905022][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 478.943863][ T7665] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 478.950834][ T7665] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 478.974973][ T60] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.986057][ T60] usb 4-1: config 1 interface 2 has no altsetting 0 [ 478.994091][ T7674] loop2: detected capacity change from 0 to 1024 [ 479.011079][ T7674] EXT4-fs (loop2): Unrecognized mount option "obj_user=resuid" or missing value [ 479.157828][ T7677] FAULT_INJECTION: forcing a failure. [ 479.157828][ T7677] name failslab, interval 1, probability 0, space 0, times 0 [ 479.170536][ T7677] CPU: 1 PID: 7677 Comm: syz.4.1878 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 479.180195][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 479.190091][ T7677] Call Trace: [ 479.193213][ T7677] [ 479.195992][ T7677] dump_stack_lvl+0x151/0x1c0 [ 479.200504][ T7677] ? io_uring_drop_tctx_refs+0x190/0x190 [ 479.205972][ T7677] ? __kasan_check_read+0x11/0x20 [ 479.210837][ T7677] dump_stack+0x15/0x20 [ 479.214827][ T7677] should_fail+0x3c6/0x510 [ 479.219079][ T7677] __should_failslab+0xa4/0xe0 [ 479.223675][ T7677] ? security_inode_alloc+0x29/0x120 [ 479.228796][ T7677] should_failslab+0x9/0x20 [ 479.233135][ T7677] slab_pre_alloc_hook+0x37/0xd0 [ 479.237911][ T7677] ? security_inode_alloc+0x29/0x120 [ 479.243035][ T7677] kmem_cache_alloc+0x44/0x200 [ 479.247635][ T7677] security_inode_alloc+0x29/0x120 [ 479.249786][ T519] usb 1-1: USB disconnect, device number 57 [ 479.252577][ T7677] inode_init_always+0x76d/0x9d0 [ 479.252602][ T7677] ? f2fs_quota_off+0x1c0/0x1c0 [ 479.267767][ T7677] new_inode_pseudo+0x93/0x220 [ 479.272368][ T7677] new_inode+0x28/0x1c0 [ 479.275420][ T7680] input: syz0 as /devices/virtual/input/input62 [ 479.276357][ T7677] f2fs_new_inode+0x10e/0x1410 [ 479.276380][ T7677] ? asm_sysvec_call_function_single+0x1b/0x20 [ 479.276398][ T7677] ? f2fs_get_link+0x110/0x110 [ 479.276413][ T7677] ? f2fs_dquot_initialize+0xd/0x20 [ 479.302662][ T7677] f2fs_mkdir+0x12f/0x570 [ 479.306825][ T7677] ? selinux_inode_mkdir+0x22/0x30 [ 479.311771][ T7677] vfs_mkdir+0x3f6/0x610 [ 479.315851][ T7677] do_mkdirat+0x1eb/0x450 [ 479.320015][ T7677] ? vfs_mkdir+0x610/0x610 [ 479.324267][ T7677] ? getname_flags+0x1fd/0x520 [ 479.328867][ T7677] ? switch_fpu_return+0x15f/0x2e0 [ 479.333815][ T7677] __x64_sys_mkdirat+0x89/0xa0 [ 479.338416][ T7677] x64_sys_call+0x6c6/0x9a0 [ 479.342753][ T7677] do_syscall_64+0x3b/0xb0 [ 479.347005][ T7677] ? clear_bhb_loop+0x35/0x90 [ 479.351519][ T7677] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 479.357248][ T7677] RIP: 0033:0x7f80d0ab3ff9 [ 479.361501][ T7677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.380944][ T7677] RSP: 002b:00007f80cf6eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 479.389284][ T7677] RAX: ffffffffffffffda RBX: 00007f80d0c6c130 RCX: 00007f80d0ab3ff9 [ 479.397093][ T7677] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 479.404903][ T7677] RBP: 00007f80cf6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 479.412719][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.420528][ T7677] R13: 0000000000000000 R14: 00007f80d0c6c130 R15: 00007ffe84265f98 [ 479.428346][ T7677] [ 479.600875][ T60] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.611530][ T7674] loop2: detected capacity change from 0 to 256 [ 479.622886][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.631304][ T60] usb 4-1: Product: syz [ 479.676852][ T7674] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 479.679585][ T60] usb 4-1: Manufacturer: syz [ 479.701723][ T60] usb 4-1: SerialNumber: syz [ 479.905011][ T7685] loop1: detected capacity change from 0 to 512 [ 479.958223][ T7685] EXT4-fs (loop1): Ignoring removed bh option [ 479.969098][ T7690] loop4: detected capacity change from 0 to 512 [ 479.998533][ T7685] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1884: inline data xattr refers to an external xattr inode [ 479.998793][ T7652] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 480.033086][ T7690] EXT4-fs (loop4): Ignoring removed bh option [ 480.049625][ T7685] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1884: couldn't read orphan inode 12 (err -117) [ 480.067071][ T7685] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nodiscard,,errors=continue. Quota mode: writeback. [ 480.089686][ T7690] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1882: inline data xattr refers to an external xattr inode [ 480.104403][ T7652] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 480.112646][ T7690] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1882: couldn't read orphan inode 12 (err -117) [ 480.124962][ T7690] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nodiscard,,errors=continue. Quota mode: writeback. [ 480.480508][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.487570][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.494692][ T7698] device bridge_slave_0 entered promiscuous mode [ 480.505576][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.513580][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.521801][ T60] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 480.529373][ T60] usb 4-1: selecting invalid altsetting 0 [ 480.539176][ T7698] device bridge_slave_1 entered promiscuous mode [ 480.595818][ T802] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 480.625637][ T60] usb 4-1: USB disconnect, device number 59 [ 480.730288][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 480.820755][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.827657][ T7698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.834726][ T7698] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.841526][ T7698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.871138][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.878820][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.886397][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.895128][ T7712] loop4: detected capacity change from 0 to 1024 [ 480.902326][ T7712] EXT4-fs (loop4): Mount option "norecovery" incompatible with ext2 [ 480.913831][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.965733][ T802] usb 1-1: Using ep0 maxpacket: 16 [ 481.029262][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.036162][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.106267][ T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.133832][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.142133][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.149000][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.156703][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.164616][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.180517][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 481.188763][ T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.193061][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.208549][ T802] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 481.212472][ T7698] device veth0_vlan entered promiscuous mode [ 481.223498][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 481.231750][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.235795][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.241073][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.268935][ T802] usb 1-1: config 0 descriptor?? [ 481.299778][ T7716] syz.4.1890[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.300086][ T7716] syz.4.1890[7716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.325430][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 481.325533][ T30] audit: type=1326 audit(1729182840.003:7468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.451339][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.452634][ T30] audit: type=1326 audit(1729182840.003:7469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.481690][ T30] audit: type=1326 audit(1729182840.003:7470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.505373][ T30] audit: type=1326 audit(1729182840.003:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.538537][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.543063][ T30] audit: type=1326 audit(1729182840.003:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.547427][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.580024][ T1076] device bridge_slave_1 left promiscuous mode [ 481.586508][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.593422][ T30] audit: type=1326 audit(1729182840.003:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.616891][ T1076] device bridge_slave_0 left promiscuous mode [ 481.622913][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.629646][ T30] audit: type=1326 audit(1729182840.053:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.687948][ T30] audit: type=1326 audit(1729182840.053:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.715465][ T30] audit: type=1326 audit(1729182840.063:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.777961][ T30] audit: type=1326 audit(1729182840.063:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.4.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 481.801354][ T1076] device veth1_macvtap left promiscuous mode [ 481.802243][ T7725] loop4: detected capacity change from 0 to 128 [ 481.807727][ T1076] device veth0_vlan left promiscuous mode [ 481.865820][ T7725] EXT4-fs error (device loop4): ext4_fill_super:4831: inode #2: comm syz.4.1893: iget: checksum invalid [ 481.880406][ T7725] EXT4-fs (loop4): get root inode failed [ 481.886231][ T7725] EXT4-fs (loop4): mount failed [ 481.909369][ T7698] device veth1_macvtap entered promiscuous mode [ 481.920507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 481.928160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 481.936563][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 481.957381][ T7725] loop4: detected capacity change from 0 to 512 [ 481.969681][ T7723] loop1: detected capacity change from 0 to 40427 [ 481.972735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 481.977024][ T434] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 481.989524][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.003772][ T7725] EXT4-fs (loop4): Test dummy encryption mode enabled [ 482.006124][ T7728] input: syz0 as /devices/virtual/input/input63 [ 482.019955][ T7725] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.1893: invalid block [ 482.031614][ T7725] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1893: couldn't read orphan inode 11 (err -117) [ 482.046563][ T7723] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 482.054116][ T7723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 482.058595][ T7725] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 482.166827][ T7723] F2FS-fs (loop1): Found nat_bits in checkpoint [ 482.203729][ T7723] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 482.210757][ T7723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 482.225748][ T434] usb 4-1: Using ep0 maxpacket: 16 [ 482.396155][ T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.491535][ T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.501829][ T434] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 482.510950][ T434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.522695][ T434] usb 4-1: config 0 descriptor?? [ 482.809616][ T7737] overlayfs: invalid origin (0000) [ 482.886470][ T7742] loop4: detected capacity change from 0 to 256 [ 482.921923][ T6161] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 482.921945][ T6161] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 482.930715][ T6161] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 482.943349][ T6161] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 482.951958][ T6161] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 482.959549][ T6161] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 482.967043][ T6161] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 482.984991][ T7742] 9pnet: p9_fd_create_unix (7742): problem connecting socket: ./file0: -111 [ 483.155773][ T802] usbhid 1-1:0.0: can't add hid device: -71 [ 483.161565][ T802] usbhid: probe of 1-1:0.0 failed with error -71 [ 483.213009][ T802] usb 1-1: USB disconnect, device number 58 [ 483.306141][ T6755] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 483.476516][ T7759] FAULT_INJECTION: forcing a failure. [ 483.476516][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 483.489249][ T7759] CPU: 1 PID: 7759 Comm: syz.1.1896 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 483.498954][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 483.508847][ T7759] Call Trace: [ 483.511973][ T7759] [ 483.514750][ T7759] dump_stack_lvl+0x151/0x1c0 [ 483.519263][ T7759] ? io_uring_drop_tctx_refs+0x190/0x190 [ 483.524731][ T7759] ? __kasan_check_write+0x14/0x20 [ 483.529680][ T7759] dump_stack+0x15/0x20 [ 483.533670][ T7759] should_fail+0x3c6/0x510 [ 483.537924][ T7759] __should_failslab+0xa4/0xe0 [ 483.542521][ T7759] ? __alloc_file+0x29/0x2a0 [ 483.546950][ T7759] should_failslab+0x9/0x20 [ 483.551291][ T7759] slab_pre_alloc_hook+0x37/0xd0 [ 483.556065][ T7759] ? __alloc_file+0x29/0x2a0 [ 483.560487][ T7759] kmem_cache_alloc+0x44/0x200 [ 483.565088][ T7759] ? _raw_spin_trylock_bh+0x190/0x190 [ 483.570298][ T7759] __alloc_file+0x29/0x2a0 [ 483.574548][ T7759] alloc_empty_file+0x95/0x180 [ 483.579148][ T7759] alloc_file+0x5a/0x4e0 [ 483.583227][ T7759] alloc_file_pseudo+0x259/0x2f0 [ 483.588000][ T7759] ? prandom_u32+0x24c/0x290 [ 483.592430][ T7759] ? alloc_empty_file_noaccount+0x80/0x80 [ 483.597983][ T7759] ? shmem_get_inode+0x692/0x9e0 [ 483.602755][ T7759] ? __kasan_check_write+0x14/0x20 [ 483.607703][ T7759] ? clear_nlink+0x89/0xe0 [ 483.611957][ T7759] __shmem_file_setup+0x1d6/0x2a0 [ 483.616820][ T7759] shmem_file_setup+0x2f/0x40 [ 483.621334][ T7759] __se_sys_memfd_create+0x1e1/0x3e0 [ 483.626449][ T7759] __x64_sys_memfd_create+0x5b/0x70 [ 483.631485][ T7759] x64_sys_call+0x871/0x9a0 [ 483.635823][ T7759] do_syscall_64+0x3b/0xb0 [ 483.640075][ T7759] ? clear_bhb_loop+0x35/0x90 [ 483.644588][ T7759] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 483.650316][ T7759] RIP: 0033:0x7f6691ec6ff9 [ 483.654574][ T7759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.674009][ T7759] RSP: 002b:00007f6690b3fe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 483.682253][ T7759] RAX: ffffffffffffffda RBX: 000000000000025a RCX: 00007f6691ec6ff9 [ 483.690068][ T7759] RDX: 00007f6690b3fef0 RSI: 0000000000000000 RDI: 00007f6691f39b02 [ 483.697877][ T7759] RBP: 00000000200007c0 R08: 00007f6690b3fbb7 R09: 00007f6690b3fe40 [ 483.705685][ T7759] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000280 [ 483.713513][ T7759] R13: 00007f6690b3fef0 R14: 00007f6690b3feb0 R15: 00000000200002c0 [ 483.721317][ T7759] [ 483.745761][ T6755] usb 3-1: Using ep0 maxpacket: 16 [ 483.828220][ T7764] loop4: detected capacity change from 0 to 1024 [ 483.906571][ T6755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.935843][ T7764] EXT4-fs (loop4): Mount option "norecovery" incompatible with ext2 [ 483.947692][ T6755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.957604][ T6755] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.971108][ T6755] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 483.980232][ T6755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.989310][ T6755] usb 3-1: config 0 descriptor?? [ 484.229348][ T7771] syz.4.1903[7771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.229677][ T7771] syz.4.1903[7771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.365843][ T583] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 484.555807][ T434] usbhid 4-1:0.0: can't add hid device: -71 [ 484.561604][ T434] usbhid: probe of 4-1:0.0 failed with error -71 [ 484.569273][ T434] usb 4-1: USB disconnect, device number 60 [ 484.626777][ T7779] FAULT_INJECTION: forcing a failure. [ 484.626777][ T7779] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 484.639847][ T7779] CPU: 1 PID: 7779 Comm: syz.3.1907 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 484.649522][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 484.659419][ T7779] Call Trace: [ 484.662543][ T7779] [ 484.665323][ T7779] dump_stack_lvl+0x151/0x1c0 [ 484.669841][ T7779] ? io_uring_drop_tctx_refs+0x190/0x190 [ 484.675300][ T7779] ? irqentry_exit_cond_resched+0x2a/0x30 [ 484.680859][ T7779] ? irqentry_exit+0x30/0x40 [ 484.685282][ T7779] ? sysvec_reschedule_ipi+0x7d/0x150 [ 484.690491][ T7779] dump_stack+0x15/0x20 [ 484.694493][ T7779] should_fail+0x3c6/0x510 [ 484.696386][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=7749 comm=syz.2.1899 [ 484.698735][ T7779] should_fail_alloc_page+0x5a/0x80 [ 484.716180][ T7779] prepare_alloc_pages+0x15c/0x700 [ 484.721129][ T7779] ? __alloc_pages_bulk+0xe40/0xe40 [ 484.726161][ T7779] __alloc_pages+0x18c/0x8f0 [ 484.730585][ T7779] ? prep_new_page+0x110/0x110 [ 484.735186][ T7779] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 484.740651][ T7779] ? push_rt_task+0x46e/0x5c0 [ 484.745166][ T7779] ? shmem_swapin_page+0x1680/0x1680 [ 484.750373][ T7779] ? finish_task_switch+0x167/0x7b0 [ 484.755409][ T7779] ? xas_start+0x32c/0x3f0 [ 484.759661][ T7779] ? xas_load+0x2b7/0x2d0 [ 484.764378][ T7779] ? pagecache_get_page+0xdc2/0xeb0 [ 484.769399][ T7779] ? irqentry_exit_cond_resched+0x2a/0x30 [ 484.774954][ T7779] ? page_cache_prev_miss+0x410/0x410 [ 484.780163][ T7779] shmem_getpage_gfp+0x1388/0x23c0 [ 484.785114][ T7779] ? shmem_getpage+0xa0/0xa0 [ 484.789536][ T7779] shmem_file_read_iter+0x39c/0xa00 [ 484.794573][ T7779] ? shmem_file_llseek+0x190/0x190 [ 484.799518][ T7779] generic_file_splice_read+0x4aa/0x780 [ 484.804897][ T7779] ? splice_shrink_spd+0xb0/0xb0 [ 484.809669][ T7779] ? irqentry_exit_cond_resched+0x2a/0x30 [ 484.815224][ T7779] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 484.820694][ T7779] ? splice_shrink_spd+0xb0/0xb0 [ 484.825467][ T7779] splice_direct_to_actor+0x439/0xbe0 [ 484.830677][ T7779] ? do_splice_direct+0x3c0/0x3c0 [ 484.835535][ T7779] ? pipe_to_sendpage+0x340/0x340 [ 484.840393][ T7779] ? rw_verify_area+0xa7/0x1c0 [ 484.844995][ T7779] do_splice_direct+0x27f/0x3c0 [ 484.849691][ T7779] ? splice_direct_to_actor+0xbe0/0xbe0 [ 484.855064][ T7779] ? fsnotify_perm+0x2c/0x5b0 [ 484.859578][ T7779] do_sendfile+0x613/0xfe0 [ 484.863827][ T7779] ? _raw_spin_unlock+0x4d/0x70 [ 484.868516][ T7779] ? do_preadv+0x350/0x350 [ 484.872856][ T7779] ? release_firmware_map_entry+0x190/0x190 [ 484.878580][ T7779] ? ksys_write+0x260/0x2c0 [ 484.882927][ T7779] ? irqentry_exit+0x30/0x40 [ 484.887351][ T7779] __x64_sys_sendfile64+0x1ce/0x230 [ 484.892381][ T7779] ? __ia32_sys_sendfile+0x240/0x240 [ 484.897502][ T7779] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 484.902971][ T7779] x64_sys_call+0x140/0x9a0 [ 484.907309][ T7779] do_syscall_64+0x3b/0xb0 [ 484.911564][ T7779] ? clear_bhb_loop+0x35/0x90 [ 484.916074][ T7779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.921805][ T7779] RIP: 0033:0x7fdc35b45ff9 [ 484.926059][ T7779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.945583][ T7779] RSP: 002b:00007fdc3477d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 484.953828][ T7779] RAX: ffffffffffffffda RBX: 00007fdc35cfe130 RCX: 00007fdc35b45ff9 [ 484.961641][ T7779] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a [ 484.969452][ T7779] RBP: 00007fdc3477d090 R08: 0000000000000000 R09: 0000000000000000 [ 484.977273][ T7779] R10: 00000000578410eb R11: 0000000000000246 R12: 0000000000000001 [ 484.985074][ T7779] R13: 0000000000000000 R14: 00007fdc35cfe130 R15: 00007ffde81ffe28 [ 484.992892][ T7779] [ 485.000288][ T583] usb 1-1: device descriptor read/64, error -71 [ 485.043517][ T7783] input: syz0 as /devices/virtual/input/input64 [ 485.135765][ T6755] usbhid 3-1:0.0: can't add hid device: -71 [ 485.141579][ T6755] usbhid: probe of 3-1:0.0 failed with error -71 [ 485.150631][ T6755] usb 3-1: USB disconnect, device number 59 [ 485.227479][ T7787] FAULT_INJECTION: forcing a failure. [ 485.227479][ T7787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 485.240588][ T7787] CPU: 1 PID: 7787 Comm: syz.4.1909 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 485.250223][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 485.260117][ T7787] Call Trace: [ 485.263241][ T7787] [ 485.266023][ T7787] dump_stack_lvl+0x151/0x1c0 [ 485.270532][ T7787] ? io_uring_drop_tctx_refs+0x190/0x190 [ 485.275999][ T7787] ? rcu_read_unlock_special+0xdb/0x4c0 [ 485.281381][ T7787] ? irqentry_exit_cond_resched+0x2a/0x30 [ 485.286937][ T7787] ? irqentry_exit+0x30/0x40 [ 485.291362][ T7787] ? __rcu_read_unlock+0xd0/0xd0 [ 485.296136][ T7787] dump_stack+0x15/0x20 [ 485.300129][ T7787] should_fail+0x3c6/0x510 [ 485.304383][ T7787] should_fail_alloc_page+0x5a/0x80 [ 485.309414][ T7787] prepare_alloc_pages+0x15c/0x700 [ 485.314364][ T7787] ? __alloc_pages_bulk+0xe40/0xe40 [ 485.319397][ T7787] __alloc_pages+0x18c/0x8f0 [ 485.323823][ T7787] ? prep_new_page+0x110/0x110 [ 485.328427][ T7787] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 485.333891][ T7787] ? shmem_swapin_page+0x1680/0x1680 [ 485.339007][ T7787] ? find_lock_lowest_rq+0x75/0x480 [ 485.344047][ T7787] ? xas_start+0x32c/0x3f0 [ 485.348297][ T7787] ? xas_load+0x2b7/0x2d0 [ 485.352463][ T7787] ? pagecache_get_page+0xdc2/0xeb0 [ 485.357498][ T7787] ? page_cache_prev_miss+0x410/0x410 [ 485.362704][ T7787] ? preempt_schedule_irq+0xe7/0x140 [ 485.367823][ T7787] ? __cond_resched+0x20/0x20 [ 485.372338][ T7787] ? lru_cache_add+0x279/0x540 [ 485.376941][ T7787] shmem_getpage_gfp+0x1388/0x23c0 [ 485.381890][ T7787] ? shmem_getpage+0xa0/0xa0 [ 485.386314][ T7787] shmem_file_read_iter+0x39c/0xa00 [ 485.391348][ T7787] ? shmem_file_llseek+0x190/0x190 [ 485.396293][ T7787] ? iov_iter_pipe+0xa6/0x2e0 [ 485.400807][ T7787] generic_file_splice_read+0x4aa/0x780 [ 485.406187][ T7787] ? splice_shrink_spd+0xb0/0xb0 [ 485.410962][ T7787] ? __kasan_check_read+0x11/0x20 [ 485.415821][ T7787] ? fsnotify_perm+0x269/0x5b0 [ 485.420422][ T7787] ? security_file_permission+0x86/0xb0 [ 485.425809][ T7787] ? rw_verify_area+0xa7/0x1c0 [ 485.430403][ T7787] splice_direct_to_actor+0x439/0xbe0 [ 485.435613][ T7787] ? do_splice_direct+0x3c0/0x3c0 [ 485.440471][ T7787] ? pipe_to_sendpage+0x340/0x340 [ 485.445329][ T7787] ? rw_verify_area+0xa7/0x1c0 [ 485.449931][ T7787] do_splice_direct+0x27f/0x3c0 [ 485.454620][ T7787] ? splice_direct_to_actor+0xbe0/0xbe0 [ 485.460001][ T7787] ? audit_tree_destroy_watch+0x20/0x20 [ 485.465380][ T7787] do_sendfile+0x613/0xfe0 [ 485.469633][ T7787] ? irqentry_exit_cond_resched+0x2a/0x30 [ 485.475186][ T7787] ? do_preadv+0x350/0x350 [ 485.479438][ T7787] ? __x64_sys_sendfile64+0x1b5/0x230 [ 485.484645][ T7787] __x64_sys_sendfile64+0x1ce/0x230 [ 485.489683][ T7787] ? __ia32_sys_sendfile+0x240/0x240 [ 485.494799][ T7787] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 485.500268][ T7787] x64_sys_call+0x140/0x9a0 [ 485.504608][ T7787] do_syscall_64+0x3b/0xb0 [ 485.508859][ T7787] ? clear_bhb_loop+0x35/0x90 [ 485.513372][ T7787] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.519102][ T7787] RIP: 0033:0x7f80d0ab3ff9 [ 485.523356][ T7787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.542798][ T7787] RSP: 002b:00007f80cf6eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 485.551037][ T7787] RAX: ffffffffffffffda RBX: 00007f80d0c6c130 RCX: 00007f80d0ab3ff9 [ 485.558848][ T7787] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009 [ 485.566747][ T7787] RBP: 00007f80cf6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 485.574556][ T7787] R10: 00000000578410eb R11: 0000000000000246 R12: 0000000000000001 [ 485.582370][ T7787] R13: 0000000000000000 R14: 00007f80d0c6c130 R15: 00007ffe84265f98 [ 485.590184][ T7787] [ 485.641753][ T7791] loop3: detected capacity change from 0 to 512 [ 485.665812][ T583] usb 1-1: device descriptor read/64, error -71 [ 485.678131][ T7796] loop1: detected capacity change from 0 to 1024 [ 485.697197][ T7796] EXT4-fs (loop1): Mount option "norecovery" incompatible with ext2 [ 485.727513][ T7791] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 485.738457][ T7791] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 486.095910][ T802] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 486.125825][ T583] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 486.345785][ T802] usb 3-1: Using ep0 maxpacket: 16 [ 486.425862][ T583] usb 1-1: device descriptor read/64, error -71 [ 486.465845][ T802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.477569][ T802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.487571][ T802] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 486.496489][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.546423][ T802] usb 3-1: config 0 descriptor?? [ 486.576597][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 486.576643][ T30] audit: type=1326 audit(1729182845.263:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.0.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd9bac2bfb code=0x7ffc0000 [ 486.648970][ T30] audit: type=1326 audit(1729182845.313:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.0.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd9bac2bfb code=0x7ffc0000 [ 486.669906][ T7817] loop1: detected capacity change from 0 to 256 [ 486.709541][ T30] audit: type=1326 audit(1729182845.333:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.0.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd9bac2bfb code=0x7ffc0000 [ 486.718962][ T7819] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7819 comm=syz.3.1919 [ 486.745280][ T30] audit: type=1326 audit(1729182845.363:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.0.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd9bac2bfb code=0x7ffc0000 [ 486.769593][ T30] audit: type=1326 audit(1729182845.363:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc35b45ff9 code=0x7ffc0000 [ 486.793510][ T30] audit: type=1326 audit(1729182845.363:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdc35b45ff9 code=0x7ffc0000 [ 486.875752][ T7819] loop3: detected capacity change from 0 to 128 [ 486.934919][ T30] audit: type=1326 audit(1729182845.363:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7814 comm="syz.3.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc35b45ff9 code=0x7ffc0000 [ 486.964831][ T30] audit: type=1326 audit(1729182845.393:7624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.0.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd9bac2bfb code=0x7ffc0000 [ 486.976340][ T7819] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 486.988622][ T30] audit: type=1326 audit(1729182845.423:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.0.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd9bac2bfb code=0x7ffc0000 [ 486.998808][ T7819] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038 (0x7fffffff) [ 487.022002][ T583] usb 1-1: device descriptor read/64, error -71 [ 487.085183][ T7819] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 487.096597][ T7826] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 487.173265][ T583] usb usb1-port1: attempt power cycle [ 487.213942][ T7829] IPv6: sit1: Disabled Multicast RS [ 487.575127][ T7834] IPv6: sit1: Disabled Multicast RS [ 487.780799][ T7836] loop1: detected capacity change from 0 to 2048 [ 487.916403][ T7836] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 487.928573][ T30] audit: type=1326 audit(1729182846.623:7626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7839 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d0ab3ff9 code=0x7ffc0000 [ 488.669400][ T7852] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 488.690933][ T7854] input: syz0 as /devices/virtual/input/input65 [ 488.735795][ T802] usbhid 3-1:0.0: can't add hid device: -71 [ 488.741555][ T802] usbhid: probe of 3-1:0.0 failed with error -71 [ 488.750542][ T802] usb 3-1: USB disconnect, device number 60 [ 489.276235][ T7867] loop1: detected capacity change from 0 to 256 [ 489.773313][ T7879] loop4: detected capacity change from 0 to 2048 [ 489.827095][ T7879] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.837626][ T7879] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 489.900113][ T7878] loop2: detected capacity change from 0 to 40427 [ 490.240109][ T7878] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 490.255375][ T7878] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 490.286843][ T7888] loop1: detected capacity change from 0 to 256 [ 490.310346][ T7878] F2FS-fs (loop2): Found nat_bits in checkpoint [ 490.346016][ T7878] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 490.352990][ T7878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 490.431792][ T7888] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ18446744073709551615ÿ" or missing value [ 490.507984][ T7895] overlayfs: invalid origin (0000) [ 490.623378][ T7698] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 490.623402][ T7698] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 490.632292][ T7698] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 490.639735][ T7698] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 490.647563][ T7698] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 490.654953][ T7698] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 490.662519][ T7698] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 490.695762][ T60] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 490.955736][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 491.075809][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.086535][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.096055][ T60] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 491.104886][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.113341][ T60] usb 4-1: config 0 descriptor?? [ 491.115755][ T519] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 491.400819][ T7911] input: syz0 as /devices/virtual/input/input66 [ 491.475806][ T519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.496158][ T519] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.505888][ T519] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 491.525741][ T519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.536879][ T519] usb 3-1: config 0 descriptor?? [ 491.964727][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 491.964742][ T30] audit: type=1326 audit(1729182850.643:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6691ec6ff9 code=0x7ffc0000 [ 491.994705][ T30] audit: type=1326 audit(1729182850.643:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6691ec6ff9 code=0x7ffc0000 [ 492.018764][ T30] audit: type=1326 audit(1729182850.643:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6691ec6ff9 code=0x7ffc0000 [ 492.042603][ T30] audit: type=1326 audit(1729182850.643:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6691ec6ff9 code=0x7ffc0000 [ 492.066142][ T30] audit: type=1326 audit(1729182850.643:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6691ec6ff9 code=0x7ffc0000 [ 492.089528][ T30] audit: type=1326 audit(1729182850.643:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f6691ec6ff9 code=0x7ffc0000 [ 492.110684][ T7921] loop1: detected capacity change from 0 to 256 [ 492.113047][ T30] audit: type=1326 audit(1729182850.643:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6691ec6ff9 code=0x7ffc0000 [ 492.142414][ T30] audit: type=1326 audit(1729182850.643:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.1.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6691ec6ff9 code=0x7ffc0000 [ 492.375794][ T519] usbhid 3-1:0.0: can't add hid device: -32 [ 492.381609][ T519] usbhid: probe of 3-1:0.0 failed with error -32 [ 492.710943][ T7926] loop2: detected capacity change from 0 to 1024 [ 492.717195][ T802] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 492.806097][ T7926] EXT4-fs (loop2): inodes count not valid: 32 vs 12 [ 492.954775][ T7927] loop2: detected capacity change from 0 to 2048 [ 493.019644][ T7927] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 493.032008][ T30] audit: type=1400 audit(1729182851.713:7676): avc: denied { execute } for pid=7905 comm="syz.2.1942" path="/9/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 493.115840][ T802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.126053][ T802] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.428025][ T30] audit: type=1326 audit(1729182852.113:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc35b45ff9 code=0x7ffc0000 [ 493.515806][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 493.521620][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 493.528792][ T60] usb 4-1: USB disconnect, device number 61 [ 493.575883][ T802] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 493.584825][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.592908][ T802] usb 5-1: Product: syz [ 493.596894][ T802] usb 5-1: Manufacturer: syz [ 493.601303][ T802] usb 5-1: SerialNumber: syz [ 493.606349][ T802] usb 5-1: config 0 descriptor?? [ 493.656132][ T802] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 493.856684][ T7925] FAULT_INJECTION: forcing a failure. [ 493.856684][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 493.869243][ T7925] CPU: 0 PID: 7925 Comm: syz.4.1949 Not tainted 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 493.878946][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 493.888841][ T7925] Call Trace: [ 493.891963][ T7925] [ 493.894743][ T7925] dump_stack_lvl+0x151/0x1c0 [ 493.899251][ T7925] ? io_uring_drop_tctx_refs+0x190/0x190 [ 493.904722][ T7925] dump_stack+0x15/0x20 [ 493.908720][ T7925] should_fail+0x3c6/0x510 [ 493.912965][ T7925] __should_failslab+0xa4/0xe0 [ 493.917567][ T7925] should_failslab+0x9/0x20 [ 493.921903][ T7925] slab_pre_alloc_hook+0x37/0xd0 [ 493.926767][ T7925] ? alloc_skb_with_frags+0xa6/0x680 [ 493.931887][ T7925] __kmalloc_track_caller+0x6c/0x260 [ 493.937007][ T7925] ? alloc_skb_with_frags+0xa6/0x680 [ 493.942125][ T7925] ? alloc_skb_with_frags+0xa6/0x680 [ 493.947426][ T7925] __alloc_skb+0x10c/0x550 [ 493.951674][ T7925] alloc_skb_with_frags+0xa6/0x680 [ 493.956621][ T7925] sock_alloc_send_pskb+0x915/0xa50 [ 493.961653][ T7925] ? __fget_files+0x31e/0x380 [ 493.966170][ T7925] ? __kasan_check_write+0x14/0x20 [ 493.971116][ T7925] ? sock_kzfree_s+0x60/0x60 [ 493.975545][ T7925] ? __kasan_check_write+0x14/0x20 [ 493.980489][ T7925] ? _raw_spin_lock+0xa4/0x1b0 [ 493.985089][ T7925] ? _raw_spin_trylock_bh+0x190/0x190 [ 493.990298][ T7925] unix_dgram_sendmsg+0x6fd/0x2090 [ 493.995244][ T7925] ? unix_dgram_poll+0x690/0x690 [ 494.000028][ T7925] ? __kasan_kmalloc+0x9/0x10 [ 494.004648][ T7925] unix_seqpacket_sendmsg+0x120/0x1f0 [ 494.009848][ T7925] ? unix_dgram_peer_wake_me+0x450/0x450 [ 494.015315][ T7925] ____sys_sendmsg+0x59e/0x8f0 [ 494.019915][ T7925] ? __sys_sendmsg_sock+0x40/0x40 [ 494.024777][ T7925] ? import_iovec+0xe5/0x120 [ 494.029201][ T7925] ___sys_sendmsg+0x252/0x2e0 [ 494.033714][ T7925] ? __sys_sendmsg+0x260/0x260 [ 494.038319][ T7925] ? __fdget+0x1bc/0x240 [ 494.042391][ T7925] __se_sys_sendmsg+0x19a/0x260 [ 494.047079][ T7925] ? __x64_sys_sendmsg+0x90/0x90 [ 494.051852][ T7925] ? ksys_write+0x260/0x2c0 [ 494.056193][ T7925] ? debug_smp_processor_id+0x17/0x20 [ 494.061397][ T7925] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 494.067302][ T7925] __x64_sys_sendmsg+0x7b/0x90 [ 494.072149][ T7925] x64_sys_call+0x16a/0x9a0 [ 494.076477][ T7925] do_syscall_64+0x3b/0xb0 [ 494.080739][ T7925] ? clear_bhb_loop+0x35/0x90 [ 494.085243][ T7925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 494.090970][ T7925] RIP: 0033:0x7f80d0ab3ff9 [ 494.095231][ T7925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.114666][ T7925] RSP: 002b:00007f80cf72d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.122910][ T7925] RAX: ffffffffffffffda RBX: 00007f80d0c6bf80 RCX: 00007f80d0ab3ff9 [ 494.130719][ T7925] RDX: 0000000000000000 RSI: 0000000020001b00 RDI: 0000000000000005 [ 494.138533][ T7925] RBP: 00007f80cf72d090 R08: 0000000000000000 R09: 0000000000000000 [ 494.146341][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.154152][ T7925] R13: 0000000000000000 R14: 00007f80d0c6bf80 R15: 00007ffe84265f98 [ 494.161970][ T7925] [ 494.164896][ T60] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 494.185233][ T802] usb 3-1: USB disconnect, device number 61 [ 494.194285][ T7698] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 494.231102][ T7698] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 494.252323][ T7698] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5834: Out of memory [ 494.261839][ T7698] EXT4-fs error (device loop2): ext4_dirty_inode:6038: inode #18: comm syz-executor: mark_inode_dirty error [ 494.285854][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.292878][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.300513][ T7945] device bridge_slave_0 entered promiscuous mode [ 494.313577][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.325290][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.332683][ T7945] device bridge_slave_1 entered promiscuous mode [ 494.434892][ T7946] loop1: detected capacity change from 0 to 40427 [ 494.459360][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.466240][ T7945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.473275][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.480105][ T7945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.513738][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.521620][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.525340][ T7946] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 494.529128][ T7953] device bridge_slave_0 entered promiscuous mode [ 494.539625][ T7946] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 494.543444][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.557170][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.558053][ T7946] F2FS-fs (loop1): invalid crc value [ 494.564389][ T7953] device bridge_slave_1 entered promiscuous mode [ 494.570962][ T7946] F2FS-fs (loop1): Found nat_bits in checkpoint [ 494.585928][ T60] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.596028][ T60] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.604813][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 494.610674][ T7946] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 494.613981][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.620659][ T7946] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 494.631789][ T60] usb 4-1: config 0 descriptor?? [ 494.661526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.669349][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.677234][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.703170][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.713560][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.720435][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.727812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.736060][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.742913][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.766018][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.774585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.039416][ T7962] attempt to access beyond end of device [ 495.039416][ T7962] loop1: rw=2049, want=45104, limit=40427 [ 495.419546][ T464] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 495.431013][ T464] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 495.447644][ T583] usb 5-1: USB disconnect, device number 57 [ 495.481554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.492589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.523900][ T7945] device veth0_vlan entered promiscuous mode [ 495.537810][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 495.553436][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 495.582243][ T7945] device veth1_macvtap entered promiscuous mode [ 495.673344][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.680869][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.689919][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.698147][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.706453][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.713974][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.722698][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.757231][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.785190][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.814201][ T1076] device bridge_slave_1 left promiscuous mode [ 495.822816][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.851243][ T1076] device bridge_slave_0 left promiscuous mode [ 495.873601][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.913237][ T1076] device veth1_macvtap left promiscuous mode [ 495.943481][ T7977] loop1: detected capacity change from 0 to 128 [ 495.949040][ T1076] device veth0_vlan left promiscuous mode [ 496.331432][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.343009][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.364107][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.412270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.425600][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.432507][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.453826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 496.473326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 496.481471][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.488341][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.529289][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 496.542305][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 496.552217][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 496.561651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 496.570330][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 496.572191][ T7986] EXT4-fs (sda1): shut down requested (2) [ 496.583531][ T7986] Aborting journal on device sda1-8. [ 496.592318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 496.600563][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 496.608830][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.617619][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.649644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.657240][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.670349][ T7953] device veth0_vlan entered promiscuous mode [ 496.693565][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.702545][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.713367][ T7994] loop0: detected capacity change from 0 to 512 [ 496.722220][ T7953] device veth1_macvtap entered promiscuous mode [ 496.746446][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.754002][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.762267][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.771440][ T7994] EXT4-fs (loop0): Ignoring removed bh option [ 496.786067][ T60] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 496.797152][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.806432][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.814950][ T7994] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz.0.1966: inline data xattr refers to an external xattr inode [ 496.840998][ T7994] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1966: couldn't read orphan inode 12 (err -117) [ 496.853230][ T7994] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,nogrpid,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,inlinecrypt,nodiscard,,errors=continue. Quota mode: writeback. [ 497.085849][ T60] usb 2-1: Using ep0 maxpacket: 16 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 497.335859][ T60] usb 2-1: unable to read config index 0 descriptor/all [ 497.342636][ T60] usb 2-1: can't read configurations, error -71 [ 497.395899][ T434] usb 4-1: USB disconnect, device number 62 [ 497.496580][ T1076] device bridge_slave_1 left promiscuous mode [ 497.502527][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.510035][ T1076] device bridge_slave_0 left promiscuous mode [ 497.516052][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.523628][ T1076] device veth1_macvtap left promiscuous mode [ 497.529483][ T1076] device veth0_vlan left promiscuous mode [ 499.136651][ T1076] device bridge_slave_1 left promiscuous mode [ 499.142572][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.149896][ T1076] device bridge_slave_0 left promiscuous mode [ 499.155873][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.163388][ T1076] device bridge_slave_1 left promiscuous mode [ 499.169384][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.176602][ T1076] device bridge_slave_0 left promiscuous mode [ 499.182495][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.190285][ T1076] device bridge_slave_1 left promiscuous mode [ 499.196222][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.203519][ T1076] device bridge_slave_0 left promiscuous mode [ 499.209536][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.217126][ T1076] device bridge_slave_1 left promiscuous mode [ 499.223024][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.230367][ T1076] device bridge_slave_0 left promiscuous mode [ 499.236329][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.243866][ T1076] device bridge_slave_1 left promiscuous mode [ 499.249852][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.257064][ T1076] device bridge_slave_0 left promiscuous mode [ 499.262962][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.271237][ T1076] device veth1_macvtap left promiscuous mode [ 499.277053][ T1076] device veth0_vlan left promiscuous mode [ 499.282687][ T1076] device veth1_macvtap left promiscuous mode [ 499.288443][ T1076] device veth0_vlan left promiscuous mode [ 499.294055][ T1076] device veth1_macvtap left promiscuous mode [ 499.299839][ T1076] device veth0_vlan left promiscuous mode [ 499.305429][ T1076] device veth1_macvtap left promiscuous mode [ 499.311393][ T1076] device veth1_macvtap left promiscuous mode [ 499.317313][ T1076] device veth0_vlan left promiscuous mode