last executing test programs: 20.722763272s ago: executing program 4 (id=143): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x888, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x85c, 0x2, [@TCA_TBF_PRATE64={0xc}, @TCA_TBF_RATE64={0xc, 0x4, 0x1c5aba33c623385d}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x5, 0x3, 0xceb, 0xffffffff, 0x4, 0x3ff, 0x1, 0x4, 0x5, 0xffff0001, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0xe1, 0x4, 0x40, 0x101, 0x400, 0x16e4877d, 0xfffffff7, 0x1ff, 0x23, 0xffffffff, 0x7, 0xe1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x3ffc, 0x400, 0x2, 0x207, 0x3, 0x1, 0x2b4, 0x0, 0x3, 0x4, 0x6, 0x8, 0x101, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0xf39, 0x7, 0x0, 0x1, 0x7fff, 0x10000, 0xfa, 0xcb8e, 0x3ff, 0x66f, 0x3, 0x69, 0x5, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20, 0x8962, 0x3f, 0x3, 0x4, 0x8, 0x9, 0x7fffffff, 0x8001, 0x10000, 0x848, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x100, 0x3, 0xf0000000, 0x400, 0x0, 0xfd40, 0x18000, 0x3, 0x400, 0x40, 0x10001, 0x4, 0x6, 0xa054, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0xb3, 0x5, 0x800, 0x5, 0xfffffff9, 0x0, 0x0, 0x2, 0x1, 0xecf3, 0x80000001, 0x401, 0xfffffffb, 0xfffffffb, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xd, 0x100, 0x9, 0xcf3, 0xed, 0x4, 0x0, 0xab, 0x80000001, 0x7, 0xfffffffd, 0x4, 0x400, 0xdcc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x7, 0x8, 0x400000, 0x9, 0x79, 0x1ff, 0x7ff, 0x401, 0x8000, 0x1, 0xcc, 0x7f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0xa, 0x92d3, 0x5, 0x200]}, @TCA_TBF_BURST={0x8, 0x6, 0xf8b}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x0, 0x9c35, 0x8, 0x8, 0x6c, 0x3, 0x38b2, 0x2, 0x8, 0x0, 0x7, 0x1f, 0xce, 0x7f, 0x7, 0x4, 0x10001, 0x20, 0xffffffff, 0x6, 0x80, 0x3, 0x0, 0x1, 0xffff, 0x3, 0x8, 0x1, 0x0, 0x10000, 0x9, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x3, 0x7ff, 0x67be, 0x5175, 0x1, 0x200020, 0x80000000, 0x5, 0x9, 0x4, 0x10001, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x6, 0xffffffff, 0x4cf, 0x7, 0x0, 0x7ff, 0xf68, 0x3, 0x0, 0x8, 0x7, 0x5bb7, 0x2, 0xa3e6, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, 0x6da5, 0x6, 0x80000001, 0x80, 0x2, 0x10001, 0x200, 0x6, 0x6, 0x7, 0xa886, 0x0, 0x4, 0x1, 0x10000, 0x1, 0x0, 0x80, 0x40, 0x1000, 0x101, 0x800, 0xa6b4, 0x8, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x7, 0x6, 0x3f, 0x800, 0x9, 0x7, 0xa5, 0x2, 0x6, 0x0, 0x7fffffff, 0x6, 0xd2c, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1, 0x640, 0x7f, 0x20, 0x8001, 0x0, 0x20, 0xffffffff, 0x1, 0x8, 0x5d, 0xffff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x2, 0x6, 0x3, 0x4f2, 0x0, 0x15ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x7fffffff, 0x1f, 0x1000, 0x7, 0x1f, 0xdd, 0x1, 0x8, 0x1, 0x7, 0x887, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7c8ebf90, 0xfff, 0x9, 0x7, 0x9, 0x1, 0x20, 0x8000, 0x6d8, 0x34c, 0x20, 0x9, 0xffffffff, 0x9, 0x8001, 0x8, 0x5]}, @TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x0, 0x2020}}]}}]}, 0x888}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 20.718951992s ago: executing program 4 (id=144): r0 = socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) rt_sigqueueinfo(r1, 0x25, &(0x7f0000000000)={0x1d, 0x8001}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100100, 0x0, 0xfffffffffffffd25) 20.437115461s ago: executing program 4 (id=150): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='rxrpc_congest\x00', r1, 0x0, 0xfffffffffffffbff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0xb70a22156fb0dc1b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x58}}, 0x0) 20.436633201s ago: executing program 4 (id=151): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x4, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x43) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 20.09529964s ago: executing program 4 (id=159): mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='tF:\x80 \xf5\xc4Tka,\xb3\\\xe5@\x9c\xf5\x8e\xa0\x0e\xd1\xce\xbd\xf2\xc6D\x956v\xcf\xe1\x80\xd6\xaef/\xa8\b,\x94\xca`F\xa0C\x8ep\xfe\x94\xbe+\x9do\x0fkJ\x94\n2\x1a\xb5\x01\x1c\xc8C\xb6\xe1(,nK\'\x84\xd9\xd0\x9f\xfa\x89\xdd\xb5\x03;\x81\xe7\xf9\xca\x1d\x81\xd7\"\xd7wKz/M\xfcE\x94\xbd\xb2\xba7\xb4\x94-\xb7\xf2e)\xbb\x85n\xd9\x8b0\x17N!AG\xdfr:mGa\xe2\x1dI\x1e\x03\xa7c,\x1b7\xd1\xfe\xaa\xfc\xe3LKD\xf9eI\xb1h\x9c\xf1\n\x8f\xd9#\xde\xbc\x18') (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000840), 0x1, 0x4e6, &(0x7f0000001400)="$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") (rerun: 32) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x202, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) (async) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000280)='rootfs\x00', 0x4, &(0x7f00000002c0)='\x00') (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000b40)={@desc={0x4100, 0x0, @desc1}}) 18.379512912s ago: executing program 3 (id=173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f00000003c0)='./bus/file0\x00', 0x420c, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX], 0x6, 0x35d, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x80, 0x8, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x68, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}}}}) 18.268339941s ago: executing program 4 (id=175): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='rxrpc_congest\x00', r1, 0x0, 0xfffffffffffffbff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0xb70a22156fb0dc1b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x58}}, 0x0) 18.079537581s ago: executing program 3 (id=177): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0xb70a22156fb0dc1b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x58}}, 0x0) 17.070306646s ago: executing program 3 (id=186): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioprio_get$pid(0x2, r3) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 16.178426972s ago: executing program 3 (id=191): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00faffffff"], 0x1, 0x576, &(0x7f0000000640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x2000000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7, 0x4) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffa}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32, @ANYBLOB="0000000414"], 0x40}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="849d9e12cb0100001a0001400000000000000000ff020000000000000000000000000096e80000001000000000000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056feffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120067636d286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003006c7a6a6800"/316], 0x184}}, 0x0) 15.943672341s ago: executing program 3 (id=197): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) chdir(&(0x7f0000000140)='./file0\x00') linkat(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0xffffffffffffffff, &(0x7f0000000640)='./bus\x00', 0x1400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x18}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) pipe(&(0x7f0000002480)={0xffffffffffffffff}) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x10c8) 15.75238676s ago: executing program 3 (id=199): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae08, 0x48) fstat(r3, 0x0) 15.71633624s ago: executing program 32 (id=199): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae08, 0x48) fstat(r3, 0x0) 13.753653221s ago: executing program 5 (id=200): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYBLOB='w'], 0x1c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000200)={0xb6, 0x0, 0x8fbe}) chdir(&(0x7f0000000140)='./file0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028004000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc000000000000000000000000000000cbbe0400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0xc8}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000680)={{r4}, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x1000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) ftruncate(r4, 0xc17a) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x10c8) syz_emit_ethernet(0x38, &(0x7f0000000040)={@broadcast, @remote, @void, {@arp={0x806, @generic={0x1, 0x9916, 0x6, 0xb, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, "0166893bbe94237c52a93e", @empty, "52506d363ded67b69c9fd2"}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x8a4, 0xb99, 0xa0a, 0xdce]}) 8.657254968s ago: executing program 0 (id=225): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 5) 7.502951784s ago: executing program 0 (id=228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x2000, &(0x7f0000000340)={&(0x7f0000000a40)=@newsa={0x200, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0xc8, 0x1, {{'md5\x00'}, 0x400, "fd2f480f2e2ebb04183ebcaed78f40b20e8473b935f6cf6f3d2c402e34b339e1b0cd2b29cd33e8f258cf85e6c1348f664a094fe82198b2247fe438734b6b8a3542814e02b742120e6f30979c39395eff53a948009f9c5b73cc002ca5e0e93d1a1730a1593d11d726b04cf06a436e84581a4f7369563bd6ab8f630314720c166d"}}]}, 0x200}}, 0x0) 7.436278573s ago: executing program 0 (id=232): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c0022000600000000000000080004008100000005002400010000000500160001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.268458778s ago: executing program 0 (id=233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) ioctl$KDSKBENT(r1, 0x4b52, &(0x7f0000000080)={0x0, 0x0, 0xfff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) unshare(0x62040200) 4.871547422s ago: executing program 0 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x20000000, &(0x7f0000001000/0x1000)=nil}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xa9b, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0x5}, {0x6c}, {0x6}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r6, r7, 0xffffffff, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007349a71e0b0f642912b49e5208fb29b1da889318f3b5817c69d0e60125e8d9927d6eb2d07d842a9521359b1f5c3d66a92501463320822a4ab060c181c4488720d6a1092d9432bc1680db453f0e8ccc77de966175b70b7e83fce214173e95e0e8b1875bd119d6031e35e9b8a4488029334f18504746588ea12b1c972080f977fda3080ed3520a26263808ec0515f0104e52", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000034, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 4.870762582s ago: executing program 1 (id=240): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) fchdir(r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r4, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="63250c30124c3dd4db43084ef8012492b5ea6dbd6c9a3dbd58627c6c4124db02e62c1800710014ae12954b1d2e20d6d38e839b97f6250b4a119d74ed02666c409e", 0x41}, {&(0x7f00000001c0)="f55c33346486061801b0727936fb8fe7c28975b92dc5d23f73712ea0f8441592e224e2d8987a46e5f6dbe9b61179684a03ecbe", 0x33}, {&(0x7f0000000540)="5400cf0a0f5cd50f67bb6e1e10b3b10975e9eefb9f7f6ac5b1dc3fc9b2844c8ecaebe9073f91c2e6f025a05ab8f5f35ae50cbc30f4bc589402523150e5e015cb67ef3f539648d5bd9918a830efa15b0eed4ae4d6a26d420b9aee06730fd18cb1fd3eb1c3a3e7f0fc9c4806ba27150f25ea65024cdcd2d6a9d2a10aa3daf691f9345ddc797248c9c23461e5e4bae6fe8758a63a2543db0c631cb9518359bad0f64b81afd1b87ee25d607f756f674ba16218797ffeefa2f352dd62265e3acfad99ba24d940b8b481a8c9f2dbf14f8b8aa436bded2f075e4a61972c586c57b7b8e4a4e2046c0a45224ddf49b6a0a314e4d4956d4380ff62df22d693da7fc13e443ef9b74a1744023ee93b73c8d1fea1631f0d8872f5393ea14ce701a8e6b78bfe18494b9d34928a5d49b0a3e6e5730b39719e5f6d3501371d8dcae319ef9ca655c04c2d142334158bbfcd64c4bd24e4651c8754e07e1c69e0e18102293d8a94c39d10f08b2e7e505a6139fc0c49860d042d51ac37f8b89fdf5c7a67bf11a089b443fc5f7e6b093a309f183d05ef6e0f78565ae3c00140209e36d275c5cc9c39e0e8eeb6e8199a95ea970373a3a4fc93f3c7725ec0f8c740e4127f03e56d89f3c2eafcd6100c1d57c9b4c2abed0efcd3b0c58fa70d8f528e324e1da5efe5b3875bfd83c11804706a835791aa78954032fbc0339de429fec0308f0a4ce3f45dfc776040d7911e83e58ef7224793ef2ed4d3905c28d720ead285da813199d41b0f3ed70d0feedf35d8f48e80dd5ddb1b1b1104314afc0fadc985ec30732c5c9fa0d00cb112d19bd6f97b331fad07fbc734209ba54308fdd9458ef30ad05183a4762bba1d565ef0daf179479cf02139f13b9d3886feec2baee9160b3d78c5bfcdd39bcf183ab476897b86d0821ac2770794e49a50b890722861cf33f2498debcf83dadf469937574a16de384e7aa5b56ef747ce32d28c8b87dca1848509e7b3758845f106242263e0b73c805a85bd0c829918ad4ffe22eddef3019b56cc4ec8048dcde5236c2180d81b5066b00289aacbb20eb4a3bde65bdf7ccea011e22ed14f11284641e26f9da8e11d900f80bb4a3fff5e8fdac0d680c176376b5949a6cebedc6d8eb5366890d4", 0x325}], 0x3, 0x0, 0x0, 0x4}, 0x200000d0) r9 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') pselect6(0x40, &(0x7f0000000040)={0x9, 0x2cf8, 0xffffffff, 0x7166, 0xfffffffffffffffc, 0x80000001, 0xffff, 0x1800000000}, &(0x7f0000000100)={0x7, 0x0, 0x4, 0x8000000000000001, 0xfff, 0x101, 0x5, 0x5}, &(0x7f0000000180)={0x4, 0x10, 0x1, 0x6, 0x0, 0xf, 0x4, 0x5}, &(0x7f00000001c0), &(0x7f0000000300)={&(0x7f0000000200)={[0x401]}, 0x8}) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x4030582a, &(0x7f0000000240)) 4.870467391s ago: executing program 2 (id=241): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) (fail_nth: 27) 3.451900356s ago: executing program 1 (id=242): r0 = syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x3018412, &(0x7f0000000500)=ANY=[], 0x1, 0x5547, &(0x7f00000010c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ppoll(&(0x7f0000000a80)=[{r3}], 0x1, &(0x7f0000000b00), 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0xce20, 0x6, @local, 0x3}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000040)=0x401, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x160) pwritev2(r0, &(0x7f0000000440)=[{0x0}, {0x0, 0x49}, {&(0x7f0000000000)="9f", 0x1}], 0x3, 0x3, 0x5, 0x10) 3.451509425s ago: executing program 2 (id=243): syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0xb016c5bac0a60f1c, 0x0, 0x0, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.926213629s ago: executing program 1 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_LABEL={0x14, 0x3, 'caif0\x00'}]}, 0x3c}, 0x1, 0x0, 0xfd}, 0x0) 1.925583639s ago: executing program 2 (id=245): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001100290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800128008000500080000003e1200000800020010400300080000000000000090c190dda9020c436b6611b35d915938d4999a7c3cfac1669d4bed9217abfef5e753"], 0x44}}, 0xeaffffff) 1.919336258s ago: executing program 33 (id=175): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x400002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='rxrpc_congest\x00', r1, 0x0, 0xfffffffffffffbff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0xb70a22156fb0dc1b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x58}}, 0x0) 1.869229249s ago: executing program 1 (id=247): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r5, &(0x7f0000000b00)=""/193, 0xc1) 1.860732739s ago: executing program 2 (id=248): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000002b706000014000000b7030000000d0000850000006c000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbf0500000000000057060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.860337688s ago: executing program 2 (id=249): syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0xb016c5bac0a60f1c, 0x0, 0x0, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1010000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) dup3(r4, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000000)='./control\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) rmdir(&(0x7f0000000040)='./control\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000240)=""/54, &(0x7f0000000280)=0x36) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in=@multicast2}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000180)=0xe8) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 168.86932ms ago: executing program 0 (id=250): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") r0 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@local, 0x5, 0x2, 0x0, 0x5, 0x4, 0x7ff}, 0x20) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 168.42979ms ago: executing program 1 (id=251): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000005002700000000001c001a8018000a80140007"], 0x44}}, 0xfe) 163.432531ms ago: executing program 2 (id=252): syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0xb016c5bac0a60f1c, 0x0, 0x0, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1010000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) dup3(r4, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000000)='./control\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) rmdir(&(0x7f0000000040)='./control\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000000240)=""/54, &(0x7f0000000280)=0x36) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in=@multicast2}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000180)=0xe8) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 0s ago: executing program 1 (id=253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@grpjquota}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nodelalloc}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x56}}]}, 0xfa, 0x55d, &(0x7f0000000980)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f00000011c0)="95", 0x1}], 0x1, 0x47fff, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_init1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0x10) setuid(r4) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0x69) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) open$dir(&(0x7f00000001c0)='./bus\x00', 0x391181, 0x187) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nouid32}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000180)=0x81) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r6, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 20.224158][ T23] audit: type=1400 audit(1738306567.699:66): avc: denied { mounton } for pid=341 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.226098][ T341] cgroup1: Unknown subsys name 'net' [ 20.246893][ T23] audit: type=1400 audit(1738306567.699:67): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.251877][ T341] cgroup1: Unknown subsys name 'net_prio' [ 20.279279][ T341] cgroup1: Unknown subsys name 'devices' [ 20.285435][ T23] audit: type=1400 audit(1738306567.759:68): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.448335][ T341] cgroup1: Unknown subsys name 'hugetlb' [ 20.453926][ T341] cgroup1: Unknown subsys name 'rlimit' [ 20.649306][ T23] audit: type=1400 audit(1738306568.129:69): avc: denied { read } for pid=145 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 20.689160][ T23] audit: type=1400 audit(1738306568.169:70): avc: denied { setattr } for pid=341 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.712303][ T23] audit: type=1400 audit(1738306568.169:71): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.736800][ T23] audit: type=1400 audit(1738306568.169:72): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.742643][ T344] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.768230][ T23] audit: type=1400 audit(1738306568.249:73): avc: denied { relabelto } for pid=344 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 20.793495][ T23] audit: type=1400 audit(1738306568.249:74): avc: denied { write } for pid=344 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.823486][ T23] audit: type=1400 audit(1738306568.299:75): avc: denied { read } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.850404][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.329094][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.335960][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.343150][ T353] device bridge_slave_0 entered promiscuous mode [ 21.351613][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.358483][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.365612][ T353] device bridge_slave_1 entered promiscuous mode [ 21.459933][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.466927][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.474235][ T352] device bridge_slave_0 entered promiscuous mode [ 21.496596][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.503419][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.510744][ T352] device bridge_slave_1 entered promiscuous mode [ 21.556415][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.563245][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.570603][ T356] device bridge_slave_0 entered promiscuous mode [ 21.577359][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.584177][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.591518][ T356] device bridge_slave_1 entered promiscuous mode [ 21.610279][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.617179][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.624474][ T355] device bridge_slave_0 entered promiscuous mode [ 21.646742][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.653573][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.660968][ T355] device bridge_slave_1 entered promiscuous mode [ 21.730151][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.736994][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.744102][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.750886][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.789678][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.796809][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.803942][ T354] device bridge_slave_0 entered promiscuous mode [ 21.810929][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.817777][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.825122][ T354] device bridge_slave_1 entered promiscuous mode [ 21.912808][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.919653][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.926783][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.933524][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.959594][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.966864][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.973896][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.981303][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.989156][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.996512][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.031595][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.039578][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.046412][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.053641][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.061817][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.068653][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.097318][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.105179][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.129996][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.148725][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.157443][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.164255][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.171925][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.180065][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.186898][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.202515][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.235330][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.244302][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.252521][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.260601][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.268734][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.276593][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.284533][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.291367][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.299171][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.307296][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.314103][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.321372][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.329547][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.339300][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.347599][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.355600][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.362442][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.376488][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.383981][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.391975][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.400829][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.409467][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.427780][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.436004][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.444104][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.452495][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.460865][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.468956][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.477120][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.485179][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.493291][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.500115][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.507700][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.527239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.535433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.543592][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.550428][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.558602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.566809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.574704][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.581458][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.588740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.596757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.604430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.612182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.633351][ T353] request_module fs-gadgetfs succeeded, but still no fs? [ 22.641861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.650926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.665385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.673314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.681203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.689093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.697112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.704912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.728074][ T377] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5'. [ 22.737497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.745488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.755631][ T376] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5'. [ 22.764166][ T376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 22.786037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.794312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.803497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.812782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.821397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.829941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.838734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.846930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.892171][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.903029][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.905970][ T377] EXT4-fs (loop4): Unrecognized mount option "euid<00000000000000000000" or missing value [ 22.912196][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.945956][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.952346][ T384] binder: 382:384 ioctl c0306201 20000480 returned -14 [ 22.954082][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.969520][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.029705][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.040667][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.050460][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.059671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.068719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.077146][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.114442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.122809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.132675][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.141446][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.158720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.169902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.185568][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.194335][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.221105][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.229361][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.282574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.301055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.330066][ T74] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.354840][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.367084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.432874][ T391] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 23.487559][ T391] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 23.537307][ T391] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 23.560609][ T391] EXT4-fs (loop3): 1 orphan inode deleted [ 23.566614][ T391] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 23.586191][ T74] usb 2-1: Using ep0 maxpacket: 8 [ 23.586267][ T391] ext4 filesystem being mounted at /0/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 23.605085][ T377] syz.4.5 (377) used greatest stack depth: 21240 bytes left [ 23.653550][ T391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 23.706067][ T74] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 23.800092][ T74] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 23.809827][ T74] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 23.896038][ T74] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 23.922848][ T74] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 23.931382][ T74] usb 2-1: SerialNumber: syz [ 23.976188][ T384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 23.998312][ T74] hub 2-1:1.0: bad descriptor, ignoring hub [ 24.004557][ T74] hub: probe of 2-1:1.0 failed with error -5 [ 24.205778][ T384] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 24.262726][ T409] FAT-fs (loop3): Directory bread(block 64) failed [ 24.269370][ T409] FAT-fs (loop3): Directory bread(block 65) failed [ 24.275719][ T409] FAT-fs (loop3): Directory bread(block 66) failed [ 24.282220][ T409] FAT-fs (loop3): Directory bread(block 67) failed [ 24.288625][ T409] FAT-fs (loop3): Directory bread(block 68) failed [ 24.294895][ T409] FAT-fs (loop3): Directory bread(block 69) failed [ 24.301514][ T409] FAT-fs (loop3): Directory bread(block 70) failed [ 24.305285][ T413] JBD2: no valid journal superblock found [ 24.308438][ T409] FAT-fs (loop3): Directory bread(block 71) failed [ 24.319898][ T409] FAT-fs (loop3): Directory bread(block 72) failed [ 24.322904][ T413] EXT4-fs (loop0): error loading journal [ 24.327225][ T409] FAT-fs (loop3): Directory bread(block 73) failed [ 24.787048][ T419] attempt to access beyond end of device [ 24.787048][ T419] loop3: rw=2049, want=1628, limit=256 [ 24.810626][ T416] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 24.819108][ T416] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 24.829028][ T416] EXT4-fs (loop2): 1 orphan inode deleted [ 24.834585][ T416] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 24.843798][ T416] ext4 filesystem being mounted at /1/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 24.888525][ T74] cdc_ether 2-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 24.915695][ T416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 25.202450][ T431] tmpfs: Bad value for 'huge' [ 25.304645][ T437] netlink: 'syz.4.14': attribute type 9 has an invalid length. [ 25.332365][ T437] netlink: 'syz.4.14': attribute type 6 has an invalid length. [ 25.340087][ T18] usb 2-1: USB disconnect, device number 2 [ 25.346248][ T18] cdc_ether 2-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 25.486276][ T446] Zero length message leads to an empty skb [ 25.616545][ T23] kauditd_printk_skb: 72 callbacks suppressed [ 25.616554][ T23] audit: type=1400 audit(1738306573.099:144): avc: denied { append } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=9561 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.721519][ T23] audit: type=1400 audit(1738306573.099:145): avc: denied { open } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9561 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.818208][ T456] ====================================================== [ 25.818208][ T456] WARNING: the mand mount option is being deprecated and [ 25.818208][ T456] will be removed in v5.15! [ 25.818208][ T456] ====================================================== [ 25.897104][ T23] audit: type=1400 audit(1738306573.099:146): avc: denied { getattr } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9561 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 25.985966][ T23] audit: type=1400 audit(1738306573.299:147): avc: denied { remount } for pid=455 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.157833][ T426] F2FS-fs (loop0): Unrecognized mount option "0x0000000000000009" or missing value [ 26.243255][ T464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 26.553571][ T23] audit: type=1400 audit(1738306574.029:148): avc: denied { unmount } for pid=354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.951253][ T474] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.977287][ T474] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 27.010737][ T476] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 27.046638][ T476] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 27.069238][ T476] Quota error (device loop1): write_blk: dquota write failed [ 27.077403][ T23] audit: type=1400 audit(1738306574.559:149): avc: denied { block_suspend } for pid=483 comm="syz.3.18" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.085803][ T476] Quota error (device loop1): qtree_write_dquot: Error -27 occurred while creating quota [ 27.116552][ T492] device syzkaller0 entered promiscuous mode [ 27.133936][ T476] EXT4-fs (loop1): 1 orphan inode deleted [ 27.145666][ T476] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 27.163791][ T476] ext4 filesystem being mounted at /2/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 27.175818][ T23] audit: type=1400 audit(1738306574.659:150): avc: denied { setopt } for pid=471 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.195080][ T484] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 27.214250][ T484] FAT-fs (loop3): Filesystem has been set read-only [ 27.295824][ T476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 27.320658][ T484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 27.342853][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.349986][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.377833][ T484] syz.3.18 (484) used greatest stack depth: 20600 bytes left [ 27.389023][ T23] audit: type=1400 audit(1738306574.869:151): avc: denied { mounton } for pid=472 comm="syz.1.17" path="/2/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.416362][ T476] overlayfs: './file1' not a directory [ 27.622477][ T499] JBD2: no valid journal superblock found [ 27.630723][ T499] EXT4-fs (loop3): error loading journal [ 27.639880][ T505] binder: 501:505 ioctl c0306201 20000640 returned -22 [ 27.648113][ T505] tipc: Started in network mode [ 27.653679][ T505] tipc: Own node identity 0631a403ba03, cluster identity 4711 [ 27.661703][ T505] tipc: Enabled bearer , priority 0 [ 27.779653][ T505] device syzkaller0 entered promiscuous mode [ 27.827613][ T510] FAT-fs (loop4): Directory bread(block 64) failed [ 27.837202][ T510] FAT-fs (loop4): Directory bread(block 65) failed [ 27.846379][ T510] FAT-fs (loop4): Directory bread(block 66) failed [ 27.856541][ T510] FAT-fs (loop4): Directory bread(block 67) failed [ 27.867440][ T510] FAT-fs (loop4): Directory bread(block 68) failed [ 27.877053][ T510] FAT-fs (loop4): Directory bread(block 69) failed [ 27.887973][ T510] FAT-fs (loop4): Directory bread(block 70) failed [ 27.897532][ T510] FAT-fs (loop4): Directory bread(block 71) failed [ 27.907189][ T510] FAT-fs (loop4): Directory bread(block 72) failed [ 27.914015][ T510] FAT-fs (loop4): Directory bread(block 73) failed [ 27.967009][ T501] tipc: Resetting bearer [ 28.044926][ T501] tipc: Disabling bearer [ 28.368550][ T513] attempt to access beyond end of device [ 28.368550][ T513] loop4: rw=2049, want=1628, limit=256 [ 28.429878][ T517] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 28.438274][ T523] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 28.439040][ T517] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 28.464301][ T517] EXT4-fs (loop1): 1 orphan inode deleted [ 28.477080][ T517] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 28.486830][ T517] ext4 filesystem being mounted at /4/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 28.498652][ T526] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 28.507375][ T526] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 28.520290][ T526] EXT4-fs (loop2): 1 orphan inode deleted [ 28.525817][ T526] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 28.546012][ T526] ext4 filesystem being mounted at /4/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 28.569009][ T517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 28.600183][ T526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 28.666977][ T526] overlayfs: './file1' not a directory [ 28.715925][ T381] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.742431][ T538] FAULT_INJECTION: forcing a failure. [ 28.742431][ T538] name failslab, interval 1, probability 0, space 0, times 1 [ 28.756077][ T538] CPU: 1 PID: 538 Comm: syz.4.32 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 28.765414][ T538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 28.775303][ T538] Call Trace: [ 28.778455][ T538] dump_stack+0x1d8/0x241 [ 28.782602][ T538] ? panic+0x89d/0x89d [ 28.786507][ T538] ? netlink_unicast+0x936/0xb20 [ 28.791278][ T538] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 28.796924][ T538] ? do_syscall_64+0xca/0x1c0 [ 28.801439][ T538] should_fail+0x71f/0x880 [ 28.805687][ T538] ? setup_fault_attr+0x3d0/0x3d0 [ 28.810549][ T538] ? __request_module+0x37a/0xc30 [ 28.815401][ T538] should_failslab+0x5/0x20 [ 28.819742][ T538] __kmalloc_track_caller+0x4f/0x2b0 [ 28.824864][ T538] kstrdup+0x31/0x70 [ 28.828595][ T538] __request_module+0x37a/0xc30 [ 28.833282][ T538] ? __kasan_kmalloc+0x171/0x210 [ 28.838060][ T538] ? xfrm_add_sa+0xf94/0x3460 [ 28.842565][ T538] ? xfrm_user_rcv_msg+0x689/0x9b0 [ 28.847514][ T538] ? netlink_rcv_skb+0x1d5/0x420 [ 28.852287][ T538] ? crypto_alg_mod_lookup+0x78/0x710 [ 28.857496][ T538] ? asan.module_dtor+0x20/0x20 [ 28.862183][ T538] ? down_write_trylock+0x130/0x130 [ 28.867214][ T538] ? __crypto_alg_lookup+0x46a/0x4a0 [ 28.872334][ T538] ? crypto_alg_lookup+0x188/0x1d0 [ 28.877281][ T538] crypto_alg_mod_lookup+0x95/0x710 [ 28.882316][ T538] ? crypto_has_alg+0x15/0x110 [ 28.886916][ T538] crypto_has_alg+0x22/0x110 [ 28.891346][ T538] xfrm_aalg_get_byname+0x184/0x220 [ 28.896376][ T538] xfrm_add_sa+0x1b2f/0x3460 [ 28.900807][ T538] ? xfrm_user_rcv_msg+0x9b0/0x9b0 [ 28.905748][ T538] ? __nla_parse+0x3a/0x50 [ 28.910003][ T538] xfrm_user_rcv_msg+0x689/0x9b0 [ 28.914778][ T538] ? xfrm_netlink_rcv+0x80/0x80 [ 28.919465][ T538] ? avc_has_perm+0xd2/0x260 [ 28.923887][ T538] ? avc_has_perm+0x16f/0x260 [ 28.928402][ T538] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 28.933619][ T538] netlink_rcv_skb+0x1d5/0x420 [ 28.938210][ T538] ? xfrm_netlink_rcv+0x80/0x80 [ 28.942895][ T538] ? nla_put_string+0x30/0x30 [ 28.947408][ T538] ? mutex_trylock+0xa0/0xa0 [ 28.951834][ T538] ? __netlink_lookup+0x369/0x390 [ 28.956697][ T538] xfrm_netlink_rcv+0x6e/0x80 [ 28.961206][ T538] netlink_unicast+0x936/0xb20 [ 28.965807][ T538] ? netlink_detachskb+0x90/0x90 [ 28.970582][ T538] ? __virt_addr_valid+0x20e/0x2a0 [ 28.975528][ T538] netlink_sendmsg+0xa18/0xcf0 [ 28.980133][ T538] ? netlink_getsockopt+0x550/0x550 [ 28.985160][ T538] ? import_iovec+0x1bb/0x380 [ 28.989679][ T538] ? security_socket_sendmsg+0x7d/0xa0 [ 28.994969][ T538] ? netlink_getsockopt+0x550/0x550 [ 29.000004][ T538] ____sys_sendmsg+0x5ac/0x8f0 [ 29.004608][ T538] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 29.009638][ T538] ? proc_fail_nth_read+0x210/0x210 [ 29.014672][ T538] __sys_sendmsg+0x28b/0x380 [ 29.019098][ T538] ? ____sys_sendmsg+0x8f0/0x8f0 [ 29.023868][ T538] ? check_preemption_disabled+0x9f/0x320 [ 29.029429][ T538] ? fput_many+0x15e/0x1b0 [ 29.033676][ T538] ? check_preemption_disabled+0x153/0x320 [ 29.039323][ T538] ? __do_page_fault+0x725/0xbb0 [ 29.044092][ T538] do_syscall_64+0xca/0x1c0 [ 29.048433][ T538] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 29.054171][ T538] RIP: 0033:0x7fe2bf0c6da9 [ 29.058416][ T538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.077852][ T538] RSP: 002b:00007fe2bd731038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.086103][ T538] RAX: ffffffffffffffda RBX: 00007fe2bf2dffa0 RCX: 00007fe2bf0c6da9 [ 29.093904][ T538] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 29.101718][ T538] RBP: 00007fe2bd731090 R08: 0000000000000000 R09: 0000000000000000 [ 29.109526][ T538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.117338][ T538] R13: 0000000000000000 R14: 00007fe2bf2dffa0 R15: 00007fff7daa23a8 [ 29.158630][ T535] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.207620][ T545] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 29.217000][ T545] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 29.226783][ T545] EXT4-fs (loop2): 1 orphan inode deleted [ 29.232379][ T381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 29.232514][ T545] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 29.243681][ T381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58442, setting to 1024 [ 29.258682][ T545] ext4 filesystem being mounted at /5/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 29.263300][ T381] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 29.281776][ T381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.290881][ T381] usb 4-1: config 0 descriptor?? [ 29.305964][ T516] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 29.317647][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 29.376892][ T555] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 29.385624][ T555] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 29.395359][ T555] EXT4-fs (loop1): 1 orphan inode deleted [ 29.400924][ T555] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.406298][ T560] JBD2: no valid journal superblock found [ 29.410197][ T555] ext4 filesystem being mounted at /6/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 29.416553][ T560] EXT4-fs (loop0): error loading journal [ 29.496016][ T555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 29.553471][ T555] overlayfs: './file1' not a directory [ 29.562203][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 29.572287][ T567] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.579306][ T567] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.766215][ T381] hid (null): bogus close delimiter [ 29.986011][ T381] usb 4-1: language id specifier not provided by device, defaulting to English [ 30.393923][ T581] netlink: 'syz.2.40': attribute type 9 has an invalid length. [ 30.405078][ T581] netlink: 'syz.2.40': attribute type 6 has an invalid length. [ 30.490027][ T584] binder: 583:584 ioctl c0306201 20000480 returned -14 [ 30.542062][ T578] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 30.558773][ T578] FAT-fs (loop4): Filesystem has been set read-only [ 30.572991][ T578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.41'. [ 30.591519][ T578] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.598515][ T578] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.758627][ T381] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input4 [ 30.774665][ T381] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5 [ 30.787956][ T381] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 30.795907][ T74] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.820180][ T573] F2FS-fs (loop1): Unrecognized mount option "0x0000000000000009" or missing value [ 30.903819][ T592] binder: 590:592 ioctl c0306201 20000640 returned -22 [ 30.996394][ T592] tipc: Started in network mode [ 31.001072][ T592] tipc: Own node identity e65a73245985, cluster identity 4711 [ 31.029695][ T385] usb 4-1: USB disconnect, device number 2 [ 31.046529][ T592] tipc: Enabled bearer , priority 0 [ 31.085907][ T74] usb 1-1: Using ep0 maxpacket: 8 [ 31.113949][ T593] device syzkaller0 entered promiscuous mode [ 31.206016][ T74] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 31.235730][ T74] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 31.255910][ T74] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.310025][ T590] tipc: Resetting bearer [ 31.334651][ T590] tipc: Disabling bearer [ 31.366072][ T74] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 31.374909][ T74] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.395887][ T74] usb 1-1: SerialNumber: syz [ 31.467286][ T584] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 31.486813][ T74] hub 1-1:1.0: bad descriptor, ignoring hub [ 31.492535][ T74] hub: probe of 1-1:1.0 failed with error -5 [ 31.500161][ T23] kauditd_printk_skb: 17 callbacks suppressed [ 31.500170][ T23] audit: type=1400 audit(1738306578.979:161): avc: denied { read } for pid=597 comm="syz.4.44" name="msr" dev="devtmpfs" ino=9385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.744446][ T584] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 31.835947][ T23] audit: type=1400 audit(1738306578.979:162): avc: denied { open } for pid=597 comm="syz.4.44" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 32.168324][ T610] JBD2: no valid journal superblock found [ 32.176669][ T610] EXT4-fs (loop4): error loading journal [ 32.269399][ T74] cdc_ether 1-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 32.556591][ T381] usb 1-1: USB disconnect, device number 2 [ 32.575985][ T381] cdc_ether 1-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 32.775351][ T666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 32.842082][ T668] JBD2: no valid journal superblock found [ 32.870836][ T670] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 32.876595][ T668] EXT4-fs (loop2): error loading journal [ 32.880135][ T670] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 32.893877][ T670] Quota error (device loop3): write_blk: dquota write failed [ 32.901156][ T670] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 32.911760][ T670] EXT4-fs (loop3): 1 orphan inode deleted [ 32.917337][ T670] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 32.926276][ T670] ext4 filesystem being mounted at /7/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 33.000418][ T670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 33.034337][ T688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 33.043037][ T688] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.049987][ T688] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.104943][ T690] cgroup: syz.3.52 (690) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 33.122587][ T690] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 33.133438][ T23] audit: type=1400 audit(1738306580.609:163): avc: denied { create } for pid=689 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 33.155074][ T692] JBD2: no valid journal superblock found [ 33.160660][ T692] EXT4-fs (loop2): error loading journal [ 33.187510][ T690] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 33.196269][ T690] ext4 filesystem being mounted at /8/bus supports timestamps until (%ptR?) (0x7fffffff) [ 33.266156][ T694] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 33.274660][ T694] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 33.283139][ T694] Quota error (device loop0): write_blk: dquota write failed [ 33.292626][ T694] Quota error (device loop0): qtree_write_dquot: Error -27 occurred while creating quota [ 33.304941][ T694] EXT4-fs (loop0): 1 orphan inode deleted [ 33.312220][ T694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.325380][ T704] JBD2: no valid journal superblock found [ 33.327608][ T694] ext4 filesystem being mounted at /11/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 33.341061][ T704] EXT4-fs (loop2): error loading journal [ 33.351546][ T23] audit: type=1400 audit(1738306580.829:164): avc: denied { read } for pid=689 comm="syz.3.52" name="kvm" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.352404][ T690] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.390409][ T23] audit: type=1400 audit(1738306580.829:165): avc: denied { open } for pid=689 comm="syz.3.52" path="/dev/kvm" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.413764][ T23] audit: type=1400 audit(1738306580.829:166): avc: denied { ioctl } for pid=689 comm="syz.3.52" path="/dev/kvm" dev="devtmpfs" ino=115 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.761727][ T711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.791376][ T711] 9pnet: Insufficient options for proto=fd [ 34.177210][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.555957][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 34.676103][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 34.686576][ T5] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 34.695717][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.706115][ T5] usb 1-1: config 0 descriptor?? [ 34.748263][ T5] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 34.929758][ T741] JBD2: no valid journal superblock found [ 34.935511][ T741] EXT4-fs (loop1): error loading journal [ 35.215398][ T750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.246083][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.339609][ T752] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 35.437234][ T765] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 35.472175][ T768] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 35.480986][ T768] ext4 filesystem being mounted at /14/bus supports timestamps until (%ptR?) (0x7fffffff) [ 35.545902][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 35.658341][ T753] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 35.666052][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.679293][ T5] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 35.712538][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.721126][ T5] usb 5-1: config 0 descriptor?? [ 35.767350][ T5] usb 5-1: bad CDC descriptors [ 36.017527][ T74] usb 5-1: USB disconnect, device number 2 [ 36.027499][ T787] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 36.575396][ T798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 36.678833][ T23] kauditd_printk_skb: 7 callbacks suppressed [ 36.678843][ T23] audit: type=1400 audit(1738306584.159:174): avc: denied { write } for pid=800 comm="syz.4.82" name="001" dev="devtmpfs" ino=10724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.808600][ T23] audit: type=1400 audit(1738306584.289:175): avc: denied { setopt } for pid=808 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.818836][ T809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=809 comm=syz.4.85 [ 37.063457][ T386] usb 1-1: USB disconnect, device number 3 [ 37.072977][ T378] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 37.085469][ T378] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.085469][ T378] [ 37.095097][ T378] EXT4-fs (loop0): Total free blocks count 0 [ 37.100965][ T378] EXT4-fs (loop0): Free/Dirty block details [ 37.106662][ T378] EXT4-fs (loop0): free_blocks=66060288 [ 37.112010][ T378] EXT4-fs (loop0): dirty_blocks=2464 [ 37.117231][ T378] EXT4-fs (loop0): Block reservation details [ 37.122944][ T378] EXT4-fs (loop0): i_reserved_data_blocks=154 [ 37.135899][ T18] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 37.140469][ T378] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 400 with error 28 [ 37.155598][ T378] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.155598][ T378] [ 37.321238][ T74] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 37.375915][ T18] usb 5-1: Using ep0 maxpacket: 8 [ 37.655960][ T18] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 37.664667][ T18] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.674992][ T18] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.688647][ T823] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 37.696199][ T18] usb 5-1: config 1 has no interface number 1 [ 37.710309][ T18] usb 5-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 37.721787][ T823] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue [ 37.766072][ T74] usb 3-1: config 0 has an invalid interface number: 54 but max is 1 [ 37.773947][ T74] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.784227][ T74] usb 3-1: config 0 has no interface number 1 [ 37.790529][ T74] usb 3-1: config 0 interface 54 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 37.831842][ T23] audit: type=1400 audit(1738306585.309:176): avc: denied { mounton } for pid=826 comm="syz.1.90" path="/18/file0" dev="tmpfs" ino=15533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.860562][ T23] audit: type=1400 audit(1738306585.339:177): avc: denied { mounton } for pid=826 comm="syz.1.90" path="/18/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 37.978350][ T74] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice=c7.66 [ 37.987656][ T23] audit: type=1400 audit(1738306585.449:178): avc: denied { unmount } for pid=352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 38.007490][ T18] usb 5-1: string descriptor 0 read error: -22 [ 38.013517][ T18] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.025534][ T74] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.034746][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.042752][ T74] usb 3-1: Product: syz [ 38.046928][ T74] usb 3-1: Manufacturer: syz [ 38.051319][ T74] usb 3-1: SerialNumber: syz [ 38.057755][ T74] usb 3-1: config 0 descriptor?? [ 38.253065][ T838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 38.283731][ T23] audit: type=1400 audit(1738306585.759:179): avc: denied { mounton } for pid=841 comm="syz.0.94" path="/proc/46/task" dev="proc" ino=15579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 38.313949][ T23] audit: type=1400 audit(1738306585.789:180): avc: denied { mount } for pid=841 comm="syz.0.94" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.345789][ T18] usb 5-1: USB disconnect, device number 3 [ 38.447184][ T814] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 38.547422][ T817] F2FS-fs (loop3): Unrecognized mount option "0x0000000000000003" or missing value [ 38.718714][ T848] input: syz0 as /devices/virtual/input/input6 [ 38.767248][ T23] audit: type=1400 audit(1738306586.199:181): avc: denied { read write } for pid=847 comm="syz.1.95" name="uinput" dev="devtmpfs" ino=10819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.852587][ T860] FAULT_INJECTION: forcing a failure. [ 38.852587][ T860] name failslab, interval 1, probability 0, space 0, times 0 [ 38.869847][ T23] audit: type=1400 audit(1738306586.199:182): avc: denied { open } for pid=847 comm="syz.1.95" path="/dev/uinput" dev="devtmpfs" ino=10819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.877467][ T860] CPU: 0 PID: 860 Comm: syz.3.96 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 38.902362][ T860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.912258][ T860] Call Trace: [ 38.915392][ T860] dump_stack+0x1d8/0x241 [ 38.919557][ T860] ? panic+0x89d/0x89d [ 38.923463][ T860] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 38.929101][ T860] should_fail+0x71f/0x880 [ 38.933350][ T860] ? setup_fault_attr+0x3d0/0x3d0 [ 38.938214][ T860] ? alloc_skb_with_frags+0x92/0x550 [ 38.943331][ T860] should_failslab+0x5/0x20 [ 38.945918][ T23] audit: type=1400 audit(1738306586.199:183): avc: denied { ioctl } for pid=847 comm="syz.1.95" path="/dev/uinput" dev="devtmpfs" ino=10819 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.947672][ T860] __kmalloc_track_caller+0x4f/0x2b0 [ 38.977442][ T860] ? kmem_cache_alloc+0xd9/0x250 [ 38.982213][ T860] ? alloc_skb_with_frags+0x92/0x550 [ 38.987337][ T860] __alloc_skb+0xb4/0x4d0 [ 38.991499][ T860] ? stack_depot_save+0x417/0x480 [ 38.996364][ T860] alloc_skb_with_frags+0x92/0x550 [ 39.001307][ T860] ? __kasan_kmalloc+0x171/0x210 [ 39.006079][ T860] ? kmem_cache_alloc+0xd9/0x250 [ 39.010855][ T860] ? dst_alloc+0x154/0x4c0 [ 39.015111][ T860] ? ip_route_output_key_hash_rcu+0x1021/0x2190 [ 39.021182][ T860] ? ip_route_output_flow+0x142/0x330 [ 39.026388][ T860] ? udp_sendmsg+0x17c1/0x2aa0 [ 39.030992][ T860] ? udp_sendpage+0x116/0x590 [ 39.035502][ T860] sock_alloc_send_pskb+0x831/0x950 [ 39.040536][ T860] ? do_sendfile+0x854/0xee0 [ 39.044966][ T860] ? sock_kzfree_s+0x50/0x50 [ 39.049392][ T860] ? check_preemption_disabled+0x9f/0x320 [ 39.054944][ T860] ? debug_smp_processor_id+0x20/0x20 [ 39.060155][ T860] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 39.065010][ T860] __ip_append_data+0x233a/0x3650 [ 39.069874][ T860] ? __local_bh_enable_ip+0x4f/0x70 [ 39.074906][ T860] ? ip_do_fragment+0x2200/0x2200 [ 39.079765][ T860] ? ip_setup_cork+0x820/0x820 [ 39.084368][ T860] ? ipv4_mtu+0x194/0x290 [ 39.088531][ T860] ? ip_setup_cork+0x492/0x820 [ 39.093130][ T860] ip_append_data+0x12c/0x1a0 [ 39.097644][ T860] ? ip_do_fragment+0x2200/0x2200 [ 39.102504][ T860] udp_sendmsg+0x430/0x2aa0 [ 39.106849][ T860] ? ip_do_fragment+0x2200/0x2200 [ 39.111703][ T860] ? udp_cmsg_send+0x340/0x340 [ 39.116306][ T860] ? check_preemption_disabled+0x153/0x320 [ 39.121951][ T860] ? drain_local_pages_wq+0x220/0x220 [ 39.127156][ T860] ? __page_cache_release+0x4b1/0x530 [ 39.132362][ T860] ? do_syscall_64+0xca/0x1c0 [ 39.136876][ T860] udp_sendpage+0x116/0x590 [ 39.141212][ T860] ? dst_clone+0x2a0/0x2a0 [ 39.145463][ T860] ? iov_iter_advance+0x37e/0xb20 [ 39.150324][ T860] ? inet_send_prepare+0x5c/0x4a0 [ 39.155180][ T860] ? dst_clone+0x2a0/0x2a0 [ 39.159431][ T860] inet_sendpage+0xd7/0x130 [ 39.163770][ T860] ? inet_sendmsg+0xc0/0xc0 [ 39.168112][ T860] sock_sendpage+0xd1/0x120 [ 39.172453][ T860] pipe_to_sendpage+0x242/0x310 [ 39.177137][ T860] ? sock_fasync+0xf0/0xf0 [ 39.181390][ T860] ? generic_splice_sendpage+0x220/0x220 [ 39.186859][ T860] ? __ia32_sys_tee+0xa0/0xa0 [ 39.191370][ T860] ? do_splice_direct+0x27f/0x3c0 [ 39.196234][ T860] ? __x64_sys_sendfile64+0x1ce/0x230 [ 39.201440][ T860] ? do_syscall_64+0xca/0x1c0 [ 39.205952][ T860] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 39.211854][ T860] __splice_from_pipe+0x2a0/0x830 [ 39.216717][ T860] ? generic_splice_sendpage+0x220/0x220 [ 39.222183][ T860] generic_splice_sendpage+0x195/0x220 [ 39.227478][ T860] ? iter_file_splice_write+0xf60/0xf60 [ 39.232856][ T860] ? direct_splice_actor+0x25/0x120 [ 39.237892][ T860] splice_direct_to_actor+0x497/0xae0 [ 39.243241][ T860] ? do_splice_direct+0x3c0/0x3c0 [ 39.248075][ T860] ? pipe_to_sendpage+0x310/0x310 [ 39.252929][ T860] ? security_file_permission+0x117/0x2f0 [ 39.258480][ T860] do_splice_direct+0x27f/0x3c0 [ 39.263167][ T860] ? splice_direct_to_actor+0xae0/0xae0 [ 39.268547][ T860] ? security_file_permission+0x117/0x2f0 [ 39.274099][ T860] ? do_sendfile+0x605/0xee0 [ 39.278525][ T860] do_sendfile+0x854/0xee0 [ 39.282787][ T860] ? compat_writev+0x3c0/0x3c0 [ 39.287379][ T860] ? vfs_write+0x41a/0x4e0 [ 39.291633][ T860] ? fput_many+0x15e/0x1b0 [ 39.295885][ T860] ? check_preemption_disabled+0x153/0x320 [ 39.301528][ T860] __x64_sys_sendfile64+0x1ce/0x230 [ 39.306577][ T860] ? __ia32_sys_sendfile+0x240/0x240 [ 39.311682][ T860] ? __do_page_fault+0x725/0xbb0 [ 39.316455][ T860] do_syscall_64+0xca/0x1c0 [ 39.320795][ T860] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 39.326523][ T860] RIP: 0033:0x7f1d0155eda9 [ 39.330773][ T860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.350210][ T860] RSP: 002b:00007f1cffbc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 39.358459][ T860] RAX: ffffffffffffffda RBX: 00007f1d01777fa0 RCX: 00007f1d0155eda9 [ 39.366265][ T860] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 39.374077][ T860] RBP: 00007f1cffbc9090 R08: 0000000000000000 R09: 0000000000000000 [ 39.381889][ T860] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000002 [ 39.389701][ T860] R13: 0000000000000000 R14: 00007f1d01777fa0 R15: 00007ffcab462518 [ 39.497606][ T867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 39.622806][ T867] 9pnet: Insufficient options for proto=fd [ 40.137404][ T74] usb 3-1: USB disconnect, device number 2 [ 40.358420][ T412] udevd[412]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.585624][ T351] udevd[351]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.54/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 40.611486][ T906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 40.721424][ T912] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 41.037010][ T920] input: syz1 as /devices/virtual/input/input7 [ 41.702725][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 41.904975][ T951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 42.127142][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 42.127152][ T23] audit: type=1400 audit(1738306589.609:190): avc: denied { create } for pid=952 comm="syz.4.124" dev="anon_inodefs" ino=16704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.154511][ T23] audit: type=1400 audit(1738306589.629:191): avc: denied { ioctl } for pid=952 comm="syz.4.124" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16704 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.201643][ T23] audit: type=1400 audit(1738306589.679:192): avc: denied { getattr } for pid=952 comm="syz.4.124" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.227402][ T23] audit: type=1400 audit(1738306589.709:193): avc: denied { write } for pid=952 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.304825][ T965] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 42.321410][ T960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.126'. [ 42.330320][ T960] FAULT_INJECTION: forcing a failure. [ 42.330320][ T960] name failslab, interval 1, probability 0, space 0, times 0 [ 42.347914][ T960] CPU: 0 PID: 960 Comm: syz.1.126 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 42.357353][ T960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 42.367240][ T960] Call Trace: [ 42.370382][ T960] dump_stack+0x1d8/0x241 [ 42.374548][ T960] ? panic+0x89d/0x89d [ 42.375837][ T23] audit: type=1400 audit(1738306589.829:194): avc: denied { remove_name } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=9561 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.378446][ T960] ? check_preemption_disabled+0x9f/0x320 [ 42.378456][ T960] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 42.378464][ T960] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 42.378477][ T960] should_fail+0x71f/0x880 [ 42.401009][ T23] audit: type=1400 audit(1738306589.829:195): avc: denied { rename } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=9561 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.406477][ T960] ? update_load_avg+0x40f/0x1210 [ 42.406486][ T960] ? setup_fault_attr+0x3d0/0x3d0 [ 42.406500][ T960] ? check_preemption_disabled+0x9f/0x320 [ 42.413282][ T23] audit: type=1400 audit(1738306589.829:196): avc: denied { create } for pid=145 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.417499][ T960] ? debug_smp_processor_id+0x20/0x20 [ 42.417507][ T960] ? debug_smp_processor_id+0x20/0x20 [ 42.417522][ T960] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 42.417532][ T960] ? igmpv3_add_delrec+0xb3/0x550 [ 42.417540][ T960] should_failslab+0x5/0x20 [ 42.417555][ T960] kmem_cache_alloc_trace+0x28/0x260 [ 42.509070][ T960] igmpv3_add_delrec+0xb3/0x550 [ 42.513751][ T960] __igmp_group_dropped+0x609/0x7e0 [ 42.518784][ T960] ? __ip_mc_dec_group+0x560/0x560 [ 42.523726][ T960] ? _raw_spin_unlock+0x5b/0x60 [ 42.528424][ T960] __ip_mc_dec_group+0x294/0x560 [ 42.533187][ T960] br_multicast_leave_snoopers+0x133/0x280 [ 42.538830][ T960] ? br_multicast_join_snoopers+0x280/0x280 [ 42.544557][ T960] ? ___preempt_schedule+0x16/0x20 [ 42.549504][ T960] ? check_preemption_disabled+0x91/0x320 [ 42.555055][ T960] br_multicast_toggle+0x312/0x370 [ 42.560003][ T960] br_changelink+0x661/0x12d0 [ 42.564518][ T960] ? br_dev_newlink+0x100/0x100 [ 42.569201][ T960] ? __nla_validate+0x50/0x50 [ 42.573714][ T960] ? __nla_parse+0x3a/0x50 [ 42.577969][ T960] rtnl_newlink+0x17a7/0x2060 [ 42.582490][ T960] ? rtnl_setlink+0x4f0/0x4f0 [ 42.587000][ T960] ? unwind_next_frame+0x176a/0x1ea0 [ 42.592121][ T960] ? arch_stack_walk+0xf5/0x140 [ 42.596802][ T960] ? mutex_lock+0xa5/0x110 [ 42.601056][ T960] ? mutex_trylock+0xa0/0xa0 [ 42.605487][ T960] ? security_capable+0x86/0xb0 [ 42.610165][ T960] ? rtnl_setlink+0x4f0/0x4f0 [ 42.614678][ T960] rtnetlink_rcv_msg+0x983/0xc70 [ 42.619456][ T960] ? rtnetlink_bind+0x80/0x80 [ 42.623965][ T960] ? __kernel_text_address+0x94/0x100 [ 42.629173][ T960] ? unwind_get_return_address+0x49/0x80 [ 42.634641][ T960] ? arch_stack_walk+0xf5/0x140 [ 42.639331][ T960] ? avc_has_perm_noaudit+0x2f1/0x3d0 [ 42.644535][ T960] ? avc_denied+0x1d0/0x1d0 [ 42.648876][ T960] ? avc_has_perm+0xd2/0x260 [ 42.653299][ T960] ? avc_has_perm+0x16f/0x260 [ 42.657816][ T960] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 42.663023][ T960] ? iov_iter_advance+0x258/0xb20 [ 42.667882][ T960] netlink_rcv_skb+0x1d5/0x420 [ 42.672484][ T960] ? rtnetlink_bind+0x80/0x80 [ 42.676994][ T960] ? nla_put_string+0x30/0x30 [ 42.681508][ T960] ? __netlink_lookup+0x369/0x390 [ 42.686368][ T960] netlink_unicast+0x936/0xb20 [ 42.690967][ T960] ? netlink_detachskb+0x90/0x90 [ 42.695741][ T960] ? __virt_addr_valid+0x20e/0x2a0 [ 42.700688][ T960] netlink_sendmsg+0xa18/0xcf0 [ 42.705291][ T960] ? netlink_getsockopt+0x550/0x550 [ 42.710323][ T960] ? import_iovec+0x1bb/0x380 [ 42.714837][ T960] ? security_socket_sendmsg+0x7d/0xa0 [ 42.720127][ T960] ? netlink_getsockopt+0x550/0x550 [ 42.725165][ T960] ____sys_sendmsg+0x5ac/0x8f0 [ 42.729763][ T960] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 42.734796][ T960] ? proc_fail_nth_read+0x210/0x210 [ 42.739830][ T960] __sys_sendmsg+0x28b/0x380 [ 42.744256][ T960] ? ____sys_sendmsg+0x8f0/0x8f0 [ 42.749028][ T960] ? check_preemption_disabled+0x9f/0x320 [ 42.754590][ T960] ? fput_many+0x15e/0x1b0 [ 42.758836][ T960] ? check_preemption_disabled+0x153/0x320 [ 42.764479][ T960] ? fput_many+0x15e/0x1b0 [ 42.768732][ T960] do_syscall_64+0xca/0x1c0 [ 42.773071][ T960] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 42.778798][ T960] RIP: 0033:0x7fc9897d9da9 [ 42.783055][ T960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.802491][ T960] RSP: 002b:00007fc987e44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.810737][ T960] RAX: ffffffffffffffda RBX: 00007fc9899f2fa0 RCX: 00007fc9897d9da9 [ 42.818545][ T960] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 42.826357][ T960] RBP: 00007fc987e44090 R08: 0000000000000000 R09: 0000000000000000 [ 42.834166][ T960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.841977][ T960] R13: 0000000000000000 R14: 00007fc9899f2fa0 R15: 00007ffe64057258 [ 42.860708][ T960] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.867730][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.116948][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 43.207566][ T981] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.217347][ T981] ext4 filesystem being mounted at /24/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 43.247916][ T23] audit: type=1400 audit(1738306590.729:197): avc: denied { execute } for pid=990 comm="syz.4.137" path="/29/file0" dev="tmpfs" ino=16781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.298974][ T23] audit: type=1400 audit(1738306590.739:198): avc: denied { setattr } for pid=980 comm="syz.2.134" path="/24/file0/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.370100][ T23] audit: type=1400 audit(1738306590.819:199): avc: denied { wake_alarm } for pid=990 comm="syz.4.137" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.461142][ T1005] sch_tbf: burst 65535 is lower than device lo mtu (65550) ! [ 43.706417][ T1015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 43.905827][ T1028] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 43.936808][ T1028] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 43.956024][ T1028] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 43.968462][ T1028] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.968462][ T1028] [ 43.978389][ T1028] EXT4-fs (loop4): Total free blocks count 0 [ 43.988156][ T1046] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 44.009072][ T1045] binder: 1044:1045 ioctl ae44 75 returned -22 [ 44.035428][ T1028] EXT4-fs (loop4): Free/Dirty block details [ 44.045405][ T1046] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.045405][ T1046] [ 44.053178][ T1028] EXT4-fs (loop4): free_blocks=2415919504 [ 44.055341][ T1046] EXT4-fs (loop4): Total free blocks count 0 [ 44.067269][ T1046] EXT4-fs (loop4): Free/Dirty block details [ 44.067517][ T1028] EXT4-fs (loop4): dirty_blocks=32 [ 44.171336][ T1055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 44.418503][ T1067] FAULT_INJECTION: forcing a failure. [ 44.418503][ T1067] name failslab, interval 1, probability 0, space 0, times 0 [ 44.430897][ T1067] CPU: 0 PID: 1067 Comm: syz.3.163 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 44.440437][ T1067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 44.450501][ T1067] Call Trace: [ 44.453637][ T1067] dump_stack+0x1d8/0x241 [ 44.457796][ T1067] ? panic+0x89d/0x89d [ 44.461703][ T1067] ? ext4_alloc_file_blocks+0x3b1/0xc20 [ 44.467086][ T1067] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 44.472727][ T1067] ? __x64_sys_ioctl+0xd4/0x110 [ 44.477412][ T1067] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 44.483316][ T1067] should_fail+0x71f/0x880 [ 44.487577][ T1067] ? setup_fault_attr+0x3d0/0x3d0 [ 44.492431][ T1067] ? _raw_spin_lock+0x1b0/0x1b0 [ 44.497114][ T1067] ? blkg_alloc+0x7e/0x480 [ 44.501372][ T1067] should_failslab+0x5/0x20 [ 44.505710][ T1067] kmem_cache_alloc_trace+0x28/0x260 [ 44.510827][ T1067] blkg_alloc+0x7e/0x480 [ 44.514905][ T1067] blkg_create+0x289/0x1270 [ 44.519244][ T1067] ? kmem_cache_alloc+0xd9/0x250 [ 44.524028][ T1067] ? mempool_alloc+0x12c/0x530 [ 44.528620][ T1067] ? debug_smp_processor_id+0x20/0x20 [ 44.533826][ T1067] ? __blkg_lookup_create+0x3f0/0x3f0 [ 44.539033][ T1067] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 44.544328][ T1067] ? radix_tree_lookup+0x16f/0x1c0 [ 44.549275][ T1067] __blkg_lookup_create+0x35f/0x3f0 [ 44.554310][ T1067] ? debug_smp_processor_id+0x20/0x20 [ 44.559519][ T1067] blkg_lookup_create+0x12f/0x190 [ 44.564376][ T1067] bio_associate_blkg_from_css+0xeb/0x3c0 [ 44.569928][ T1067] ? bioset_init_from_src+0x100/0x100 [ 44.575136][ T1067] bio_associate_blkg+0xc0/0xd0 [ 44.579826][ T1067] submit_bh_wbc+0x3ab/0x850 [ 44.584254][ T1067] ? ext4_lock_group+0x399/0x440 [ 44.589023][ T1067] submit_bh+0x21/0x30 [ 44.592927][ T1067] ext4_read_block_bitmap_nowait+0x937/0xa30 [ 44.598746][ T1067] ext4_mb_init_cache+0x540/0x1410 [ 44.603692][ T1067] ? PageUptodate+0xb0/0xb0 [ 44.608030][ T1067] ? pagecache_get_page+0x5c4/0x750 [ 44.613063][ T1067] ? ext4_mb_find_by_goal+0x289/0xc70 [ 44.618271][ T1067] ext4_mb_init_group+0x395/0x690 [ 44.623139][ T1067] ext4_mb_good_group+0x597/0x740 [ 44.627994][ T1067] ext4_mb_regular_allocator+0x732/0x10d0 [ 44.633553][ T1067] ? ext4_mb_normalize_request+0x1250/0x1250 [ 44.639363][ T1067] ext4_mb_new_blocks+0x59a/0x2d10 [ 44.644309][ T1067] ? memset+0x1f/0x40 [ 44.648128][ T1067] ? ext4_ext_check_overlap+0x180/0x5b0 [ 44.653507][ T1067] ? ext4_inode_to_goal_block+0x265/0x360 [ 44.659070][ T1067] ext4_ext_map_blocks+0x1e70/0x7450 [ 44.664184][ T1067] ? stack_trace_snprint+0x170/0x170 [ 44.669304][ T1067] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 44.674944][ T1067] ? ext4_ext_release+0x10/0x10 [ 44.679633][ T1067] ? start_this_handle+0x1ba8/0x1ce0 [ 44.684753][ T1067] ? check_preemption_disabled+0x9f/0x320 [ 44.690308][ T1067] ? debug_smp_processor_id+0x20/0x20 [ 44.695517][ T1067] ? _raw_read_unlock+0x21/0x40 [ 44.700200][ T1067] ? ext4_es_lookup_extent+0x559/0x9d0 [ 44.705495][ T1067] ext4_map_blocks+0xa2f/0x1ba0 [ 44.710184][ T1067] ? ext4_issue_zeroout+0x150/0x150 [ 44.715217][ T1067] ? kmem_cache_alloc+0xd9/0x250 [ 44.719987][ T1067] ? jbd2__journal_start+0x341/0x6c0 [ 44.725112][ T1067] ext4_alloc_file_blocks+0x3b1/0xc20 [ 44.730319][ T1067] ? trace_ext4_fallocate_enter+0x1d0/0x1d0 [ 44.736046][ T1067] ? down_read_killable+0x220/0x220 [ 44.741078][ T1067] ? debug_smp_processor_id+0x20/0x20 [ 44.746305][ T1067] ? selinux_file_permission+0x2be/0x530 [ 44.751754][ T1067] ? trace_ext4_fallocate_enter+0x26/0x1d0 [ 44.757410][ T1067] ext4_fallocate+0x3b5/0x570 [ 44.761913][ T1067] vfs_fallocate+0x551/0x6b0 [ 44.766335][ T1067] do_vfs_ioctl+0x1368/0x1720 [ 44.770848][ T1067] ? ioctl_preallocate+0x250/0x250 [ 44.775796][ T1067] ? __fget+0x407/0x490 [ 44.779786][ T1067] ? fget_many+0x20/0x20 [ 44.783867][ T1067] ? debug_smp_processor_id+0x20/0x20 [ 44.789074][ T1067] ? security_file_ioctl+0x7d/0xa0 [ 44.794020][ T1067] __x64_sys_ioctl+0xd4/0x110 [ 44.798539][ T1067] do_syscall_64+0xca/0x1c0 [ 44.802873][ T1067] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 44.808601][ T1067] RIP: 0033:0x7f1d0155eda9 [ 44.812851][ T1067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.832293][ T1067] RSP: 002b:00007f1cffbc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.840538][ T1067] RAX: ffffffffffffffda RBX: 00007f1d01777fa0 RCX: 00007f1d0155eda9 [ 44.848350][ T1067] RDX: 0000000020000240 RSI: 000000004030582a RDI: 0000000000000005 [ 44.856158][ T1067] RBP: 00007f1cffbc9090 R08: 0000000000000000 R09: 0000000000000000 [ 44.863969][ T1067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.871780][ T1067] R13: 0000000000000000 R14: 00007f1d01777fa0 R15: 00007ffcab462518 [ 44.974294][ T1062] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 44.993203][ T1062] ext4 filesystem being mounted at /35/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 45.004200][ T1081] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 45.062588][ T1045] overlayfs: unrecognized mount option "pcr=00000000000000000003" or missing value [ 45.072579][ T1084] FAULT_INJECTION: forcing a failure. [ 45.072579][ T1084] name failslab, interval 1, probability 0, space 0, times 0 [ 45.085067][ T1084] CPU: 0 PID: 1084 Comm: syz.0.169 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 45.094507][ T1084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 45.104393][ T1084] Call Trace: [ 45.107529][ T1084] dump_stack+0x1d8/0x241 [ 45.111686][ T1084] ? panic+0x89d/0x89d [ 45.115592][ T1084] ? do_syscall_64+0xca/0x1c0 [ 45.120106][ T1084] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 45.125749][ T1084] should_fail+0x71f/0x880 [ 45.130002][ T1084] ? setup_fault_attr+0x3d0/0x3d0 [ 45.134868][ T1084] ? xfrm_add_sa+0x1a22/0x3460 [ 45.139463][ T1084] should_failslab+0x5/0x20 [ 45.143801][ T1084] __kmalloc_track_caller+0x4f/0x2b0 [ 45.148921][ T1084] kmemdup+0x21/0x50 [ 45.152653][ T1084] xfrm_add_sa+0x1a22/0x3460 [ 45.157082][ T1084] ? xfrm_user_rcv_msg+0x9b0/0x9b0 [ 45.162025][ T1084] ? __nla_parse+0x3a/0x50 [ 45.166278][ T1084] xfrm_user_rcv_msg+0x689/0x9b0 [ 45.171074][ T1084] ? xfrm_netlink_rcv+0x80/0x80 [ 45.175745][ T1084] ? avc_has_perm+0xd2/0x260 [ 45.180165][ T1084] ? avc_has_perm+0x16f/0x260 [ 45.184680][ T1084] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 45.189885][ T1084] netlink_rcv_skb+0x1d5/0x420 [ 45.194486][ T1084] ? xfrm_netlink_rcv+0x80/0x80 [ 45.199170][ T1084] ? nla_put_string+0x30/0x30 [ 45.203684][ T1084] ? mutex_trylock+0xa0/0xa0 [ 45.208111][ T1084] ? __netlink_lookup+0x369/0x390 [ 45.212971][ T1084] xfrm_netlink_rcv+0x6e/0x80 [ 45.217484][ T1084] netlink_unicast+0x936/0xb20 [ 45.222085][ T1084] ? netlink_detachskb+0x90/0x90 [ 45.226858][ T1084] ? __virt_addr_valid+0x20e/0x2a0 [ 45.231805][ T1084] netlink_sendmsg+0xa18/0xcf0 [ 45.236406][ T1084] ? netlink_getsockopt+0x550/0x550 [ 45.241435][ T1084] ? import_iovec+0x1bb/0x380 [ 45.245951][ T1084] ? security_socket_sendmsg+0x7d/0xa0 [ 45.251245][ T1084] ? netlink_getsockopt+0x550/0x550 [ 45.256280][ T1084] ____sys_sendmsg+0x5ac/0x8f0 [ 45.260880][ T1084] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 45.265912][ T1084] ? proc_fail_nth_read+0x210/0x210 [ 45.270946][ T1084] __sys_sendmsg+0x28b/0x380 [ 45.275373][ T1084] ? ____sys_sendmsg+0x8f0/0x8f0 [ 45.280146][ T1084] ? check_preemption_disabled+0x9f/0x320 [ 45.285703][ T1084] ? fput_many+0x15e/0x1b0 [ 45.289953][ T1084] ? check_preemption_disabled+0x153/0x320 [ 45.295598][ T1084] ? __do_page_fault+0x725/0xbb0 [ 45.300370][ T1084] do_syscall_64+0xca/0x1c0 [ 45.304709][ T1084] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 45.310436][ T1084] RIP: 0033:0x7fab9ddcada9 [ 45.314687][ T1084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.334127][ T1084] RSP: 002b:00007fab9c435038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.342372][ T1084] RAX: ffffffffffffffda RBX: 00007fab9dfe3fa0 RCX: 00007fab9ddcada9 [ 45.350182][ T1084] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 45.358000][ T1084] RBP: 00007fab9c435090 R08: 0000000000000000 R09: 0000000000000000 [ 45.365803][ T1084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.373615][ T1084] R13: 0000000000000000 R14: 00007fab9dfe3fa0 R15: 00007ffceb756cb8 [ 45.696091][ T1093] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 45.798602][ T1098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 45.882631][ T353] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /35/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 45.937370][ T1102] JBD2: no valid journal superblock found [ 45.984015][ T1102] EXT4-fs (loop0): error loading journal [ 46.116980][ T1109] FAULT_INJECTION: forcing a failure. [ 46.116980][ T1109] name failslab, interval 1, probability 0, space 0, times 0 [ 46.131001][ T1109] CPU: 0 PID: 1109 Comm: syz.0.176 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 46.140512][ T1109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 46.150405][ T1109] Call Trace: [ 46.153540][ T1109] dump_stack+0x1d8/0x241 [ 46.157698][ T1109] ? panic+0x89d/0x89d [ 46.161602][ T1109] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 46.167247][ T1109] should_fail+0x71f/0x880 [ 46.171500][ T1109] ? setup_fault_attr+0x3d0/0x3d0 [ 46.176360][ T1109] ? check_preemption_disabled+0x153/0x320 [ 46.182000][ T1109] ? debug_smp_processor_id+0x20/0x20 [ 46.187213][ T1109] ? __se_sys_memfd_create+0xe9/0x360 [ 46.192412][ T1109] should_failslab+0x5/0x20 [ 46.196752][ T1109] __kmalloc+0x51/0x2e0 [ 46.200751][ T1109] ? strnlen_user+0x16e/0x1f0 [ 46.205262][ T1109] __se_sys_memfd_create+0xe9/0x360 [ 46.210293][ T1109] do_syscall_64+0xca/0x1c0 [ 46.214634][ T1109] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.220363][ T1109] RIP: 0033:0x7fab9ddcada9 [ 46.224613][ T1109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.244061][ T1109] RSP: 002b:00007fab9c434e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 46.252304][ T1109] RAX: ffffffffffffffda RBX: 0000000000000624 RCX: 00007fab9ddcada9 [ 46.260109][ T1109] RDX: 00007fab9c434ef0 RSI: 0000000000000000 RDI: 00007fab9de4cc51 [ 46.267921][ T1109] RBP: 0000000020000d40 R08: 00007fab9c434bb7 R09: 00007fab9c434e40 [ 46.275735][ T1109] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200001c0 [ 46.283543][ T1109] R13: 00007fab9c434ef0 R14: 00007fab9c434eb0 R15: 0000000020000100 [ 46.453748][ T1119] JBD2: no valid journal superblock found [ 46.476827][ T1119] EXT4-fs (loop2): error loading journal [ 46.606284][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 46.923472][ T1134] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 46.935914][ T1134] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 46.950014][ T1134] F2FS-fs (loop2): invalid crc value [ 46.976540][ T1134] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.053409][ T1134] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 47.060436][ T1134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 47.469522][ T1134] attempt to access beyond end of device [ 47.469522][ T1134] loop2: rw=2049, want=45120, limit=40427 [ 48.071463][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 48.071473][ T23] audit: type=1400 audit(1738306595.539:213): avc: denied { mounton } for pid=1156 comm="syz.3.191" path="/41/file0/file0" dev="loop3" ino=1048599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 48.081704][ T1169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 48.227422][ T1166] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #3: comm syz.1.194: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 48.258051][ T1166] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz.1.194: Bad quota inode: 3, type: 0 [ 48.281011][ T1166] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 48.305820][ T1166] EXT4-fs (loop1): mount failed [ 48.981034][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.995039][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.016497][ T1187] device bridge_slave_0 entered promiscuous mode [ 49.023417][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.045975][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.060525][ T1187] device bridge_slave_1 entered promiscuous mode [ 49.183080][ T23] audit: type=1400 audit(1738306596.659:214): avc: denied { read } for pid=1187 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.218610][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.225468][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.232581][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.239339][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.300669][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.311832][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.321273][ T7] device bridge_slave_1 left promiscuous mode [ 49.328491][ T1198] FAULT_INJECTION: forcing a failure. [ 49.328491][ T1198] name failslab, interval 1, probability 0, space 0, times 0 [ 49.340966][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.348504][ T7] device bridge_slave_0 left promiscuous mode [ 49.354424][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.361886][ T1198] CPU: 0 PID: 1198 Comm: syz.2.205 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 49.371391][ T1198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 49.381291][ T1198] Call Trace: [ 49.384418][ T1198] dump_stack+0x1d8/0x241 [ 49.388577][ T1198] ? panic+0x89d/0x89d [ 49.392487][ T1198] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 49.398129][ T1198] should_fail+0x71f/0x880 [ 49.402379][ T1198] ? setup_fault_attr+0x3d0/0x3d0 [ 49.407242][ T1198] ? sock_wmalloc+0xa3/0x120 [ 49.411670][ T1198] should_failslab+0x5/0x20 [ 49.416006][ T1198] __kmalloc_track_caller+0x4f/0x2b0 [ 49.421126][ T1198] ? kmem_cache_alloc+0xd9/0x250 [ 49.425896][ T1198] ? sock_wmalloc+0xa3/0x120 [ 49.430323][ T1198] __alloc_skb+0xb4/0x4d0 [ 49.434493][ T1198] sock_wmalloc+0xa3/0x120 [ 49.438753][ T1198] ip_append_page+0x8f9/0x1180 [ 49.443349][ T1198] ? do_syscall_64+0xca/0x1c0 [ 49.447859][ T1198] udp_sendpage+0x1a9/0x590 [ 49.452199][ T1198] ? dst_clone+0x2a0/0x2a0 [ 49.456447][ T1198] ? iov_iter_advance+0x37e/0xb20 [ 49.461312][ T1198] ? inet_send_prepare+0x5c/0x4a0 [ 49.466167][ T1198] ? dst_clone+0x2a0/0x2a0 [ 49.470419][ T1198] inet_sendpage+0xd7/0x130 [ 49.474762][ T1198] ? inet_sendmsg+0xc0/0xc0 [ 49.479111][ T1198] sock_sendpage+0xd1/0x120 [ 49.483446][ T1198] pipe_to_sendpage+0x242/0x310 [ 49.488128][ T1198] ? sock_fasync+0xf0/0xf0 [ 49.492381][ T1198] ? generic_splice_sendpage+0x220/0x220 [ 49.497847][ T1198] ? __ia32_sys_tee+0xa0/0xa0 [ 49.502363][ T1198] ? do_splice_direct+0x27f/0x3c0 [ 49.507221][ T1198] ? __x64_sys_sendfile64+0x1ce/0x230 [ 49.512425][ T1198] ? do_syscall_64+0xca/0x1c0 [ 49.516941][ T1198] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 49.522843][ T1198] __splice_from_pipe+0x2a0/0x830 [ 49.527702][ T1198] ? generic_splice_sendpage+0x220/0x220 [ 49.533166][ T1198] generic_splice_sendpage+0x195/0x220 [ 49.538462][ T1198] ? iter_file_splice_write+0xf60/0xf60 [ 49.544384][ T1198] ? direct_splice_actor+0x25/0x120 [ 49.549415][ T1198] splice_direct_to_actor+0x497/0xae0 [ 49.554625][ T1198] ? do_splice_direct+0x3c0/0x3c0 [ 49.559481][ T1198] ? pipe_to_sendpage+0x310/0x310 [ 49.564343][ T1198] ? security_file_permission+0x117/0x2f0 [ 49.569918][ T1198] do_splice_direct+0x27f/0x3c0 [ 49.574591][ T1198] ? splice_direct_to_actor+0xae0/0xae0 [ 49.579973][ T1198] ? security_file_permission+0x117/0x2f0 [ 49.585523][ T1198] ? do_sendfile+0x605/0xee0 [ 49.589947][ T1198] do_sendfile+0x854/0xee0 [ 49.594201][ T1198] ? compat_writev+0x3c0/0x3c0 [ 49.598798][ T1198] ? vfs_write+0x41a/0x4e0 [ 49.603049][ T1198] ? fput_many+0x15e/0x1b0 [ 49.607305][ T1198] ? check_preemption_disabled+0x153/0x320 [ 49.612948][ T1198] __x64_sys_sendfile64+0x1ce/0x230 [ 49.617981][ T1198] ? __ia32_sys_sendfile+0x240/0x240 [ 49.623101][ T1198] ? __do_page_fault+0x725/0xbb0 [ 49.627874][ T1198] do_syscall_64+0xca/0x1c0 [ 49.632212][ T1198] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 49.637941][ T1198] RIP: 0033:0x7f6b63461da9 [ 49.642195][ T1198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.661632][ T1198] RSP: 002b:00007f6b61acc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 49.669876][ T1198] RAX: ffffffffffffffda RBX: 00007f6b6367afa0 RCX: 00007f6b63461da9 [ 49.677684][ T1198] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 49.685495][ T1198] RBP: 00007f6b61acc090 R08: 0000000000000000 R09: 0000000000000000 [ 49.693308][ T1198] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000002 [ 49.701119][ T1198] R13: 0000000000000000 R14: 00007f6b6367afa0 R15: 00007ffc1c9f4658 [ 49.797748][ T1201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 49.811522][ T1202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 49.855768][ T1208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 49.871602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.893431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.917082][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.925267][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.934515][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.941364][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.948829][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.957715][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.965758][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.972596][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.981369][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.992203][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.000124][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.008352][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.062829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.071360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.086670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.094671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.107850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.270054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.322658][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.333944][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.352083][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.360583][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.046325][ T7] device bridge_slave_1 left promiscuous mode [ 51.052276][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.059774][ T7] device bridge_slave_0 left promiscuous mode [ 51.065692][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.787608][ T1250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 52.837809][ T1251] input: syz1 as /devices/virtual/input/input8 [ 52.853565][ T23] audit: type=1400 audit(1738306600.329:215): avc: denied { read } for pid=148 comm="acpid" name="event3" dev="devtmpfs" ino=18872 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.875827][ T23] audit: type=1400 audit(1738306600.329:216): avc: denied { open } for pid=148 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=18872 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.899008][ T23] audit: type=1400 audit(1738306600.329:217): avc: denied { ioctl } for pid=148 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=18872 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.875946][ T74] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 54.165924][ T74] usb 3-1: device descriptor read/64, error 18 [ 54.590110][ T74] usb 3-1: device descriptor read/64, error 18 [ 54.875900][ T74] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 55.145880][ T74] usb 3-1: device descriptor read/64, error 18 [ 55.541860][ T1277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.225'. [ 55.575958][ T74] usb 3-1: device descriptor read/64, error 18 [ 55.589135][ T23] audit: type=1400 audit(1738306603.069:218): avc: denied { create } for pid=1280 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 55.647073][ T23] audit: type=1400 audit(1738306603.099:219): avc: denied { getopt } for pid=1280 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.695994][ T74] usb usb3-port1: attempt power cycle [ 56.105912][ T74] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 56.275993][ T74] usb 3-1: device descriptor read/8, error -61 [ 56.545986][ T74] usb 3-1: device descriptor read/8, error -61 [ 56.797614][ T1290] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 56.807718][ T1300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 56.827102][ T1290] ext4 filesystem being mounted at /39/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 59.326502][ T1326] FAULT_INJECTION: forcing a failure. [ 59.326502][ T1326] name failslab, interval 1, probability 0, space 0, times 0 [ 59.338969][ T23] audit: type=1400 audit(1738306606.809:220): avc: denied { map } for pid=1323 comm="syz.1.240" path="socket:[19033]" dev="sockfs" ino=19033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.362696][ T1326] CPU: 1 PID: 1326 Comm: syz.2.241 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 59.372216][ T1326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 59.382109][ T1326] Call Trace: [ 59.385249][ T1326] dump_stack+0x1d8/0x241 [ 59.389396][ T1326] ? panic+0x89d/0x89d [ 59.393301][ T1326] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 59.398944][ T1326] should_fail+0x71f/0x880 [ 59.403194][ T1326] ? setup_fault_attr+0x3d0/0x3d0 [ 59.408056][ T1326] ? __alloc_skb+0x7a/0x4d0 [ 59.412397][ T1326] should_failslab+0x5/0x20 [ 59.416735][ T1326] kmem_cache_alloc+0x28/0x250 [ 59.421346][ T1326] __alloc_skb+0x7a/0x4d0 [ 59.425504][ T1326] ? skb_append_pagefrags+0x41a/0x670 [ 59.430719][ T1326] sock_wmalloc+0xa3/0x120 [ 59.434966][ T1326] ip_append_page+0x8f9/0x1180 [ 59.439566][ T1326] udp_sendpage+0x1a9/0x590 [ 59.443902][ T1326] ? dst_clone+0x2a0/0x2a0 [ 59.448154][ T1326] ? iov_iter_advance+0x37e/0xb20 [ 59.453012][ T1326] ? inet_send_prepare+0x5c/0x4a0 [ 59.457872][ T1326] ? dst_clone+0x2a0/0x2a0 [ 59.462136][ T1326] inet_sendpage+0xd7/0x130 [ 59.466466][ T1326] ? inet_sendmsg+0xc0/0xc0 [ 59.470807][ T1326] sock_sendpage+0xd1/0x120 [ 59.475147][ T1326] pipe_to_sendpage+0x242/0x310 [ 59.479831][ T1326] ? sock_fasync+0xf0/0xf0 [ 59.484084][ T1326] ? generic_splice_sendpage+0x220/0x220 [ 59.489550][ T1326] ? __ia32_sys_tee+0xa0/0xa0 [ 59.494062][ T1326] ? do_splice_direct+0x27f/0x3c0 [ 59.498925][ T1326] ? __x64_sys_sendfile64+0x1ce/0x230 [ 59.504130][ T1326] ? do_syscall_64+0xca/0x1c0 [ 59.508645][ T1326] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 59.514546][ T1326] __splice_from_pipe+0x2a0/0x830 [ 59.519408][ T1326] ? generic_splice_sendpage+0x220/0x220 [ 59.524876][ T1326] generic_splice_sendpage+0x195/0x220 [ 59.530169][ T1326] ? iter_file_splice_write+0xf60/0xf60 [ 59.535550][ T1326] ? direct_splice_actor+0x25/0x120 [ 59.540582][ T1326] splice_direct_to_actor+0x497/0xae0 [ 59.545792][ T1326] ? do_splice_direct+0x3c0/0x3c0 [ 59.550651][ T1326] ? pipe_to_sendpage+0x310/0x310 [ 59.555511][ T1326] ? security_file_permission+0x117/0x2f0 [ 59.561063][ T1326] do_splice_direct+0x27f/0x3c0 [ 59.565751][ T1326] ? splice_direct_to_actor+0xae0/0xae0 [ 59.571134][ T1326] ? security_file_permission+0x117/0x2f0 [ 59.576684][ T1326] ? do_sendfile+0x605/0xee0 [ 59.581111][ T1326] do_sendfile+0x854/0xee0 [ 59.585367][ T1326] ? compat_writev+0x3c0/0x3c0 [ 59.589964][ T1326] ? vfs_write+0x41a/0x4e0 [ 59.594218][ T1326] ? fput_many+0x15e/0x1b0 [ 59.598475][ T1326] ? check_preemption_disabled+0x153/0x320 [ 59.604114][ T1326] __x64_sys_sendfile64+0x1ce/0x230 [ 59.609148][ T1326] ? __ia32_sys_sendfile+0x240/0x240 [ 59.614266][ T1326] ? __do_page_fault+0x725/0xbb0 [ 59.619039][ T1326] do_syscall_64+0xca/0x1c0 [ 59.623380][ T1326] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 59.629117][ T1326] RIP: 0033:0x7f6b63461da9 [ 59.633361][ T1326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.652797][ T1326] RSP: 002b:00007f6b61acc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 59.661043][ T1326] RAX: ffffffffffffffda RBX: 00007f6b6367afa0 RCX: 00007f6b63461da9 [ 59.668856][ T1326] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 59.676664][ T1326] RBP: 00007f6b61acc090 R08: 0000000000000000 R09: 0000000000000000 [ 59.684476][ T1326] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000002 [ 59.692286][ T1326] R13: 0000000000000000 R14: 00007f6b6367afa0 R15: 00007ffc1c9f4658 [ 59.703367][ T23] audit: type=1400 audit(1738306606.809:221): avc: denied { read } for pid=1323 comm="syz.1.240" path="socket:[19033]" dev="sockfs" ino=19033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.025900][ T107] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 60.385953][ T107] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 60.394842][ T107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.403699][ T107] usb 1-1: config 0 descriptor?? [ 60.647720][ T23] audit: type=1326 audit(1738306608.129:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1321 comm="syz.0.239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab9ddcada9 code=0x0 [ 61.186238][ T1333] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 61.201012][ T1333] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 61.213771][ T1333] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.254428][ T1333] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 61.261321][ T1333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 61.282694][ T23] audit: type=1400 audit(1738306608.759:223): avc: denied { create } for pid=1331 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 61.303136][ T23] audit: type=1400 audit(1738306608.779:224): avc: denied { write } for pid=1331 comm="syz.1.242" path="socket:[19628]" dev="sockfs" ino=19628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 61.327207][ T23] audit: type=1400 audit(1738306608.779:225): avc: denied { nlmsg_read } for pid=1331 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 61.348012][ T23] audit: type=1400 audit(1738306608.829:226): avc: denied { connect } for pid=1331 comm="syz.1.242" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.379625][ T352] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 61.379630][ T352] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 61.387068][ T352] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 61.394409][ T352] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 61.401835][ T352] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 61.409433][ T352] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 61.417223][ T352] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 61.424905][ T23] audit: type=1400 audit(1738306608.899:227): avc: denied { unmount } for pid=352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.453419][ T23] audit: type=1400 audit(1738306608.929:228): avc: denied { unlink } for pid=352 comm="syz-executor" name="bus" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.566209][ T107] usbhid 1-1:0.0: can't add hid device: -71 [ 62.572381][ T107] usbhid: probe of 1-1:0.0 failed with error -71 [ 62.590204][ T353] syz-executor (353) used greatest stack depth: 19512 bytes left [ 62.642322][ T107] usb 1-1: USB disconnect, device number 4 [ 64.027289][ T1367] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=5 req=200 state=1 status=67 (errno 9: Bad file descriptor) [ 64.500077][ T1377] EXT4-fs warning (device loop1): ext4_multi_mount_protect:387: Unable to create kmmpd thread for loop1. [ 64.628942][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.635767][ T1386] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.643196][ T1386] device bridge_slave_0 entered promiscuous mode [ 64.649849][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.657241][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.664331][ T1386] device bridge_slave_1 entered promiscuous mode [ 64.707269][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.714090][ T1386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.721230][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.727990][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.750109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.757697][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.764637][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.774494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.782726][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.789556][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.799508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.807557][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.814361][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.827447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.836378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.852613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.863636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.878144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.890461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.900260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.918471][ T23] audit: type=1400 audit(1738306612.399:229): avc: denied { mounton } for pid=1386 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=12736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.206632][ T1196] device bridge_slave_1 left promiscuous mode [ 65.212548][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.219824][ T1196] device bridge_slave_0 left promiscuous mode [ 65.225716][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.876523][ T1196] tipc: Left network mode [ 66.486094][ T13] cfg80211: failed to load regulatory.db [ 66.886407][ T1196] device bridge_slave_1 left promiscuous mode [ 66.892332][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.899575][ T1196] device bridge_slave_0 left promiscuous mode [ 66.905484][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.912745][ T1196] device bridge_slave_1 left promiscuous mode [ 66.918684][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.925749][ T1196] device bridge_slave_0 left promiscuous mode [ 66.931848][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.938924][ T1196] device bridge_slave_1 left promiscuous mode [ 66.944806][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.951956][ T1196] device bridge_slave_0 left promiscuous mode [ 66.957877][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state