last executing test programs: 21.455072881s ago: executing program 2: syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000140), 0x1, 0x50ed, &(0x7f0000005180)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080), 0x62) chdir(&(0x7f0000000400)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) mknod$loop(&(0x7f0000000040)='./control/file0\x00', 0x8000, 0x1) unlink(&(0x7f00000001c0)='./control/file0\x00') write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) 20.863524173s ago: executing program 4: syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1210080, &(0x7f0000001900)={[{@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part}, {@uid}, {@dir_umask={'dir_umask', 0x3d, 0x1}}, {@uid}, {@codepage={'codepage', 0x3d, 'cp1255'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffff8}}, {@umask={'umask', 0x3d, 0x8}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") r0 = open(0x0, 0x0, 0x6a) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002c00)=ANY=[], 0x440) fcntl$setstatus(r0, 0x4, 0x46c00) socket$nl_generic(0x10, 0x3, 0x10) r1 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{}, "4355d6a7b33748f9", "7e71f289f9defc56f3ddee32b0931efb621f3c1a1d7806a7b4dec1e1d1ca357c", "9a9f4427", "6bd7a11112ef29ca"}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x150007a2) socket$inet6(0xa, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r6, &(0x7f0000000440), 0x0}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) 20.493715149s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2c93497d9ae41ebc6099d95fea5e764494873e0d82a172b3bb54f35039c7d81e9ab07f2fb4dad61bd50c4b2c861c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d0200000050685e0f4f079d2d8e79be174ef9355b70739c712c5d3f739f01dfbf5eb2772052b215d2e7505a8696b50738ece15ee58b62ed95b837cce2415042b315a8558a2dc09b16a10500db9325aa9c1413d7d5155ae6279c95b322cf159c52ee70321d660d13deb5589089", 0x109}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c", 0xca}], 0x2}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="76a0e0df2558e22cf7e63bb9431165cd1bea3dd1981c573deaf5c32b210b9b6d52f282c28329ebdbe25f7ba4e129eee1604284bd93cf95a22864a65aa956d53e234ea4c2ca9b4f7c409889550d725988718824cbe81fe78df35d2df3ba9a0a19a0ea2f9c11331421ba25562e0a53c1285ed68901cef80de7b5b546b2d152d6cf643978b52732ac6b43bea184f5042a7f8da4bfb7830ade10d9eba2f2d14516f15b1338ed096c09a0af8f344db0becdc37827fd75a0232483eb"], 0x1, 0x122e, &(0x7f0000001340)="$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") sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x24}}, 0x400a0c5) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r1) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 17.449558929s ago: executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r9}, 0x10) write$FUSE_ENTRY(r7, &(0x7f0000000380)={0x90}, 0x90) getresuid(&(0x7f0000000440), &(0x7f0000000000), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',privport,access=', @ANYRESDEC=r10]) chdir(&(0x7f0000000040)='./file0\x00') 17.402066152s ago: executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)='W', 0x1}, {&(0x7f0000000380)="5fecbe38eba4c922185bb754dc3da0547f3d6f137ffaa3d2a8b284c9db1c54c0642095a419562760ea48cbc94d741d4a5f6600f867640bee4bc1873302518131a5268655bd080ee41c4b2dc57e9be12245589239aefb45fce63a51b8178c8e3e15b5bf115f9ee1b336363929965ebc091c58eae8e944bf", 0x77}, {&(0x7f0000000580)="e5ad72c9b49ff94f454871bdcdddeb1820be413495c4c84df4415ef6dc003497e6756f685a2aba13549cd1c3d2bcd179abc6db3e9104f8ea43a2398e4c192bed65bfc3143735a45d883a4bd523607b87cd5f5565d52b446ff0977d12f9f83f3615f1a13400a9aadc31aeb94575e234b694590cda8cbb2dd03e10e7c7e00d70608ddefd4cc6cb7659189dc3101a6b1dda45a3904959f2932aa990a2b971bccd0f212a886563b6fe3b0c5ce465eea4df8aa09f7e869d1e497c23087a96531d6fd52ec8edc678c1286d6aa501bf49ae133d1c9e77", 0xd3}], 0x3, &(0x7f0000001080), 0x0, 0x9c0}}, {{&(0x7f0000000f40)=@file={0x1, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000fc0)="a45b0acf", 0x4}, {&(0x7f00000011c0)="b1a5a371b8cc5bc331d0a4a4cfb1679e6fe8042fda19093bb1fd4358bcf7f4827960c28aa1cbd540f40e935cb00176ba80822b3f24b35dd8f26de77480606d1bb92c49d17fa25025ced88c6dd3cb04a1fd6a8232637cf4359e3536156c4b83c71ac113ebc1484f134e50956e7615e0e7a1e3ca2578f1f8200934c0aa9842a53e9603238b1f8f88de2494c6f454f350385e94f8001c4af72f36d82f0bd60f4cd2cbd955f0e84026f4629ddd33b1cfbec5419e178892b69a1680b1f2c81954e0fa47c580e8907c752a7d69a3807170e06f59ccfe88c4ba0e0e35aacbf72d690f5ff533800fe6061f239e", 0xe9}], 0x2, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r6, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0xc0, 0x4}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000740)="2cb129155688a502d6ccb7cf744afe54ec31c19dc262197c35f43381bdacadc47bfa76cce8c71416a2056b10227231bb64eab75a8ded17f491e33ef83176674948", 0x41}, {&(0x7f0000001600)="1badf77e88f50e642f0def642207610dc2f59b483682b4b6bd5b90cf893d6cd9c364096a63131614883e4793464aeefbd926fcd133ccce5bd25ea49409dc2cfaa8c2b7aeb65a6d90fc92310bbe072bf04768453f49837819757d232b27ee87aa08c17d017314612e5d54338701b0a8afe183583814417a5c04eadb61fcbb5f8c362ade12a67db49f4329d1121ff2a2b745768258f4d890a8521e41ff38", 0x9d}, {&(0x7f00000016c0)="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", 0xfe}, {&(0x7f00000017c0)="abde692f11715a62b796cb5ae6f7c475b6fa88eec6c54e019fa75f7cf90b5c57b9fdf28916cca92805ddb890b169503eb078f85da6929396090288505de051", 0x3f}, {&(0x7f0000001800)="62c0903934ee28991381c948becbdc3c7b4258aadbceaf4c80f25e7549434bdf3cde8eba6372dd32bab41ccf58525fe46f1d6083a777ecd3556a40a1746d8a15abdedcdb2d8d06fba114b0f652d9d97e08", 0x51}], 0x5, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, r4, r3, r6]}}, @cred={{0x1c}}], 0x88, 0x4840}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="9cc54dd61bd11f19aeafa1471ca15d3f25", 0x11}], 0x2, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002dc0)="64d11d0f19a3cdad88c7170c275b0d8a64b29ccd01bdb48f62308ed2871cdf5dbeb4e3ccff5e2d20c89ca06ac5", 0x2d}, {&(0x7f0000002e00)="371b5d42f3df9024f5edc7e9b53e9c05594d342841983ba0cb366502af979b33b51dd3208d856d9aef06eb3295de59af915b4883dd63503925ddaf7c756ea6824a256a2e8c7563fd04a5d36e8904d39c2be6eb4775abcc276df30b2b084409823318f0b805767a4e6b3078ff575e7d7c47ade31cd1b5db787894c64864cbe7f091c69711d547b04bb2d5733f092fe9339883c79936", 0x95}, {&(0x7f0000002ec0)="84feec9816e4cf60a11896b25669ec9999106d0a5d273cca3ca2dff8a8f452fcaf3b1e451618bd8d39533dbb26c3f0c5eb395d4b20a151e80bf1de3b7588b8c07934067f114ff9e003aa190f9dd28e", 0x4f}, {&(0x7f0000002f40)="24ef9db872e95e76aec5f3815799f13d1ad2c8eb3a25173a91aff30ae613db", 0x1f}, {&(0x7f0000002f80)}], 0x5, &(0x7f0000003080)=ANY=[@ANYBLOB="140000000000e7ff0000000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x80, 0x40}}], 0x5, 0x40040041) syz_open_dev$usbfs(&(0x7f0000000440), 0xfac3, 0x440000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x0, 0x80}, {@in6=@loopback, 0x1, 0x32}, @in=@loopback, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0xd582, 0xe}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x13}, [@algo_aead={0x4e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x10, 0x60, '\x00\x00'}}]}, 0x140}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000000000000000000000008500000005000080000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.735861835s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x806}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}, 0xfdef) 15.644091874s ago: executing program 1: r0 = syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x9, 0x2b4, &(0x7f0000000c00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x1, 0xa, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x7, 0x0, 0x8000, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v3, 0x18, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) 15.597485057s ago: executing program 2: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0xfffffffffffffd87) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x8100000000000000}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x81}, {}, {}, @raw32={[0x0, 0x0, 0x1]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0xd5}, 0x81}}], 0x38) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x110) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x1, 0xffff, 0xc6c, 0x3242, r1, 0x1ec3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) 13.275580852s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000d4080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300b7a50008000000303de9d8453f9ed1d55ad90a3ed251c2fabce03767a4357911c8aca979e24ff4bb72fac963716329128fa2d270881688b4a3fec003af98cdd3c5cc9ff47f9843cb69423402798ff6b31e06ac73d9251845844a7e22d16b3926d1f2b9f68dcaf81d3fad94ae60a3b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0xffc3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r6}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0)="fcc50245aafed606431f95322ed1a678", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x2, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = gettid() r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) fremovexattr(r9, &(0x7f0000000000)=@known='trusted.syz\x00') readv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) 13.269247123s ago: executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000002180), 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r9}, 0x10) write$FUSE_ENTRY(r7, &(0x7f0000000380)={0x90}, 0x90) getresuid(&(0x7f0000000440), &(0x7f0000000000), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',privport,access=', @ANYRESDEC=r10]) chdir(&(0x7f0000000040)='./file0\x00') 13.171633297s ago: executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20014, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adc0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179f6633b6958ebf998a0685bc5cdd1f97291328e1082f8faf482e15eb93996800"/207, @ANYRESDEC=0x0], 0xfd, 0xc34, &(0x7f0000001080)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x3, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = io_uring_setup(0x6a0b, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001680)={0x7, 0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)=""/101, 0x65}], 0x0}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x8882, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0x0, 0x0, @name="31df3501d44927091cd023ae5d74fd043ee24cc1b33dc6398b24abe651d65a21"}) 13.10282673s ago: executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)='W', 0x1}, {&(0x7f0000000380)="5fecbe38eba4c922185bb754dc3da0547f3d6f137ffaa3d2a8b284c9db1c54c0642095a419562760ea48cbc94d741d4a5f6600f867640bee4bc1873302518131a5268655bd080ee41c4b2dc57e9be12245589239aefb45fce63a51b8178c8e3e15b5bf115f9ee1b336363929965ebc091c58eae8e944bf", 0x77}, {&(0x7f0000000580)="e5ad72c9b49ff94f454871bdcdddeb1820be413495c4c84df4415ef6dc003497e6756f685a2aba13549cd1c3d2bcd179abc6db3e9104f8ea43a2398e4c192bed65bfc3143735a45d883a4bd523607b87cd5f5565d52b446ff0977d12f9f83f3615f1a13400a9aadc31aeb94575e234b694590cda8cbb2dd03e10e7c7e00d70608ddefd4cc6cb7659189dc3101a6b1dda45a3904959f2932aa990a2b971bccd0f212a886563b6fe3b0c5ce465eea4df8aa09f7e869d1e497c23087a96531d6fd52ec8edc678c1286d6aa501bf49ae133d1c9e77", 0xd3}], 0x3, &(0x7f0000001080), 0x0, 0x9c0}}, {{&(0x7f0000000f40)=@file={0x1, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000fc0)="a45b0acf", 0x4}, {&(0x7f00000011c0)="b1a5a371b8cc5bc331d0a4a4cfb1679e6fe8042fda19093bb1fd4358bcf7f4827960c28aa1cbd540f40e935cb00176ba80822b3f24b35dd8f26de77480606d1bb92c49d17fa25025ced88c6dd3cb04a1fd6a8232637cf4359e3536156c4b83c71ac113ebc1484f134e50956e7615e0e7a1e3ca2578f1f8200934c0aa9842a53e9603238b1f8f88de2494c6f454f350385e94f8001c4af72f36d82f0bd60f4cd2cbd955f0e84026f4629ddd33b1cfbec5419e178892b69a1680b1f2c81954e0fa47c580e8907c752a7d69a3807170e06f59ccfe88c4ba0e0e35aacbf72d690f5ff533800fe6061f239e", 0xe9}], 0x2, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x24, 0x1, 0x1, [r0, r6, r1, r1, r6]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0xc8, 0x4}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000740)="2cb129155688a502d6ccb7cf744afe54ec31c19dc262197c35f43381bdacadc47bfa76cce8c71416a2056b10227231bb64eab75a8ded17f491e33ef83176674948", 0x41}, {&(0x7f0000001600)="1badf77e88f50e642f0def642207610dc2f59b483682b4b6bd5b90cf893d6cd9c364096a63131614883e4793464aeefbd926fcd133ccce5bd25ea49409dc2cfaa8c2b7aeb65a6d90fc92310bbe072bf04768453f49837819757d232b27ee87aa08c17d017314612e5d54338701b0a8afe183583814417a5c04eadb61fcbb5f8c362ade12a67db49f4329d1121ff2a2b745768258f4d890a8521e41ff38", 0x9d}, {&(0x7f00000016c0)="a0fefd43ab9d17b517880e2e026c440e5b567ab36584478fb703b675aa9045d355c876272ef4ae4144dae740056ccff1d53b371376dbf817d5f1806bc2d9aeecdc4caa2a4081465d81a0901133aa24d81589a918961b383e2a6c6d4ac5bae74b1eb7bdf34b2d1fd1eafd89b3712c296e36297a1d3e19ca7389c5ade12f39a52b15020e1fc81344a2e2412b5cd6b49eb43d1e86d1c480041137e7b0814b2af010bad2f9a653b47c6d9f5e6a07453aede269a3ecef24a1be2424b64291ba79cf55d4f318e2806e64bee167545b0045b7c4388ff3071e98106365ebae2e08ede24b6b763045789d35aad190b0007ed22a7e10a8c155263807e423503d990c4e", 0xfe}, {&(0x7f00000017c0)="abde692f11715a62b796cb5ae6f7c475b6fa88eec6c54e019fa75f7cf90b5c57b9fdf28916cca92805ddb890b169503eb078f85da6929396090288505de051", 0x3f}, {&(0x7f0000001800)="62c0903934ee28991381c948becbdc3c7b4258aadbceaf4c80f25e7549434bdf3cde8eba6372dd32bab41ccf58525fe46f1d6083a777ecd3556a40a1746d8a15abdedcdb2d8d06fba114b0f652d9d97e08", 0x51}], 0x5, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, r4, r3, r6]}}, @cred={{0x1c}}], 0x88, 0x4840}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="9cc54dd61bd11f19aeafa1471ca15d3f25", 0x11}], 0x2, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002dc0)="64d11d0f19a3cdad88c7170c275b0d8a64b29ccd01bdb48f62308ed2871cdf5dbeb4e3ccff5e2d20c89ca06ac5", 0x2d}, {0x0}, {&(0x7f0000002ec0)="84feec9816e4cf60a11896b25669ec9999106d0a5d273cca3ca2dff8a8f452fcaf3b1e451618bd8d39533dbb26c3f0c5eb395d4b20a151e80bf1de3b7588b8c07934067f114ff9e003aa190f9dd28e", 0x4f}, {&(0x7f0000002f40)="24ef9db872e95e76aec5f3815799f13d1ad2c8eb3a25173a91aff30ae613db", 0x1f}, {&(0x7f0000002f80)}], 0x5, &(0x7f0000003080)=ANY=[@ANYBLOB="140000000000e7ff0000000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x80, 0x40}}], 0x5, 0x40040041) syz_open_dev$usbfs(&(0x7f0000000440), 0xfac3, 0x440000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x0, 0x80}, {@in6=@loopback, 0x1, 0x32}, @in=@loopback, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0xd582, 0xe}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x13}, [@algo_aead={0x4e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x10, 0x60, '\x00\x00'}}]}, 0x140}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000000000000000000000008500000005000080000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.947072298s ago: executing program 2: syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1210080, &(0x7f0000001900)={[{@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part}, {@uid}, {@dir_umask={'dir_umask', 0x3d, 0x1}}, {@uid}, {@codepage={'codepage', 0x3d, 'cp1255'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffff8}}, {@umask={'umask', 0x3d, 0x8}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") r0 = open(0x0, 0x0, 0x6a) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002c00)=ANY=[], 0x440) fcntl$setstatus(r0, 0x4, 0x46c00) socket$nl_generic(0x10, 0x3, 0x10) r1 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{}, "4355d6a7b33748f9", "7e71f289f9defc56f3ddee32b0931efb621f3c1a1d7806a7b4dec1e1d1ca357c", "9a9f4427", "6bd7a11112ef29ca"}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x150007a2) socket$inet6(0xa, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r6, &(0x7f0000000440), 0x0}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) 7.750568854s ago: executing program 1: syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000005dc0)='./bus\x00', 0x458, &(0x7f0000006040)=ANY=[], 0x5, 0x5db3, &(0x7f000003f080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 7.723453054s ago: executing program 2: socket(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00'}, 0x5e) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f0000000640)="f5", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000003380)=ANY=[], 0x18c6) 7.68277643s ago: executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r9}, 0x10) write$FUSE_ENTRY(r7, &(0x7f0000000380)={0x90}, 0x90) getresuid(&(0x7f0000000440), &(0x7f0000000000), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',privport,access=', @ANYRESDEC=r10]) chdir(&(0x7f0000000040)='./file0\x00') 7.678364947s ago: executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r3, 0x54, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000600)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xefb4}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x44401, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 7.676671345s ago: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)='W', 0x1}, {&(0x7f0000000380)="5fecbe38eba4c922185bb754dc3da0547f3d6f137ffaa3d2a8b284c9db1c54c0642095a419562760ea48cbc94d741d4a5f6600f867640bee4bc1873302518131a5268655bd080ee41c4b2dc57e9be12245589239aefb45fce63a51b8178c8e3e15b5bf115f9ee1b336363929965ebc091c58eae8e944bf", 0x77}, {&(0x7f0000000580)="e5ad72c9b49ff94f454871bdcdddeb1820be413495c4c84df4415ef6dc003497e6756f685a2aba13549cd1c3d2bcd179abc6db3e9104f8ea43a2398e4c192bed65bfc3143735a45d883a4bd523607b87cd5f5565d52b446ff0977d12f9f83f3615f1a13400a9aadc31aeb94575e234b694590cda8cbb2dd03e10e7c7e00d70608ddefd4cc6cb7659189dc3101a6b1dda45a3904959f2932aa990a2b971bccd0f212a886563b6fe3b0c5ce465eea4df8aa09f7e869d1e497c23087a96531d6fd52ec8edc678c1286d6aa501bf49ae133d1c9e77", 0xd3}], 0x3, &(0x7f0000001080), 0x0, 0x9c0}}, {{&(0x7f0000000f40)=@file={0x1, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000fc0)="a45b0acf", 0x4}, {&(0x7f00000011c0)="b1a5a371b8cc5bc331d0a4a4cfb1679e6fe8042fda19093bb1fd4358bcf7f4827960c28aa1cbd540f40e935cb00176ba80822b3f24b35dd8f26de77480606d1bb92c49d17fa25025ced88c6dd3cb04a1fd6a8232637cf4359e3536156c4b83c71ac113ebc1484f134e50956e7615e0e7a1e3ca2578f1f8200934c0aa9842a53e9603238b1f8f88de2494c6f454f350385e94f8001c4af72f36d82f0bd60f4cd2cbd955f0e84026f4629ddd33b1cfbec5419e178892b69a1680b1f2c81954e0fa47c580e8907c752a7d69a3807170e06f59ccfe88c4ba0e0e35aacbf72d690f5ff533800fe6061f239e", 0xe9}], 0x2, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r6, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0xc0, 0x4}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000740)="2cb129155688a502d6ccb7cf744afe54ec31c19dc262197c35f43381bdacadc47bfa76cce8c71416a2056b10227231bb64eab75a8ded17f491e33ef83176674948", 0x41}, {&(0x7f0000001600)="1badf77e88f50e642f0def642207610dc2f59b483682b4b6bd5b90cf893d6cd9c364096a63131614883e4793464aeefbd926fcd133ccce5bd25ea49409dc2cfaa8c2b7aeb65a6d90fc92310bbe072bf04768453f49837819757d232b27ee87aa08c17d017314612e5d54338701b0a8afe183583814417a5c04eadb61fcbb5f8c362ade12a67db49f4329d1121ff2a2b745768258f4d890a8521e41ff38", 0x9d}, {&(0x7f00000016c0)="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", 0xfe}, {&(0x7f00000017c0)="abde692f11715a62b796cb5ae6f7c475b6fa88eec6c54e019fa75f7cf90b5c57b9fdf28916cca92805ddb890b169503eb078f85da6929396090288505de051", 0x3f}, {&(0x7f0000001800)="62c0903934ee28991381c948becbdc3c7b4258aadbceaf4c80f25e7549434bdf3cde8eba6372dd32bab41ccf58525fe46f1d6083a777ecd3556a40a1746d8a15abdedcdb2d8d06fba114b0f652d9d97e08", 0x51}], 0x5, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, r4, r3, r6]}}, @cred={{0x1c}}], 0x88, 0x4840}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000019c0)="6cd19fbdff45c0261d71662852dc4bf9ef2420c8871263cba2c8825e2dd9c13a3276b0a49d8c87d7f3b11e0d71be7bc39dd29e8304be8adcf27dac470a17daedbfec9a8e11198cc15e385f95753e4ea78f7a1e35f76b6e6e404b7174dbc5a595e37e06c0a9e966c65a211f1a3c6830eda2eb62337dfa98ffe6b5af53a251200d3dc11ddd509d620809f5f3e61a02a77aeb0659d91ba611bc8eff4bc28f30587e5dceff75bdd38e0492c50266fd8d2f82d7a0262b491ad378f5b557b131cc3eb17d73ba3f7d863b4733af083545e90f9ecc4f5eee99ecfab469113b6ccf02638252eae323b3ca54b78640642924eee14089bbcd2f24afe28f3ac85fd4f07ac52c543c9fb7500eaedda810610b3d5a48f893c38b9cb0885b8dcf457744e1e38eb54a2ed599c1e4b8f55f38d185e77d36a28cb5e401065d1cc10be1dab821f387c48268afdbff461735b7c12df8c7fd75503602377acaefa74724d01592502a5a1e00e1d902a414ccf215b73845c94606470a50091c6c88c542f4e8271abc5019263f7cc5e03c1390950b9dae93836a38f71e22baa04ed9bd70fa31206c7ada4603e1630b7a1b691572307a289f3bfba6a15ba35baac3babb265eff203b5d450505e2fcff57b0055ea6e61efbd21da056c2b0d4f29322807ef9546949c0b2d0c45b25acc3b14bd80e5aa1c199268b607ec8dfdbb99210fa38f504aaad38dfd76fad729c22679438e7b67f979e2accea330057a0b3075a88def8fb3026412df9dc2cdf5117fffa2e479c388c15fbd539b769f0ac8c79b47287d5094bc3b3181820b2c4dd7064d2243d82694807f99656834eac3f30cfc218a125f71b9f0b47b334e122d6bf37bf8b16c4b98bf9686f9c244a4321aa601408df6fba9816651e8b8039bdbaf5a7a8f360b9f312f599d83713b6f9de00c99fc7ef8312b7e5b9aa5e58f7e3b9b1cbbadb9a1ba859c796aac982d57eff9902e68ad855bea1ef0464e0908a20616404942a8116477d195ca38d33a8f044307c524905455c95729e233dae9384ceb24331858988ee484f63c35a4bb0627f86de575d949d5aed842857e4dfdb96de5177669ffecbbb0610abc60f5a464e98c76b8168b0dd6cd648cff70b9bb07412e0318d96cf11a704656c2b3d98a97b3e40b0ecf5e2b1ae73f9e4fe39bc0954d3d03f43082a0d166e75e8a1fa59aa6e920c9513b4b3784ac81cf8745b83d88b4cf781de71f54a355927dd668facc7a4ad736fbf1a18e60a31cfda4cfd516e7818ba6c45cdfd3ea78c1dfde3552d0ceea2bbfb05c5b46b9bcdca178c5ffb961ea8b9ff10b6fca7443fb0adb61faf8ef91b337cbb6122bfebbeeb18c005e782b758013e17b27cee0df6e7b94a6b289adb297ed08d5a6d75fe6e97d5adbcb47224b5256c90e2de10e30b29f6095b35cdb63e6e011ceef583b90fb4ca3e095e2c136df9a1486ccfc417838cbf23fd853a7ff189153121c55dcadc416ef1cb143c434df07770e00f96fb67a8656f4dcd4b8567a502b20c8f247af1c4183cef99be553fef8c88fa4f8473479a84457c019be50e66e13a7cfe2eb8c3a755c011a7cc4690f9a1cdfa6b3310e8f3e9e2a75bdb793e53520abc69f17a5c9b55d742bb8c19bbad6d9e07b751721f2ca5140467411b04926fdecca3078a6b3f35160408f1ea5e078d2043481eb4a3c7616e10ada8d54f787c17b1dcf4c3e44bf761eb01d165b952f207d226dc4ae5275ab4e44f2aa462b81646f6223786235c0544cba4e555d0d127c4ed136188f408700dc172ad51247fc4337f65f1c8c9c4d45461531886670a28dcb7099edd80a55f94c0dfdc2bad70df2b20c28e660688f1a0b487a59ce4f61d40b2370ddbe438e5fb2473048073ca43c075266b2c6d05cba31de0511937aad6883b947e6cca548873879ffc3edb1e47e91d97aa71f76ff1682558977a3685cd803847b935c96f6d641a58f6640dfb7b097dd7d70958b7eaf47d57cfed596fe1e8dacd11f5dfc9c6936feb37ca5a6b996281b865c56b042bded00ebb15eb44d57809d9b9760054e12f70ae7684f7f41a42d3bc92e6d19b3bbcf1e839f5cdd156ed0dfb114deac1b1860db2a57fd829120d20b8300d1abf73580653c7435ecefee34335cac3a3213f5b71d8928810ccd6ec7959af2f530b95cf085790560a238f7b3027aa3178767bf304f04d34bae3c68aff77f55dc99965647c4297342deb8792a80ecf844dbfd25cc84f62cf1ab48477ad27367c72b9e6a2b09798baa6df5a269f860a7655630e27d8ea968f8839c7c47dbe4e8d20959292d1b4b369377d67b4b9e1af2efdb793eeed5fd789044bb6ee469612957637603978569b4355856c5c1814d33fb2be2738c1c9dc36935c21ed78fe4802baf805b52c2e4176b9e6f494b2052cac5fef4aa7df6cf3c97bcc7e527737927d1d5514f2d73cf5067d98c115ad07cc7bd9bb7ee318cc6177491fdb1256fe756ee94098f34299cc612c45c71ac4722b503ac0d477bf476eccd5ceadca864bc03503d938446363c3f18f9eec1a34970e52f7b479a57db12de0ce873b415724ea8f7c70d766f5d6550687aceb98b0dcc2da84244d4ab4a7e6f9ed43317eb4df95f3e053049e00aea433a14279728b0faf2a84e3c6a7145de8bc396a13da8c904ed33b29b8707bf171fe9ab1167fce1c9ccf3280295372addf60d917a888764748b6b6ef58487693fbbc80218c69265371f6ce5c3385ad7dd70e0e9946e183834041457d62441913e314e169e45d82f66a1257426b8d55286c1d9400d0112c5d76231c50576fff77e62a4f484db799316c5bec8ab92e4acda10301f8a13fed85102532c4affc3ae8babbe72a08b5e068f35537afd308df796326cdc6a749d32a379655659ea4857b5c5910ab47b6a440c1c089e408a8f2dae8bae5aae0c0d6c77ddfed33716b8db6a6fab12474483d6972d5502df7e5199b552d2f99ba0c51e1e9dc9af87c539d7cea45c7eb2775b37ea3381420ae76779337b5ff782ff2cb3a3e023519b2cfffa5b3f3e0c9e6430137c1c74ab71dbc60c8262be2603b16f6c379656898e5a59609e20d4b61aa509646cc9575894c2197d9621670049939915cd0e4b0b5fee31c45377dee68bfe5688dfa96a554a53b2fb0a36c4da82e621bd0838ba7ead43c410992a49afbb58af3db8b74dbb03f45ced701ea760637944dabc7e3924cc33285e611f6886e55ba53c0c4c2e459fc71c5171f4d17091880b4286aad4e3d65ff3620ef1d0dc25a594effd797869f0d7e117945d8268efdbeee36bdde169ed7e0e4e8e06552a7bf8ec7a242569a6c168937ef2eef1a8c37cb47b2d75b15e921397ee6fc8273f7b47f7e7c31249d6e703c9b0b48c01474b5aec074b4a7114c6412da3a85c653ec926389d98c35b7afbf2f812c86827a1b0b3d68ecc63e38211e1292b6cfadd8cdf9ecf2b89efe89b5e39a4c7c02cf517ddf5f302c39ade87a274ccf3c0c0458e9762448418754c7765c1341050171e801424c76b76136bf5ec4212ca1ae3d1d6327fd7fb89fb60bd13d46ea21696cbb42832bd13b92426433f8b6d8ca93820c026f5ee8bea19540c6d271af5df41f90ce4fd83e94020a40469e1584a92b00b7fc669b771e3ac1f0bacbbb28a23d841eddd387b6c523f4e8de0f0cf6f7a39420734597ef5a91a969cfcc21ae85ebe25ef3e6ad13d8c7751a4a685172f1aa161a224217333b080f0be8f101b3e20cca481a4087aab612878a3c13f5b8f865596c5b2b59ee81353e8b1af557ecc2f46b7134ac682b06b97a68281a4de6282737a6ef6448a6dbc1166c300637aee8e3ff4793da4acddc9538f60609811637c2cabb79f293ded4644dcd96f09ee006f10c7c87dc425f8743bd6e79465cb9f5f9e13bcf454383377fabeddd1a25e952cd909e59791dc0f81d074ff176d350cc2fb5ce65931a719ed007cbb054908f3be10487a63c00bbb8a3514a3ea9efb6e6dae38750b4b765382aa75ee681cec5271579a8e55e826bfbaae2acc4f70dc4bb46d880d367c763423afea42723dee3f8e2199a58079343b63e24f62c015207bf7c7450b3ae3a6ed89aaccf17bb2e68913ec22033a3f63f9ee9564d71e82721a3ff198ca3748f86814d992697bb246ffed08be76a19198fab604bdc62fbd940cd27461231c3740b6e5d53e67fb2523c151841c4ddbaabfb7e37d6ff8e69851eab6a56f6fb1358c6ff0132a76643a58d5ff8d63f7027b207927b769a32a9cad865cd45f80eeb651cebbcfb6c2da9c8893f7774fd460cae2f4976b7cc0bf0addbb800a55e97466cd65ff7a7bd338bc350529c8033adc5c446aa4bb981f3fd24cc9b3f3aeefeca8541420c6ac8a752ebf4b858c3e4ca9c2a6fc66eea052307ae6f736532dcd0e3dd3a0bb1b6b3e90be12f2e28021b04fe3902f5849e329dddfba8777bef1c0ab6f052e54c7eeac89db1affcdf0c42a08cecce70e2dbf26d2c40d79491f5be86ce1a157a5fd910182c11ca5f281df7602a2b55a975357735a3b11c1293f1fe2d0209732155c91ba984a95f2bb0863af9ded74cd3e3789d4fd02444e72b326406f5ede7048d43bff18f1d672a75b3713782bd0fd9868b6eba5cfc9df2b864326aca16343cd007908f8a958ccdd03f7aa577176bd5662523877a8ff0b0761d63618fb38af160e2e7d3439e96beb8473938e213486b97eeaec7b4a1fa131d57fa2540a398abf819507291dd2bbea8bbc2ca402a0c85ff7be40f040be0ee9993922a0e1f62ee715cc72048f1013c04038c56eea3d6581301a72abd5bae5ee4f668ae1e70d8d3fd4f4f862e6d378a7b0295580a71a8f53797bd94b754988adf675df758f125f81841c1743cf268ec0d3adb1d093a15bf5d0c9e0826f1cd1138a8f05f288d6e90a71a5d9a1387aaff2c2e4906c045bfb2464bf61dfb8c68dc9f013ae8334dafe77fb28f597d38b583a94b6607fd358bd05bdbb4a818b1c067440257e6c7093e5d72ad2229dfcbfa6e7da0ce4c835ac19488ad6a8b69ca63b413e3703e198385c9284da4d6dab7a408f13afb1d0d8a31c1c86070515961490115af424c90a913499d3f54f16c4101f3ea5cc821d848351421934bf93c6a43f904a1caae2f5d16c9806ca88dd88d4a576297da9fd93e69d8a53e67b8ce23aa01e2629bd2c2c403ceffd13532ed0dae4bdf17a32d73651b238d7f424cabfb0876c5690060dd4cb3b55fff3e0f7fac0cf04dc431f921c7b893e31e64c922ab66cd1fe90abefb4445c77510f5a9e9551ff51353acef982b83f22edab83b96bcfe25ee4838fff6132a0b30301494ceaa8848e9e2a1c6d402bd92c27220bc9954cd467967d2342113afebaa6cf4e1b9e311e8853b6382111db2b492eae3c6dbfcde8d5f7ccdd055f77b165da356ee34c9f5133a4edd4f1566566841c69c75fa1e9ed03b5541f00bf48ebf058751ff6fc08cbfb487e6c509a0829ad40bfab1ed0a34b9571cc792370d84061bb223d68ec83714387f4641c59b327ceea4f3231dc83dc175c5f86952632fc9bb8d12aa5664e262481b9a7de60b2f9abcad98ead4e820cba2d93de4d00b11133cddf1d429d6b9b1328733418ae9d1b230440f431a609ba684e0ef3f1984b52af0ab3facba23e86ad1ab40f962d29c59c91d3bb20598b303ec7b02cb6070fe80427d61e6a8cd477a2883a043719e0861a2edc5cce8663468af46d9fab8fafbd6d384e65cae0140da805585dc6f37d20df748741ad287f44991759a8b1080ad5acff085f74d86fb0bbba9828e1614a9c16254c0527a9da59514", 0x1000}, {&(0x7f00000029c0)="9cc54dd61bd11f19aeafa1471ca15d3f25", 0x11}], 0x2, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002dc0)="64d11d0f19a3cdad88c7170c275b0d8a64b29ccd01bdb48f62308ed2871cdf5dbeb4e3ccff5e2d20c89ca06ac5", 0x2d}, {&(0x7f0000002e00)="371b5d42f3df9024f5edc7e9b53e9c05594d342841983ba0cb366502af979b33b51dd3208d856d9aef06eb3295de59af915b4883dd63503925ddaf7c756ea6824a256a2e8c7563fd04a5d36e8904d39c2be6eb4775abcc276df30b2b084409823318f0b805767a4e6b3078ff575e7d7c47ade31cd1b5db787894c64864cbe7f091c69711d547b04bb2d5733f092fe9339883c79936", 0x95}, {&(0x7f0000002ec0)="84feec9816e4cf60a11896b25669ec9999106d0a5d273cca3ca2dff8a8f452fcaf3b1e451618bd8d39533dbb26c3f0c5eb395d4b20a151e80bf1de3b7588b8c07934067f114ff9e003aa190f9dd28e", 0x4f}, {&(0x7f0000002f40)="24ef9db872e95e76aec5f3815799f13d1ad2c8eb3a25173a91aff30ae613db", 0x1f}, {&(0x7f0000002f80)}], 0x5, &(0x7f0000003080)=ANY=[@ANYBLOB="140000000000e7ff0000000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x80, 0x40}}], 0x5, 0x40040041) syz_open_dev$usbfs(&(0x7f0000000440), 0xfac3, 0x440000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x0, 0x80}, {@in6=@loopback, 0x1, 0x32}, @in=@loopback, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0xd582, 0xe}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x13}, [@algo_aead={0x4e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x10, 0x60, '\x00\x00'}}]}, 0x140}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000000000000000000000008500000005000080000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.26056218s ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="76a0e0df2558e22cf7e63bb9431165cd1bea3dd1981c573deaf5c32b210b9b6d52f282c28329ebdbe25f7ba4e129eee1604284bd93cf95a22864a65aa956d53e234ea4c2ca9b4f7c409889550d725988718824cbe81fe78df35d2df3ba9a0a19a0ea2f9c11331421ba25562e0a53c1285ed68901cef80de7b5b546b2d152d6cf643978b52732ac6b43bea184f5042a7f8da4bfb7830ade10d9eba2f2d14516f15b1338ed096c09a0af8f344db0becdc37827fd75a0232483eb"], 0x1, 0x122e, &(0x7f0000001340)="$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") sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x24}}, 0x400a0c5) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r1) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5.351420713s ago: executing program 0: r0 = syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x9, 0x2b4, &(0x7f0000000c00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x1, 0xa, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x7, 0x0, 0x8000, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v3, 0x18, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) 5.119316341s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000036c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="5100000007000042009ce6e737b51dc0fac88b7e40371c140bdb926ee8a7d8cab77b730242b57b0e8926270c7d32e017ce2328ea"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x40}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) 3.504351367s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, 0xffffffffffffffff, 0x8, 0x0) 3.173889562s ago: executing program 1: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0xfffffffffffffd87) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x8100000000000000}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x81}, {}, {}, @raw32={[0x0, 0x0, 0x1]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0xd5}, 0x81}}], 0x38) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x110) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x1, 0xffff, 0xc6c, 0x3242, r1, 0x1ec3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x0) 3.006122058s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r10, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x18, r9, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}}, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) 2.87393917s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000d4080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300b7a50008000000303de9d8453f9ed1d55ad90a3ed251c2fabce03767a4357911c8aca979e24ff4bb72fac963716329128fa2d270881688b4a3fec003af98cdd3c5cc9ff47f9843cb69423402798ff6b31e06ac73d9251845844a7e22d16b3926d1f2b9f68dcaf81d3fad94ae60a3b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0xffc3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r6}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0)="fcc50245aafed606431f95322ed1a678", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x2, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = gettid() r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) fremovexattr(r9, &(0x7f0000000000)=@known='trusted.syz\x00') readv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) 2.722097596s ago: executing program 1: syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1210080, &(0x7f0000001900)={[{@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part}, {@uid}, {@dir_umask={'dir_umask', 0x3d, 0x1}}, {@uid}, {@codepage={'codepage', 0x3d, 'cp1255'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0xfffffffffffffff8}}, {@umask={'umask', 0x3d, 0x8}}]}, 0x7, 0x318, &(0x7f00000004c0)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch") r0 = open(0x0, 0x0, 0x6a) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002c00)=ANY=[], 0x440) fcntl$setstatus(r0, 0x4, 0x46c00) socket$nl_generic(0x10, 0x3, 0x10) r1 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "4355d6a7b33748f9", "7e71f289f9defc56f3ddee32b0931efb621f3c1a1d7806a7b4dec1e1d1ca357c", "9a9f4427", "6bd7a11112ef29ca"}, 0x38) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x150007a2) socket$inet6(0xa, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r6, &(0x7f0000000440), 0x0}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) 2.206823552s ago: executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20014, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adc0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179f6633b6958ebf998a0685bc5cdd1f97291328e1082f8faf482e15eb93996800"/207, @ANYRESDEC=0x0], 0xfd, 0xc34, &(0x7f0000001080)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x3, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = io_uring_setup(0x6a0b, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000001680)={0x7, 0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)=""/101, 0x65}], 0x0}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x8882, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000040)={0x0, 0x0, @name="31df3501d44927091cd023ae5d74fd043ee24cc1b33dc6398b24abe651d65a21"}) 1.207067579s ago: executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000002180), 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r9}, 0x10) write$FUSE_ENTRY(r7, &(0x7f0000000380)={0x90}, 0x90) getresuid(&(0x7f0000000440), &(0x7f0000000000), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',privport,access=', @ANYRESDEC=r10]) chdir(&(0x7f0000000040)='./file0\x00') 82.265841ms ago: executing program 0: socket(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r0}, 0x5e) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000640)="f5", 0x1}], 0x1, 0x0) write$binfmt_elf64(r3, &(0x7f0000003380)=ANY=[], 0x18c6) 0s ago: executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)='W', 0x1}, {&(0x7f0000000380)="5fecbe38eba4c922185bb754dc3da0547f3d6f137ffaa3d2a8b284c9db1c54c0642095a419562760ea48cbc94d741d4a5f6600f867640bee4bc1873302518131a5268655bd080ee41c4b2dc57e9be12245589239aefb45fce63a51b8178c8e3e15b5bf115f9ee1b336363929965ebc091c58eae8e944bf", 0x77}, {&(0x7f0000000580)="e5ad72c9b49ff94f454871bdcdddeb1820be413495c4c84df4415ef6dc003497e6756f685a2aba13549cd1c3d2bcd179abc6db3e9104f8ea43a2398e4c192bed65bfc3143735a45d883a4bd523607b87cd5f5565d52b446ff0977d12f9f83f3615f1a13400a9aadc31aeb94575e234b694590cda8cbb2dd03e10e7c7e00d70608ddefd4cc6cb7659189dc3101a6b1dda45a3904959f2932aa990a2b971bccd0f212a886563b6fe3b0c5ce465eea4df8aa09f7e869d1e497c23087a96531d6fd52ec8edc678c1286d6aa501bf49ae133d1c9e77", 0xd3}], 0x3, &(0x7f0000001080), 0x0, 0x9c0}}, {{&(0x7f0000000f40)=@file={0x1, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000fc0)="a45b0acf", 0x4}, {&(0x7f00000011c0)="b1a5a371b8cc5bc331d0a4a4cfb1679e6fe8042fda19093bb1fd4358bcf7f4827960c28aa1cbd540f40e935cb00176ba80822b3f24b35dd8f26de77480606d1bb92c49d17fa25025ced88c6dd3cb04a1fd6a8232637cf4359e3536156c4b83c71ac113ebc1484f134e50956e7615e0e7a1e3ca2578f1f8200934c0aa9842a53e9603238b1f8f88de2494c6f454f350385e94f8001c4af72f36d82f0bd60f4cd2cbd955f0e84026f4629ddd33b1cfbec5419e178892b69a1680b1f2c81954e0fa47c580e8907c752a7d69a3807170e06f59ccfe88c4ba0e0e35aacbf72d690f5ff533800fe6061f239e", 0xe9}], 0x2, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r6, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0xc0, 0x4}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000740)="2cb129155688a502d6ccb7cf744afe54ec31c19dc262197c35f43381bdacadc47bfa76cce8c71416a2056b10227231bb64eab75a8ded17f491e33ef83176674948", 0x41}, {&(0x7f0000001600)="1badf77e88f50e642f0def642207610dc2f59b483682b4b6bd5b90cf893d6cd9c364096a63131614883e4793464aeefbd926fcd133ccce5bd25ea49409dc2cfaa8c2b7aeb65a6d90fc92310bbe072bf04768453f49837819757d232b27ee87aa08c17d017314612e5d54338701b0a8afe183583814417a5c04eadb61fcbb5f8c362ade12a67db49f4329d1121ff2a2b745768258f4d890a8521e41ff38", 0x9d}, {&(0x7f00000016c0)="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", 0xfe}, {&(0x7f00000017c0)="abde692f11715a62b796cb5ae6f7c475b6fa88eec6c54e019fa75f7cf90b5c57b9fdf28916cca92805ddb890b169503eb078f85da6929396090288505de051", 0x3f}, {&(0x7f0000001800)="62c0903934ee28991381c948becbdc3c7b4258aadbceaf4c80f25e7549434bdf3cde8eba6372dd32bab41ccf58525fe46f1d6083a777ecd3556a40a1746d8a15abdedcdb2d8d06fba114b0f652d9d97e08", 0x51}], 0x5, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r4, 0xffffffffffffffff, r4, r3, r6]}}, @cred={{0x1c}}], 0x88, 0x4840}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="9cc54dd61bd11f19aeafa1471ca15d3f25", 0x11}], 0x2, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000002d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002dc0)="64d11d0f19a3cdad88c7170c275b0d8a64b29ccd01bdb48f62308ed2871cdf5dbeb4e3ccff5e2d20c89ca06ac5", 0x2d}, {&(0x7f0000002e00)="371b5d42f3df9024f5edc7e9b53e9c05594d342841983ba0cb366502af979b33b51dd3208d856d9aef06eb3295de59af915b4883dd63503925ddaf7c756ea6824a256a2e8c7563fd04a5d36e8904d39c2be6eb4775abcc276df30b2b084409823318f0b805767a4e6b3078ff575e7d7c47ade31cd1b5db787894c64864cbe7f091c69711d547b04bb2d5733f092fe9339883c79936", 0x95}, {&(0x7f0000002ec0)="84feec9816e4cf60a11896b25669ec9999106d0a5d273cca3ca2dff8a8f452fcaf3b1e451618bd8d39533dbb26c3f0c5eb395d4b20a151e80bf1de3b7588b8c07934067f114ff9e003aa190f9dd28e", 0x4f}, {&(0x7f0000002f40)="24ef9db872e95e76aec5f3815799f13d1ad2c8eb3a25173a91aff30ae613db", 0x1f}, {&(0x7f0000002f80)}], 0x5, &(0x7f0000003080)=ANY=[@ANYBLOB="140000000000e7ff0000000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x80, 0x40}}], 0x5, 0x40040041) syz_open_dev$usbfs(&(0x7f0000000440), 0xfac3, 0x440000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast1, 0x0, 0x80}, {@in6=@loopback, 0x1, 0x32}, @in=@loopback, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0xd582, 0xe}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x13}, [@algo_aead={0x4e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x10, 0x60, '\x00\x00'}}]}, 0x140}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000000000000000000000008500000005000080000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): cient options for proto=fd [ 1432.656758][T17665] syz-executor.2: attempt to access beyond end of device [ 1432.656758][T17665] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1432.695950][T17665] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1433.330421][T18615] overlayfs: failed to resolve './file2': -2 [ 1436.418974][T18575] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 1436.444402][T18575] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1436.454318][T18575] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1436.528260][T18575] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1436.776502][T18624] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1436.814641][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1440.156832][T12920] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1440.186731][T18648] loop3: detected capacity change from 0 to 512 [ 1440.208116][T18648] EXT4-fs: Ignoring removed mblk_io_submit option [ 1440.245838][T18648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1440.918855][T18648] EXT4-fs (loop3): 1 truncate cleaned up [ 1440.926483][T18648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1441.000895][T18658] 9pnet_fd: Insufficient options for proto=fd [ 1441.145058][T17663] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.265795][T18682] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 1446.286191][T18682] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1446.316840][T18682] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1446.345846][T18682] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1446.807035][T18688] loop4: detected capacity change from 0 to 40427 [ 1446.842536][T18688] F2FS-fs (loop4): invalid crc value [ 1446.888062][T18688] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1446.999656][T18688] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1447.375799][T18696] overlayfs: failed to resolve './file1': -2 [ 1448.336665][T18700] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 1448.390623][T18700] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1448.431171][T18700] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1448.471219][T18700] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1448.500314][T18698] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 1448.551745][T18698] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1448.732945][T18698] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1448.741836][T18698] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1448.770500][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1448.777363][T18708] 9pnet_fd: Insufficient options for proto=fd [ 1449.023473][T18710] overlayfs: failed to resolve './file2': -2 [ 1449.677084][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1449.719083][ T25] usb 5-1: device descriptor read/all, error -71 [ 1450.014332][T17493] syz-executor.4: attempt to access beyond end of device [ 1450.014332][T17493] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1450.090205][T17493] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1450.097183][T17493] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1450.801457][T18733] overlayfs: failed to resolve './file2': -2 [ 1452.456798][T18745] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1454.208463][T18749] loop3: detected capacity change from 0 to 1024 [ 1455.425773][T18751] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1455.664470][T18745] bridge0: port 3(bond1) entered blocking state [ 1455.691226][T18745] bridge0: port 3(bond1) entered disabled state [ 1455.710896][T18745] bond1: entered allmulticast mode [ 1455.716902][T18745] bridge1: entered allmulticast mode [ 1455.768399][T18745] bond1: entered promiscuous mode [ 1455.930917][T18745] bridge1: entered promiscuous mode [ 1455.998008][T18761] 9pnet_fd: Insufficient options for proto=fd [ 1456.017279][T18762] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 1456.080675][T18762] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1456.120393][T18762] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1456.459565][T18762] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1457.394318][T18779] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000000000000000000000000' [ 1457.995279][T18776] loop1: detected capacity change from 0 to 40427 [ 1458.008372][T18776] F2FS-fs (loop1): invalid crc value [ 1458.026391][T18776] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1458.115085][T18776] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1458.258161][T18790] loop4: detected capacity change from 0 to 64 [ 1458.710878][T18793] overlayfs: failed to resolve './file1': -2 [ 1459.251652][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1459.935870][T18798] loop2: detected capacity change from 0 to 40427 [ 1462.170107][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1462.178473][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.206778][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1462.388693][T18798] F2FS-fs (loop2): invalid crc value [ 1462.420682][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1462.441869][T18798] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 1462.485365][ T25] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1462.504770][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.531679][T17592] syz-executor.1: attempt to access beyond end of device [ 1462.531679][T17592] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1462.548812][ T25] usb 2-1: can't set config #1, error -71 [ 1462.603348][ T25] usb 2-1: USB disconnect, device number 49 [ 1462.617152][T17592] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1462.647285][T17592] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1465.580327][T18830] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 1465.588630][T18830] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1465.711772][T18830] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1465.801010][T18830] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1466.606460][T18839] overlayfs: failed to resolve './file2': -2 [ 1467.181005][T18836] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000000000000000000000000' [ 1467.591938][T18847] 9pnet_fd: Insufficient options for proto=fd [ 1468.410704][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1468.424543][T18861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18861 comm=syz-executor.2 [ 1468.461674][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1468.765315][T18865] loop2: detected capacity change from 0 to 512 [ 1468.794930][T18865] EXT4-fs: Ignoring removed mblk_io_submit option [ 1468.843669][T18865] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1468.921218][T18865] EXT4-fs (loop2): 1 truncate cleaned up [ 1468.939569][T18865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1469.087717][T18863] loop3: detected capacity change from 0 to 8192 [ 1469.096646][T17665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1469.114212][T18873] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1469.122860][T18863] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1469.336404][T18877] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1469.346663][T18880] bridge0: port 4(bond2) entered blocking state [ 1469.353680][T18880] bridge0: port 4(bond2) entered disabled state [ 1469.370380][T18880] bond2: entered allmulticast mode [ 1469.375856][T18880] bridge2: entered allmulticast mode [ 1469.433992][T18880] bond2: entered promiscuous mode [ 1469.457573][T18882] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1469.496121][T18880] bridge2: entered promiscuous mode [ 1469.894179][T18888] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1470.062093][T18895] 9pnet_fd: Insufficient options for proto=fd [ 1470.290844][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1470.331787][T18900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18900 comm=syz-executor.1 [ 1470.380534][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1470.475755][T18906] loop3: detected capacity change from 0 to 512 [ 1470.495505][T18906] EXT4-fs: Ignoring removed mblk_io_submit option [ 1470.507752][T18906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1470.534212][T18906] EXT4-fs (loop3): 1 truncate cleaned up [ 1470.548198][T18906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1470.763128][T17663] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.801112][T18910] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1472.087098][T18922] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1472.145103][T18923] loop4: detected capacity change from 0 to 256 [ 1472.379941][T18923] FAT-fs (loop4): bogus logical sector size 0 [ 1472.428160][T18923] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1472.540381][T18927] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1472.739011][T18928] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1472.789478][T18932] bridge0: port 3(bond1) entered blocking state [ 1472.911830][T18932] bridge0: port 3(bond1) entered disabled state [ 1472.918752][T18932] bond1: entered allmulticast mode [ 1473.000435][T18932] bridge1: entered allmulticast mode [ 1473.026109][T18932] bond1: entered promiscuous mode [ 1473.099828][T18932] bridge1: entered promiscuous mode [ 1475.927692][T18950] loop2: detected capacity change from 0 to 512 [ 1475.939805][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1475.974421][T18955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18955 comm=syz-executor.4 [ 1475.979223][T18950] EXT4-fs: Ignoring removed mblk_io_submit option [ 1475.999549][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1476.038723][T18950] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1476.144745][T18950] EXT4-fs (loop2): 1 truncate cleaned up [ 1476.166294][T18950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1476.403164][T17665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.238666][ T29] audit: type=1400 audit(1719067496.946:789): avc: denied { bind } for pid=18971 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1477.293130][T18976] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1477.698788][T18980] loop4: detected capacity change from 0 to 1024 [ 1478.565017][ T29] audit: type=1326 audit(1719067498.276:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18970 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faead27d0a9 code=0x0 [ 1478.690987][T18991] loop1: detected capacity change from 0 to 256 [ 1478.747859][T18991] FAT-fs (loop1): bogus logical sector size 0 [ 1478.769389][T18991] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1478.807733][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1478.876962][T18995] loop2: detected capacity change from 0 to 512 [ 1478.924092][T18995] EXT4-fs: Ignoring removed mblk_io_submit option [ 1478.947725][T18995] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1479.177718][T18995] EXT4-fs (loop2): 1 truncate cleaned up [ 1479.202818][T18995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1479.247878][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1479.860387][T19009] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1480.163426][T17665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.229612][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1481.909697][T19039] loop3: detected capacity change from 0 to 512 [ 1482.002093][T19043] loop4: detected capacity change from 0 to 1024 [ 1482.145226][T19039] EXT4-fs: Ignoring removed mblk_io_submit option [ 1482.260992][ T29] audit: type=1326 audit(1719067501.976:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19033 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b567d0a9 code=0x0 [ 1482.301004][T19039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1482.356125][T19039] EXT4-fs (loop3): 1 truncate cleaned up [ 1482.371549][T19039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1482.500255][T14909] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1482.718552][T17663] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.737133][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1482.813680][T19050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19050 comm=syz-executor.1 [ 1482.871784][T14909] usb 1-1: Using ep0 maxpacket: 16 [ 1482.875824][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1482.903081][T14909] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1482.930077][T14909] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1482.962329][T14909] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1482.997468][T14909] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.40 [ 1483.014745][T14909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.032914][T14909] usb 1-1: Product: و¤™م؟°ï‰†ن’¢ى؛ںم››ç›ƒى¨²ëگٹï؟ھè¨،لڈ—هپ–ي€‹يٹ؟م¦،ه¬؛â؟»ن¹†à¼پâژ€ه¹¾ï²™çˆ¢م¯‘ل‹™ه¾„魤린ه¤­âµ®مœ’ه¨‍ï‰پل³¢ [ 1483.064306][T14909] usb 1-1: Manufacturer: رƒ [ 1483.074808][T14909] usb 1-1: SerialNumber: رڈ [ 1483.129092][T19057] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1483.304613][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1484.534883][T19073] loop1: detected capacity change from 0 to 1024 [ 1486.281112][T14909] usbhid 1-1:1.0: can't add hid device: -71 [ 1486.287356][T14909] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1486.378050][T14909] usb 1-1: USB disconnect, device number 41 [ 1487.118733][T19081] loop2: detected capacity change from 0 to 1024 [ 1488.071552][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1488.181847][T19093] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19093 comm=syz-executor.3 [ 1488.318867][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1488.957025][T19106] loop4: detected capacity change from 0 to 40427 [ 1489.014452][T19106] F2FS-fs (loop4): invalid crc value [ 1489.070994][T19106] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1489.153420][T19106] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1489.640216][T19117] overlayfs: failed to resolve './file0': -2 [ 1490.194358][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.200895][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.550177][ T45] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1490.594503][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1490.762528][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 1490.798022][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.827293][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1490.845506][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1490.865585][ T45] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1490.875399][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.906745][ T5164] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1491.965660][ T45] hub 5-1:1.0: bad descriptor, ignoring hub [ 1491.971900][ T45] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1491.979951][ T45] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1493.696198][T17493] syz-executor.4: attempt to access beyond end of device [ 1493.696198][T17493] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1493.727222][T17493] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1493.770537][T17298] usb 5-1: USB disconnect, device number 29 [ 1493.790666][T17493] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1494.171906][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1495.928978][T19154] loop3: detected capacity change from 0 to 40427 [ 1497.650569][T19155] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1497.662789][T19154] F2FS-fs (loop3): invalid crc value [ 1497.704014][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1497.734748][T19154] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1497.823753][T19154] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 1498.081678][T19163] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1498.179332][T19163] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1498.206828][T19166] overlayfs: overlapping lowerdir path [ 1498.300112][T19169] overlayfs: failed to resolve './file0': -2 [ 1499.707840][T17663] syz-executor.3: attempt to access beyond end of device [ 1499.707840][T17663] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1499.752489][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1499.760234][T17663] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1499.789702][T17663] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1499.857946][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1500.374581][T19180] loop1: detected capacity change from 0 to 512 [ 1500.427976][T19180] EXT4-fs: Ignoring removed mblk_io_submit option [ 1500.471680][T19180] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1500.546744][T19180] EXT4-fs (loop1): 1 truncate cleaned up [ 1500.593974][T19180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.098884][T17592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.341385][T19186] overlayfs: failed to resolve './file0': -2 [ 1501.770275][ T45] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1502.072295][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 1502.094825][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.129051][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1502.168952][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1502.200395][ T45] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1502.219890][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.275261][ T45] hub 1-1:1.0: bad descriptor, ignoring hub [ 1502.291818][ T45] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1502.310200][ T45] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1503.816781][T19204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19204 comm=syz-executor.1 [ 1503.830550][ T5164] usb 1-1: USB disconnect, device number 42 [ 1503.891649][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1503.940432][T19208] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1503.958130][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1505.237206][T19224] loop2: detected capacity change from 0 to 512 [ 1505.274070][T19225] loop1: detected capacity change from 0 to 512 [ 1505.281965][T19224] EXT4-fs: Ignoring removed mblk_io_submit option [ 1505.344924][T19224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1505.360759][T19225] EXT4-fs: Ignoring removed mblk_io_submit option [ 1506.262346][T19225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1506.351791][T19224] EXT4-fs (loop2): 1 truncate cleaned up [ 1506.393859][T19224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.406981][T19225] EXT4-fs (loop1): 1 truncate cleaned up [ 1506.458601][T19225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.643550][T17665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.749849][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1506.930726][ T29] audit: type=1326 audit(1719067526.626:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faead27d0a9 code=0x0 [ 1507.661702][T17592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.996381][T19257] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19257 comm=syz-executor.3 [ 1509.041797][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1509.075041][T19262] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1509.104311][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1511.144681][T19275] workqueue: name exceeds WQ_NAME_LEN. Truncating to: <ت“^Vئ0ئ¶`ْ†يآ؛و2|×ا } خ¹)ص [ 1511.947611][T12920] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1513.893147][T19302] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19302 comm=syz-executor.2 [ 1513.912042][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1514.175033][ T29] audit: type=1326 audit(1719067533.876:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19294 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2155e7d0a9 code=0x0 [ 1514.617649][T19300] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1514.642557][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1514.668220][T19307] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1514.715508][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1515.101002][T19321] loop2: detected capacity change from 0 to 64 [ 1515.928096][T19332] overlayfs: failed to resolve './file2': -2 [ 1516.744808][T19344] loop3: detected capacity change from 0 to 1024 [ 1518.328296][T19357] loop4: detected capacity change from 0 to 1024 [ 1518.758123][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1519.016532][ T29] audit: type=1326 audit(1719067538.716:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faead27d0a9 code=0x0 [ 1519.120886][T19366] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1519.189034][T19373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19373 comm=syz-executor.4 [ 1519.206827][T19366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1519.261664][T19371] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1519.307512][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1520.087268][T19390] overlayfs: failed to resolve './file2': -2 [ 1521.028974][T19400] loop1: detected capacity change from 0 to 64 [ 1521.494648][T19402] loop4: detected capacity change from 0 to 1024 [ 1524.967088][T19402] hfsplus: failed to load extents file [ 1525.782014][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1526.170742][T19423] loop1: detected capacity change from 0 to 1024 [ 1526.241256][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1526.961144][T19425] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1527.003615][T19426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1527.010811][T19425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19425 comm=syz-executor.3 [ 1527.077208][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1527.170386][ T29] audit: type=1326 audit(1719067546.876:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19421 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f1a7d0a9 code=0x0 [ 1527.924981][T19448] loop4: detected capacity change from 0 to 64 [ 1529.842204][T19458] loop2: detected capacity change from 0 to 1024 [ 1531.005205][T19469] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1531.096248][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1531.352542][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1531.437519][T19473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19473 comm=syz-executor.2 [ 1531.513636][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1531.763125][T19461] loop4: detected capacity change from 0 to 32768 [ 1531.902309][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1532.002330][ T29] audit: type=1326 audit(1719067551.716:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19478 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b567d0a9 code=0x0 [ 1532.221488][T19461] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1532.284950][T19461] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 1532.413643][T19461] bcachefs (loop4): alloc_read... done [ 1532.435074][T19461] bcachefs (loop4): stripes_read... done [ 1532.460706][T19461] bcachefs (loop4): snapshots_read... done [ 1532.548267][T19461] bcachefs (loop4): journal_replay... done [ 1532.572836][T19461] bcachefs (loop4): resume_logged_ops... done [ 1532.605412][T19461] bcachefs (loop4): going read-write [ 1532.631380][T19461] bcachefs (loop4): done starting filesystem [ 1532.806557][T19499] loop2: detected capacity change from 0 to 64 [ 1532.823754][ T29] audit: type=1400 audit(1719067552.526:797): avc: denied { ioctl } for pid=19460 comm="syz-executor.4" path="/root/syzkaller-testdir811500189/syzkaller.jLEBWj/71/file0/cpu.stat" dev="loop4" ino=4098 ioctlcmd=0xbc0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1532.960351][T17493] bcachefs (loop4): shutting down [ 1532.977697][T17493] bcachefs (loop4): going read-only [ 1532.998083][T17493] bcachefs (loop4): finished waiting for writes to stop [ 1533.008748][ T29] audit: type=1800 audit(1719067552.716:798): pid=19465 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 1533.090476][T17493] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 1533.110210][ T29] audit: type=1800 audit(1719067552.746:799): pid=19465 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 1533.217491][T17493] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 1533.261500][T17493] bcachefs (loop4): shutdown complete, journal seq 14 [ 1533.291002][T17493] bcachefs (loop4): marking filesystem clean [ 1535.372702][T17493] bcachefs (loop4): shutdown complete [ 1535.701353][T19515] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1535.760552][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1535.769863][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1535.812515][T19518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19518 comm=syz-executor.0 [ 1535.881017][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1537.268953][T19529] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1537.865805][T19541] loop3: detected capacity change from 0 to 1024 [ 1538.011706][ T29] audit: type=1326 audit(1719067557.726:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19524 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faead27d0a9 code=0x0 [ 1540.222426][T19564] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 1540.270181][T19564] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1540.279713][T19564] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1540.344613][T19564] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1540.368369][T19564] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1540.998844][T19573] overlayfs: failed to resolve './file2': -2 [ 1541.535342][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1541.658161][T19578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19578 comm=syz-executor.4 [ 1541.758515][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1542.522699][T19592] loop2: detected capacity change from 0 to 40427 [ 1542.547383][T19592] F2FS-fs (loop2): invalid crc value [ 1542.568621][T19592] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1542.652144][T19592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1543.346145][T19597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1543.552037][ T29] audit: type=1326 audit(1719067563.256:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19589 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f1a7d0a9 code=0x0 [ 1543.670679][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1543.900425][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1543.917786][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.968352][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1543.977624][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1543.990801][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1544.000096][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.026604][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 1544.053686][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1544.074703][ T9] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1544.115751][T19618] loop4: detected capacity change from 0 to 64 [ 1546.499126][T19627] overlayfs: failed to resolve './file2': -2 [ 1547.597633][T17665] syz-executor.2: attempt to access beyond end of device [ 1547.597633][T17665] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1547.710328][T17665] syz-executor.2: attempt to access beyond end of device [ 1547.710328][T17665] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1547.938110][T17298] usb 3-1: USB disconnect, device number 37 [ 1548.375759][ T5839] kworker/u8:11: attempt to access beyond end of device [ 1548.375759][ T5839] loop2: rw=2049, sector=40960, nr_sectors = 144 limit=40427 [ 1548.424373][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1548.693171][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1548.717705][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1548.729068][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1548.736686][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1549.761677][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1549.768672][T17298] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1549.784391][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1549.832691][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1549.839790][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1549.876524][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1549.905944][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1549.939378][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1549.987759][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1550.015214][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1550.030219][T17298] usb 1-1: Using ep0 maxpacket: 16 [ 1550.042593][T17298] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1550.055293][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1550.085553][T17298] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1550.110114][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1550.117154][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1550.127739][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1550.129005][T17298] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1550.150394][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1550.187442][T17298] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.40 [ 1550.208077][T17298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.217264][T17298] usb 1-1: Product: و¤™م؟°ï‰†ن’¢ى؛ںم››ç›ƒى¨²ëگٹï؟ھè¨،لڈ—هپ–ي€‹يٹ؟م¦،ه¬؛â؟»ن¹†à¼پâژ€ه¹¾ï²™çˆ¢م¯‘ل‹™ه¾„魤린ه¤­âµ®مœ’ه¨‍ï‰پل³¢ [ 1550.240205][T17298] usb 1-1: Manufacturer: رƒ [ 1550.244794][T17298] usb 1-1: SerialNumber: رڈ [ 1550.420130][ T29] audit: type=1326 audit(1719067570.116:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2155e7d0a9 code=0x0 [ 1550.626824][T17298] usbhid 1-1:1.0: can't add hid device: -71 [ 1550.656922][T17298] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1550.734429][T17298] usb 1-1: USB disconnect, device number 43 [ 1550.894424][ T5839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.525809][ T5839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.650802][T19671] overlayfs: failed to resolve './file2': -2 [ 1552.311253][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.317650][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.142363][ T5839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.273320][T19690] overlayfs: failed to resolve './file2': -2 [ 1554.236221][T19697] loop1: detected capacity change from 0 to 64 [ 1558.200279][ T5839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.012060][ T5839] bond1: left allmulticast mode [ 1559.017000][ T5839] bridge1: left allmulticast mode [ 1559.790071][ T5839] bond1: left promiscuous mode [ 1559.794920][ T5839] bridge1: left promiscuous mode [ 1559.839223][ T5839] bridge0: port 3(bond1) entered disabled state [ 1559.907237][T16622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1559.925652][T16622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1559.938572][T16622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1559.960561][T16622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1559.971277][T16622] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1559.980371][ T5839] bridge_slave_1: left allmulticast mode [ 1559.992457][T16622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1560.090873][ T5839] bridge_slave_1: left promiscuous mode [ 1560.096901][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.201534][ T5839] bridge_slave_0: left allmulticast mode [ 1560.207260][ T5839] bridge_slave_0: left promiscuous mode [ 1560.248418][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.347957][T19730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19730 comm=syz-executor.1 [ 1560.355323][T19729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1560.378773][T19727] 9pnet_fd: Insufficient options for proto=fd [ 1560.814178][T12920] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1561.640200][ T29] audit: type=1326 audit(1719067581.336:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faead27d0a9 code=0x0 [ 1562.110526][T12920] Bluetooth: hci4: command tx timeout [ 1562.601288][ T5839] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1562.823747][T19747] Falling back ldisc for ttyprintk. [ 1563.102245][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.127075][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.177954][ T5839] bond0 (unregistering): Released all slaves [ 1563.268835][ T5839] bond1 (unregistering): Released all slaves [ 1563.342456][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1563.369188][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1564.072297][T19757] overlayfs: failed to resolve './file2': -2 [ 1564.270872][T12920] Bluetooth: hci4: command tx timeout [ 1565.184300][T19766] loop1: detected capacity change from 0 to 64 [ 1566.410357][T12920] Bluetooth: hci4: command tx timeout [ 1566.811440][ T29] audit: type=1400 audit(1719067586.516:804): avc: denied { mount } for pid=19753 comm="syz-executor.0" name="/" dev="rpc_pipefs" ino=74862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1567.180350][ T29] audit: type=1400 audit(1719067586.866:805): avc: denied { unmount } for pid=17533 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1567.348748][T19777] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1567.448911][T19778] bridge0: port 3(bond1) entered blocking state [ 1567.480353][T19778] bridge0: port 3(bond1) entered disabled state [ 1567.486995][T19778] bond1: entered allmulticast mode [ 1567.496435][T19778] bond1: entered promiscuous mode [ 1567.768935][ T5839] hsr_slave_0: left promiscuous mode [ 1567.803572][ T5839] hsr_slave_1: left promiscuous mode [ 1567.845342][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.909780][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.923765][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.931400][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.430208][T12920] Bluetooth: hci4: command tx timeout [ 1569.144245][ T5839] veth1_macvtap: left promiscuous mode [ 1569.149908][ T5839] veth0_macvtap: left promiscuous mode [ 1569.167078][ T5839] veth1_vlan: left promiscuous mode [ 1569.188086][ T5839] veth0_vlan: left promiscuous mode [ 1569.358195][ T29] audit: type=1326 audit(1719067589.066:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19795 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faead27d0a9 code=0x0 [ 1569.393919][T19775] loop1: detected capacity change from 0 to 32768 [ 1569.439668][T19775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (19775) [ 1569.497832][T19775] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1569.530552][ T29] audit: type=1400 audit(1719067589.246:807): avc: denied { mounton } for pid=19787 comm="syz-executor.3" path="/root/syzkaller-testdir2767552705/syzkaller.OLtWX6/108/file0" dev="rpc_pipefs" ino=74263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 1569.558731][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.565678][T19791] Device name cannot be null; rc = [-22] [ 1569.577537][T19775] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1569.608661][T19775] BTRFS info (device loop1): using free-space-tree [ 1569.951156][T17592] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1570.258462][ C1] vkms_vblank_simulate: vblank timer overrun [ 1570.367615][T19820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19820 comm=syz-executor.0 [ 1571.836909][ C1] vkms_vblank_simulate: vblank timer overrun [ 1571.904465][T19829] loop3: detected capacity change from 0 to 64 [ 1574.050855][T19842] loop3: detected capacity change from 0 to 1024 [ 1574.465953][ T5839] team0 (unregistering): Port device team_slave_1 removed [ 1574.750899][ T5839] team0 (unregistering): Port device team_slave_0 removed [ 1575.319571][T19848] overlayfs: failed to resolve './file2': -2 [ 1576.909246][T19854] loop3: detected capacity change from 0 to 32768 [ 1577.010830][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1577.031982][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1577.151655][T19854] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 1577.215228][T19854] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 1577.388989][T19854] bcachefs (loop3): alloc_read... done [ 1577.398657][T19854] bcachefs (loop3): stripes_read... done [ 1577.406209][T19854] bcachefs (loop3): snapshots_read... done [ 1577.416812][T19854] bcachefs (loop3): journal_replay... done [ 1577.427867][T19854] bcachefs (loop3): resume_logged_ops... done [ 1577.451597][T19854] bcachefs (loop3): going read-write [ 1577.501427][T19854] bcachefs (loop3): done starting filesystem [ 1577.611943][ T29] audit: type=1800 audit(1719067597.326:808): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4098 res=0 errno=0 [ 1577.694278][ T29] audit: type=1800 audit(1719067597.326:809): pid=19854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4098 res=0 errno=0 [ 1577.814803][T19721] chnl_net:caif_netlink_parms(): no params data found [ 1577.823287][ T29] audit: type=1326 audit(1719067597.496:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19877 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c87d0a9 code=0x0 [ 1577.883865][T17663] bcachefs (loop3): shutting down [ 1577.888972][T17663] bcachefs (loop3): going read-only [ 1577.933882][T17663] bcachefs (loop3): finished waiting for writes to stop [ 1577.986450][T17663] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 1578.014445][T17663] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 1578.041739][T17663] bcachefs (loop3): shutdown complete, journal seq 13 [ 1578.066860][T17663] bcachefs (loop3): marking filesystem clean [ 1578.148006][T19721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.186549][T19721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.205081][T19721] bridge_slave_0: entered allmulticast mode [ 1578.217121][T17663] bcachefs (loop3): shutdown complete [ 1578.242391][T19721] bridge_slave_0: entered promiscuous mode [ 1578.281630][T19721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.289488][T19721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.304064][T19721] bridge_slave_1: entered allmulticast mode [ 1578.325245][T19721] bridge_slave_1: entered promiscuous mode [ 1578.493220][T19721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.535549][T19721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.726560][T19721] team0: Port device team_slave_0 added [ 1578.777164][T19721] team0: Port device team_slave_1 added [ 1578.897805][T19887] loop1: detected capacity change from 0 to 64 [ 1580.914072][T19721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1580.928304][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.955233][T19721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.076513][T19721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.123849][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.153277][ T930] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1581.220046][T19721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.396344][ T930] usb 1-1: Using ep0 maxpacket: 8 [ 1581.412903][ T930] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.447521][ T930] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1581.463238][ T930] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1581.476956][ T930] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1581.486359][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.554161][ T930] hub 1-1:1.0: bad descriptor, ignoring hub [ 1581.590069][ T930] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1581.640290][ T930] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1581.663598][T19897] loop4: detected capacity change from 0 to 2048 [ 1581.707571][T19721] hsr_slave_0: entered promiscuous mode [ 1581.727428][T19897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1581.818526][T19721] hsr_slave_1: entered promiscuous mode [ 1583.937963][ T5178] usb 1-1: USB disconnect, device number 44 [ 1583.944744][T19721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1584.248281][ T29] audit: type=1800 audit(1719067603.746:811): pid=19905 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1584.334619][T19721] Cannot create hsr debugfs directory [ 1584.445925][T17493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1584.890326][ T5173] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1586.152312][ T5230] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1586.355948][ T5230] usb 4-1: Using ep0 maxpacket: 16 [ 1586.380375][ T5230] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1586.410859][ T5230] usb 4-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1586.424474][ T5230] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1586.484149][ T5230] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.40 [ 1586.512013][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.565587][ T5230] usb 4-1: Product: و¤™م؟°ï‰†ن’¢ى؛ںم››ç›ƒى¨²ëگٹï؟ھè¨،لڈ—هپ–ي€‹يٹ؟م¦،ه¬؛â؟»ن¹†à¼پâژ€ه¹¾ï²™çˆ¢م¯‘ل‹™ه¾„魤린ه¤­âµ®مœ’ه¨‍ï‰پل³¢ [ 1586.628537][ T5230] usb 4-1: Manufacturer: رƒ [ 1586.650271][ T5230] usb 4-1: SerialNumber: رڈ [ 1587.049860][ T5230] usbhid 4-1:1.0: can't add hid device: -71 [ 1587.056284][ T5230] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1587.100815][ T5230] usb 4-1: USB disconnect, device number 33 [ 1587.428255][T19721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1587.466928][T19721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1587.517383][T19721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1587.566213][T19721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1588.074022][T19721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.260584][T19721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.324486][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.331950][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.672202][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.679541][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.138488][T19721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1589.368664][ T29] audit: type=1326 audit(1719067609.076:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19941 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2155e7d0a9 code=0x0 [ 1590.588980][T19721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.168103][T19959] loop1: detected capacity change from 0 to 2048 [ 1591.199254][T19721] veth0_vlan: entered promiscuous mode [ 1591.264748][T19721] veth1_vlan: entered promiscuous mode [ 1591.312982][T19959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1591.446612][T19721] veth0_macvtap: entered promiscuous mode [ 1591.521965][T19721] veth1_macvtap: entered promiscuous mode [ 1591.708552][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1591.792854][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1591.813635][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.640696][ T29] audit: type=1800 audit(1719067612.346:813): pid=19966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1593.442326][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.506036][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.571838][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.623266][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.675320][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.733259][T19721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1593.765158][T17592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.840544][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.906304][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.937275][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.961724][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.990101][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.008381][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.035073][T19721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1594.065622][T19721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.098288][T19721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.137111][T19721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.165126][T19721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.180101][T19721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.203624][T19721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.884182][T19981] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1595.166017][T19983] bond3: entered promiscuous mode [ 1595.203601][T19983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1596.508780][T19995] overlayfs: failed to resolve './file2': -2 [ 1598.300113][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1599.773350][T14409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.810075][T14409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.909643][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.929200][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.964301][ T29] audit: type=1326 audit(1719067619.676:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20009 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f1a7d0a9 code=0x0 [ 1599.991046][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1600.009846][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.059648][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1600.079171][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1600.106838][ T25] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1600.130201][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.182502][ T25] hub 4-1:1.0: bad descriptor, ignoring hub [ 1600.188502][ T25] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1600.215967][ T25] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1600.616486][T20016] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 1600.627914][T20016] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1600.639134][T20016] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1600.659999][T20016] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1600.668866][T20016] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1601.554312][T20025] overlayfs: failed to resolve './file2': -2 [ 1603.625432][ T5173] usb 4-1: USB disconnect, device number 34 [ 1603.901742][ T5230] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1604.024665][T20039] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 1604.072781][T20043] loop4: detected capacity change from 0 to 64 [ 1604.110077][ T5230] usb 3-1: Using ep0 maxpacket: 8 [ 1604.128611][ T5230] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.143060][ T5230] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1604.182544][T20044] bond4: entered promiscuous mode [ 1604.264642][T20044] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1604.456304][ T5230] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1604.470730][ T5230] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1604.480222][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.523070][ T5230] hub 3-1:1.0: bad descriptor, ignoring hub [ 1604.540133][ T5230] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1604.906174][ T5230] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1606.440836][ T5230] usb 3-1: USB disconnect, device number 38 [ 1606.841071][ T29] audit: type=1326 audit(1719067626.556:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20057 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c87d0a9 code=0x0 [ 1608.737461][T20073] Device name cannot be null; rc = [-22] [ 1608.806372][T20080] fuse: Bad value for 'fd' [ 1610.220927][T20086] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1610.319331][T20090] bond1: entered promiscuous mode [ 1610.367365][T20090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1610.847403][T20094] fuse: Bad value for 'fd' [ 1612.993667][ T29] audit: type=1326 audit(1719067632.706:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x0 [ 1613.017117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1613.091249][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.097912][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.488568][T20109] loop3: detected capacity change from 0 to 256 [ 1613.994885][T12920] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1618.358673][T20127] overlayfs: failed to resolve './file2': -2 [ 1618.640921][T20129] fuse: Bad value for 'fd' [ 1619.939100][T20137] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1620.004604][T20141] sch_tbf: peakrate 1 is lower than or equals to rate 1 ! [ 1620.040271][T20137] wg2: entered promiscuous mode [ 1622.261453][T20153] loop3: detected capacity change from 0 to 4096 [ 1622.362828][T20154] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1622.840083][ T29] audit: type=1326 audit(1719067642.536:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faead27d0a9 code=0x0 [ 1623.182629][T20163] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1624.314539][T20176] overlayfs: failed to resolve './file2': -2 [ 1628.503981][T20194] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1628.766598][T20200] bond1: entered promiscuous mode [ 1628.830947][T20200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1630.072358][T20210] fuse: Bad value for 'fd' [ 1631.042983][ T29] audit: type=1326 audit(1719067650.756:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20211 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2155e7d0a9 code=0x0 [ 1632.487382][T20218] loop4: detected capacity change from 0 to 32768 [ 1632.793288][T20234] loop2: detected capacity change from 0 to 256 [ 1633.053969][T20218] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1633.154195][T20218] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 1633.202084][T20225] loop3: detected capacity change from 0 to 32768 [ 1633.305998][T20218] bcachefs (loop4): alloc_read... done [ 1633.315360][T20218] bcachefs (loop4): stripes_read... done [ 1633.924822][T20218] bcachefs (loop4): snapshots_read... done [ 1634.304445][T20218] bcachefs (loop4): journal_replay... done [ 1634.370663][T20218] bcachefs (loop4): resume_logged_ops... done [ 1634.402763][T20218] bcachefs (loop4): going read-write [ 1634.414623][T20218] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR [ 1634.551419][T20218] bcachefs (loop4): error starting copygc thread [ 1634.580113][T20218] bcachefs (loop4): going read-only [ 1634.590299][T20218] bcachefs (loop4): finished waiting for writes to stop [ 1634.630764][T20218] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 1634.647120][T20225] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open [ 1634.670346][T20218] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 1634.680377][T20225] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete [ 1634.768141][T20218] bcachefs (loop4): shutdown complete, journal seq 11 [ 1634.777971][T20218] bcachefs (loop4): marking filesystem clean [ 1634.816710][T20218] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 1634.825187][T20218] bcachefs (loop4): shutting down [ 1636.382441][T20218] bcachefs (loop4): shutdown complete [ 1637.998899][T20265] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1640.536462][T20273] fuse: Bad value for 'fd' [ 1641.723112][ T29] audit: type=1326 audit(1719067661.416:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20274 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faead27d0a9 code=0x0 [ 1641.824246][ T29] audit: type=1804 audit(1719067661.526:820): pid=20279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1172244843/syzkaller.0AhFxk/126/file0" dev="sda1" ino=1955 res=1 errno=0 [ 1642.531186][T20286] Device name cannot be null; rc = [-22] [ 1642.577793][T20287] Device name cannot be null; rc = [-22] [ 1645.268787][T20309] loop4: detected capacity change from 0 to 4096 [ 1645.566309][T20311] fuse: Bad value for 'fd' [ 1646.091577][T20312] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1647.099700][T20324] fuse: Bad value for 'fd' [ 1648.027390][T20321] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1648.642975][T20332] fuse: Bad value for 'fd' [ 1649.930109][ T29] audit: type=1326 audit(1719067669.636:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2155e7d0a9 code=0x0 [ 1650.098659][T20343] loop4: detected capacity change from 0 to 256 [ 1652.651034][T20346] Device name cannot be null; rc = [-22] [ 1653.417169][ T29] audit: type=1804 audit(1719067673.126:822): pid=20362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1172244843/syzkaller.0AhFxk/129/file0" dev="sda1" ino=1963 res=1 errno=0 [ 1653.720180][ T930] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1654.500089][ T930] usb 1-1: Using ep0 maxpacket: 16 [ 1654.616447][T20374] fuse: Bad value for 'fd' [ 1655.560257][ T930] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1655.579221][T20372] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1655.620184][ T930] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1655.663594][ T930] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1655.690421][ T930] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.40 [ 1655.730416][ T930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.738503][ T930] usb 1-1: Product: و¤™م؟°ï‰†ن’¢ى؛ںم››ç›ƒى¨²ëگٹï؟ھè¨،لڈ—هپ–ي€‹يٹ؟م¦،ه¬؛â؟»ن¹†à¼پâژ€ه¹¾ï²™çˆ¢م¯‘ل‹™ه¾„魤린ه¤­âµ®مœ’ه¨‍ï‰پل³¢ [ 1655.800111][ T930] usb 1-1: Manufacturer: رƒ [ 1655.804789][ T930] usb 1-1: SerialNumber: رڈ [ 1656.256930][T20379] loop4: detected capacity change from 0 to 8192 [ 1657.323206][T20379] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1657.414321][ T930] usbhid 1-1:1.0: can't add hid device: -71 [ 1657.483104][ T930] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1657.521791][ T930] usb 1-1: USB disconnect, device number 45 [ 1657.874174][ T29] audit: type=1326 audit(1719067677.586:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20387 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x0 [ 1657.964736][T20393] fuse: Bad value for 'fd' [ 1664.298903][T20425] Device name cannot be null; rc = [-22] [ 1665.477812][T20439] fuse: Bad value for 'fd' [ 1666.386538][ T29] audit: type=1326 audit(1719067686.096:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20440 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c87d0a9 code=0x0 [ 1666.826774][ T2530] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1668.765880][ T29] audit: type=1804 audit(1719067687.966:825): pid=20459 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1172244843/syzkaller.0AhFxk/134/file0" dev="sda1" ino=1954 res=1 errno=0 [ 1669.047205][T20456] loop4: detected capacity change from 0 to 4096 [ 1669.160747][T20456] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1669.349328][T20456] NILFS (loop4): trying rollback from an earlier position [ 1669.682263][T20456] NILFS (loop4): recovery complete [ 1669.742676][T20470] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1671.117972][T20478] Device name cannot be null; rc = [-22] [ 1671.398774][T20483] fuse: Bad value for 'fd' [ 1672.350498][T20486] fuse: Bad value for 'fd' [ 1677.381407][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.398154][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.396835][ T29] audit: type=1804 audit(1719067697.626:826): pid=20513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2767552705/syzkaller.OLtWX6/144/file0" dev="sda1" ino=1958 res=1 errno=0 [ 1678.423390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1678.742449][T20521] loop4: detected capacity change from 0 to 64 [ 1679.513772][T20531] fuse: Bad value for 'fd' [ 1683.737210][T20540] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1683.937325][T20545] fuse: Bad value for 'fd' [ 1684.989538][T20547] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 1686.940546][T12920] Bluetooth: hci4: command 0x0406 tx timeout [ 1688.608457][T20584] fuse: Bad value for 'fd' [ 1694.242497][T20611] loop4: detected capacity change from 0 to 256 [ 1698.168028][T20626] fuse: Bad value for 'fd' [ 1700.890816][T20643] Device name cannot be null; rc = [-22] [ 1707.824931][T20666] fuse: Bad value for 'fd' [ 1716.368579][T20706] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1719.692314][T20712] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 1721.413656][T20731] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1723.265251][T20756] overlayfs: failed to resolve './file2': -2 [ 1730.422777][T20802] loop4: detected capacity change from 0 to 2048 [ 1732.425067][T20814] overlayfs: failed to resolve './file2': -2 [ 1732.844362][T20802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1733.475180][T20802] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 1733.500081][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1734.611490][T17493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1735.071871][T20837] overlayfs: failed to resolve './file2': -2 [ 1735.954465][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.970175][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1739.261504][T20876] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1739.324725][T20876] ip6tnl1: entered promiscuous mode [ 1739.366490][T20876] ip6tnl1: entered allmulticast mode [ 1744.793173][T20888] overlayfs: failed to resolve './file2': -2 [ 1749.260032][ T5230] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1749.572649][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1757.402593][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1757.725339][T20963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1758.856219][ T29] audit: type=1326 audit(1719067778.566:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20962 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x0 [ 1764.116221][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1765.524228][T21023] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1770.360359][T21046] Device name cannot be null; rc = [-22] [ 1772.000928][ T29] audit: type=1800 audit(1719067791.686:828): pid=21068 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 1773.536450][T16622] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1797.380187][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1797.407232][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.413884][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.504840][T21205] loop4: detected capacity change from 0 to 32768 [ 1797.590481][T21205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (21205) [ 1797.642351][T21205] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1797.664815][T21205] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1797.688452][T21205] BTRFS info (device loop4): using free-space-tree [ 1797.927305][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1797.983882][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1798.217050][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1798.594207][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1798.644949][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1798.711453][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1798.751390][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1798.775639][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1798.807291][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1799.075230][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1799.622368][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1799.717305][T21205] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1799.766319][T21205] BTRFS error (device loop4): open_ctree failed [ 1804.559963][T21268] overlayfs: failed to resolve './file2': -2 [ 1805.631855][T21277] fuse: Bad value for 'fd' [ 1806.727714][T21282] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1813.031517][T21327] fuse: Bad value for 'fd' [ 1813.276703][T21336] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1815.231946][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1815.342294][T21351] overlayfs: failed to resolve './file2': -2 [ 1818.305402][T21377] overlayfs: failed to resolve './file2': -2 [ 1819.917309][T21390] fuse: Bad value for 'fd' [ 1821.068484][T21407] overlayfs: failed to resolve './file2': -2 [ 1822.242461][ T29] audit: type=1400 audit(1719067841.816:829): avc: denied { append } for pid=21421 comm="syz-executor.4" name="iommu" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1823.268890][T21419] Device name cannot be null; rc = [-22] [ 1823.593138][T21429] loop4: detected capacity change from 0 to 1024 [ 1823.618770][T21428] Device name cannot be null; rc = [-22] [ 1824.669124][T21429] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1825.974040][T21451] loop4: detected capacity change from 0 to 764 [ 1826.344725][T16622] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1827.511265][T21456] Device name cannot be null; rc = [-22] [ 1829.087081][T21474] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1829.441656][T21480] overlayfs: missing 'lowerdir' [ 1829.555414][T21474] netlink: get zone limit has 8 unknown bytes [ 1832.045158][T21499] overlayfs: failed to resolve './file2': -2 [ 1833.734093][T21510] loop4: detected capacity change from 0 to 764 [ 1834.025326][T21514] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1834.034669][T21514] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1837.067273][T21529] overlayfs: failed to resolve './file2': -2 [ 1837.866402][T21520] Device name cannot be null; rc = [-22] [ 1838.436593][ T29] audit: type=1400 audit(1719067858.146:830): avc: denied { setattr } for pid=21547 comm="syz-executor.3" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1839.350560][T21560] overlayfs: failed to resolve './file2': -2 [ 1841.415992][T21579] overlayfs: failed to resolve './file2': -2 [ 1841.924825][T21569] loop4: detected capacity change from 0 to 32768 [ 1842.019153][T21569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (21569) [ 1842.096947][T21569] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1842.133944][T21569] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1842.162313][T21569] BTRFS info (device loop4): using free-space-tree [ 1842.320704][T21592] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1842.330269][T21592] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1843.327916][T17493] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1845.468065][T21623] loop4: detected capacity change from 0 to 512 [ 1845.485539][T21623] EXT4-fs: Ignoring removed mblk_io_submit option [ 1845.494095][T21623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1845.570612][ T29] audit: type=1800 audit(1719067865.286:831): pid=21602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 1845.600358][T21623] EXT4-fs (loop4): 1 truncate cleaned up [ 1845.609505][T21623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1846.358729][T17493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1847.168451][T21644] overlayfs: failed to resolve './file2': -2 [ 1850.166055][T21674] Device name cannot be null; rc = [-22] [ 1850.322978][T21679] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1850.351185][T21679] netlink: zone id is out of range [ 1850.360385][T21679] netlink: zone id is out of range [ 1850.365569][T21679] netlink: zone id is out of range [ 1850.400048][T21679] netlink: zone id is out of range [ 1850.417669][T21679] netlink: get zone limit has 8 unknown bytes [ 1853.228327][T16622] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1856.104690][T21721] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1856.655548][T21721] netlink: zone id is out of range [ 1856.828196][T21721] netlink: zone id is out of range [ 1856.838257][T21721] netlink: zone id is out of range [ 1856.866621][T21721] netlink: zone id is out of range [ 1856.900649][T21721] netlink: get zone limit has 8 unknown bytes [ 1856.949006][T21719] Device name cannot be null; rc = [-22] [ 1858.960765][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.967190][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.688999][T21741] overlayfs: failed to resolve './file2': -2 [ 1865.173946][T21762] overlayfs: failed to resolve './file2': -2 [ 1866.165196][T21773] Device name cannot be null; rc = [-22] [ 1867.578363][T21779] evm: overlay not supported [ 1873.848358][T21817] overlayfs: failed to resolve './file2': -2 [ 1876.053184][T21828] Device name cannot be null; rc = [-22] [ 1878.611300][T21846] No such timeout policy "syz0" [ 1879.779770][T21706] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1880.149923][ T29] audit: type=1804 audit(1719067899.846:832): pid=21852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4170337213/syzkaller.Bra8oB/104/file1" dev="sda1" ino=1964 res=1 errno=0 [ 1880.948648][T21864] overlayfs: failed to resolve './file2': -2 [ 1882.168613][T21874] Device name cannot be null; rc = [-22] [ 1883.530419][T21881] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1884.706974][T21890] overlayfs: failed to resolve './file2': -2 [ 1884.722656][T21893] overlayfs: failed to resolve './file2': -2 [ 1888.925060][T21929] loop4: detected capacity change from 0 to 128 [ 1892.282222][T21942] loop4: detected capacity change from 0 to 40427 [ 1892.368526][T21942] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1892.378020][T21942] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1892.651132][T21942] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1893.022089][T21955] fuse: Bad value for 'fd' [ 1893.227524][T21942] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1893.234792][T21942] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1893.308788][T21959] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1896.163481][T21982] overlayfs: failed to resolve './file2': -2 [ 1897.806583][T21977] Device name cannot be null; rc = [-22] [ 1899.038305][T22005] fuse: Bad value for 'fd' [ 1901.449150][T22022] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1904.951169][T22042] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 1904.990359][T22044] fuse: Bad value for 'fd' [ 1905.217685][ T29] audit: type=1804 audit(1719067924.926:833): pid=22051 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811500189/syzkaller.jLEBWj/172/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1905.759364][T22069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1905.807885][T22069] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22069 comm=syz-executor.4 [ 1905.848884][T22069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1906.077208][T22085] fuse: Bad value for 'fd' [ 1907.862915][ T29] audit: type=1400 audit(1719067927.566:834): avc: denied { map } for pid=22122 comm="syz-executor.2" path="socket:[82037]" dev="sockfs" ino=82037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1909.865311][ T29] audit: type=1400 audit(1719067929.576:835): avc: denied { write } for pid=22175 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1913.118322][ T29] audit: type=1326 audit(1719067932.826:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22245 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faead27d0a9 code=0x0 [ 1914.608225][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1915.250258][ T29] audit: type=1326 audit(1719067934.956:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x7ffc0000 [ 1915.383763][ T29] audit: type=1326 audit(1719067934.956:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x7ffc0000 [ 1915.485217][ T29] audit: type=1326 audit(1719067934.986:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e7807d0a9 code=0x7ffc0000 [ 1915.560470][ T29] audit: type=1326 audit(1719067935.006:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x7ffc0000 [ 1915.627763][ T29] audit: type=1326 audit(1719067935.026:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5e7807d0a9 code=0x7ffc0000 [ 1915.680084][ T29] audit: type=1326 audit(1719067935.026:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x7ffc0000 [ 1915.739067][ T29] audit: type=1326 audit(1719067935.026:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x7ffc0000 [ 1915.783213][ T29] audit: type=1326 audit(1719067935.026:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5e7807d0a9 code=0x7ffc0000 [ 1915.814352][ T29] audit: type=1326 audit(1719067935.026:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x7ffc0000 [ 1916.453354][T22330] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«Q [ 1920.278798][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.285753][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.576329][T12920] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1921.594267][T12920] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1921.609673][T12920] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1921.626760][T12920] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1921.639018][T12920] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1921.648964][T12920] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1922.294556][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.459649][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1922.459672][ T29] audit: type=1326 audit(1719067942.166:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22414 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x0 [ 1922.601808][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.790811][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.969546][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.507373][T22432] 9pnet_fd: p9_fd_create_tcp (22432): problem connecting socket to 127.0.0.1 [ 1923.801979][T21706] Bluetooth: hci2: command tx timeout [ 1924.057256][T22409] chnl_net:caif_netlink_parms(): no params data found [ 1924.087165][ T35] bond1: left allmulticast mode [ 1924.110215][ T35] bond1: left promiscuous mode [ 1924.130520][ T35] bridge0: port 3(bond1) entered disabled state [ 1924.164259][ T35] bridge_slave_1: left allmulticast mode [ 1924.174190][T22450] syz-executor.1[22450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1924.174617][T22450] syz-executor.1[22450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1924.189930][ T35] bridge_slave_1: left promiscuous mode [ 1924.239005][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.257804][ T35] bridge_slave_0: left allmulticast mode [ 1924.270005][ T35] bridge_slave_0: left promiscuous mode [ 1924.275906][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.474790][T22456] fuse: Bad value for 'fd' [ 1926.620141][T21706] Bluetooth: hci2: command tx timeout [ 1927.458171][ T29] audit: type=1804 audit(1719067947.156:858): pid=22475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1172244843/syzkaller.0AhFxk/244/bus" dev="sda1" ino=1960 res=1 errno=0 [ 1927.541580][ T29] audit: type=1804 audit(1719067947.166:859): pid=22475 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1172244843/syzkaller.0AhFxk/244/bus" dev="sda1" ino=1960 res=1 errno=0 [ 1928.670485][T12920] Bluetooth: hci2: command tx timeout [ 1929.351657][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1929.391066][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1929.445486][ T35] bond0 (unregistering): Released all slaves [ 1929.467391][ T35] bond1 (unregistering): Released all slaves [ 1929.599148][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1930.175267][T22409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.202699][T22409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.232644][T22409] bridge_slave_0: entered allmulticast mode [ 1930.264688][T22409] bridge_slave_0: entered promiscuous mode [ 1930.347345][T22409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.380083][T22409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.408066][T22409] bridge_slave_1: entered allmulticast mode [ 1930.427417][T22409] bridge_slave_1: entered promiscuous mode [ 1930.685293][T22409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1930.737520][T22409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1930.757130][T12920] Bluetooth: hci2: command tx timeout [ 1931.022873][T22409] team0: Port device team_slave_0 added [ 1931.096165][T22409] team0: Port device team_slave_1 added [ 1931.345276][T22409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1931.372669][T22409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1931.453372][T22409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1931.593688][ T29] audit: type=1800 audit(1719067951.306:860): pid=22494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 1931.671234][T22409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1931.711452][T22409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1931.787833][T22409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1931.908826][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1932.240427][T22534] vlan2: entered allmulticast mode [ 1932.360653][ T35] hsr_slave_0: left promiscuous mode [ 1932.381389][ T35] hsr_slave_1: left promiscuous mode [ 1932.428397][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1932.460430][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1932.501556][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1932.540077][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1932.683837][ T35] veth1_macvtap: left promiscuous mode [ 1932.684034][T22553] fuse: Bad value for 'fd' [ 1932.689469][ T35] veth0_macvtap: left promiscuous mode [ 1932.740370][ T35] veth1_vlan: left promiscuous mode [ 1932.745882][ T35] veth0_vlan: left promiscuous mode [ 1933.603546][ T29] audit: type=1400 audit(1719067953.306:861): avc: denied { map } for pid=22568 comm="syz-executor.2" path="socket:[83313]" dev="sockfs" ino=83313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1935.321018][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1935.386524][T22609] hugetlbfs: syz-executor.2 (22609): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1935.509104][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1936.428982][ T29] audit: type=1804 audit(1719067956.126:862): pid=22611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4170337213/syzkaller.Bra8oB/158/bus" dev="sda1" ino=1957 res=1 errno=0 [ 1936.456902][ T29] audit: type=1804 audit(1719067956.156:863): pid=22611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4170337213/syzkaller.Bra8oB/158/bus" dev="sda1" ino=1957 res=1 errno=0 [ 1936.889025][ T29] audit: type=1400 audit(1719067956.596:864): avc: denied { mount } for pid=22617 comm="syz-executor.2" name="/" dev="autofs" ino=83370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1936.958264][ T29] audit: type=1400 audit(1719067956.656:865): avc: denied { unmount } for pid=19721 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1937.277796][T22409] hsr_slave_0: entered promiscuous mode [ 1937.299372][T22409] hsr_slave_1: entered promiscuous mode [ 1937.322305][T22409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1937.343221][T22409] Cannot create hsr debugfs directory [ 1937.556930][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1937.590175][T22634] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1937.760764][T22629] batman_adv: batadv1: Adding interface: netdevsim0 [ 1937.787879][T22629] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1937.911607][T22629] batman_adv: batadv1: Interface activated: netdevsim0 [ 1939.961463][T22409] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1939.985657][T22409] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1940.047899][T22409] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1940.106921][T22409] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1940.649682][T22409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1940.788698][T22409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1940.865895][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1940.873256][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1940.954019][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1940.961399][ T5230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1941.190991][ T29] audit: type=1400 audit(1719067960.906:866): avc: denied { shutdown } for pid=22674 comm="syz-executor.0" lport=37300 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1942.091179][T22409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1942.525631][T22409] veth0_vlan: entered promiscuous mode [ 1942.593394][T22409] veth1_vlan: entered promiscuous mode [ 1942.765758][T22409] veth0_macvtap: entered promiscuous mode [ 1942.798476][T22409] veth1_macvtap: entered promiscuous mode [ 1943.184532][T22409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1943.230756][T22409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.256671][T22409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1943.293402][T22409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.315440][T22409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1943.351400][T22409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.410801][T22409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1943.442581][T22409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.487431][T22409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1943.509294][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1943.535404][T22409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1943.573017][T22409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.602460][T22409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1943.635837][T22409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.691650][T22409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1943.721321][ T29] audit: type=1326 audit(1719067963.436:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22721 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c87d0a9 code=0x0 [ 1943.770108][T22409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.819560][T22409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1943.865951][T22409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.912549][T22409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1943.974851][T22409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.003365][T22409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.015758][T22409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.024790][T22409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.139149][T22741] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1944.316294][ T2519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.352328][ T2519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1944.459182][ T29] audit: type=1804 audit(1719067964.166:868): pid=22748 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811500189/syzkaller.jLEBWj/237/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 1944.526885][T16963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.536867][T16963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.642914][T22772] autofs: Bad value for 'fd' [ 1946.928583][T22775] syz_tun: entered promiscuous mode [ 1946.983671][T22775] bridge0: entered promiscuous mode [ 1947.871198][T22799] overlayfs: failed to resolve './file2': -2 [ 1948.730015][ T29] audit: type=1326 audit(1719067968.436:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c87d0a9 code=0x0 [ 1949.162339][T22826] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1950.966972][T22818] loop3: detected capacity change from 0 to 32768 [ 1951.041499][ T29] audit: type=1804 audit(1719067970.746:870): pid=22847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3673769721/syzkaller.FXJPza/298/bus" dev="sda1" ino=1963 res=1 errno=0 [ 1951.408301][T22862] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22862 comm=syz-executor.0 [ 1951.447924][T22818] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 1951.477012][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1951.510070][T22818] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 1951.671225][T22818] bcachefs (loop3): alloc_read... done [ 1951.701662][T22818] bcachefs (loop3): stripes_read... done [ 1951.709994][T22818] bcachefs (loop3): snapshots_read... done [ 1951.740759][T22818] bcachefs (loop3): journal_replay... done [ 1951.769922][T22818] bcachefs (loop3): resume_logged_ops... done [ 1951.791247][T22818] bcachefs (loop3): going read-write [ 1951.800452][T22818] bcachefs (loop3): done starting filesystem [ 1951.952365][T22409] bcachefs (loop3): shutting down [ 1951.957776][T22409] bcachefs (loop3): going read-only [ 1951.975038][T22409] bcachefs (loop3): finished waiting for writes to stop [ 1952.010355][T22409] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 1952.019379][T22409] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 1952.036685][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1952.059671][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1952.149751][T22409] bcachefs (loop3): shutdown complete, journal seq 11 [ 1952.191308][T22409] bcachefs (loop3): marking filesystem clean [ 1952.389766][T22409] bcachefs (loop3): shutdown complete [ 1952.908397][T22891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22891 comm=syz-executor.4 [ 1952.974146][T22891] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1954.870223][T22922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22922 comm=syz-executor.2 [ 1954.905546][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1955.366832][T22933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1955.411258][T22933] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1956.104197][ T29] audit: type=1326 audit(1719067975.816:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22937 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x0 [ 1956.388785][T22917] loop3: detected capacity change from 0 to 32768 [ 1956.431431][T22917] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got b34af60e should be 29d2fb78 [ 1956.599467][T21706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1956.629174][T21706] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1956.646804][T21706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1956.658227][T21706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1956.677163][T21706] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1956.686696][T21706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1956.778019][T22917] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 1956.791455][T22917] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 1956.971395][T22917] bcachefs (loop3): alloc_read... done [ 1956.981624][T22917] bcachefs (loop3): stripes_read... done [ 1956.989226][T22917] bcachefs (loop3): snapshots_read... done [ 1957.020417][T22963] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QhQ [ 1957.035481][T22917] bcachefs (loop3): going read-write [ 1957.063877][T22917] bcachefs (loop3): journal_replay... done [ 1957.157371][T22917] bcachefs (loop3): resume_logged_ops... done [ 1957.170680][T22917] bcachefs (loop3): delete_dead_inodes... done [ 1957.230325][T22917] bcachefs (loop3): done starting filesystem [ 1957.488642][T22409] bcachefs (loop3): shutting down [ 1957.507107][T22409] bcachefs (loop3): going read-only [ 1957.531332][T22409] bcachefs (loop3): finished waiting for writes to stop [ 1957.613859][T22409] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 1957.622900][T22409] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 1957.660515][T22409] bcachefs (loop3): shutdown complete, journal seq 13 [ 1957.668426][T22409] bcachefs (loop3): marking filesystem clean [ 1957.821090][T22409] bcachefs (loop3): shutdown complete [ 1957.851172][T22955] chnl_net:caif_netlink_parms(): no params data found [ 1958.458046][T22955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.483115][T22955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.510596][T22955] bridge_slave_0: entered allmulticast mode [ 1958.535936][T22955] bridge_slave_0: entered promiscuous mode [ 1958.552767][T22955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1958.560429][T22955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.594604][T22955] bridge_slave_1: entered allmulticast mode [ 1958.646485][T22955] bridge_slave_1: entered promiscuous mode [ 1958.764761][T16622] Bluetooth: hci1: command tx timeout [ 1958.923853][T22955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1958.986516][T22955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1959.013250][ T29] audit: type=1326 audit(1719067978.726:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c87d0a9 code=0x0 [ 1959.304182][T22955] team0: Port device team_slave_0 added [ 1959.357301][T22955] team0: Port device team_slave_1 added [ 1959.588416][T22955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1959.619879][T22955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1959.709892][T22955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1959.745880][T22955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1959.755863][T22955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1959.839722][T22955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1960.346717][T23014] overlayfs: failed to resolve './file2': -2 [ 1960.830889][T16622] Bluetooth: hci1: command tx timeout [ 1961.061308][T22955] hsr_slave_0: entered promiscuous mode [ 1961.190337][T22955] hsr_slave_1: entered promiscuous mode [ 1961.320104][T22955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1961.327763][T22955] Cannot create hsr debugfs directory [ 1961.909463][T23029] loop3: detected capacity change from 0 to 512 [ 1961.939589][T23029] EXT4-fs: Ignoring removed mblk_io_submit option [ 1961.958364][T23029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1962.143521][T23029] EXT4-fs (loop3): 1 truncate cleaned up [ 1962.160082][T23029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1962.521334][T22409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1962.891702][T22955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.910690][T16622] Bluetooth: hci1: command tx timeout [ 1962.933981][ T29] audit: type=1326 audit(1719067982.646:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23043 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9cde7d0a9 code=0x0 [ 1963.243843][T22955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.457401][T22955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.730803][T22955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.802266][T23054] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1964.170490][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1964.296943][T23062] overlayfs: failed to resolve './file2': -2 [ 1965.010136][T16622] Bluetooth: hci1: command tx timeout [ 1965.187896][ T29] audit: type=1326 audit(1719067984.896:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23057 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f1a7d0a9 code=0x0 [ 1965.475714][T23078] loop3: detected capacity change from 0 to 2048 [ 1965.678461][T22955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1965.761926][T22955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1965.820415][T22955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1965.885530][T22955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1965.991819][ T29] audit: type=1326 audit(1719067985.696:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23090 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x0 [ 1966.581669][ T29] audit: type=1326 audit(1719067986.136:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23092 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f1a7d0a9 code=0x0 [ 1967.081922][T23105] overlayfs: failed to resolve './file2': -2 [ 1967.991053][T22955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1968.233122][T22955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1968.323760][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.331138][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1968.411274][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.418616][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1970.015976][ T29] audit: type=1326 audit(1719067989.606:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23138 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98c87d0a9 code=0x0 [ 1970.875789][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1970.999733][T23149] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ [ 1971.022239][T22955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1971.264734][T22955] veth0_vlan: entered promiscuous mode [ 1971.315908][T22955] veth1_vlan: entered promiscuous mode [ 1971.457977][T22955] veth0_macvtap: entered promiscuous mode [ 1971.587191][T13848] bridge_slave_1: left allmulticast mode [ 1971.593248][T13848] bridge_slave_1: left promiscuous mode [ 1971.599220][T13848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.676917][T13848] bridge_slave_0: left allmulticast mode [ 1971.705831][T13848] bridge_slave_0: left promiscuous mode [ 1971.717976][T13848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.731765][T23162] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1972.765654][T13848] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1972.886963][T13848] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1973.513249][T13848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1973.529587][T13848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1973.562304][T13848] bond0 (unregistering): Released all slaves [ 1973.621759][T23183] loop3: detected capacity change from 0 to 32768 [ 1973.700431][T23183] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1973.941010][T23183] XFS (loop3): Ending clean mount [ 1974.015393][T13848] bond1 (unregistering): Released all slaves [ 1974.038868][T13848] bond2 (unregistering): Released all slaves [ 1974.062378][T13848] bond3 (unregistering): Released all slaves [ 1974.109398][T22955] veth1_macvtap: entered promiscuous mode [ 1974.302567][T22409] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1974.595516][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1974.618445][T23207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1974.641325][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1974.663460][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1974.707331][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1974.739518][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1974.754462][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1974.769879][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1974.779769][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1974.839363][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1974.859172][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1974.889648][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1974.921726][T22955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1975.011663][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.040542][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.067733][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.094978][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.124651][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.140009][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.159755][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.168591][ T29] audit: type=1326 audit(1719067994.876:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23216 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f1a7d0a9 code=0x0 [ 1975.203582][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.216254][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1975.227732][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1975.241471][T22955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1975.348805][T22955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.373523][T22955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.396420][T22955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1975.422791][T22955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.364004][T14520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.395557][T23238] loop3: detected capacity change from 0 to 1024 [ 1976.412802][T14520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.500907][T23238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1976.671873][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.690521][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.717517][T22409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1976.924017][ T29] audit: type=1326 audit(1719067996.626:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23250 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4f1a7d0a9 code=0x0 [ 1977.171916][T13848] hsr_slave_0: left promiscuous mode [ 1977.199866][T13848] hsr_slave_1: left promiscuous mode [ 1977.334193][T13848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1977.369604][T13848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1977.420954][T13848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1977.479984][T13848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1978.482820][T13848] veth1_macvtap: left promiscuous mode [ 1978.537755][T13848] veth0_macvtap: left promiscuous mode [ 1978.572295][T13848] veth1_vlan: left promiscuous mode [ 1978.608483][T13848] veth0_vlan: left promiscuous mode [ 1979.893652][T23266] loop3: detected capacity change from 0 to 32768 [ 1979.939142][T23266] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got b34af60e should be 29d2fb78 [ 1980.245250][T23266] warn_alloc: 1 callbacks suppressed [ 1980.245270][T23266] syz-executor.3: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1980.453370][T23266] CPU: 1 PID: 23266 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 1980.464070][T23266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1980.474180][T23266] Call Trace: [ 1980.477506][T23266] [ 1980.480482][T23266] dump_stack_lvl+0x16c/0x1f0 [ 1980.485231][T23266] warn_alloc+0x24d/0x3a0 [ 1980.489634][T23266] ? __pfx_warn_alloc+0x10/0x10 [ 1980.494554][T23266] ? __bch2_darray_resize+0xd8/0x250 [ 1980.499906][T23266] ? __get_vm_area_node+0x190/0x2d0 [ 1980.505285][T23266] ? __get_vm_area_node+0x1bc/0x2d0 [ 1980.510553][T23266] __vmalloc_node_range_noprof+0xff7/0x1520 [ 1980.516530][T23266] ? __bch2_darray_resize+0xd8/0x250 [ 1980.521888][T23266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1980.528306][T23266] ? trace_kmalloc+0x2d/0xe0 [ 1980.532973][T23266] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1980.538798][T23266] ? __bch2_darray_resize+0xd8/0x250 [ 1980.544157][T23266] kvmalloc_node_noprof+0x14f/0x1a0 [ 1980.549438][T23266] ? __bch2_darray_resize+0xd8/0x250 [ 1980.554877][T23266] __bch2_darray_resize+0xd8/0x250 [ 1980.560061][T23266] bch2_fs_btree_write_buffer_init+0x2a2/0x380 [ 1980.566283][T23266] bch2_fs_alloc+0x1a50/0x2670 [ 1980.571115][T23266] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 1980.576313][T23266] bch2_fs_open+0x7b5/0x1110 [ 1980.580992][T23266] ? kasan_save_free_info+0x3b/0x60 [ 1980.586257][T23266] ? __pfx_bch2_fs_open+0x10/0x10 [ 1980.591349][T23266] ? bch2_mount+0x46e/0x1230 [ 1980.596018][T23266] ? kasan_quarantine_put+0x10a/0x240 [ 1980.601471][T23266] ? lockdep_hardirqs_on+0x7c/0x110 [ 1980.606782][T23266] bch2_mount+0xe2c/0x1230 [ 1980.611269][T23266] ? __pfx_bch2_mount+0x10/0x10 [ 1980.616189][T23266] ? cred_has_capability.isra.0+0x192/0x2f0 [ 1980.622167][T23266] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1980.628471][T23266] ? rcu_is_watching+0x12/0xc0 [ 1980.633303][T23266] ? vfs_parse_fs_string+0xfb/0x150 [ 1980.638567][T23266] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 1980.644287][T23266] ? cap_capable+0x1cf/0x240 [ 1980.648962][T23266] ? __pfx_bch2_mount+0x10/0x10 [ 1980.653876][T23266] legacy_get_tree+0x109/0x220 [ 1980.658711][T23266] vfs_get_tree+0x8f/0x380 [ 1980.663205][T23266] path_mount+0x14e6/0x1f20 [ 1980.667781][T23266] ? kmem_cache_free+0x12f/0x3a0 [ 1980.672799][T23266] ? __pfx_path_mount+0x10/0x10 [ 1980.677808][T23266] ? putname+0x12e/0x170 [ 1980.682112][T23266] __x64_sys_mount+0x297/0x320 [ 1980.686956][T23266] ? __pfx___x64_sys_mount+0x10/0x10 [ 1980.692321][T23266] do_syscall_64+0xcd/0x250 [ 1980.696935][T23266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.702963][T23266] RIP: 0033:0x7fb9cde7e7aa [ 1980.707508][T23266] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1980.727184][T23266] RSP: 002b:00007fb9cecb2ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1980.735666][T23266] RAX: ffffffffffffffda RBX: 00007fb9cecb2f80 RCX: 00007fb9cde7e7aa [ 1980.743695][T23266] RDX: 0000000020005d80 RSI: 0000000020005dc0 RDI: 00007fb9cecb2f40 [ 1980.751725][T23266] RBP: 0000000020005d80 R08: 00007fb9cecb2f80 R09: 0000000000000458 [ 1980.759752][T23266] R10: 0000000000000458 R11: 0000000000000202 R12: 0000000020005dc0 [ 1980.767778][T23266] R13: 00007fb9cecb2f40 R14: 0000000000005db3 R15: 0000000020006040 [ 1980.775809][T23266] [ 1981.043312][T23300] sg_write: data in/out 93/14 bytes for SCSI command 0x0-- guessing data in; [ 1981.043312][T23300] program syz-executor.0 not setting count and/or reply_len properly [ 1981.084230][T23266] Mem-Info: [ 1981.087473][T23266] active_anon:36127 inactive_anon:0 isolated_anon:0 [ 1981.087473][T23266] active_file:0 inactive_file:48025 isolated_file:0 [ 1981.087473][T23266] unevictable:0 dirty:17 writeback:0 [ 1981.087473][T23266] slab_reclaimable:12387 slab_unreclaimable:104194 [ 1981.087473][T23266] mapped:19145 shmem:16131 pagetables:670 [ 1981.087473][T23266] sec_pagetables:0 bounce:0 [ 1981.087473][T23266] kernel_misc_reclaimable:0 [ 1981.087473][T23266] free:1353859 free_pcp:1066 free_cma:0 [ 1981.300616][T23266] Node 0 active_anon:140872kB inactive_anon:0kB active_file:0kB inactive_file:192040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76580kB dirty:68kB writeback:0kB shmem:60888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10320kB pagetables:2680kB sec_pagetables:0kB all_unreclaimable? no [ 1981.438771][T23266] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1981.530155][T23266] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1981.619696][T23266] lowmem_reserve[]: 0 2565 2567 0 0 [ 1981.670623][T23266] Node 0 DMA32 free:1444888kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:141024kB inactive_anon:0kB active_file:0kB inactive_file:190232kB unevictable:0kB writepending:68kB present:3129332kB managed:2654756kB mlocked:0kB bounce:0kB free_pcp:6140kB local_pcp:696kB free_cma:0kB [ 1981.732646][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.739146][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.840099][T23266] lowmem_reserve[]: 0 0 1 0 0 [ 1981.844945][T23266] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 1981.880084][T23266] lowmem_reserve[]: 0 0 0 0 0 [ 1981.884971][T23266] Node 1 Normal free:3955212kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1981.933721][T23266] lowmem_reserve[]: 0 0 0 0 0 [ 1981.938570][T23266] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1981.953481][T23266] Node 0 DMA32: 494*4kB (ME) 775*8kB (UME) 211*16kB (ME) 550*32kB (UME) 121*64kB (UME) 114*128kB (UME) 122*256kB (UME) 110*512kB (UME) 91*1024kB (UME) 4*2048kB (ME) 294*4096kB (UM) = 1444640kB [ 1981.988116][T23266] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 1982.040060][T23266] Node 1 Normal: 1*4kB (U) 3*8kB (U) 13*16kB (U) 11*32kB (U) 9*64kB (UM) 9*128kB (U) 5*256kB (UM) 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 963*4096kB (UM) = 3955212kB [ 1982.060701][T23266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1982.070598][T23266] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1982.082645][T23266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1982.094955][T23266] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1982.104541][T23266] 63463 total pagecache pages [ 1982.109457][T23266] 0 pages in swap cache [ 1982.113812][T23266] Free swap = 124408kB [ 1982.118661][T23266] Total swap = 124996kB [ 1982.134679][ T29] audit: type=1326 audit(1719068001.846:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23306 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e7807d0a9 code=0x0 [ 1982.191369][T23266] 2097051 pages RAM [ 1982.195298][T23266] 0 pages HighMem/MovableOnly [ 1982.200223][T23266] 401768 pages reserved [ 1982.204418][T23266] 0 pages cma reserved [ 1982.236072][T23266] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 1982.847799][T13848] team0 (unregistering): Port device team_slave_1 removed [ 1983.052647][T13848] team0 (unregistering): Port device team_slave_0 removed [ 1985.594496][T23282] team0 (unregistering): Port device team_slave_0 removed [ 1985.654031][T23282] team0 (unregistering): Port device team_slave_1 removed [ 1985.782325][T23309] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1989.896696][T23359] loop3: detected capacity change from 0 to 8192 [ 1990.395670][T23374] overlayfs: failed to resolve './file2': -2 [ 1990.751743][T23359] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1992.333280][T23393] overlayfs: failed to resolve './file2': -2 [ 1997.673065][T23423] overlayfs: failed to resolve './file2': -2 [ 1999.704200][T23448] overlayfs: failed to resolve './file2': -2 [ 2111.919773][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2111.926816][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5164/1:b..l [ 2111.935989][ C1] rcu: (detected by 1, t=10502 jiffies, g=167621, q=237 ncpus=2) [ 2111.943853][ C1] task:kworker/0:6 state:R running task stack:22512 pid:5164 tgid:5164 ppid:2 flags:0x00004000 [ 2111.958735][ C1] Workqueue: events_power_efficient gc_worker [ 2111.964908][ C1] Call Trace: [ 2111.968231][ C1] [ 2111.971206][ C1] __schedule+0xf15/0x5d00 [ 2111.975690][ C1] ? __pfx_mark_lock+0x10/0x10 [ 2111.980535][ C1] ? __pfx___schedule+0x10/0x10 [ 2111.985537][ C1] ? mark_held_locks+0x9f/0xe0 [ 2111.990385][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2111.995649][ C1] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 2112.001785][ C1] preempt_schedule_notrace+0x62/0xe0 [ 2112.007224][ C1] preempt_schedule_notrace_thunk+0x1a/0x30 [ 2112.013184][ C1] ? lock_acquire+0xbb/0x560 [ 2112.017935][ C1] rcu_is_watching+0x8e/0xc0 [ 2112.022587][ C1] lock_acquire+0x47b/0x560 [ 2112.027166][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2112.032265][ C1] ? __pfx___might_resched+0x10/0x10 [ 2112.037620][ C1] gc_worker+0x24d/0x1770 [ 2112.042032][ C1] ? gc_worker+0x247/0x1770 [ 2112.046608][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2112.051732][ C1] ? __pfx_gc_worker+0x10/0x10 [ 2112.056587][ C1] process_one_work+0x9fb/0x1b60 [ 2112.061591][ C1] ? __pfx_free_obj_work+0x10/0x10 [ 2112.066834][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2112.072374][ C1] ? assign_work+0x1a0/0x250 [ 2112.077053][ C1] worker_thread+0x6c8/0xf70 [ 2112.081737][ C1] ? __kthread_parkme+0x148/0x220 [ 2112.086836][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2112.092005][ C1] kthread+0x2c1/0x3a0 [ 2112.096141][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2112.101484][ C1] ? __pfx_kthread+0x10/0x10 [ 2112.106140][ C1] ret_from_fork+0x45/0x80 [ 2112.110656][ C1] ? __pfx_kthread+0x10/0x10 [ 2112.115343][ C1] ret_from_fork_asm+0x1a/0x30 [ 2112.120185][ C1] [ 2112.123247][ C1] rcu: rcu_preempt kthread starved for 10518 jiffies! g167621 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2112.134608][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2112.144713][ C1] rcu: RCU grace-period kthread stack dump: [ 2112.150646][ C1] task:rcu_preempt state:R running task stack:27576 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2112.162471][ C1] Call Trace: [ 2112.165801][ C1] [ 2112.168771][ C1] __schedule+0xf15/0x5d00 [ 2112.173287][ C1] ? __pfx___schedule+0x10/0x10 [ 2112.178191][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2112.183462][ C1] preempt_schedule_irq+0x51/0x90 [ 2112.188547][ C1] irqentry_exit+0x36/0x90 [ 2112.193029][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2112.199095][ C1] RIP: 0010:preempt_count_add+0x4/0x150 [ 2112.204725][ C1] Code: cc cc e8 af 47 89 09 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> c7 c0 e0 4b b4 94 55 48 ba 00 00 00 00 00 fc ff df 48 89 c1 53 [ 2112.224399][ C1] RSP: 0018:ffffc90000167bf8 EFLAGS: 00000202 [ 2112.230533][ C1] RAX: 0000000000004008 RBX: ffff8880176c8000 RCX: 0000000000000000 [ 2112.238557][ C1] RDX: 0000000000000001 RSI: ffffffff8b2caf60 RDI: 0000000000000001 [ 2112.246578][ C1] RBP: ffffed1002ed9000 R08: 0000000000000000 R09: 0000000000000001 [ 2112.254687][ C1] R10: ffffffff8fe43d57 R11: 0000000000000000 R12: ffff8880176c802c [ 2112.262726][ C1] R13: ffff8880176c8000 R14: 1ffffffff1b01e40 R15: 0000000000000001 [ 2112.270881][ C1] schedule+0xe0/0x350 [ 2112.275015][ C1] schedule_timeout+0x136/0x2a0 [ 2112.279972][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2112.285418][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2112.290780][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2112.296685][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 2112.302232][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2112.307067][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2112.312424][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2112.317686][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2112.323567][ C1] rcu_gp_kthread+0x271/0x380 [ 2112.328319][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2112.333585][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2112.338847][ C1] ? __kthread_parkme+0x148/0x220 [ 2112.344023][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2112.349289][ C1] kthread+0x2c1/0x3a0 [ 2112.353454][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2112.358721][ C1] ? __pfx_kthread+0x10/0x10 [ 2112.363384][ C1] ret_from_fork+0x45/0x80 [ 2112.367876][ C1] ? __pfx_kthread+0x10/0x10 [ 2112.372530][ C1] ret_from_fork_asm+0x1a/0x30 [ 2112.377374][ C1] [ 2112.380433][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2112.386838][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2112.392095][ C0] NMI backtrace for cpu 0 [ 2112.392119][ C0] CPU: 0 PID: 23499 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 2112.392150][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2112.392166][ C0] RIP: 0010:entry_SYSCALL_64+0x23/0x2b [ 2112.392212][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 01 f8 65 48 89 25 85 9f 00 75 66 90 0f 20 dc 0f 1f 44 00 00 48 81 e4 ff e7 ff ff 0f 22 dc <65> 48 8b 25 6d d8 03 75 6a 2b 65 ff 35 60 9f 00 75 41 53 6a 33 51 [ 2112.392239][ C0] RSP: 0018:00000000542c0000 EFLAGS: 00000006 [ 2112.392261][ C0] RAX: 00000000000000ca RBX: 00007fb98c9b41f8 RCX: 00007fb98c87d0a9 [ 2112.392280][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb98c9b41f8 [ 2112.392298][ C0] RBP: 00007fb98c9b41f0 R08: 00007fb98d6696c0 R09: 00007fb98d6696c0 [ 2112.392316][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb98c9b41fc [ 2112.392334][ C0] R13: 000000000000006e R14: 00007ffd7c44fdb0 R15: 00007ffd7c44fe98 [ 2112.392352][ C0] FS: 00007fb98d6696c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 2112.392381][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2112.392400][ C0] CR2: 00007fb98d6aaf00 CR3: 00000000542c0000 CR4: 00000000003506f0 [ 2112.392418][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2112.392435][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2112.392458][ C0] Call Trace: [ 2112.392467][ C0] [ 2112.392476][ C0] ? show_regs+0x8c/0xa0 [ 2112.392515][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2112.392555][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2112.392591][ C0] ? nmi_handle+0x1a9/0x5c0 [ 2112.392631][ C0] ? entry_SYSCALL_64+0x23/0x2b [ 2112.392668][ C0] ? default_do_nmi+0x6a/0x160 [ 2112.392693][ C0] ? exc_nmi+0x170/0x1e0 [ 2112.392717][ C0] ? end_repeat_nmi+0xf/0x53 [ 2112.392743][ C0] ? entry_SYSCALL_64+0x23/0x2b [ 2112.392781][ C0] ? entry_SYSCALL_64+0x23/0x2b [ 2112.392818][ C0] ? entry_SYSCALL_64+0x23/0x2b [ 2112.392856][ C0]