last executing test programs: 7.356235515s ago: executing program 3 (id=386): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000641000/0x2000)=nil, 0x2000, 0x3) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={&(0x7f0000000340)="94a44c4ea131efdeea3d84b50840939a117a66e45cf1cbce5caad3d9134ec0dfe62addb03399e122409131ee79f2f845a1cad8cfbdcab0cf1d7eecbe3484f14c1e00f3b4e01f45904bf0b2b5402fb678af5e969b8bcde1c0f9e11148b5c1312f11f6f7", &(0x7f0000000440)=""/100, &(0x7f00000003c0), &(0x7f00000004c0)="90c4533d455e016c5bbc74f5be7eb63b209bbef624dfd86cb3e0b4a64937a2590747fba37dabfaa52f8b276420875a44e06ca540bb6151e1b82cce9a311bbc7ee147dcee4f096233e3841dfdc28aa5fcf3f7f1590a416d0e7c862f5d6568386c9f26ff2725a18980f23a726df9be407ca7411564aba787db0bc104f57f9789003b846325b323b32dce05d6d557eaf8a539df5901c21b0a73", 0x194c, r7}, 0x38) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/uevent_helper', 0x8041, 0x0) pwritev(r8, &(0x7f0000003740)=[{&(0x7f0000002500)="fb7900e5f1cb3e986ec2a8", 0xb}, {&(0x7f0000002540)="339db661a533edee8c0a2a6d6c63c97595cd2390d04b06ce00f6f323e324877448ccafe49dcdab3f771d29010f3848d340b9e7e5b0ac48bc62c65902cb65fd40db3e9e65d9eb327101a03178340c2b93c652c6a4c26256628d92baa6cc5bee6371ea9d19f6", 0x65}, {&(0x7f00000025c0)="4a629f8e789b1b8e82b80dc886ee9f39986a0c42b2bda0e2e497beac6fe1341598bbbf4fb503c4155fd809d5d1be575058eaba6f1b7b76c854c2c09d704813bcef64ee63d3d3a93999e6366919c4d1a66d1fef65c239307e3ac1468532820645a1dc2fc8eaf6d48e673bd19fd75688c0e55215e028323ff24140d251aa69fdb0e03032ec46fc5ce4b8aeb4c7dbc08074f4ddd32a76404117494848d8056eaf47fbcdaa09fa7e1a9930f02ff95bbd8c14beb284e2a9f5a9a5a914ed3a", 0xbc}, {&(0x7f0000002680)="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", 0xed5}], 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.445900953s ago: executing program 3 (id=390): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)) 5.29813082s ago: executing program 3 (id=394): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000580)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x45e, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getresuid(0x0, &(0x7f0000000480), 0x0) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000300)=0x185, 0x4) r6 = socket(0x40000000002, 0x3, 0x80000000002) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvmmsg(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 4.732049148s ago: executing program 1 (id=396): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2a6, &(0x7f0000000440)="$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") r0 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000002200)="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", 0x200) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) setxattr$security_capability(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), &(0x7f0000000d40)=@v1={0x1000000, [{0xfffffffe, 0xa}]}, 0xc, 0x6) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@can_newroute={0x1c, 0x18, 0xd1fc11e09e109915, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x12}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, r6, 0x10, 0x60, 0x0, {0x1e}}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000c40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x9c, r6, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) close(r7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@errors_remount}]}, 0x3, 0x449, &(0x7f00000006c0)="$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") r9 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r9, 0x0, 0x0, 0x40, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x11f06) 4.388888157s ago: executing program 2 (id=397): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r4, 0xc02063a0, &(0x7f0000000040)) (fail_nth: 1) 4.384967587s ago: executing program 3 (id=398): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/sockstat\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) lchown(&(0x7f0000000100)='./file0/bus\x00', 0xee00, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000040)={0x3, 0x301, 0x2, 0x7b, 0x7, 0x2000006}) r4 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c0000000400000004000000be3a000000180000", @ANYRESOCT, @ANYBLOB="0000003ef7e9000c00"/20, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00"/28], 0x50) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f00000001c0)=0xc28c) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x66a3934b2a83897c}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_delrule={0x4c, 0x21, 0x100, 0x70bd2c, 0x25dfdbfb, {0x2, 0x14, 0x20, 0x6, 0x6, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'lo\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_SRC={0x8, 0x2, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 4.290950356s ago: executing program 1 (id=400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='btrfs_inode_mod_outstanding_extents\x00', r0, 0x0, 0x20000000}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC]) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) fstat(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYRES32=r7, @ANYRES8=0x0, @ANYRES8=r7, @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRESOCT=r6, @ANYRESDEC=r6, @ANYRES8=r7, @ANYRES8], 0xff, 0x1f1, &(0x7f0000000900)="$eJzsmb2LE0EYxp+Z3cveHSLYWNhYeOCJ3n5F5ZorThArQThFLYO3CcFNIskKSUAk2NhYigi2/gMWFqks7OxstVBBsDClYCGMzOy4mSRuSLgigbw/yOR53/l6Z0ieLRYEQaws377++vLsyu7NCwCOYQuOzv+whmM4kEWfXz48/3zv6qs3n16/rx9/1B9fbx2AELPvvwHg3b6FREVCiMej/VuyeTGauwWOc1rfBoObyj9CkQYRGO4qZQOZBhobWsSRe68RH5arceTLJpBNKJuiuZecPegxHGZnE4IZ/a1O934pjqPmuFgT//aZ6JpXTLs/Vd8+x56OZX0cwJ2nT3oy1ncDHzy9SwABOAKti2A40HoXDlzXHV6Jcf5T9nB9a5bzL0qw3+nPQGZO7Cy+npURwlmKMmYQbDwj/9BZ5uSg/2Fy1vdlKT5fMOQ4jjIuAFnmmh7zcTOOrx9h04LecbLLMv2J2cBZw59s2Jl/eEntgdfqdHeqtVIlqkT1MCxe9i/6/qXQK1cd+J6yoyn+t678adNYf80cYDxQCqyAdilJmkEbSJpBFodpazjuwdvGTzWHK//j2D6TriEvWR3b+X89TH+4+pZq28otniAIgiAIgiAIgiAIgiAIYi5OgyF9BaJeVIkcwhtq9N8AAAD//zSFbeI=") newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2800) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000480)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x26}}, {@uid_eq={'uid', 0x3d, r8}}, {@hash}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 3.721158194s ago: executing program 4 (id=402): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000780)={0x4, 0x4, {0xfffffffffffffff7, @struct={0x4, 0x2}, 0x0, 0x1a8000000000000, 0x8001, 0x80, 0x4, 0x0, 0x420, @struct={0x2, 0xf}, 0x4, 0x1000, [0x5, 0xffffffffffffe345, 0x5c7, 0x1, 0x7, 0x4]}, {0x0, @struct={0x120000, 0x2}, 0x0, 0x7, 0x8, 0xd0c1, 0x5ce3, 0x5, 0x4, @struct={0xff, 0x9}, 0x8, 0x0, [0x7, 0xb0e0, 0x12, 0x7fff, 0x9, 0x1]}, {0x0, @usage=0x10000, 0x0, 0xff48367, 0x4, 0x8, 0x5e57, 0x9, 0x60, @struct={0x9, 0x8}, 0x8b40, 0x6, [0xf62b, 0xe7, 0x7, 0x100, 0x2, 0x2]}, {0xfffffffffffff71d, 0x1, 0x4}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001540)={{}, 0x0, 0xa, @unused=[0xf5b, 0x7, 0x5], @devid=r5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r10 = dup3(0xffffffffffffffff, r9, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f00000014c0)=[@release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.658034489s ago: executing program 0 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000100000000000000000000850000006d000000850000009e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='rxrpc_local\x00', r4, 0x0, 0x3}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$FUSE_BMAP(r7, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chdir(&(0x7f0000000040)='./file0\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='spi_setup\x00', r9, 0x0, 0x1fe}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x840, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 2.736952868s ago: executing program 2 (id=404): ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x1d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000070000000080eaff000000060000000028e52943d0119021622cc83a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffdc9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) setitimer(0x2, 0x0, 0x0) syz_emit_ethernet(0x20, &(0x7f0000001fc0)={@multicast, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "a7", "2ef606", 0x5, "d4dd56a303925299bbaa"}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800030000bf1c000a000100"], 0x48}}, 0x0) accept(r7, &(0x7f00000002c0)=@isdn, &(0x7f00000003c0)=0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) 2.665177004s ago: executing program 1 (id=405): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000580)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x45e, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) getresuid(0x0, &(0x7f0000000480), 0x0) r4 = socket(0x40000000002, 0x3, 0x2) r5 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvmmsg(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.663682604s ago: executing program 4 (id=406): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 2.621471387s ago: executing program 4 (id=407): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d7b163ad63d36097f8002583f00f661f2bece8d45fb2e8d8d88894fea0ab4f0347fe6bd02278d9731f6c90f3dcf90959f4c18a0d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r3}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) 2.320879692s ago: executing program 4 (id=408): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.277438436s ago: executing program 2 (id=409): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000580)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x45e, &(0x7f0000000680)="$eJzs3M9vVFUbAOD33pkCH3zSioiCoFU0Nv5oaUFl4UajiQtNTHSBy7EtBBmooTURQrQagktD4t64NPEvcOXKqCsTt7o3JKjEBHTjmDtzL3SGmdJ2pkxlnie5cM7cc++5L/ecO2fOmSGAgTWa/ZFE/D8ifo6I4Ua2ucBo469rV85N/3Xl3HQStdobvyf1clevnJsuihbHbcszY2lEej7JK2k2f+bsiUq1Ons6z08snHx3Yv7M2aePn6wcmz02e2rq8OFDByefe3bqmZ7EmcV3dc8Hc3t3v/LWxdemj1x8+/uvsuvdta+xf2kcXSoXidEs8D9qda2FHutRZRvFP7UbcSblfl8NK1XKG+xQvf8PR+lG843hePnjvl4csK6yZ/bmzrsXa8AdLIl+XwHQH8Ubffb5t9hu09BjQ7j8QuMDUBb3tXxr7ClHmpcZWsf6RyPiyOLfn2dbtMxD1NrMGwAAdOubbPzzVLvxXxq7lpTbnq8NjUTE3RGxIyLuiYidEXFvRL3sfRFx/yrrb10aunn8mV5aU2ArlI3/ns/XtprHf8XoL0ZKee6uevxDydHj1dkD+b/JWAxtzvKT7U5enOKlnz7tVP/S8V+2ZfUXY8H8JJfKLRN0M5WFSq8GpZc/ithTbhd/cn0lIImI3RGxZ3Wn3l4kjj/x5d5OhW4d/zJ6sM5U+yLi8cb9X4yW+AvJ8uuTE1uiOntgomgVN/vhxwuvd6q/q/h7ILv/W5vbf0uJ4T+Tpeu186uv48Ivn3T8TFleY/vflLxZX9PdlL/2fmVh4fRkxKbk1Xq+6fWpG8cW+aJ8Fv/Y/vb9f0d+TBb/AxGRNeJ9EfFgRDyU37uHI+KRiNi/TPzfvfjoO532bYT7P9P2+Xe9/Y803//VJ0onvv26U/0re/4dqqfG8lfqz79b6Hw5W/ISa23NAAAA8N+T1r8bn6Tj19NpOj7e+A7/ztiaVufmF548OvfeqZnGd+hHYigtZrqGl8yHTiaL+Rkb+al8rrjYfzCfN/6s9L96fnx6rjrT59hh0G3r0P8zv5b6fXXAuvN7LRhcrf0/7dN1ALef938YXPo/DC79HwZXu/7/YUveWgDcmbz/w+DS/2Fw6f8wuPR/GEjd/K5/vRLlZX69L7FREpF2c3gs+380SHSXKK+1d5//rXHgiUq1jw8lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHvo3AAD//7k07kc=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getresuid(0x0, &(0x7f0000000480), 0x0) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000300)=0x185, 0x4) r6 = socket(0x40000000002, 0x3, 0x80000000002) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvmmsg(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 2.020423468s ago: executing program 0 (id=410): bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000440)={'ip6_vti0', 0x32, 0x34}, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1, 0x0) fdatasync(r6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000000)={@id={0x2, 0x0, @d}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480), 0x1000, r5}, 0x38) 1.907806037s ago: executing program 0 (id=411): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000085000000050000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) getpgid(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e8ffffe543f372008fd41e2c8760575d329fad00000000000000006b9d7d7240c42d04081e4454519374ca58ca67cac43b039293631d1f84ba977972a786111a0d1e851fb35933cebe758f82916bf65e7509ff77edc7d8dfbb8b751e974436abb88bc886842bc6e688c7fb54f8fd2fa5cd56ca934c567ddcc961fd863082d4b1ee09db4ad6d0fbf2805614853e64e5d3050e89281503a4fb"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) r5 = getpgid(0x0) r6 = gettid() tgkill(r5, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = gettid() r8 = socket(0x1e, 0x5, 0x0) listen(r8, 0x0) accept4$inet6(r8, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 1.857953592s ago: executing program 4 (id=412): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000580)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x45e, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getresuid(0x0, &(0x7f0000000480), 0x0) r5 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000300)=0x185, 0x4) r6 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvmmsg(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x798, &(0x7f0000000100), 0xfe, 0x46a, &(0x7f0000000b40)="$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") 1.709087534s ago: executing program 1 (id=413): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.604473353s ago: executing program 1 (id=414): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)) 1.391394702s ago: executing program 2 (id=415): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="a400000000a2a3b2f70002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa88aaaaaa"], 0x0) 1.309862798s ago: executing program 2 (id=416): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x1a1381) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r7 = creat(0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x6, 0x7, {{0xd, 0x4, 0x1, 0x2c, 0x34, 0x65, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x10, 0x1, 0x5, [{@rand_addr=0x64010100, 0x2}, {@broadcast, 0x1}, {@empty}]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@bridge_newvlan={0x24, 0x70, 0x800, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000000}, 0x40) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, &(0x7f0000000180)='`', 0x5e0, 0x0, &(0x7f0000000240)={0x2f, 0x8100, r10, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) socket(0x200000100000011, 0x3, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) 1.089071907s ago: executing program 0 (id=417): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.077719338s ago: executing program 0 (id=418): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000641000/0x2000)=nil, 0x2000, 0x3) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={&(0x7f0000000340)="94a44c4ea131efdeea3d84b50840939a117a66e45cf1cbce5caad3d9134ec0dfe62addb03399e122409131ee79f2f845a1cad8cfbdcab0cf1d7eecbe3484f14c1e00f3b4e01f45904bf0b2b5402fb678af5e969b8bcde1c0f9e11148b5c1312f11f6f7", &(0x7f0000000440)=""/100, &(0x7f00000003c0), &(0x7f00000004c0)="90c4533d455e016c5bbc74f5be7eb63b209bbef624dfd86cb3e0b4a64937a2590747fba37dabfaa52f8b276420875a44e06ca540bb6151e1b82cce9a311bbc7ee147dcee4f096233e3841dfdc28aa5fcf3f7f1590a416d0e7c862f5d6568386c9f26ff2725a18980f23a726df9be407ca7411564aba787db0bc104f57f9789003b846325b323b32dce05d6d557eaf8a539df5901c21b0a73", 0x194c, r7}, 0x38) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/uevent_helper', 0x8041, 0x0) pwritev(r8, &(0x7f0000003740)=[{&(0x7f0000002500)="fb7900e5f1cb3e986ec2a8", 0xb}, {&(0x7f0000002540)="339db661a533edee8c0a2a6d6c63c97595cd2390d04b06ce00f6f323e324877448ccafe49dcdab3f771d29010f3848d340b9e7e5b0ac48bc62c65902cb65fd40db3e9e65d9eb327101a03178340c2b93c652c6a4c26256628d92baa6cc5bee6371ea9d19f6", 0x65}, {&(0x7f00000025c0)="4a629f8e789b1b8e82b80dc886ee9f39986a0c42b2bda0e2e497beac6fe1341598bbbf4fb503c4155fd809d5d1be575058eaba6f1b7b76c854c2c09d704813bcef64ee63d3d3a93999e6366919c4d1a66d1fef65c239307e3ac1468532820645a1dc2fc8eaf6d48e673bd19fd75688c0e55215e028323ff24140d251aa69fdb0e03032ec46fc5ce4b8aeb4c7dbc08074f4ddd32a76404117494848d8056eaf47fbcdaa09fa7e1a9930f02ff95bbd8c14beb284e2a9f5a9a5a914ed3a", 0xbc}, {&(0x7f0000002680)="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", 0xed5}], 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.027929003s ago: executing program 3 (id=419): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000780)={0x4, 0x4, {0xfffffffffffffff7, @struct={0x4, 0x2}, 0x0, 0x1a8000000000000, 0x8001, 0x80, 0x4, 0x0, 0x420, @struct={0x2, 0xf}, 0x4, 0x1000, [0x5, 0xffffffffffffe345, 0x5c7, 0x1, 0x7, 0x4]}, {0x0, @struct={0x120000, 0x2}, 0x0, 0x7, 0x8, 0xd0c1, 0x5ce3, 0x5, 0x4, @struct={0xff, 0x9}, 0x8, 0x0, [0x7, 0xb0e0, 0x12, 0x7fff, 0x9, 0x1]}, {0x0, @usage=0x10000, 0x0, 0xff48367, 0x4, 0x8, 0x5e57, 0x9, 0x60, @struct={0x9, 0x8}, 0x8b40, 0x6, [0xf62b, 0xe7, 0x7, 0x100, 0x2, 0x2]}, {0xfffffffffffff71d, 0x1, 0x4}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001540)={{}, 0x0, 0xa, @unused=[0xf5b, 0x7, 0x5], @devid=r6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r11 = dup3(0xffffffffffffffff, r10, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f00000014c0)=[@release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 977.474906ms ago: executing program 4 (id=420): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nodiscard}, {}, {@fsync_mode_posix}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@nouser_xattr}, {@inline_dentry}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@io_bits={'io_bits', 0x3d, 0x8f}}, {}], [{@obj_user={'obj_user', 0x3d, 'fsync_mode=strict'}}]}, 0x1, 0x550e, &(0x7f0000001e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60002015}) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r3, 0x0, 0x4}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, 0x0, 0x0) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r9, &(0x7f0000000080), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000004000000060000000000000084b008d48c239d29c79744723cd8ab07600d6a7096c241ec5bdb0fd1765c0b8e9d5feac4886cb9a4f87aaf0259bae1445cada49e9f59fcc72724c3a86968e72e1f38837a3f7153a645408d6092d00a92f6b6066eae0d8c895a02ed5208daba2bae4cc3d15c9d4426f4859e3d971681cc1e2d2937565e0fcd99dced6f246bc2650cc9d6f0b4712c1319112bc6d6415639ac4a086fc156be9a67835ce2bbe8e61a0b8ac7b1f8d02c79696207c69c53b773c64c1699a1107f3a08910a8aac908bef0b65cd4c9b22ae240cf90e8062781f9f33f35a1659c87e385b4901efd000"/251, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 46.414626ms ago: executing program 1 (id=421): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000a00)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd69750cae2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd97014041650b95a47e5503407c8b6fb8aef42f8ffd20767f33924ad2f6f554d7ebec34da1aed3a1022611d9594264302ce7f2ef5784331de5debf875c882187f61a6ae9b73456312b66f1b0387c9d797d8a0d6fa7429bc6e31c7d85331daa607de5812e032f519b47fce3f8af97f329471cbb95d5ae451a22e4085b70dcb1fd861168374b095391db8e7a7998241b56732a9d6716b6d1587bd8b5447a22d219fe0df0d37074471bc12e02943c93a9a7877755df949c47df03f7bb715d89ff1815951335c9", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x800003d, 0x7ff) write$binfmt_script(r0, &(0x7f00000000c0), 0xb) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = syz_open_procfs(r1, &(0x7f0000000100)='net/tcp\x00') r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r6, 0x0) pread64(r5, &(0x7f0000000740)=""/102398, 0x18ffe, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0182101, 0x0) mmap(&(0x7f0000772000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x381af000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) lseek(r0, 0x0, 0x3) 44.282876ms ago: executing program 0 (id=422): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000041c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0xa3dc098a9cbcbef8}}, {@delalloc}, {@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xffffffffffffffff}}, {@delalloc}, {@stripe={'stripe', 0x3d, 0xa92}}, {@data_err_abort}]}, 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="00009500010000000000"], &(0x7f00000004c0)='syzkaller\x00', 0xbb9, 0x29, &(0x7f00000006c0)=""/41, 0x40f00, 0x2c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x66be, 0xffffffffffffffff, 0x7, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001280)=[{0x4, 0x1, 0x7, 0x2}, {0x1, 0x3, 0x8}, {0x2, 0x2, 0x6, 0x2}, {0x2, 0x5, 0xf}, {0x3, 0x4, 0x10, 0x5}, {0x0, 0x2, 0x5, 0x4}, {0x3, 0x1, 0x5, 0xb}], 0x10, 0xfffffffc, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000800)=""/215, 0xd7}], 0x5, &(0x7f0000000480)=""/42, 0x2a}, 0x7}, {{&(0x7f0000000980)=@hci, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000fc0)=""/242, 0xf2}, {&(0x7f0000000040)=""/49, 0x31}], 0x2, &(0x7f0000002ec0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000004140)=""/78, 0x4e}], 0x1, &(0x7f0000001140)=""/69, 0x45}, 0x63f194da}, {{&(0x7f00000011c0)=@phonet, 0x80, &(0x7f0000003f40)=[{&(0x7f0000001300)=""/228, 0xe4}, {&(0x7f0000001500)=""/246, 0xf6}, {&(0x7f0000001400)=""/110, 0x6e}, {&(0x7f0000001600)=""/94, 0x5e}, {&(0x7f0000001680)=""/51, 0x33}, {&(0x7f0000003ec0)=""/82, 0x52}], 0x6, &(0x7f00000016c0)=""/13, 0xd}, 0x5eb}, {{&(0x7f0000003fc0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005280)=[{&(0x7f0000004040)=""/234, 0xea}, {&(0x7f0000006a00)=""/240, 0xf0}, {&(0x7f0000004240)}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x4, &(0x7f00000052c0)=""/90, 0x5a}, 0xfff}, {{&(0x7f0000005340)=@hci, 0x80, &(0x7f00000067c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/77, 0x4d}, {&(0x7f0000006440)=""/248, 0xf8}, {&(0x7f0000006540)=""/15, 0xf}, {&(0x7f0000006580)=""/139, 0x8b}, {&(0x7f0000006640)=""/164, 0xa4}, {&(0x7f0000006700)=""/171, 0xab}], 0x7, &(0x7f0000006840)=""/27, 0x1b}, 0xb7}], 0x6, 0x40000000, 0x0) open(&(0x7f0000000680)='./file0\x00', 0x20142, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x6, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0xa85c0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006b00)={0xf, 0x7, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0x1, &(0x7f0000000000)={0xc9, 0x2000000000eaf9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x0) 1.241739ms ago: executing program 2 (id=423): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000580)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x45e, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) getresuid(0x0, &(0x7f0000000480), 0x0) r4 = socket(0x40000000002, 0x3, 0x2) r5 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) recvmmsg(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 0s ago: executing program 3 (id=424): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={&(0x7f0000000340)="94a44c4ea131efdeea3d84b50840939a117a66e45cf1cbce5caad3d9134ec0dfe62addb03399e122409131ee79f2f845a1cad8cfbdcab0cf1d7eecbe3484f14c1e00f3b4e01f45904bf0b2b5402fb678af5e969b8bcde1c0f9e11148b5c1312f11f6f7", &(0x7f0000000440)=""/100, &(0x7f00000003c0), &(0x7f00000004c0)="90c4533d455e016c5bbc74f5be7eb63b209bbef624dfd86cb3e0b4a64937a2590747fba37dabfaa52f8b276420875a44e06ca540bb6151e1b82cce9a311bbc7ee147dcee4f096233e3841dfdc28aa5fcf3f7f1590a416d0e7c862f5d6568386c9f26ff2725a18980f23a726df9be407ca7411564aba787db0bc104f57f9789003b846325b323b32dce05d6d557eaf8a539df5901c21b0a73", 0x194c}, 0x38) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001c80)='/sys/kernel/uevent_helper', 0x8041, 0x0) pwritev(r4, &(0x7f0000003740)=[{&(0x7f0000002500)="fb7900e5f1cb3e986ec2a8", 0xb}, {&(0x7f0000002540)="339db661a533edee8c0a2a6d6c63c97595cd2390d04b06ce00f6f323e324877448ccafe49dcdab3f771d29010f3848d340b9e7e5b0ac48bc62c65902cb65fd40db3e9e65d9eb327101a03178340c2b93c652c6a4c26256628d92baa6cc5bee6371ea9d19f6", 0x65}, {&(0x7f00000025c0)="4a629f8e789b1b8e82b80dc886ee9f39986a0c42b2bda0e2e497beac6fe1341598bbbf4fb503c4155fd809d5d1be575058eaba6f1b7b76c854c2c09d704813bcef64ee63d3d3a93999e6366919c4d1a66d1fef65c239307e3ac1468532820645a1dc2fc8eaf6d48e673bd19fd75688c0e55215e028323ff24140d251aa69fdb0e03032ec46fc5ce4b8aeb4c7dbc08074f4ddd32a76404117494848d8056eaf47fbcdaa09fa7e1a9930f02ff95bbd8c14beb284e2a9f5a9a5a914ed3a", 0xbc}, {&(0x7f0000002680)="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", 0xed5}], 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): T873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.850216][ T868] device bridge_slave_0 entered promiscuous mode [ 49.866422][ T868] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.873440][ T868] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.880858][ T868] device bridge_slave_1 entered promiscuous mode [ 49.930927][ T873] overlayfs: missing 'lowerdir' [ 49.968782][ T293] EXT4-fs (loop4): unmounting filesystem. [ 50.011560][ T292] syz-executor (292) used greatest stack depth: 19784 bytes left [ 50.023290][ T868] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.030290][ T868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.037351][ T868] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.044139][ T868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.073810][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.082878][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.092948][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.109564][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.117963][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.125193][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.133246][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.141387][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.148267][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.164173][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.172224][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.189466][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.198102][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.205986][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.214552][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.222779][ T868] device veth0_vlan entered promiscuous mode [ 50.236993][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.245367][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.257861][ T868] device veth1_macvtap entered promiscuous mode [ 50.268246][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.276337][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.285281][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.306686][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.309289][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.316921][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.568033][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 50.827823][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.838001][ T19] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 50.846785][ T19] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 50.855834][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.864432][ T19] usb 5-1: config 0 descriptor?? [ 50.938140][ T351] device bridge_slave_1 left promiscuous mode [ 50.944137][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.951438][ T351] device bridge_slave_0 left promiscuous mode [ 50.957431][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.965118][ T351] device veth1_macvtap left promiscuous mode [ 50.971106][ T351] device veth0_vlan left promiscuous mode [ 51.082765][ T28] audit: type=1400 audit(1728830727.491:165): avc: denied { remove_name } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.104995][ T28] audit: type=1400 audit(1728830727.491:166): avc: denied { rename } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.127041][ T28] audit: type=1400 audit(1728830727.491:167): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.291873][ T28] audit: type=1400 audit(1728830727.701:168): avc: denied { read write } for pid=879 comm="syz.4.141" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.323773][ T28] audit: type=1400 audit(1728830727.731:169): avc: denied { open } for pid=879 comm="syz.4.141" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.330368][ T914] loop0: detected capacity change from 0 to 256 [ 52.343329][ T551] usb 3-1: USB disconnect, device number 2 [ 52.359160][ T916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 52.375404][ T914] FAT-fs (loop0): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 52.667348][ T914] loop0: detected capacity change from 0 to 512 [ 52.680669][ T914] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.693594][ T914] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.149: bg 0: block 264: padding at end of block bitmap is not set [ 52.708083][ T914] EXT4-fs (loop0): Remounting filesystem read-only [ 52.714563][ T914] EXT4-fs (loop0): 1 truncate cleaned up [ 52.720246][ T914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 52.737415][ T841] EXT4-fs (loop0): unmounting filesystem. [ 53.038448][ T6] usb 5-1: USB disconnect, device number 2 [ 53.072092][ T28] audit: type=1400 audit(1728830729.481:170): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 54.188503][ T28] audit: type=1400 audit(1728830730.601:171): avc: denied { read } for pid=942 comm="syz.3.154" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.291213][ T28] audit: type=1400 audit(1728830730.601:172): avc: denied { open } for pid=942 comm="syz.3.154" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.447110][ T28] audit: type=1400 audit(1728830730.841:173): avc: denied { ioctl } for pid=942 comm="syz.3.154" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.574947][ T28] audit: type=1400 audit(1728830730.951:174): avc: denied { create } for pid=946 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.950103][ T972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 56.367611][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 56.607623][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 56.727663][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.737674][ T6] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 56.746412][ T6] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 56.755334][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.937413][ T6] usb 4-1: config 0 descriptor?? [ 57.097576][ T19] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 57.356623][ T605] syz-executor: attempt to access beyond end of device [ 57.356623][ T605] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 57.467670][ T19] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 57.487948][ T19] usb 2-1: config 0 has no interface number 0 [ 57.508011][ T19] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 57.569318][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.582389][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.598237][ T992] device bridge_slave_0 entered promiscuous mode [ 57.608449][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.617715][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.625680][ T992] device bridge_slave_1 entered promiscuous mode [ 57.697649][ T19] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 57.706641][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.725193][ T19] usb 2-1: Product: syz [ 57.729423][ T19] usb 2-1: Manufacturer: syz [ 57.733834][ T19] usb 2-1: SerialNumber: syz [ 57.739485][ T19] usb 2-1: config 0 descriptor?? [ 57.757991][ T983] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.778022][ T19] ums-karma 2-1:0.46: USB Mass Storage device detected [ 57.798661][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.805512][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.812638][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.819414][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.840432][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.847721][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.855300][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.862716][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.871602][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.879904][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.886751][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.887906][ T19] ums-karma: probe of 2-1:0.46 failed with error -5 [ 57.896632][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.908380][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.915215][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.937026][ T992] device veth0_vlan entered promiscuous mode [ 57.943698][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.952489][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.960351][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.967673][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.974848][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.982714][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.998117][ T992] device veth1_macvtap entered promiscuous mode [ 58.008335][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.016460][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.024803][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.398200][ T351] device bridge_slave_1 left promiscuous mode [ 58.404511][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.422809][ T351] device bridge_slave_0 left promiscuous mode [ 58.437623][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.448661][ T351] device veth1_macvtap left promiscuous mode [ 58.454513][ T351] device veth0_vlan left promiscuous mode [ 58.498891][ T1008] FAULT_INJECTION: forcing a failure. [ 58.498891][ T1008] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.511995][ T1008] CPU: 0 PID: 1008 Comm: syz.4.169 Not tainted 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 58.521447][ T1008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.531445][ T1008] Call Trace: [ 58.534554][ T1008] [ 58.537338][ T1008] dump_stack_lvl+0x151/0x1b7 [ 58.541844][ T1008] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 58.547139][ T1008] ? vfs_write+0x952/0xed0 [ 58.551392][ T1008] ? __kasan_slab_free+0x11/0x20 [ 58.556166][ T1008] dump_stack+0x15/0x1b [ 58.560155][ T1008] should_fail_ex+0x3d0/0x520 [ 58.564670][ T1008] should_fail+0xb/0x10 [ 58.568662][ T1008] should_fail_usercopy+0x1a/0x20 [ 58.573523][ T1008] _copy_from_user+0x1e/0xc0 [ 58.577951][ T1008] __sys_bpf+0x23b/0x7f0 [ 58.582030][ T1008] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 58.587239][ T1008] ? __ia32_sys_read+0x90/0x90 [ 58.591838][ T1008] ? debug_smp_processor_id+0x17/0x20 [ 58.597044][ T1008] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 58.602952][ T1008] __x64_sys_bpf+0x7c/0x90 [ 58.607202][ T1008] x64_sys_call+0x87f/0x9a0 [ 58.611539][ T1008] do_syscall_64+0x3b/0xb0 [ 58.615788][ T1008] ? clear_bhb_loop+0x55/0xb0 [ 58.620304][ T1008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.626034][ T1008] RIP: 0033:0x7f619fb7dff9 [ 58.630287][ T1008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.649728][ T1008] RSP: 002b:00007f61a0931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.657967][ T1008] RAX: ffffffffffffffda RBX: 00007f619fd35f80 RCX: 00007f619fb7dff9 [ 58.665778][ T1008] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000004 [ 58.673587][ T1008] RBP: 00007f61a0931090 R08: 0000000000000000 R09: 0000000000000000 [ 58.681399][ T1008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.689219][ T1008] R13: 0000000000000000 R14: 00007f619fd35f80 R15: 00007ffdb0bf1128 [ 58.697115][ T1008] [ 58.701652][ T1013] loop1: detected capacity change from 0 to 16 [ 58.713402][ T1013] erofs: Unknown parameter 'ÿÿÿÿt’5Æ;Àâ} ï7_cŠúÏèðÎîËN”Øü÷û"LŽõ‚öaÂm)p÷«ñ„°ƒº'6~—' [ 59.157686][ T323] usb 4-1: USB disconnect, device number 3 [ 59.946815][ T321] usb 2-1: USB disconnect, device number 2 [ 60.065648][ T1039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 60.264027][ T1044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 60.292078][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.299013][ T1038] loop1: detected capacity change from 0 to 40427 [ 60.318128][ T1044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.327711][ T323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 60.335586][ T1038] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.337345][ T1041] loop2: detected capacity change from 0 to 40427 [ 60.373504][ T1038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.373924][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 60.390120][ T1041] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.409508][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.418145][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 60.442178][ T1041] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.477966][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.486163][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.494111][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.502034][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.509962][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.787621][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 60.857652][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.868441][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 60.875655][ T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.885286][ T323] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 60.894089][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.902741][ T323] usb 4-1: config 0 descriptor?? [ 61.147675][ T19] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 61.158457][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.169304][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 61.237687][ T6] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 61.248551][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.259250][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 61.268123][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 61.280960][ T19] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 61.288861][ T19] usb 2-1: Manufacturer: syz [ 61.293937][ T19] usb 2-1: config 0 descriptor?? [ 61.367748][ T6] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 61.376664][ T6] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 61.384549][ T6] usb 3-1: Manufacturer: syz [ 61.390170][ T323] hid-led 0003:0FC5:B080.0003: item fetching failed at offset 0/3 [ 61.398308][ T6] usb 3-1: config 0 descriptor?? [ 61.403140][ T323] hid-led: probe of 0003:0FC5:B080.0003 failed with error -22 [ 61.604380][ T322] usb 4-1: USB disconnect, device number 4 [ 61.778499][ T19] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 61.786065][ T19] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 61.795786][ T19] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 62.051380][ T6] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 62.058483][ T6] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 62.089190][ T6] appleir 0003:05AC:8243.0005: hiddev97,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 62.937580][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 63.267603][ T6] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 63.327622][ T24] usb 5-1: config 6 has an invalid interface number: 128 but max is 0 [ 63.335711][ T24] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 63.345085][ T24] usb 5-1: config 6 has no interface number 1 [ 63.351066][ T24] usb 5-1: too many endpoints for config 6 interface 0 altsetting 225: 168, using maximum allowed: 30 [ 63.362163][ T24] usb 5-1: config 6 interface 0 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 63.375200][ T24] usb 5-1: config 6 interface 0 has no altsetting 0 [ 63.444500][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 63.444513][ T28] audit: type=1400 audit(1728830739.851:177): avc: denied { create } for pid=1075 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.450531][ T1076] loop0: detected capacity change from 0 to 256 [ 63.470455][ T28] audit: type=1400 audit(1728830739.881:178): avc: denied { getopt } for pid=1075 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.498390][ T915] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.517687][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 63.597703][ T24] usb 5-1: New USB device found, idVendor=0e8d, idProduct=760a, bcdDevice=72.e6 [ 63.606789][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.614701][ T24] usb 5-1: Product: syz [ 63.618775][ T24] usb 5-1: Manufacturer: syz [ 63.623183][ T24] usb 5-1: SerialNumber: syz [ 63.782765][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.792845][ T6] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 63.801622][ T6] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 63.810463][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.818863][ T6] usb 4-1: config 0 descriptor?? [ 63.922304][ T1083] loop4: detected capacity change from 0 to 16 [ 63.928598][ T1083] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 63.979085][ T28] audit: type=1400 audit(1728830740.391:179): avc: denied { read } for pid=1070 comm="syz.4.183" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.001992][ T28] audit: type=1400 audit(1728830740.391:180): avc: denied { open } for pid=1070 comm="syz.4.183" path="/dev/rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.420972][ T28] audit: type=1400 audit(1728830740.831:181): avc: denied { unmount } for pid=841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.693892][ T1100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'. [ 65.151262][ T321] usb 2-1: USB disconnect, device number 3 [ 65.167960][ T6] usb 3-1: USB disconnect, device number 3 [ 65.413740][ T28] audit: type=1400 audit(1728830741.821:182): avc: denied { create } for pid=1103 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.415553][ T1104] loop0: detected capacity change from 0 to 256 [ 65.433525][ T28] audit: type=1400 audit(1728830741.821:183): avc: denied { ioctl } for pid=1103 comm="syz.0.190" path="socket:[19396]" dev="sockfs" ino=19396 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.648409][ T28] audit: type=1400 audit(1728830742.051:184): avc: denied { write } for pid=1103 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.877776][ T24] usb 5-1: bad CDC descriptors [ 66.058698][ T24] usb 5-1: USB disconnect, device number 3 [ 66.117465][ T19] usb 4-1: USB disconnect, device number 5 [ 67.074126][ T841] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 67.083142][ T841] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 67.410835][ T28] audit: type=1400 audit(1728830743.811:185): avc: denied { audit_write } for pid=1123 comm="syz.3.198" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.446917][ T28] audit: type=1107 audit(1728830743.811:186): pid=1123 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='pro' [ 67.475479][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.482474][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.490428][ T1125] device bridge_slave_0 entered promiscuous mode [ 67.499109][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.506126][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.514996][ T1125] device bridge_slave_1 entered promiscuous mode [ 67.646960][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.653896][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.660964][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.667749][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.727232][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.734408][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.741757][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.748985][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.758127][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.766081][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.772941][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.782359][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.790399][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.797233][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.810095][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.818175][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.835046][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.846258][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.854262][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.861766][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.871439][ T1125] device veth0_vlan entered promiscuous mode [ 67.882112][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.891273][ T1125] device veth1_macvtap entered promiscuous mode [ 67.900689][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.912595][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.315580][ T1141] FAULT_INJECTION: forcing a failure. [ 68.315580][ T1141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.328509][ T1141] CPU: 0 PID: 1141 Comm: syz.3.199 Not tainted 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 68.337905][ T1141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.347921][ T1141] Call Trace: [ 68.351134][ T1141] [ 68.353911][ T1141] dump_stack_lvl+0x151/0x1b7 [ 68.358427][ T1141] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 68.363715][ T1141] ? kstrtouint+0xf6/0x180 [ 68.367969][ T1141] ? _kstrtol+0x150/0x150 [ 68.372313][ T1141] dump_stack+0x15/0x1b [ 68.376301][ T1141] should_fail_ex+0x3d0/0x520 [ 68.380819][ T1141] should_fail+0xb/0x10 [ 68.384807][ T1141] should_fail_usercopy+0x1a/0x20 [ 68.389686][ T1141] _copy_from_user+0x1e/0xc0 [ 68.394095][ T1141] copy_msghdr_from_user+0xaa/0x670 [ 68.399130][ T1141] ? sendmsg_copy_msghdr+0x70/0x70 [ 68.404078][ T1141] __sys_sendmsg+0x236/0x390 [ 68.408502][ T1141] ? ____sys_sendmsg+0x9a0/0x9a0 [ 68.413279][ T1141] ? __kasan_check_write+0x14/0x20 [ 68.418221][ T1141] ? mutex_unlock+0xb2/0x260 [ 68.422653][ T1141] ? __kasan_check_write+0x14/0x20 [ 68.427600][ T1141] ? __ia32_sys_read+0x90/0x90 [ 68.432197][ T1141] ? debug_smp_processor_id+0x17/0x20 [ 68.437403][ T1141] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 68.443309][ T1141] __x64_sys_sendmsg+0x7f/0x90 [ 68.447907][ T1141] x64_sys_call+0x16a/0x9a0 [ 68.452248][ T1141] do_syscall_64+0x3b/0xb0 [ 68.456496][ T1141] ? clear_bhb_loop+0x55/0xb0 [ 68.461013][ T1141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.466739][ T1141] RIP: 0033:0x7f082997dff9 [ 68.470996][ T1141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.490522][ T1141] RSP: 002b:00007f082a726038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.498766][ T1141] RAX: ffffffffffffffda RBX: 00007f0829b36130 RCX: 00007f082997dff9 [ 68.506580][ T1141] RDX: 0000000000000000 RSI: 0000000020001fc0 RDI: 0000000000000006 [ 68.514390][ T1141] RBP: 00007f082a726090 R08: 0000000000000000 R09: 0000000000000000 [ 68.522204][ T1141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.530013][ T1141] R13: 0000000000000000 R14: 00007f0829b36130 R15: 00007ffc4ddc9de8 [ 68.537858][ T1141] [ 68.608785][ T8] device bridge_slave_1 left promiscuous mode [ 68.614813][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.622930][ T8] device bridge_slave_0 left promiscuous mode [ 68.629236][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.639010][ T8] device veth1_macvtap left promiscuous mode [ 68.644875][ T8] device veth0_vlan left promiscuous mode [ 68.888055][ T1145] loop3: detected capacity change from 0 to 256 [ 68.975613][ T1148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'. [ 70.533720][ T992] syz-executor: attempt to access beyond end of device [ 70.533720][ T992] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 70.537845][ T534] syz-executor: attempt to access beyond end of device [ 70.537845][ T534] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 70.615419][ T1167] loop0: detected capacity change from 0 to 256 [ 70.631072][ T1167] FAT-fs (loop0): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 70.746876][ T1167] loop0: detected capacity change from 0 to 512 [ 71.134695][ T1167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.407259][ T1167] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.208: bg 0: block 264: padding at end of block bitmap is not set [ 71.429815][ T1167] EXT4-fs (loop0): Remounting filesystem read-only [ 71.438557][ T1167] EXT4-fs (loop0): 1 truncate cleaned up [ 71.444852][ T1167] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.599210][ T1125] EXT4-fs (loop0): unmounting filesystem. [ 71.630285][ T1185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 71.782095][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.805282][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.821040][ T1191] loop0: detected capacity change from 0 to 1024 [ 71.879125][ T1191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.914107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 71.921767][ T28] audit: type=1400 audit(1728830748.331:187): avc: denied { write } for pid=1189 comm="syz.0.211" name="bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.925672][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.943117][ T28] audit: type=1400 audit(1728830748.331:188): avc: denied { add_name } for pid=1189 comm="syz.0.211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.964529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 71.977544][ T28] audit: type=1400 audit(1728830748.361:189): avc: denied { setattr } for pid=1189 comm="syz.0.211" name="work" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.000019][ T28] audit: type=1400 audit(1728830748.361:190): avc: denied { remove_name } for pid=1189 comm="syz.0.211" name="#1" dev="loop0" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.021875][ T28] audit: type=1400 audit(1728830748.361:191): avc: denied { rename } for pid=1189 comm="syz.0.211" name="#1" dev="loop0" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.043233][ T28] audit: type=1400 audit(1728830748.361:192): avc: denied { unlink } for pid=1189 comm="syz.0.211" name="#1" dev="loop0" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.049477][ T1191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.065415][ T28] audit: type=1400 audit(1728830748.361:193): avc: denied { unlink } for pid=1189 comm="syz.0.211" name="#2" dev="loop0" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.073745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.105652][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.106916][ T1125] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 72.114107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.124691][ T28] audit: type=1400 audit(1728830748.511:194): avc: denied { remove_name } for pid=1125 comm="syz-executor" name="file3" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.133708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.155358][ T28] audit: type=1400 audit(1728830748.511:195): avc: denied { rmdir } for pid=1125 comm="syz-executor" name="file3" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.163590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.441101][ T1125] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 72.444139][ T28] audit: type=1400 audit(1728830748.511:196): avc: denied { rmdir } for pid=1125 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.476581][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.504146][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.514442][ T1179] device bridge_slave_0 entered promiscuous mode [ 72.544321][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.551318][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.558736][ T1179] device bridge_slave_1 entered promiscuous mode [ 72.584557][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.591501][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.600901][ T1178] device bridge_slave_0 entered promiscuous mode [ 72.672498][ T1125] EXT4-fs (loop0): unmounting filesystem. [ 72.686607][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.695625][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.705729][ T1178] device bridge_slave_1 entered promiscuous mode [ 72.904250][ T1212] loop3: detected capacity change from 0 to 256 [ 72.912695][ T1212] FAT-fs (loop3): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 72.973795][ T1212] loop3: detected capacity change from 0 to 512 [ 72.980441][ T1212] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.995399][ T1212] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.218: bg 0: block 264: padding at end of block bitmap is not set [ 73.009735][ T1212] EXT4-fs (loop3): Remounting filesystem read-only [ 73.016193][ T1212] EXT4-fs (loop3): 1 truncate cleaned up [ 73.022329][ T1212] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 73.030970][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.038425][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.052935][ T868] EXT4-fs (loop3): unmounting filesystem. [ 73.062359][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.073555][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.112444][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.119329][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.127026][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.135197][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.143128][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.149972][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.157090][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.170466][ T8] device bridge_slave_1 left promiscuous mode [ 73.176478][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.679779][ T8] device bridge_slave_0 left promiscuous mode [ 73.685845][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.693574][ T8] device veth1_macvtap left promiscuous mode [ 73.699455][ T8] device veth0_vlan left promiscuous mode [ 73.759771][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.773746][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.781853][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.812024][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.819304][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.841782][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.849931][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.858227][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.865076][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.872570][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.880642][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.888798][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.895627][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.912649][ T1214] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.920592][ T1214] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.928526][ T1214] device bridge_slave_0 entered promiscuous mode [ 73.940621][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.977466][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.985865][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.994219][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.002022][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.010075][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.017368][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.024689][ T1214] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.031620][ T1214] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.040475][ T1214] device bridge_slave_1 entered promiscuous mode [ 74.530817][ T1179] device veth0_vlan entered promiscuous mode [ 74.547606][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.555447][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.563344][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.571202][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.591680][ T1179] device veth1_macvtap entered promiscuous mode [ 74.598137][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.606086][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.614209][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.626451][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.634789][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.654106][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.662168][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.670478][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.678684][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.698584][ T1178] device veth0_vlan entered promiscuous mode [ 74.705329][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.716971][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.718290][ T1229] loop1: detected capacity change from 0 to 256 [ 74.731310][ T1178] device veth1_macvtap entered promiscuous mode [ 74.745836][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.753297][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.760956][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.769702][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.777942][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.811150][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.819848][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.828743][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.839252][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.842589][ T1231] loop3: detected capacity change from 0 to 512 [ 74.859314][ T1231] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.871385][ T1231] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.221: invalid block [ 74.882407][ T1231] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.221: couldn't read orphan inode 11 (err -117) [ 74.895347][ T1231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.218331][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.228174][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.253468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.261800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.270103][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.276977][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.284495][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.293096][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.301513][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.308380][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.315939][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.323918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.352077][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.360005][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.369029][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.383880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.401503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.415017][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.423693][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.431246][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.444628][ T1214] device veth0_vlan entered promiscuous mode [ 75.457329][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.467353][ T1214] device veth1_macvtap entered promiscuous mode [ 75.484757][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.494535][ T796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.598883][ T1179] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 75.633622][ T1242] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 75.678536][ T1179] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 75.688212][ T1248] loop0: detected capacity change from 0 to 512 [ 75.775511][ T868] EXT4-fs (loop3): unmounting filesystem. [ 75.790284][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.802142][ T1248] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 75.812800][ T1255] loop3: detected capacity change from 0 to 512 [ 75.819343][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.829734][ T1248] EXT4-fs (loop0): 1 truncate cleaned up [ 75.836532][ T8] device bridge_slave_1 left promiscuous mode [ 75.880803][ T1248] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.981166][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.010795][ T1255] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 76.057272][ T1255] EXT4-fs (loop3): 1 truncate cleaned up [ 76.064526][ T8] device bridge_slave_0 left promiscuous mode [ 76.076812][ T1255] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.126439][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.160160][ T8] device bridge_slave_1 left promiscuous mode [ 76.172611][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.185910][ T8] device bridge_slave_0 left promiscuous mode [ 76.195742][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.209675][ T8] device veth1_macvtap left promiscuous mode [ 76.219791][ T8] device veth0_vlan left promiscuous mode [ 76.231597][ T8] device veth1_macvtap left promiscuous mode [ 76.244847][ T1258] overlayfs: missing 'lowerdir' [ 76.253197][ T8] device veth0_vlan left promiscuous mode [ 76.312532][ T1261] overlayfs: missing 'lowerdir' [ 76.461149][ T1260] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.468332][ T1260] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.475664][ T1260] device bridge_slave_0 entered promiscuous mode [ 76.483354][ T1260] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.490355][ T1260] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.497679][ T1260] device bridge_slave_1 entered promiscuous mode [ 76.538807][ T1214] EXT4-fs (loop0): unmounting filesystem. [ 76.637115][ T1260] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.644025][ T1260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.651121][ T1260] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.657884][ T1260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.687124][ T868] EXT4-fs (loop3): unmounting filesystem. [ 77.035783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.045810][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.053752][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.133783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.143854][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.150753][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.198781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.206986][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.213897][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.223510][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.231579][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.245575][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.256426][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.264301][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.271940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.280261][ T1260] device veth0_vlan entered promiscuous mode [ 77.292378][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.302190][ T1260] device veth1_macvtap entered promiscuous mode [ 77.313317][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.323456][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.349280][ T1282] loop1: detected capacity change from 0 to 256 [ 77.355876][ T1282] FAT-fs (loop1): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 77.484233][ T1282] loop1: detected capacity change from 0 to 512 [ 77.512982][ T1288] loop2: detected capacity change from 0 to 1024 [ 77.517382][ T1286] loop4: detected capacity change from 0 to 1024 [ 77.526355][ T1282] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.535570][ T1286] EXT4-fs: Ignoring removed orlov option [ 77.537691][ T1288] EXT4-fs: Ignoring removed orlov option [ 77.542006][ T1286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.589956][ T1288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.718990][ T1282] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.227: bg 0: block 264: padding at end of block bitmap is not set [ 77.810672][ T1282] EXT4-fs (loop1): Remounting filesystem read-only [ 77.812430][ T1288] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.817109][ T1282] EXT4-fs (loop1): 1 truncate cleaned up [ 77.836747][ T1286] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.840067][ T1282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.871199][ T1260] EXT4-fs (loop1): unmounting filesystem. [ 77.918233][ T1301] loop1: detected capacity change from 0 to 512 [ 77.935379][ T293] EXT4-fs (loop4): unmounting filesystem. [ 77.944399][ T1178] EXT4-fs (loop2): unmounting filesystem. [ 77.953864][ T1301] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 78.852607][ T1312] FAULT_INJECTION: forcing a failure. [ 78.852607][ T1312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.865518][ T1312] CPU: 0 PID: 1312 Comm: syz.2.238 Not tainted 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 78.874927][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.884818][ T1312] Call Trace: [ 78.888031][ T1312] [ 78.890808][ T1312] dump_stack_lvl+0x151/0x1b7 [ 78.895326][ T1312] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 78.900610][ T1312] ? fsnotify_perm+0x6a/0x5b0 [ 78.905147][ T1312] dump_stack+0x15/0x1b [ 78.909117][ T1312] should_fail_ex+0x3d0/0x520 [ 78.913633][ T1312] should_fail+0xb/0x10 [ 78.917712][ T1312] should_fail_usercopy+0x1a/0x20 [ 78.922569][ T1312] _copy_from_user+0x1e/0xc0 [ 78.926997][ T1312] get_timespec64+0x93/0x270 [ 78.931423][ T1312] ? bit_wait_io_timeout+0x120/0x120 [ 78.936630][ T1312] ? timespec64_add_safe+0x220/0x220 [ 78.941754][ T1312] __se_sys_ppoll+0xcd/0x330 [ 78.946176][ T1312] ? ksys_write+0x260/0x2c0 [ 78.950515][ T1312] ? __this_cpu_preempt_check+0x13/0x20 [ 78.955900][ T1312] ? __x64_sys_ppoll+0xd0/0xd0 [ 78.960497][ T1312] ? __ia32_sys_read+0x90/0x90 [ 78.965101][ T1312] ? debug_smp_processor_id+0x17/0x20 [ 78.970400][ T1312] __x64_sys_ppoll+0xbf/0xd0 [ 78.974828][ T1312] x64_sys_call+0x721/0x9a0 [ 78.979166][ T1312] do_syscall_64+0x3b/0xb0 [ 78.983418][ T1312] ? clear_bhb_loop+0x55/0xb0 [ 78.987933][ T1312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.993748][ T1312] RIP: 0033:0x7f852ad7dff9 [ 78.998002][ T1312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.017627][ T1312] RSP: 002b:00007f852bb79038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 79.025875][ T1312] RAX: ffffffffffffffda RBX: 00007f852af36130 RCX: 00007f852ad7dff9 [ 79.033685][ T1312] RDX: 0000000020000300 RSI: 0000000000000025 RDI: 0000000020000d40 [ 79.041492][ T1312] RBP: 00007f852bb79090 R08: 0000000000000000 R09: 0000000000000000 [ 79.049305][ T1312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.057122][ T1312] R13: 0000000000000000 R14: 00007f852af36130 R15: 00007fff5e166a08 [ 79.065369][ T1312] [ 79.182881][ T8] device bridge_slave_1 left promiscuous mode [ 79.197662][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.206713][ T8] device bridge_slave_0 left promiscuous mode [ 79.219274][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.229582][ T8] device veth1_macvtap left promiscuous mode [ 79.235493][ T8] device veth0_vlan left promiscuous mode [ 80.320585][ T1329] loop1: detected capacity change from 0 to 16 [ 80.327268][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 80.327386][ T28] audit: type=1400 audit(1728830756.731:199): avc: denied { bind } for pid=1300 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.354102][ T28] audit: type=1400 audit(1728830756.731:200): avc: denied { write } for pid=1300 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.397971][ T1329] erofs: (device loop1): mounted with root inode @ nid 36. [ 80.476001][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.982256][ T1323] loop3: detected capacity change from 0 to 40427 [ 81.002910][ T1323] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 81.009626][ T1323] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 81.070508][ T1323] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 81.102936][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.120662][ T1344] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.164607][ T1323] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 81.177787][ T1323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.178090][ T1339] loop2: detected capacity change from 0 to 40427 [ 81.219323][ T1339] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.236405][ T868] syz-executor: attempt to access beyond end of device [ 81.236405][ T868] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 81.269228][ T1361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.249'. [ 81.331142][ T1339] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 81.396173][ T28] audit: type=1400 audit(1728830757.791:201): avc: denied { create } for pid=1364 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.888792][ T1178] syz-executor: attempt to access beyond end of device [ 81.888792][ T1178] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.877666][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.009113][ T28] audit: type=1400 audit(1728830759.421:202): avc: denied { create } for pid=1397 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.637631][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.687588][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.706693][ T1415] FAULT_INJECTION: forcing a failure. [ 84.706693][ T1415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.719748][ T19] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.719777][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.722157][ T19] usb 1-1: config 0 descriptor?? [ 84.728824][ T1415] CPU: 1 PID: 1415 Comm: syz.1.262 Not tainted 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 84.750772][ T1415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.760662][ T1415] Call Trace: [ 84.763786][ T1415] [ 84.766575][ T1415] dump_stack_lvl+0x151/0x1b7 [ 84.771084][ T1415] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 84.776373][ T1415] ? lock_sock_nested+0x261/0x300 [ 84.781236][ T1415] dump_stack+0x15/0x1b [ 84.785237][ T1415] should_fail_ex+0x3d0/0x520 [ 84.789742][ T1415] should_fail+0xb/0x10 [ 84.793733][ T1415] should_fail_usercopy+0x1a/0x20 [ 84.798591][ T1415] _copy_from_user+0x1e/0xc0 [ 84.803018][ T1415] do_ip_setsockopt+0x17f3/0x3f40 [ 84.807890][ T1415] ? ip_sock_set_pktinfo+0x60/0x60 [ 84.812823][ T1415] ? kstrtoull+0x1cd/0x2e0 [ 84.817077][ T1415] ? _parse_integer+0x40/0x40 [ 84.821678][ T1415] ? __stack_depot_save+0x36/0x480 [ 84.826625][ T1415] ? putname+0xfa/0x150 [ 84.830617][ T1415] ? avc_has_perm_noaudit+0x348/0x430 [ 84.835825][ T1415] ? memcpy+0x56/0x70 [ 84.839646][ T1415] ? avc_has_perm_noaudit+0x2dd/0x430 [ 84.844855][ T1415] ? avc_has_perm+0x16f/0x260 [ 84.849364][ T1415] ? avc_has_perm_noaudit+0x430/0x430 [ 84.854572][ T1415] ? proc_fail_nth_write+0x20b/0x290 [ 84.859692][ T1415] ? proc_fail_nth_read+0x210/0x210 [ 84.864726][ T1415] ? fsnotify_perm+0x6a/0x5b0 [ 84.869240][ T1415] ? selinux_socket_setsockopt+0x260/0x360 [ 84.874882][ T1415] ? selinux_socket_getsockopt+0x340/0x340 [ 84.880526][ T1415] ip_setsockopt+0x62/0x100 [ 84.884863][ T1415] udp_setsockopt+0x8f/0xa0 [ 84.889202][ T1415] sock_common_setsockopt+0xa2/0xc0 [ 84.894237][ T1415] ? sock_common_recvmsg+0x240/0x240 [ 84.899357][ T1415] __sys_setsockopt+0x4dc/0x8b0 [ 84.904057][ T1415] ? fput+0x15b/0x1b0 [ 84.907867][ T1415] ? __ia32_sys_recv+0xb0/0xb0 [ 84.912478][ T1415] ? debug_smp_processor_id+0x17/0x20 [ 84.917675][ T1415] __x64_sys_setsockopt+0xbf/0xd0 [ 84.922534][ T1415] x64_sys_call+0x1a2/0x9a0 [ 84.926869][ T1415] do_syscall_64+0x3b/0xb0 [ 84.931122][ T1415] ? clear_bhb_loop+0x55/0xb0 [ 84.935671][ T1415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.941453][ T1415] RIP: 0033:0x7fc3c737dff9 [ 84.945708][ T1415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.965673][ T1415] RSP: 002b:00007fc3c8238038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.974084][ T1415] RAX: ffffffffffffffda RBX: 00007fc3c7536058 RCX: 00007fc3c737dff9 [ 84.982079][ T1415] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000004 [ 84.989889][ T1415] RBP: 00007fc3c8238090 R08: 0000000000000108 R09: 0000000000000000 [ 84.997787][ T1415] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 85.005608][ T1415] R13: 0000000000000000 R14: 00007fc3c7536058 R15: 00007ffd6d0b4cb8 [ 85.013418][ T1415] [ 85.061042][ T19] usb 1-1: can't set config #0, error -71 [ 85.063541][ T1420] loop0: detected capacity change from 0 to 256 [ 85.069561][ T19] usb 1-1: USB disconnect, device number 2 [ 85.082752][ T1420] FAT-fs (loop0): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 85.160169][ T1420] loop0: detected capacity change from 0 to 512 [ 85.187876][ T1420] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.200590][ T1420] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.264: bg 0: block 264: padding at end of block bitmap is not set [ 85.216861][ T1420] EXT4-fs (loop0): Remounting filesystem read-only [ 85.221126][ T1427] netlink: 'syz.2.266': attribute type 27 has an invalid length. [ 85.231543][ T1420] EXT4-fs (loop0): 1 truncate cleaned up [ 85.237263][ T1420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.274685][ T1214] EXT4-fs (loop0): unmounting filesystem. [ 85.319162][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.326567][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.434073][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.445050][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.452218][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.461587][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.468646][ T1430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.475147][ T1435] loop3: detected capacity change from 0 to 512 [ 85.483617][ T1430] device veth0_vlan left promiscuous mode [ 85.493365][ T1430] device veth0_vlan entered promiscuous mode [ 85.500856][ T1430] device veth1_macvtap left promiscuous mode [ 85.501237][ T1435] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 85.508064][ T1430] device veth1_macvtap entered promiscuous mode [ 85.515172][ T1435] EXT4-fs (loop3): 1 truncate cleaned up [ 85.526329][ T1435] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.536410][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.543957][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.551598][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.564665][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.577947][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.586195][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.595818][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.603876][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.611915][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.620410][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.631198][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.641735][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 85.649740][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.657773][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 85.665648][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.673692][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.120909][ T1444] overlayfs: missing 'lowerdir' [ 86.297659][ T1151] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.462612][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.470683][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.479071][ T868] EXT4-fs (loop3): unmounting filesystem. [ 86.517429][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.525846][ T1449] loop3: detected capacity change from 0 to 512 [ 86.539060][ T1449] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 86.547211][ T1449] EXT4-fs (loop3): 1 truncate cleaned up [ 86.553055][ T1449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.614792][ T1455] loop1: detected capacity change from 0 to 1024 [ 86.641079][ T1455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.668111][ T1455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.676761][ T28] audit: type=1400 audit(1728830763.081:203): avc: denied { connect } for pid=1454 comm="syz.1.274" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.700393][ T1458] overlayfs: missing 'lowerdir' [ 86.727725][ T1151] usb 5-1: device descriptor read/64, error -71 [ 86.865612][ T1260] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 86.912196][ T1260] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 87.049425][ T1260] EXT4-fs (loop1): unmounting filesystem. [ 87.127870][ T1151] usb 5-1: device descriptor read/64, error -71 [ 87.160757][ T1465] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.167757][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.174905][ T1465] device bridge_slave_0 entered promiscuous mode [ 87.181680][ T1465] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.188613][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.195660][ T1465] device bridge_slave_1 entered promiscuous mode [ 87.240066][ T1465] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.247042][ T1465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.254162][ T1465] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.261020][ T1465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.282086][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.289650][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.297335][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.308395][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.316498][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.323367][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.332258][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.340500][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.348293][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.378701][ T868] EXT4-fs (loop3): unmounting filesystem. [ 87.397589][ T28] audit: type=1400 audit(1728830763.801:204): avc: denied { setopt } for pid=1469 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.418140][ T1151] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.423800][ T28] audit: type=1400 audit(1728830763.801:205): avc: denied { mounton } for pid=1469 comm="syz.3.279" path="/proc/130/task" dev="proc" ino=22461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 87.480167][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.488288][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.504622][ T1465] device veth0_vlan entered promiscuous mode [ 87.511262][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.519757][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.527486][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.534843][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.554366][ T1473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 87.569876][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.598193][ T1465] device veth1_macvtap entered promiscuous mode [ 87.623728][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.636618][ T1477] loop2: detected capacity change from 0 to 512 [ 87.650505][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.668497][ T353] device bridge_slave_1 left promiscuous mode [ 87.675475][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.692636][ T1477] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 87.701039][ T1480] FAULT_INJECTION: forcing a failure. [ 87.701039][ T1480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.715240][ T1477] EXT4-fs (loop2): 1 truncate cleaned up [ 87.715273][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.721114][ T1477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.728307][ T1480] CPU: 1 PID: 1480 Comm: syz.1.278 Not tainted 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 87.745777][ T1480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.755675][ T1480] Call Trace: [ 87.758798][ T1480] [ 87.761574][ T1480] dump_stack_lvl+0x151/0x1b7 [ 87.766088][ T1480] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 87.771384][ T1480] ? kstrtouint+0xf6/0x180 [ 87.775638][ T1480] ? _kstrtol+0x150/0x150 [ 87.779802][ T1480] dump_stack+0x15/0x1b [ 87.783804][ T1480] should_fail_ex+0x3d0/0x520 [ 87.788309][ T1480] should_fail+0xb/0x10 [ 87.792307][ T1480] should_fail_usercopy+0x1a/0x20 [ 87.797164][ T1480] _copy_from_user+0x1e/0xc0 [ 87.801591][ T1480] copy_msghdr_from_user+0xaa/0x670 [ 87.806627][ T1480] ? sendmsg_copy_msghdr+0x70/0x70 [ 87.811569][ T1480] __sys_sendmsg+0x236/0x390 [ 87.815993][ T1480] ? ____sys_sendmsg+0x9a0/0x9a0 [ 87.820767][ T1480] ? __kasan_check_write+0x14/0x20 [ 87.825818][ T1480] ? mutex_unlock+0xb2/0x260 [ 87.830227][ T1480] ? __kasan_check_write+0x14/0x20 [ 87.835173][ T1480] ? __ia32_sys_read+0x90/0x90 [ 87.839862][ T1480] ? debug_smp_processor_id+0x17/0x20 [ 87.845153][ T1480] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 87.851056][ T1480] __x64_sys_sendmsg+0x7f/0x90 [ 87.855656][ T1480] x64_sys_call+0x16a/0x9a0 [ 87.859995][ T1480] do_syscall_64+0x3b/0xb0 [ 87.864245][ T1480] ? clear_bhb_loop+0x55/0xb0 [ 87.868759][ T1480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.874489][ T1480] RIP: 0033:0x7f870557dff9 [ 87.878741][ T1480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.898183][ T1480] RSP: 002b:00007f87053ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.906428][ T1480] RAX: ffffffffffffffda RBX: 00007f8705735f80 RCX: 00007f870557dff9 [ 87.914241][ T1480] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 87.922050][ T1480] RBP: 00007f87053ff090 R08: 0000000000000000 R09: 0000000000000000 [ 87.929864][ T1480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.937861][ T1480] R13: 0000000000000000 R14: 00007f8705735f80 R15: 00007ffef73cda28 [ 87.945675][ T1480] [ 87.949923][ T353] device veth1_macvtap left promiscuous mode [ 87.955824][ T353] device veth0_vlan left promiscuous mode [ 87.996098][ T1482] loop1: detected capacity change from 0 to 512 [ 87.998760][ T1151] usb 5-1: device descriptor read/64, error -71 [ 88.020022][ T1482] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 88.028039][ T1482] EXT4-fs (loop1): 1 truncate cleaned up [ 88.033546][ T1482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.806560][ T1487] overlayfs: missing 'lowerdir' [ 89.060370][ T1465] EXT4-fs (loop1): unmounting filesystem. [ 89.126150][ T1178] EXT4-fs (loop2): unmounting filesystem. [ 89.140026][ T1498] loop2: detected capacity change from 0 to 128 [ 89.146684][ T1498] EXT4-fs (loop2): Test dummy encryption mode enabled [ 89.154196][ T1498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.161694][ T28] audit: type=1400 audit(1728830765.571:206): avc: denied { block_suspend } for pid=1493 comm="syz.1.284" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.163625][ T1496] FAULT_INJECTION: forcing a failure. [ 89.163625][ T1496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.184464][ T1498] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff) [ 89.216123][ T1496] CPU: 1 PID: 1496 Comm: syz.3.285 Not tainted 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 89.225589][ T1496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.235485][ T1496] Call Trace: [ 89.238606][ T1496] [ 89.238764][ T1498] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 89.241380][ T1496] dump_stack_lvl+0x151/0x1b7 [ 89.241406][ T1496] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 89.259008][ T1496] dump_stack+0x15/0x1b [ 89.262999][ T1496] should_fail_ex+0x3d0/0x520 [ 89.267512][ T1496] should_fail+0xb/0x10 [ 89.271502][ T1496] should_fail_usercopy+0x1a/0x20 [ 89.276366][ T1496] _copy_to_user+0x1e/0x90 [ 89.280614][ T1496] simple_read_from_buffer+0xc7/0x150 [ 89.285820][ T1496] proc_fail_nth_read+0x1a3/0x210 [ 89.290678][ T1496] ? proc_fault_inject_write+0x390/0x390 [ 89.296151][ T1496] ? fsnotify_perm+0x269/0x5b0 [ 89.300754][ T1496] ? security_file_permission+0x86/0xb0 [ 89.306127][ T1496] ? proc_fault_inject_write+0x390/0x390 [ 89.311595][ T1496] vfs_read+0x26c/0xae0 [ 89.315590][ T1496] ? kernel_read+0x1f0/0x1f0 [ 89.320016][ T1496] ? mutex_lock+0xb1/0x1e0 [ 89.324289][ T1496] ? bit_wait_io_timeout+0x120/0x120 [ 89.329395][ T1496] ? __fdget_pos+0x2e2/0x390 [ 89.333817][ T1496] ? ksys_read+0x77/0x2c0 [ 89.337981][ T1496] ksys_read+0x199/0x2c0 [ 89.342067][ T1496] ? __this_cpu_preempt_check+0x13/0x20 [ 89.347440][ T1496] ? xfd_validate_state+0x6f/0x170 [ 89.352389][ T1496] ? vfs_write+0xed0/0xed0 [ 89.356640][ T1496] ? fpregs_restore_userregs+0x130/0x290 [ 89.362196][ T1496] __x64_sys_read+0x7b/0x90 [ 89.366538][ T1496] x64_sys_call+0x28/0x9a0 [ 89.370786][ T1496] do_syscall_64+0x3b/0xb0 [ 89.375191][ T1496] ? clear_bhb_loop+0x55/0xb0 [ 89.379639][ T1496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.385367][ T1496] RIP: 0033:0x7f082997ca3c [ 89.389622][ T1496] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 89.409152][ T1496] RSP: 002b:00007f082a768030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.417394][ T1496] RAX: ffffffffffffffda RBX: 00007f0829b35f80 RCX: 00007f082997ca3c [ 89.425293][ T1496] RDX: 000000000000000f RSI: 00007f082a7680a0 RDI: 0000000000000005 [ 89.433108][ T1496] RBP: 00007f082a768090 R08: 0000000000000000 R09: 0000000000000000 [ 89.440915][ T1496] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 89.448727][ T1496] R13: 0000000000000000 R14: 00007f0829b35f80 R15: 00007ffc4ddc9de8 [ 89.456544][ T1496] [ 89.460210][ T1151] usb 5-1: device descriptor read/64, error -71 [ 89.618033][ T1151] usb usb5-port1: attempt power cycle [ 90.871304][ T28] audit: type=1400 audit(1728830767.261:207): avc: denied { create } for pid=1497 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.206234][ T1178] EXT4-fs (loop2): unmounting filesystem. [ 91.218879][ T1524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 91.234048][ T1521] device pim6reg1 entered promiscuous mode [ 91.252416][ T1529] FAULT_INJECTION: forcing a failure. [ 91.252416][ T1529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.265389][ T1529] CPU: 0 PID: 1529 Comm: syz.2.293 Not tainted 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 91.274850][ T1529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.284731][ T1529] Call Trace: [ 91.287857][ T1529] [ 91.290639][ T1529] dump_stack_lvl+0x151/0x1b7 [ 91.295147][ T1529] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 91.300437][ T1529] ? kstrtouint+0xf6/0x180 [ 91.304691][ T1529] ? _kstrtol+0x150/0x150 [ 91.308855][ T1529] dump_stack+0x15/0x1b [ 91.312851][ T1529] should_fail_ex+0x3d0/0x520 [ 91.317359][ T1529] should_fail+0xb/0x10 [ 91.321350][ T1529] should_fail_usercopy+0x1a/0x20 [ 91.326214][ T1529] _copy_from_user+0x1e/0xc0 [ 91.330638][ T1529] copy_msghdr_from_user+0xaa/0x670 [ 91.335674][ T1529] ? sendmsg_copy_msghdr+0x70/0x70 [ 91.340622][ T1529] __sys_sendmsg+0x236/0x390 [ 91.345047][ T1529] ? ____sys_sendmsg+0x9a0/0x9a0 [ 91.349822][ T1529] ? __kasan_check_write+0x14/0x20 [ 91.354766][ T1529] ? mutex_unlock+0xb2/0x260 [ 91.359198][ T1529] ? __kasan_check_write+0x14/0x20 [ 91.364142][ T1529] ? __ia32_sys_read+0x90/0x90 [ 91.368743][ T1529] ? debug_smp_processor_id+0x17/0x20 [ 91.373950][ T1529] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 91.379869][ T1529] __x64_sys_sendmsg+0x7f/0x90 [ 91.384451][ T1529] x64_sys_call+0x16a/0x9a0 [ 91.388792][ T1529] do_syscall_64+0x3b/0xb0 [ 91.393041][ T1529] ? clear_bhb_loop+0x55/0xb0 [ 91.397555][ T1529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.403285][ T1529] RIP: 0033:0x7f852ad7dff9 [ 91.407537][ T1529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.426980][ T1529] RSP: 002b:00007f852bbbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.435225][ T1529] RAX: ffffffffffffffda RBX: 00007f852af35f80 RCX: 00007f852ad7dff9 [ 91.443035][ T1529] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 91.450846][ T1529] RBP: 00007f852bbbb090 R08: 0000000000000000 R09: 0000000000000000 [ 91.458744][ T1529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.466555][ T1529] R13: 0000000000000000 R14: 00007f852af35f80 R15: 00007fff5e166a08 [ 91.474374][ T1529] [ 91.484498][ T1519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.491656][ T1519] IPv6: NLM_F_CREATE should be set when creating new route [ 91.500026][ T1519] netlink: 'syz.1.290': attribute type 27 has an invalid length. [ 91.522252][ T1519] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.529300][ T1519] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.547781][ T1151] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 91.783827][ T1536] request_module fs- [ 91.783827][ T1536] succeeded, but still no fs? [ 91.792334][ T28] audit: type=1400 audit(1728830768.191:208): avc: denied { mounton } for pid=1518 comm="syz.1.290" path="/4/file0" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.810476][ T1519] Zero length message leads to an empty skb [ 91.820128][ T1151] usb 5-1: device descriptor read/8, error -71 [ 91.822283][ T1540] loop0: detected capacity change from 0 to 1024 [ 91.837290][ T28] audit: type=1400 audit(1728830768.201:209): avc: denied { write } for pid=1518 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.857370][ T28] audit: type=1400 audit(1728830768.231:210): avc: denied { getopt } for pid=1518 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.947801][ T1540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.985354][ T1540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.008345][ T1532] loop2: detected capacity change from 0 to 40427 [ 92.034778][ T1214] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 92.047910][ T1151] usb 5-1: device descriptor read/8, error -71 [ 92.225577][ T1214] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 92.246173][ T1532] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 92.256920][ T1532] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 92.272752][ T1532] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 92.306505][ T1532] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 92.313511][ T1532] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.326940][ T1214] EXT4-fs (loop0): unmounting filesystem. [ 92.344952][ T1178] syz-executor: attempt to access beyond end of device [ 92.344952][ T1178] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.757104][ T1561] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.764168][ T1561] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.771894][ T1561] device bridge_slave_0 entered promiscuous mode [ 92.780667][ T1561] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.787621][ T1561] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.794735][ T1561] device bridge_slave_1 entered promiscuous mode [ 93.071179][ T1561] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.078042][ T1561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.085103][ T1561] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.091947][ T1561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.113269][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.120743][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.128163][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.141453][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.149547][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.156387][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.164215][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.172172][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.179109][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.198196][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.206264][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.214630][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.226657][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.234421][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.242335][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.251826][ T1561] device veth0_vlan entered promiscuous mode [ 93.261696][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.270644][ T1561] device veth1_macvtap entered promiscuous mode [ 93.284285][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.292538][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.314844][ T1574] netlink: 'syz.0.301': attribute type 27 has an invalid length. [ 93.330506][ T1574] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.337649][ T1574] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.377206][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.390746][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.397618][ T1574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.405603][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.412473][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.424641][ T1574] device veth0_vlan left promiscuous mode [ 93.430682][ T1574] device veth0_vlan entered promiscuous mode [ 93.437444][ T1574] device veth1_macvtap left promiscuous mode [ 93.444301][ T1574] device veth1_macvtap entered promiscuous mode [ 93.451468][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.459114][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.466619][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.475445][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.483820][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.492648][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.559322][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.567580][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.575711][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.648825][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.658652][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.324036][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.455740][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.465828][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.468268][ T1588] loop0: detected capacity change from 0 to 256 [ 94.474158][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.892218][ T353] device bridge_slave_1 left promiscuous mode [ 94.899664][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.914301][ T353] device bridge_slave_0 left promiscuous mode [ 94.921489][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.935168][ T353] device veth1_macvtap left promiscuous mode [ 94.942647][ T353] device veth0_vlan left promiscuous mode [ 95.329827][ T1561] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 95.342471][ T1561] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 95.418150][ T1603] loop2: detected capacity change from 0 to 512 [ 95.432507][ T1600] loop1: detected capacity change from 0 to 1024 [ 95.459262][ T1603] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 95.468028][ T1603] EXT4-fs (loop2): 1 truncate cleaned up [ 95.473568][ T1603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.508023][ T1600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.557790][ T1600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.566377][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.571623][ T1465] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 95.574537][ T1601] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.586184][ T1465] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 11 [ 95.596260][ T1601] device bridge_slave_0 entered promiscuous mode [ 95.610677][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.617584][ T1601] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.624924][ T1601] device bridge_slave_1 entered promiscuous mode [ 95.711653][ T1465] EXT4-fs (loop1): unmounting filesystem. [ 95.726853][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.733740][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.740839][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.747624][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.825126][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.838444][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.858413][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.865749][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.925089][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.933858][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.940740][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.948250][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.956304][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.963174][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.970771][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.978696][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.012971][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.023656][ T1616] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.030974][ T1616] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.039374][ T1616] device bridge_slave_0 entered promiscuous mode [ 96.048439][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.065782][ T1601] device veth0_vlan entered promiscuous mode [ 96.072065][ T1616] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.079534][ T1616] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.086882][ T1616] device bridge_slave_1 entered promiscuous mode [ 96.093891][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.101676][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.308145][ T1178] EXT4-fs (loop2): unmounting filesystem. [ 96.308207][ T1619] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.320845][ T1619] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.331045][ T1619] device bridge_slave_0 entered promiscuous mode [ 96.339086][ T1601] device veth1_macvtap entered promiscuous mode [ 96.345956][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.619161][ T1619] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.626259][ T1619] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.633929][ T1619] device bridge_slave_1 entered promiscuous mode [ 96.658088][ T1634] loop2: detected capacity change from 0 to 256 [ 96.725712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.733968][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.742200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.750208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.020291][ T1639] loop4: detected capacity change from 0 to 256 [ 97.026831][ T1639] FAT-fs (loop4): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 97.082220][ T1639] loop4: detected capacity change from 0 to 512 [ 97.096106][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.103873][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.131955][ T1639] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.138929][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.150137][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.158781][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.165642][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.173117][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.177837][ T1639] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.310: bg 0: block 264: padding at end of block bitmap is not set [ 97.181483][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.203157][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.206537][ T1639] EXT4-fs (loop4): Remounting filesystem read-only [ 97.210027][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.210223][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.220190][ T1639] EXT4-fs (loop4): 1 truncate cleaned up [ 97.223715][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.230705][ T1639] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.236159][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.259394][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.267400][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.267930][ T1601] EXT4-fs (loop4): unmounting filesystem. [ 97.274265][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.287022][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.295151][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.303184][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.310123][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.318329][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.325823][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.333411][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.353953][ T1645] loop4: detected capacity change from 0 to 512 [ 97.369716][ T1645] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 97.377959][ T1645] EXT4-fs (loop4): 1 truncate cleaned up [ 97.383624][ T1645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.393270][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.401218][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.409151][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.432294][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.441228][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.457537][ T1616] device veth0_vlan entered promiscuous mode [ 97.468062][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.476064][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.483710][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.493471][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.501407][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.508855][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.517885][ T1619] device veth0_vlan entered promiscuous mode [ 97.524662][ T1178] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 97.530715][ T1619] device veth1_macvtap entered promiscuous mode [ 97.540804][ T1647] overlayfs: missing 'lowerdir' [ 97.541617][ T1178] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 97.556443][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.569007][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.583813][ T1616] device veth1_macvtap entered promiscuous mode [ 97.594102][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.602262][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.619364][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.628459][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.660679][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.669120][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.797740][ T340] device bridge_slave_1 left promiscuous mode [ 97.803777][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.816319][ T340] device bridge_slave_0 left promiscuous mode [ 97.827765][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.841978][ T340] device bridge_slave_1 left promiscuous mode [ 97.851310][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.862870][ T340] device bridge_slave_0 left promiscuous mode [ 97.872221][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.878989][ T1650] loop1: detected capacity change from 0 to 40427 [ 97.893069][ T340] device bridge_slave_1 left promiscuous mode [ 97.902477][ T1650] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 97.903662][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.910307][ T1650] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.926852][ T340] device bridge_slave_0 left promiscuous mode [ 97.933370][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.942121][ T340] device veth1_macvtap left promiscuous mode [ 97.948800][ T1650] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.952102][ T340] device veth0_vlan left promiscuous mode [ 97.976428][ T340] device veth1_macvtap left promiscuous mode [ 97.986741][ T340] device veth0_vlan left promiscuous mode [ 97.994760][ T1650] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 98.002259][ T1650] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.237403][ T1601] EXT4-fs (loop4): unmounting filesystem. [ 98.244764][ T28] audit: type=1400 audit(1728830774.651:211): avc: denied { create } for pid=1649 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.247560][ T297] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.408009][ T1654] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.414972][ T1654] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.426741][ T1654] device bridge_slave_0 entered promiscuous mode [ 98.474658][ T1654] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.540031][ T1654] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.601287][ T1654] device bridge_slave_1 entered promiscuous mode [ 98.697536][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 98.762946][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.770676][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.784888][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.793749][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.801857][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.808765][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.816072][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.824248][ T297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.834349][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.842203][ T297] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.851127][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.858075][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.865154][ T297] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 98.873992][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.882456][ T297] usb 1-1: config 0 descriptor?? [ 98.884995][ T1680] netlink: 'syz.1.331': attribute type 27 has an invalid length. [ 98.903266][ T1680] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.910318][ T1680] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.949235][ T1681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.961783][ T1681] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.968652][ T1681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.976327][ T1681] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.983187][ T1681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.998346][ T1681] device veth0_vlan left promiscuous mode [ 99.004451][ T1681] device veth0_vlan entered promiscuous mode [ 99.014650][ T1681] device veth1_macvtap left promiscuous mode [ 99.028593][ T1681] device veth1_macvtap entered promiscuous mode [ 99.038229][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.047941][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.063692][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.092012][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.093470][ T1685] loop1: detected capacity change from 0 to 256 [ 99.100362][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.117053][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.131637][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.659062][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.667108][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.675222][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.014275][ T1693] loop3: detected capacity change from 0 to 256 [ 100.024966][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.025208][ T1619] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 100.033108][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.048126][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 100.056140][ T1693] FAT-fs (loop3): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 100.056159][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.056345][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 100.074563][ T1619] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 100.075131][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.098102][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.106062][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.114127][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.122088][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.130619][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.138558][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.168723][ T1654] device veth0_vlan entered promiscuous mode [ 100.224387][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.233365][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.243325][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.256573][ T1699] loop3: detected capacity change from 0 to 512 [ 100.263336][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.271912][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.279448][ T1699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.289376][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.298805][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.306160][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.314681][ T1699] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.334: bg 0: block 264: padding at end of block bitmap is not set [ 100.335304][ T1699] EXT4-fs (loop3): Remounting filesystem read-only [ 100.342230][ T1699] EXT4-fs (loop3): 1 truncate cleaned up [ 100.350886][ T1654] device veth1_macvtap entered promiscuous mode [ 100.363953][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.365983][ T1699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.402300][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.472595][ T1703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.336'. [ 100.482504][ T28] audit: type=1400 audit(1728830776.881:212): avc: denied { create } for pid=1696 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 100.503997][ T868] EXT4-fs (loop3): unmounting filesystem. [ 100.528255][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.545926][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.561359][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.601586][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.635505][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.720913][ T1706] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.727842][ T1706] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.738036][ T1706] device bridge_slave_0 entered promiscuous mode [ 100.744937][ T1706] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.753537][ T1706] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.762986][ T1717] loop3: detected capacity change from 0 to 512 [ 100.763539][ T1706] device bridge_slave_1 entered promiscuous mode [ 100.772192][ T1719] loop2: detected capacity change from 0 to 256 [ 100.785057][ T1717] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 100.794616][ T1717] EXT4-fs (loop3): 1 truncate cleaned up [ 100.801381][ T1717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.895625][ T1706] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.902517][ T1706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.909699][ T1706] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.916460][ T1706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.980764][ T1717] overlayfs: missing 'lowerdir' [ 101.018783][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.027584][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.035906][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.075955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.085900][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.092781][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.262259][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.270930][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.277916][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.311177][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.351469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.215199][ T868] EXT4-fs (loop3): unmounting filesystem. [ 102.262098][ T323] usb 1-1: USB disconnect, device number 3 [ 102.272850][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.293936][ T1731] loop3: detected capacity change from 0 to 512 [ 102.306367][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.395450][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.416097][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.424989][ T1731] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 102.448313][ T1731] EXT4-fs (loop3): 1 truncate cleaned up [ 102.453824][ T1731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.921570][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.930630][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.939889][ T1706] device veth0_vlan entered promiscuous mode [ 102.950630][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.958297][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.972845][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.003955][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.012606][ T1706] device veth1_macvtap entered promiscuous mode [ 103.035688][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.045241][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.054492][ T1151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.837654][ T1747] overlayfs: missing 'lowerdir' [ 103.881587][ T340] device bridge_slave_1 left promiscuous mode [ 103.900889][ T1751] loop2: detected capacity change from 0 to 256 [ 103.910345][ T1751] FAT-fs (loop2): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 103.921596][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.930160][ T340] device bridge_slave_0 left promiscuous mode [ 103.936604][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.978775][ T340] device bridge_slave_1 left promiscuous mode [ 104.003642][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.017970][ T340] device bridge_slave_0 left promiscuous mode [ 104.025419][ T868] EXT4-fs (loop3): unmounting filesystem. [ 104.045648][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.060439][ T1756] loop3: detected capacity change from 0 to 512 [ 104.063155][ T1757] loop2: detected capacity change from 0 to 512 [ 104.075174][ T340] device veth1_macvtap left promiscuous mode [ 104.081824][ T340] device veth0_vlan left promiscuous mode [ 104.087642][ T1757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 104.098805][ T340] device veth1_macvtap left promiscuous mode [ 104.104638][ T340] device veth0_vlan left promiscuous mode [ 104.118784][ T1757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.347: bg 0: block 264: padding at end of block bitmap is not set [ 104.128121][ T1756] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 104.147805][ T1756] EXT4-fs (loop3): 1 truncate cleaned up [ 104.153738][ T1756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.168534][ T1757] EXT4-fs (loop2): Remounting filesystem read-only [ 104.177717][ T1757] EXT4-fs (loop2): 1 truncate cleaned up [ 104.191908][ T1757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.528097][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.535980][ T1654] EXT4-fs (loop2): unmounting filesystem. [ 104.536992][ T1763] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.561741][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.570883][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.642388][ T1775] loop2: detected capacity change from 0 to 512 [ 104.696755][ T1775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.705738][ T1775] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 104.806088][ T1781] loop0: detected capacity change from 0 to 256 [ 106.217654][ T28] audit: type=1400 audit(1728830781.961:213): avc: denied { ioctl } for pid=1773 comm="syz.2.352" path="socket:[25989]" dev="sockfs" ino=25989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.243483][ T1784] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 106.451284][ T868] EXT4-fs (loop3): unmounting filesystem. [ 106.460390][ T1654] EXT4-fs (loop2): unmounting filesystem. [ 106.638380][ T60] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.499073][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 107.612986][ T1817] loop3: detected capacity change from 0 to 512 [ 107.691631][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.708156][ T60] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.717058][ T60] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 107.726050][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.736769][ T60] usb 5-1: config 0 descriptor?? [ 107.786051][ T1817] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 107.806938][ T1817] EXT4-fs (loop3): 1 truncate cleaned up [ 107.812588][ T1817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.987990][ T1827] overlayfs: missing 'lowerdir' [ 108.127552][ T323] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.377643][ T323] usb 3-1: Using ep0 maxpacket: 32 [ 108.541973][ T868] EXT4-fs (loop3): unmounting filesystem. [ 108.730073][ T28] audit: type=1400 audit(1728830785.141:214): avc: denied { execute } for pid=1839 comm="syz.3.368" path="/56/bus" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.763340][ T1844] loop3: detected capacity change from 0 to 512 [ 108.771625][ T1844] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 108.779713][ T1844] EXT4-fs (loop3): 1 truncate cleaned up [ 108.785361][ T1844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.887624][ T323] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 108.896570][ T323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.904633][ T323] usb 3-1: Product: syz [ 108.908697][ T323] usb 3-1: Manufacturer: syz [ 108.913059][ T323] usb 3-1: SerialNumber: syz [ 108.918327][ T323] usb 3-1: config 0 descriptor?? [ 109.407266][ T1861] netlink: 'syz.0.373': attribute type 27 has an invalid length. [ 109.423726][ T1861] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.430697][ T1861] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.809911][ T323] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 109.831440][ T1151] usb 5-1: USB disconnect, device number 8 [ 109.856210][ T868] EXT4-fs (loop3): unmounting filesystem. [ 109.865423][ T60] usb 3-1: USB disconnect, device number 4 [ 110.944383][ T1882] loop0: detected capacity change from 0 to 512 [ 110.965542][ T1885] loop1: detected capacity change from 0 to 512 [ 110.976924][ T1882] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 110.992954][ T1885] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 111.000974][ T1885] EXT4-fs (loop1): 1 truncate cleaned up [ 111.006474][ T1885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.015662][ T1882] EXT4-fs (loop0): 1 truncate cleaned up [ 111.027709][ T1882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.092800][ T28] audit: type=1400 audit(1728830787.501:215): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 111.230183][ T1892] overlayfs: missing 'lowerdir' [ 111.657132][ T1894] overlayfs: missing 'lowerdir' [ 112.174066][ T1616] EXT4-fs (loop0): unmounting filesystem. [ 112.183187][ T1706] EXT4-fs (loop1): unmounting filesystem. [ 112.236876][ T1902] netlink: 'syz.1.384': attribute type 27 has an invalid length. [ 112.270768][ T1902] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.277822][ T1902] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.092157][ T1917] loop0: detected capacity change from 0 to 512 [ 113.140595][ T1917] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 113.148713][ T1917] EXT4-fs (loop0): 1 truncate cleaned up [ 113.154226][ T1917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.267802][ T1937] loop3: detected capacity change from 0 to 512 [ 114.493219][ T1937] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 114.551910][ T1937] EXT4-fs (loop3): 1 truncate cleaned up [ 114.558043][ T1937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.681676][ T1616] EXT4-fs (loop0): unmounting filesystem. [ 114.690929][ T1945] overlayfs: missing 'lowerdir' [ 114.702174][ T1947] loop0: detected capacity change from 0 to 512 [ 114.716169][ T1947] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 114.724623][ T1947] EXT4-fs (loop0): 1 truncate cleaned up [ 114.730515][ T1947] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.784895][ T1950] loop1: detected capacity change from 0 to 256 [ 114.805694][ T1950] FAT-fs (loop1): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 114.845881][ T1950] loop1: detected capacity change from 0 to 512 [ 114.853075][ T1950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.863883][ T1950] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.396: bg 0: block 264: padding at end of block bitmap is not set [ 114.943863][ T1953] overlayfs: missing 'lowerdir' [ 115.151094][ T1950] EXT4-fs (loop1): Remounting filesystem read-only [ 115.158525][ T868] EXT4-fs (loop3): unmounting filesystem. [ 115.161661][ T1950] EXT4-fs (loop1): 1 truncate cleaned up [ 115.169580][ T1955] loop2: detected capacity change from 0 to 512 [ 115.174726][ T1950] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.204386][ T1955] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.397: casefold flag without casefold feature [ 115.221388][ T28] audit: type=1400 audit(1728830791.631:216): avc: denied { create } for pid=1958 comm="syz.3.398" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.222391][ T1959] netlink: 'syz.4.399': attribute type 27 has an invalid length. [ 115.253274][ T28] audit: type=1400 audit(1728830791.651:217): avc: denied { setattr } for pid=1958 comm="syz.3.398" name="bus" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.253939][ T1955] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.397: missing EA_INODE flag [ 115.277025][ T1706] EXT4-fs (loop1): unmounting filesystem. [ 115.287316][ T1955] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.397: error while reading EA inode 2 err=-117 [ 115.312093][ T1955] EXT4-fs (loop2): 1 orphan inode deleted [ 115.317796][ T1955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.320063][ T28] audit: type=1326 audit(1728830791.731:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1963 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d777dff9 code=0x7ffc0000 [ 115.351822][ T1964] loop1: detected capacity change from 0 to 16 [ 115.358567][ T1964] erofs: Unknown parameter 'ÿÿÿÿ' [ 115.372485][ T28] audit: type=1326 audit(1728830791.731:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1963 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d777dff9 code=0x7ffc0000 [ 115.397175][ T28] audit: type=1326 audit(1728830791.761:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1963 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd4d777dff9 code=0x7ffc0000 [ 115.420799][ T28] audit: type=1326 audit(1728830791.761:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1963 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d777dff9 code=0x7ffc0000 [ 115.420886][ T1735] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.448358][ T1965] FAULT_INJECTION: forcing a failure. [ 115.448358][ T1965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.453312][ T28] audit: type=1326 audit(1728830791.761:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1963 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d777dff9 code=0x7ffc0000 [ 115.466053][ T1965] CPU: 1 PID: 1965 Comm: syz.2.397 Not tainted 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 115.489343][ T28] audit: type=1326 audit(1728830791.761:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1963 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4d777dff9 code=0x7ffc0000 [ 115.498549][ T1965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.498560][ T1965] Call Trace: [ 115.498565][ T1965] [ 115.498571][ T1965] dump_stack_lvl+0x151/0x1b7 [ 115.523601][ T28] audit: type=1326 audit(1728830791.761:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1963 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d777dff9 code=0x7ffc0000 [ 115.531536][ T1965] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 115.531561][ T1965] dump_stack+0x15/0x1b [ 115.531574][ T1965] should_fail_ex+0x3d0/0x520 [ 115.537845][ T28] audit: type=1326 audit(1728830791.761:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1963 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4d777dff9 code=0x7ffc0000 [ 115.541946][ T1965] should_fail+0xb/0x10 [ 115.565325][ T297] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.570330][ T1965] should_fail_usercopy+0x1a/0x20 [ 115.570363][ T1965] _copy_from_user+0x1e/0xc0 [ 115.622582][ T1965] msr_ioctl+0x125/0x3c0 [ 115.626757][ T1965] ? msr_write+0x320/0x320 [ 115.631008][ T1965] ? security_file_ioctl+0x84/0xb0 [ 115.635957][ T1965] ? msr_write+0x320/0x320 [ 115.640205][ T1965] __se_sys_ioctl+0x114/0x190 [ 115.644718][ T1965] __x64_sys_ioctl+0x7b/0x90 [ 115.649149][ T1965] x64_sys_call+0x98/0x9a0 [ 115.653403][ T1965] do_syscall_64+0x3b/0xb0 [ 115.657652][ T1965] ? clear_bhb_loop+0x55/0xb0 [ 115.662165][ T1965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.667892][ T1965] RIP: 0033:0x7ff4e517dff9 [ 115.672146][ T1965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.691589][ T1965] RSP: 002b:00007ff4e603c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.699831][ T1965] RAX: ffffffffffffffda RBX: 00007ff4e5336058 RCX: 00007ff4e517dff9 [ 115.707644][ T1965] RDX: 0000000020000040 RSI: 00000000c02063a0 RDI: 0000000000000007 [ 115.715454][ T1965] RBP: 00007ff4e603c090 R08: 0000000000000000 R09: 0000000000000000 [ 115.723269][ T1965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.731084][ T1965] R13: 0000000000000000 R14: 00007ff4e5336058 R15: 00007ffd8e5b68a8 [ 115.738892][ T1965] [ 115.753481][ T1959] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.760566][ T1959] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.770340][ T1616] EXT4-fs (loop0): unmounting filesystem. [ 116.745804][ T1654] EXT4-fs (loop2): unmounting filesystem. [ 116.808170][ T297] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.822201][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.833252][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.883905][ T1978] syz.0.403[1978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.883981][ T1978] syz.0.403[1978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.905152][ T1984] loop1: detected capacity change from 0 to 512 [ 116.926898][ T297] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.958776][ T1988] loop4: detected capacity change from 0 to 512 [ 116.965928][ T1984] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 116.974120][ T1984] EXT4-fs (loop1): 1 truncate cleaned up [ 116.979787][ T1984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.991132][ T1988] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.407: bad orphan inode 17 [ 117.017688][ T297] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 117.026807][ T1988] ext4_test_bit(bit=16, block=4) = 1 [ 117.032197][ T297] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 117.047605][ T1988] is_bad_inode(inode)=0 [ 117.080848][ T297] usb 4-1: Manufacturer: syz [ 117.085875][ T1988] NEXT_ORPHAN(inode)=0 [ 117.116833][ T1988] max_ino=32 [ 117.129294][ T1985] syz.2.404 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.139943][ T297] usb 4-1: config 0 descriptor?? [ 117.144907][ T1988] i_nlink=1 [ 117.148183][ T1988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.184104][ T1988] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.407: bg 0: block 7: invalid block bitmap [ 117.225508][ T1601] EXT4-fs (loop4): unmounting filesystem. [ 117.295592][ T1997] loop2: detected capacity change from 0 to 512 [ 117.329308][ T1997] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 117.338813][ T1997] EXT4-fs (loop2): 1 truncate cleaned up [ 117.344285][ T1997] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.510069][ T1999] overlayfs: missing 'lowerdir' [ 117.618430][ T297] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 117.629623][ T297] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 117.655400][ T297] appleir 0003:05AC:8243.0006: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 117.696678][ T2006] loop4: detected capacity change from 0 to 512 [ 117.746262][ T2006] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 117.764381][ T2006] EXT4-fs (loop4): 1 truncate cleaned up [ 117.770076][ T2006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.822809][ T1706] EXT4-fs (loop1): unmounting filesystem. [ 117.843551][ T2010] netlink: 'syz.1.413': attribute type 27 has an invalid length. [ 117.889986][ T297] usb 4-1: USB disconnect, device number 6 [ 117.960960][ T2015] overlayfs: missing 'lowerdir' [ 118.162070][ T1654] EXT4-fs (loop2): unmounting filesystem. [ 118.547420][ T1601] EXT4-fs (loop4): unmounting filesystem. [ 119.561686][ T2036] loop0: detected capacity change from 0 to 2048 [ 119.578267][ T2041] loop2: detected capacity change from 0 to 512 [ 119.590254][ T2036] ext4: Bad value for 'inode_readahead_blks' [ 119.596218][ T2041] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 119.609317][ T2041] EXT4-fs (loop2): 1 truncate cleaned up [ 119.614791][ T2041] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.850387][ T2038] loop1: detected capacity change from 0 to 40427 [ 119.857436][ T2038] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.865338][ T2038] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.899237][ T2048] loop0: detected capacity change from 0 to 512 [ 119.918243][ T2038] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.925552][ T2048] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.934824][ T2048] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 120.053377][ T2034] loop4: detected capacity change from 0 to 40427 [ 120.179143][ T2034] F2FS-fs (loop4): Invalid log blocks per segment (83886089) [ 120.222878][ T2034] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 120.258538][ T2034] ================================================================================ [ 120.273474][ T2038] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.283979][ T2038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.310014][ T2034] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:919:5 [ 120.326659][ T2034] shift exponent 99 is too large for 64-bit type 'unsigned long' [ 120.334795][ T2034] CPU: 1 PID: 2034 Comm: syz.4.420 Not tainted 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 120.344250][ T2034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.354147][ T2034] Call Trace: [ 120.357270][ T2034] [ 120.360051][ T2034] dump_stack_lvl+0x151/0x1b7 [ 120.364563][ T2034] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 120.369946][ T2034] dump_stack+0x15/0x1b [ 120.373934][ T2034] __ubsan_handle_shift_out_of_bounds+0x3e1/0x440 [ 120.380189][ T2034] parse_options+0x4b19/0x4b30 [ 120.384788][ T2034] ? mount_bdev+0x282/0x3b0 [ 120.388823][ T2038] syz.1.421: attempt to access beyond end of device [ 120.388823][ T2038] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.389119][ T2034] ? f2fs_mount+0x34/0x40 [ 120.406756][ T2034] ? default_options+0xc60/0xc60 [ 120.411523][ T2034] ? kstrdup+0x54/0x70 [ 120.415421][ T2034] ? memcpy+0x56/0x70 [ 120.419251][ T2034] f2fs_fill_super+0x23bc/0x6dc0 [ 120.424033][ T2034] ? kill_f2fs_super+0x3c0/0x3c0 [ 120.428793][ T2034] ? set_blocksize+0x1cb/0x360 [ 120.433385][ T2034] ? sb_set_blocksize+0xa8/0xf0 [ 120.438077][ T2034] mount_bdev+0x282/0x3b0 [ 120.442241][ T2034] ? kill_f2fs_super+0x3c0/0x3c0 [ 120.447021][ T2034] f2fs_mount+0x34/0x40 [ 120.451006][ T2034] legacy_get_tree+0xf1/0x190 [ 120.455523][ T2034] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 120.461514][ T2034] vfs_get_tree+0x88/0x290 [ 120.465762][ T2034] do_new_mount+0x2ba/0xb30 [ 120.470100][ T2034] ? do_move_mount_old+0x160/0x160 [ 120.475226][ T2034] ? security_capable+0x87/0xb0 [ 120.479910][ T2034] ? ns_capable+0x89/0xe0 [ 120.484075][ T2034] path_mount+0x671/0x1070 [ 120.488327][ T2034] ? user_path_at_empty+0x14e/0x1a0 [ 120.493371][ T2034] __se_sys_mount+0x2c4/0x3b0 [ 120.497875][ T2034] ? __x64_sys_mount+0xd0/0xd0 [ 120.502476][ T2034] ? switch_fpu_return+0xe/0x10 [ 120.507161][ T2034] __x64_sys_mount+0xbf/0xd0 [ 120.511586][ T2034] x64_sys_call+0x49d/0x9a0 [ 120.515927][ T2034] do_syscall_64+0x3b/0xb0 [ 120.520181][ T2034] ? clear_bhb_loop+0x55/0xb0 [ 120.524702][ T2034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.530507][ T2034] RIP: 0033:0x7f5fed77f79a [ 120.534762][ T2034] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.554288][ T2034] RSP: 002b:00007f5fee5a8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.562617][ T2034] RAX: ffffffffffffffda RBX: 00007f5fee5a8ef0 RCX: 00007f5fed77f79a [ 120.570427][ T2034] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 00007f5fee5a8eb0 [ 120.578239][ T2034] RBP: 0000000020000140 R08: 00007f5fee5a8ef0 R09: 0000000000000000 [ 120.586050][ T2034] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 120.593874][ T2034] R13: 00007f5fee5a8eb0 R14: 000000000000550e R15: 0000000020000280 [ 120.601801][ T2034] [ 120.702081][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 120.702098][ T28] audit: type=1400 audit(1728830797.101:275): avc: denied { map } for pid=2037 comm="syz.1.421" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.702232][ T1616] EXT4-fs (loop0): unmounting filesystem. [ 120.711693][ T2034] ================================================================================ [ 120.735645][ T28] audit: type=1400 audit(1728830797.101:276): avc: denied { execute } for pid=2037 comm="syz.1.421" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.738811][ T1654] EXT4-fs (loop2): unmounting filesystem. [ 120.747646][ T2034] F2FS-fs (loop4): Not support 34359738368, larger than 256 [ 120.817277][ T1706] syz-executor: attempt to access beyond end of device [ 120.817277][ T1706] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 121.012238][ T2062] loop4: detected capacity change from 0 to 512 [ 121.021590][ T2062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.030406][ T2062] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 121.162253][ T1601] EXT4-fs (loop4): unmounting filesystem.