last executing test programs: 8.657629737s ago: executing program 4 (id=806): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000"], 0x69) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, 0x0) 7.579545014s ago: executing program 4 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000003000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x800, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @empty}, &(0x7f0000000240)=0xc) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x10, 0x803, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.501824455s ago: executing program 4 (id=811): r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f00)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18, 0x20000000}}], 0x1, 0x4000000) r3 = syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x50000, &(0x7f0000000600)=ANY=[], 0x4, 0x1509, &(0x7f0000001680)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x2000000, 0x2000003}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='{&&\x00', 0x0, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) io_uring_setup(0x4d40, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00"/43], 0x40}, 0x20008080) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040105}, 0x4000) 7.334050598s ago: executing program 4 (id=815): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x800090, &(0x7f0000000640)={[{@nodiscard}, {@fault_type={'fault_type', 0x3d, 0x291}}, {@acl}, {@alloc_mode_reuse}, {@jqfmt_vfsv0}, {@segment_mode}, {@prjjquota={'prjjquota', 0x3d, '\x00'}}, {@nobarrier}, {@norecovery}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@nolazytime}]}, 0x1, 0x550d, &(0x7f00000102c0)="$eJzs3M1rY1UUAPCTdjrfjkVcuJsHg9DCJEw6H+hu1Bn8wBnKqAtXmiZpyEySV5o0rV25cCku/E9EwZVL/wYXrt3JLBR3gpJ3X3XqBwhNGzv9/eDlvHtzc3JuCIXzXkkAJ9Zi9stPlbgU5yJiPiIuRhTnlfIo3E7hhYi4HBFzTxyVcv6PidMRcT4iLk2Sp5yV8qnPr46v3Hz81s/ffHfm1IUvvv5+drsGZu3FiOhvpPPtfop5J8WH5Xxj3C1i/8a4jOmJ/qNynKe43V4rMmw39tY1ini9k9bnG1vDSVzvNZqT2OmuF/Mbg/SGw3FnL0/xgoeNzWLcaq8VsTvMi9jZTXXt7Ka/bbvDUcrTKvN9VKSP0Wgvpvn2TjvtZ+NREZuDUTmf8uat9s4kjstYvl00816rqGPtIJ/0/9vb3cHWTjZubw67+SC7Wau/VKvfqtY381Z71L5RbfRbt25kS53eZFl11G70b3fyvNNr15p5fzlb6jSb1Xo9W7rTXus2Blm9Xrteu1a9uVyeXc1ev/9e1mtlS5P4anewNer2htl6vpmlVyxnK7XrLy9nV+rZO/dWs9UHd+/eW333gzvv33/l3puvlYv+Vla2tHJtZaVav1ZdqS+foP1/UhY9xf3DgVRmXQDA8aP/B2bh8Pr/zQcRh9//h/5/Ko5V/3sI/f/jyffpBO8fDkT/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwYv2w8OUbxcliGl8o558pp54rx5WImIuI3/7BfJzel3O+zLPwL+sX/lLDt5UoMkze40x5nI+I2+Xx67OH/SkAAADA0+urjy9/lrr19LA464I4SumizdzFD6eUrxIRC4s/Tinb3OTh+SklK77fp2JnStmKC1hnp5QsXXI7Na1s/8n8vnD2iVBJYe5IywEAAI7E/k7gaLsQAAAAjtKnsy6A2ajE3q3MvXvBxX/e/3lD8Ny+EQAAAHAMVWZdAAAAAHDoiv7f7/8BAADA0y39/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv7NzPjdNAFAfgZycm4Z+IEHda4ZaUQQkcOaIUQBMpgENogQZSQ7hRAUIxiseE9cqHlTy2tavvk7yzYzm/zETJ4c1IAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJh+Vsfd9y/vvw7NudRDVHWe2QAAAAB9ztVx1/yzSf2X7f3X7a23bb+IiDIi+qr3RTzrZC7anOr/89861f69MfyIaBKu77FqrxcR8aG9/rwZ+1MAAACAp+u0P2xTtZ7+bOYeEFNKizblq4+Z8oqIqDa/MqWV17x3mcKa7/cyPmdKaxaw1pnC0pLbMlfagzQ/99uq3fpOU6Sm7H3ZbZDZ5g4AAExo0WmmrUIAAACY0qe5B8A8ivi3lXnbClylpt3ee97pAQAAAI9QMfcAAAAAgNE19f+o5//9rnufd/4fAAAATCed/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCYztVxd9oftkNzLvUweWYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf9ucdBUIgDMJg7/rOZO5/WGnQ1NSkCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYuZ/XOKo4AOBvZna2tiquUfYQEQUPerHbbW3tTTwowYN/ghDSbY3d+qPNwZYi5uJNcu5F9CgiKPHW/yHnBHKJtxz2EMGzMrMz2ckPcP01s0k+H3jzvjsM875vFkK+814CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXR25M4yQ6dcRwX5zb3Hi5l/dahPvN4bXs+a1kc1Zn0yfBi9UPUbS4RAAAAzo6krO9DCDvp+kLWx528/k/La7Ka/9unx3FZzx+u+8u+rP2z9svPu8/vD9QZj5Pd9ObycHDpaCqt/2+Ws+2Zv7yilT/5/N1Lkn8h8Xurz43S/HlGX29svNPOw3N1ZAsA/BMXy74Iyt+Hsr7fZGIAnBmtSuFd1v9Jp9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOowWg1PlnEUQphvTeLM1t7DpeP6x2vb82W79ujRWvhycs/sFmkI4ebycHCp1tnMtnv3H9xeHA4Hd+sPXgohNDX6W8X0b38wxcUhNPJ8BP9REBdf9qzkczKCBn8oAQBwKqVFy+r6nXR9ITsXzYXwx3cH6/9XK3GYsv7f/fDaZnWsav3fr22Gs6+3cufT3r37D15fvrN4a3Br8PEbl/tv9q9cv3r1ei9/V9LzxgQAAIB/p120av0fzx1d/79QicOU9f9n3/S/qI6VqP+PNVn0azoTAACAs+3Zl3//LTrmfNRuh88XV1bu9sfH/c+Xx8cGUv3bzhWtWv8nc01nBQAAANRhtBodWP+/UYnDlOv/T33/wo/VeyYhhPPF+v/FpU+GN+qbzkyr48+Jm54jAAAAzTpftOr6f5rv/4/3tzzEIYTXXhnHxb8BnKr+T9796ofqWNX9/1fqm+JMirvj55H33RBa3aYzAgAA4DR7omhZsf9rur7w0U8X3m/b/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtz8DAAD//y/BPuc=") r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000076000908000000000000000007020000", @ANYRES32=r1, @ANYBLOB="0c000d80"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x10004}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$vcsa(&(0x7f0000000400), 0xfbd, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f0000001c0007800c000400403a002d00002d2e0c0003"], 0x30}}, 0x20088004) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0x1f8, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x96d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x816}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc85}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x62e1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x72dc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0xc0881}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000009c0)=0x8000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r7, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x7, 0x5, 0x0, 0x0, [{{r0}, 0x200}, {{r1}, 0x5}, {{r2}, 0x5}, {{r0}, 0x71}, {{r0}, 0x7}]}) 6.001375968s ago: executing program 1 (id=818): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600000000"], 0x69) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, 0x0) 5.031072293s ago: executing program 4 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000003000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x800, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @empty}, &(0x7f0000000240)=0xc) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x10, 0x803, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.939182614s ago: executing program 2 (id=823): chdir(&(0x7f0000000240)='./bus\x00') fchdir(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x100c404, &(0x7f0000000940)={[{@dots}, {@dots}, {@fat=@nfs_nostale_ro}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@tz_utc}, {@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@discard}, {@fat=@check_normal}, {@fat=@sys_immutable}, {@nodots}, {@dots}, {@fat=@usefree}, {@nodots}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@dots}]}, 0xfd, 0x202, &(0x7f0000001280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3ff293750a0d03fd968f962874ee9855b08db619a0fb9b11006c31677e7431846901bae1687612c8b3b2a1e0954730e593a51e8c3fc2b67296e185b847"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$incfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) 4.527961171s ago: executing program 3 (id=825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x8e80, 0x0}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 4.370937913s ago: executing program 1 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 4.370241233s ago: executing program 3 (id=827): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1000400, &(0x7f0000000000), 0x1, 0x553, &(0x7f0000000a00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @private, {0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @broadcast, @local, {[@generic={0x0, 0x2}, @cipso={0x86, 0x33, 0x0, [{0x0, 0x9, "7b347bc0b2809c"}, {0x0, 0x11, "52e618b25d6dd0082d9a6bf83350c7"}, {0x0, 0x7, "c6ee4a5a5a"}, {0x0, 0x7, "98e49094f4"}, {0x0, 0x5, "79986c"}]}, @cipso={0x86, 0x14, 0x0, [{0x0, 0x6, "d1596c31"}, {0x0, 0x3, '\v'}, {0x0, 0x3, "d3"}, {0x0, 0x2}]}, @ra={0x94, 0x4}]}}}}}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 4.329169684s ago: executing program 4 (id=828): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) setreuid(0xee01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095fa6a9f6891b9cfd8a08092e2e8ad56ce1cc881a2608bd15e0ae63d03bfc69e863c2d224c9e5c10842b6ccfbcc8db672a70cb3f38720451976a428f09213deb91995f7e803e876ec5156d473d7a025e6eb5ef5f607a84bf33be0065e07584eee795c1e2e59f4087410d9a78caeae42a2f3b8227", @ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x100000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getitimer(0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 4.255694785s ago: executing program 32 (id=828): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) setreuid(0xee01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095fa6a9f6891b9cfd8a08092e2e8ad56ce1cc881a2608bd15e0ae63d03bfc69e863c2d224c9e5c10842b6ccfbcc8db672a70cb3f38720451976a428f09213deb91995f7e803e876ec5156d473d7a025e6eb5ef5f607a84bf33be0065e07584eee795c1e2e59f4087410d9a78caeae42a2f3b8227", @ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x100000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getitimer(0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 3.827892382s ago: executing program 2 (id=830): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r1, r0, 0x0, 0xfffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c504000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00226100000044a0"], 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) statx(0xffffffffffffffff, 0x0, 0x100, 0x4, &(0x7f0000002a00)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) 3.827189882s ago: executing program 0 (id=831): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @initdev}, &(0x7f0000000280)=0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x1, 0x8}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f0000000200)="3f031c000302140006001e0089003307258000000000000000d8da2918e8d2371c2ff24b948c", 0x26, 0x10, &(0x7f0000000040)={0xc9, 0x8100, r4, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="70000000160000032dbd7000ffdedf250a0818c8", @ANYRES32=r4, @ANYBLOB="08000800010000001400060002000000000000000600000000000100080009000500000008000a0002000000080009000100000008000a000400000008000a000200000014000200fe8000000000000000000000000000bb"], 0x70}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f]}}, &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x400, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x1c, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) 3.722569473s ago: executing program 0 (id=832): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000001140)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095f5ffffffffffff9a88"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000001100)='net/fib_trie\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 3.678521624s ago: executing program 3 (id=833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x1d, 0x1, 0x0, 0x0, {{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x40000) sync() connect$inet(0xffffffffffffffff, &(0x7f0000001ac0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000100)={0x0, 0xfd, 0x8, 0x4, 0x1, 0x898}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181042, 0x0) 3.387708988s ago: executing program 1 (id=834): pipe(&(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x40}, 0x1, 0xd}, 0x0) 2.281505225s ago: executing program 0 (id=835): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x40}, 0x0) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000170000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) 2.228693616s ago: executing program 0 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r3 = syz_btf_id_by_name$bpf_lsm(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x40000000, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010000104000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c0002800400120014000700fe80000000", @ANYRES32=r7], 0x58}, 0x1, 0xd}, 0x0) 2.045592059s ago: executing program 3 (id=837): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600000000"], 0x69) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/176) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, 0x0) 1.719508744s ago: executing program 1 (id=838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000003000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x800, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @empty}, &(0x7f0000000240)=0xc) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x10, 0x803, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.632803505s ago: executing program 1 (id=839): r0 = creat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@flushpolicy={0x50, 0x1d, 0x400, 0x70bd2c, 0x25dfdbff, "", [@etimer_thresh={0x8, 0xc, 0x71300}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd28, 0x70bd27, 0x70bd2b, 0x70bd25, 0x4, [0x1, 0x800, 0x1, 0x1ff, 0x7, 0x4275, 0x3]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4004084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f0000000040), 0x1003) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f00000021c0)="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", 0x2000, 0x0) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, 0x0, 0x0) 1.37034667s ago: executing program 5 (id=829): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000001140)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095f5ffffffffffff9a88"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000001100)='net/fib_trie\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1.195885482s ago: executing program 0 (id=840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000000800007bbc8260823fee58ba001f6f160900000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00002cd5a999d2c7de39b373d2001bb7ff0000020000000000001600800000277a571ab9e63c03e57c10e28446c577604df5459a39dbaad0767e55a4fff8beaa5db6fa503c874321d5c2ecd21cbccd80f774425f7dcae7eb46a6a30e448d55b136f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40020000) setreuid(0xee01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff49427255a6dec80f00000000001b0000850000000000000000801c002300000095f5fed8a24449687ccc57373464b90b7eacecc7fcacfd2f96c928c76905b1f18c9ca9ea0a0a179aa8bb7165ff55494a99732b975fb3798c3372fe3406aadf68fa5310bcc46937da98d92a5773cc54dca34393e80450064b7dd0a5d91ea38631ba30bf34b8bb5084cc11ae588cde56e6de02cb7e3f80aa1cebb6ad8f582fa5da868db77f6c0755e94e76e7a163bfce29c8b7e62274"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000f80)=ANY=[@ANYBLOB="06000000040000000080000058"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) 1.065773844s ago: executing program 3 (id=841): pipe(&(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x40}, 0x1, 0xd}, 0x0) 1.020098815s ago: executing program 2 (id=842): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @initdev}, &(0x7f0000000280)=0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x1, 0x8}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f0000000200)="3f031c000302140006001e0089003307258000000000000000d8da2918e8d2371c2ff24b948c", 0x26, 0x10, &(0x7f0000000040)={0xc9, 0x8100, r4, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="70000000160000032dbd7000ffdedf250a0818c8", @ANYRES32=r4, @ANYBLOB="08000800010000001400060002000000000000000600000000000100080009000500000008000a0002000000080009000100000008000a000400000008000a000200000014000200fe8000000000000000000000000000bb"], 0x70}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f]}}, &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x400, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x1c, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)) 990.229085ms ago: executing program 2 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 727.528939ms ago: executing program 1 (id=844): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000008500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) 176.561078ms ago: executing program 5 (id=845): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) madvise(&(0x7f000007b000/0x3000)=nil, 0x3000, 0x14) setuid(0xee00) r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3899, r0, 0x0, 0x0, 0x4, 0x0, 0x3, r2}]) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x1) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=""/140, 0x8c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) 161.121438ms ago: executing program 3 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000ac0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000702, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x6) ioprio_get$pid(0x832be4397b632f9f, r6) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = timerfd_create(0x7, 0x0) read(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c805}, 0xc080) r8 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) 33.80154ms ago: executing program 0 (id=847): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @initdev}, &(0x7f0000000280)=0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x1, 0x8}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f0000000200)="3f031c000302140006001e0089003307258000000000000000d8da2918e8d2371c2ff24b948c", 0x26, 0x10, &(0x7f0000000040)={0xc9, 0x8100, r4, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="70000000160000032dbd7000ffdedf250a0818c8", @ANYRES32=r4, @ANYBLOB="08000800010000001400060002000000000000000600000000000100080009000500000008000a0002000000080009000100000008000a000400000008000a000200000014000200fe8000000000000000000000000000bb"], 0x70}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f]}}, &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r7}, 0x10) unshare(0x20000400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, 0x0, &(0x7f0000000040)}, 0x20) 31.86235ms ago: executing program 2 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000003000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='scsi_dispatch_cmd_start\x00', r1}, 0x18) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x800, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @empty}, &(0x7f0000000240)=0xc) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x10, 0x803, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 2 (id=849): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @initdev}, &(0x7f0000000280)=0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x1, 0x8}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f0000000200)="3f031c000302140006001e0089003307258000000000000000d8da2918e8d2371c2ff24b948c", 0x26, 0x10, &(0x7f0000000040)={0xc9, 0x8100, r4, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="70000000160000032dbd7000ffdedf250a0818c8", @ANYRES32=r4, @ANYBLOB="08000800010000001400060002000000000000000600000000000100080009000500000008000a0002000000080009000100000008000a000400000008000a000200000014000200fe8000000000000000000000000000bb"], 0x70}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f]}}, &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r7}, 0x10) unshare(0x20000400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, 0x0, &(0x7f0000000040)}, 0x20) kernel console output (not intermixed with test programs): stem. [ 109.373203][ T1627] loop2: detected capacity change from 0 to 512 [ 109.408540][ T1627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.445003][ T1627] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.337: path /75/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 109.969726][ T286] EXT4-fs (loop2): unmounting filesystem. [ 110.010052][ T1630] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.144372][ T1646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.191611][ T1649] loop2: detected capacity change from 0 to 4096 [ 110.216685][ T1649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.679683][ T1657] loop0: detected capacity change from 0 to 512 [ 110.709486][ T1660] loop4: detected capacity change from 0 to 128 [ 110.738811][ T1657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.748344][ T1660] EXT4-fs (loop4): Test dummy encryption mode enabled [ 110.756862][ T1656] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.347: path /55/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 110.778472][ T1660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.787724][ T1660] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.272358][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 111.272383][ T28] audit: type=1326 audit(1750926475.970:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 111.327267][ T28] audit: type=1326 audit(1750926476.000:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 111.378966][ T286] EXT4-fs (loop2): unmounting filesystem. [ 111.389270][ T28] audit: type=1326 audit(1750926476.010:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 111.389714][ T285] EXT4-fs (loop0): unmounting filesystem. [ 111.425573][ T28] audit: type=1326 audit(1750926476.010:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 111.450373][ T28] audit: type=1326 audit(1750926476.020:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 111.473857][ T28] audit: type=1326 audit(1750926476.060:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 111.497277][ T28] audit: type=1326 audit(1750926476.060:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 111.536943][ T28] audit: type=1326 audit(1750926476.060:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 111.571615][ T284] EXT4-fs (loop4): unmounting filesystem. [ 111.911660][ T28] audit: type=1326 audit(1750926476.060:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 111.971877][ T28] audit: type=1326 audit(1750926476.060:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ddb8e929 code=0x7ffc0000 [ 112.083689][ T1672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.225498][ T1687] loop1: detected capacity change from 0 to 512 [ 112.340471][ T1687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.501527][ T1687] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.354: path /61/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 112.919583][ T282] EXT4-fs (loop1): unmounting filesystem. [ 113.010949][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.138059][ T1715] loop1: detected capacity change from 0 to 512 [ 113.192253][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.212389][ T1715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.223020][ T1715] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.362: path /62/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 113.260309][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.271525][ T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 113.280733][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.294232][ T19] usb 4-1: config 0 descriptor?? [ 113.703081][ T19] logitech-djreceiver 0003:046D:C534.000F: unbalanced collection at end of report description [ 113.722366][ T19] logitech-djreceiver 0003:046D:C534.000F: logi_dj_probe: parse failed [ 113.751174][ T19] logitech-djreceiver: probe of 0003:046D:C534.000F failed with error -22 [ 113.823166][ T282] EXT4-fs (loop1): unmounting filesystem. [ 113.905362][ T1699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.927487][ T1699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.947714][ T314] usb 4-1: USB disconnect, device number 4 [ 114.333907][ T1729] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 114.351233][ T1729] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 114.369217][ T1735] netlink: 104 bytes leftover after parsing attributes in process `syz.2.369'. [ 114.390942][ T19] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.612037][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.626254][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.640271][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 114.651447][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.660799][ T19] usb 1-1: config 0 descriptor?? [ 114.917277][ T1751] loop1: detected capacity change from 0 to 512 [ 114.953651][ T1751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.964794][ T1751] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.373: path /64/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 115.078946][ T19] logitech-djreceiver 0003:046D:C534.0010: unbalanced collection at end of report description [ 115.090914][ T19] logitech-djreceiver 0003:046D:C534.0010: logi_dj_probe: parse failed [ 115.099740][ T19] logitech-djreceiver: probe of 0003:046D:C534.0010 failed with error -22 [ 115.302821][ T1728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.314710][ T1728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.329397][ T19] usb 1-1: USB disconnect, device number 10 [ 115.721495][ T282] EXT4-fs (loop1): unmounting filesystem. [ 115.900959][ T19] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.915886][ T1768] loop3: detected capacity change from 0 to 512 [ 115.987280][ T1768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.002971][ T1766] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.378: path /81/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 116.041186][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.122341][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.140923][ T19] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.212089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.435702][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.451649][ T19] usb 3-1: config 0 descriptor?? [ 116.462026][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.475324][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.485416][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 116.494751][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.507932][ T6] usb 2-1: config 0 descriptor?? [ 116.600778][ T283] EXT4-fs (loop3): unmounting filesystem. [ 116.884365][ T19] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 116.895148][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0011/input/input20 [ 116.917167][ T6] logitech-djreceiver 0003:046D:C534.0012: unbalanced collection at end of report description [ 116.928468][ T6] logitech-djreceiver 0003:046D:C534.0012: logi_dj_probe: parse failed [ 116.937088][ T6] logitech-djreceiver: probe of 0003:046D:C534.0012 failed with error -22 [ 116.971268][ T722] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.982250][ T19] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 117.239125][ T1765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.253866][ T1765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.272013][ T39] usb 2-1: USB disconnect, device number 5 [ 117.428198][ T6] usb 3-1: USB disconnect, device number 4 [ 117.472312][ T722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.483823][ T722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.493710][ T722] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 117.502904][ T722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.511894][ T722] usb 4-1: config 0 descriptor?? [ 117.780185][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 117.780201][ T28] audit: type=1326 audit(1750926482.470:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 117.811857][ T28] audit: type=1326 audit(1750926482.480:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 117.842008][ T28] audit: type=1326 audit(1750926482.480:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 117.866585][ T28] audit: type=1326 audit(1750926482.480:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 117.901147][ T28] audit: type=1326 audit(1750926482.480:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 117.925411][ T28] audit: type=1326 audit(1750926482.480:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 117.952711][ T722] logitech-djreceiver 0003:046D:C534.0013: unbalanced collection at end of report description [ 117.982415][ T28] audit: type=1326 audit(1750926482.480:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 118.006664][ T722] logitech-djreceiver 0003:046D:C534.0013: logi_dj_probe: parse failed [ 118.015301][ T722] logitech-djreceiver: probe of 0003:046D:C534.0013 failed with error -22 [ 118.736739][ T1779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.748759][ T28] audit: type=1326 audit(1750926482.480:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 118.781333][ T1779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.936359][ T1816] netlink: 104 bytes leftover after parsing attributes in process `syz.2.392'. [ 119.096241][ T28] audit: type=1326 audit(1750926482.480:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 119.121452][ T722] usb 4-1: USB disconnect, device number 5 [ 119.877358][ T28] audit: type=1326 audit(1750926482.480:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1802 comm="syz.4.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 120.905056][ T1867] netlink: 104 bytes leftover after parsing attributes in process `syz.1.404'. [ 120.981092][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.172127][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.185320][ T19] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.194722][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.214329][ T19] usb 4-1: config 0 descriptor?? [ 121.321500][ T1873] loop2: detected capacity change from 0 to 128 [ 121.350152][ T1873] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.376328][ T1873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 121.390402][ T1873] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.812614][ T19] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 121.832778][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0014/input/input21 [ 121.923897][ T19] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 122.205072][ T286] EXT4-fs (loop2): unmounting filesystem. [ 122.233405][ T6] usb 4-1: USB disconnect, device number 6 [ 125.134290][ T1940] loop4: detected capacity change from 0 to 512 [ 125.231712][ T1940] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.322153][ T1940] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.419: path /94/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 127.071583][ T284] EXT4-fs (loop4): unmounting filesystem. [ 127.359261][ T1972] xt_TPROXY: Can be used only with -p tcp or -p udp [ 130.598103][ T2003] overlayfs: failed to resolve './file2': -2 [ 131.390595][ T2021] netlink: 104 bytes leftover after parsing attributes in process `syz.2.444'. [ 131.475411][ T2024] loop4: detected capacity change from 0 to 512 [ 131.533231][ T2024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.562268][ T2024] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.442: path /98/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 132.081001][ T1100] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 132.499620][ T2042] netlink: 104 bytes leftover after parsing attributes in process `syz.2.449'. [ 132.544268][ T1100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.544348][ T284] EXT4-fs (loop4): unmounting filesystem. [ 132.570918][ T1100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.580709][ T1100] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 132.610895][ T1100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.639757][ T1100] usb 1-1: config 0 descriptor?? [ 133.732768][ T2058] netlink: 104 bytes leftover after parsing attributes in process `syz.3.454'. [ 133.802042][ T1100] logitech-djreceiver 0003:046D:C534.0015: unbalanced collection at end of report description [ 133.812861][ T1100] logitech-djreceiver 0003:046D:C534.0015: logi_dj_probe: parse failed [ 134.261968][ T2030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.267221][ T1100] logitech-djreceiver: probe of 0003:046D:C534.0015 failed with error -22 [ 134.287440][ T2030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.309472][ T1919] usb 1-1: USB disconnect, device number 11 [ 134.502630][ T2069] netlink: 104 bytes leftover after parsing attributes in process `syz.2.456'. [ 134.644734][ T2072] overlayfs: failed to resolve './file2': -2 [ 139.415770][ T2145] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.109077][ T1919] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.542248][ T1919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.553370][ T1919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.890135][ T1919] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 140.899336][ T1919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.916394][ T1919] usb 4-1: config 0 descriptor?? [ 142.230531][ T1919] logitech-djreceiver 0003:046D:C534.0016: unbalanced collection at end of report description [ 142.291456][ T1919] logitech-djreceiver 0003:046D:C534.0016: logi_dj_probe: parse failed [ 142.337167][ T1919] logitech-djreceiver: probe of 0003:046D:C534.0016 failed with error -22 [ 143.143002][ T2151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.152180][ T2151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.161632][ T365] usb 4-1: USB disconnect, device number 7 [ 143.544581][ T703] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.552601][ T1100] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.753025][ T703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.764194][ T1100] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.779277][ T1100] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.857223][ T703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.867423][ T1100] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 143.876702][ T703] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 143.885828][ T703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.893888][ T1100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.903010][ T703] usb 3-1: config 0 descriptor?? [ 143.908427][ T1100] usb 5-1: config 0 descriptor?? [ 144.041949][ T2215] loop1: detected capacity change from 0 to 512 [ 144.212590][ T2215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.268987][ T2215] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.495: path /92/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 144.322677][ T703] logitech-djreceiver 0003:046D:C534.0017: unbalanced collection at end of report description [ 144.335270][ T1100] logitech-djreceiver 0003:046D:C534.0018: unbalanced collection at end of report description [ 144.353705][ T1100] logitech-djreceiver 0003:046D:C534.0018: logi_dj_probe: parse failed [ 144.362414][ T703] logitech-djreceiver 0003:046D:C534.0017: logi_dj_probe: parse failed [ 144.375071][ T2222] netlink: 104 bytes leftover after parsing attributes in process `syz.0.498'. [ 144.380986][ T1100] logitech-djreceiver: probe of 0003:046D:C534.0018 failed with error -22 [ 144.392666][ T703] logitech-djreceiver: probe of 0003:046D:C534.0017 failed with error -22 [ 144.526976][ T1919] usb 3-1: USB disconnect, device number 5 [ 144.561840][ T2189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.570409][ T2189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.602936][ T350] usb 5-1: USB disconnect, device number 3 [ 144.687198][ T282] EXT4-fs (loop1): unmounting filesystem. [ 145.495023][ T2251] loop3: detected capacity change from 0 to 512 [ 145.631759][ T2251] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 145.648700][ T2249] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.501: path /102/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 145.883868][ T2262] netlink: 104 bytes leftover after parsing attributes in process `syz.2.510'. [ 146.004255][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 146.004272][ T28] audit: type=1326 audit(1750926510.700:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.071688][ T283] EXT4-fs (loop3): unmounting filesystem. [ 146.113189][ T28] audit: type=1326 audit(1750926510.730:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.195799][ T28] audit: type=1326 audit(1750926510.730:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.241348][ T2281] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.278839][ T28] audit: type=1326 audit(1750926510.730:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.316713][ T28] audit: type=1326 audit(1750926510.730:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.354292][ T28] audit: type=1326 audit(1750926510.730:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.385223][ T28] audit: type=1326 audit(1750926510.730:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.420956][ T1919] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 146.439150][ T28] audit: type=1326 audit(1750926510.730:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.485809][ T28] audit: type=1326 audit(1750926510.730:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.511448][ T28] audit: type=1326 audit(1750926510.730:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd1d8e929 code=0x7ffc0000 [ 146.584389][ T2288] netlink: 104 bytes leftover after parsing attributes in process `syz.4.516'. [ 146.612214][ T1919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.624939][ T1919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.636812][ T1919] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 146.646752][ T1919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.713634][ T1919] usb 4-1: config 0 descriptor?? [ 146.833037][ T2296] loop0: detected capacity change from 0 to 512 [ 147.031882][ T2296] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.080255][ T2292] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.515: path /93/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 147.133373][ T1919] usbhid 4-1:0.0: can't add hid device: -71 [ 147.139975][ T1919] usbhid: probe of 4-1:0.0 failed with error -71 [ 147.167041][ T1919] usb 4-1: USB disconnect, device number 8 [ 148.506474][ T285] EXT4-fs (loop0): unmounting filesystem. [ 149.080909][ T365] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 149.272914][ T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.291507][ T350] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.336306][ T365] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.345827][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.355191][ T365] usb 1-1: config 0 descriptor?? [ 150.215242][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.231630][ T350] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.241192][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.072902][ T365] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 151.092637][ T365] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0019/input/input25 [ 151.675209][ T350] usb 5-1: config 0 descriptor?? [ 151.785919][ T350] usb 5-1: can't set config #0, error -71 [ 151.799192][ T365] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 151.833741][ T350] usb 5-1: USB disconnect, device number 4 [ 151.836122][ T365] usb 1-1: USB disconnect, device number 12 [ 151.912182][ T2346] loop1: detected capacity change from 0 to 512 [ 152.074651][ T2346] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.123594][ T2346] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.529: path /101/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 152.191218][ T2350] fido_id[2350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 153.912594][ T282] EXT4-fs (loop1): unmounting filesystem. [ 155.012011][ T2385] device bridge0 entered promiscuous mode [ 155.028015][ T2385] device macsec1 entered promiscuous mode [ 155.036242][ T2385] bridge0: port 3(macsec1) entered blocking state [ 155.042876][ T2385] bridge0: port 3(macsec1) entered disabled state [ 155.054939][ T2385] device bridge0 left promiscuous mode [ 155.149731][ T2390] loop4: detected capacity change from 0 to 512 [ 156.043747][ T2390] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.069279][ T2390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.427616][ T2360] xt_TPROXY: Can be used only with -p tcp or -p udp [ 156.494657][ T2390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 156.503781][ T2390] System zones: 1-12 [ 156.552511][ T2406] loop3: detected capacity change from 0 to 4096 [ 156.574580][ T2390] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.542: corrupted in-inode xattr [ 156.594103][ T2390] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.542: couldn't read orphan inode 15 (err -117) [ 156.606420][ T2390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.625699][ T2390] futex_wake_op: syz.4.542 tries to shift op by -1; fix this program [ 156.693702][ T2406] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.999339][ T283] EXT4-fs (loop3): unmounting filesystem. [ 161.030791][ T2450] loop3: detected capacity change from 0 to 256 [ 161.057636][ T2450] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.186198][ T2450] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 161.226544][ T2450] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 161.261458][ T284] EXT4-fs (loop4): unmounting filesystem. [ 161.487971][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 161.487996][ T28] audit: type=1400 audit(1750926526.180:461): avc: denied { read append } for pid=2448 comm="syz.3.555" path="/111/file0/memory.events.local" dev="loop3" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 161.780720][ T28] audit: type=1400 audit(1750926526.470:462): avc: denied { ioctl } for pid=2468 comm="syz.1.559" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.806614][ T2469] input: syz1 as /devices/virtual/input/input26 [ 163.078019][ T2479] loop1: detected capacity change from 0 to 512 [ 163.135133][ T2479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 163.203956][ T2479] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.560: path /108/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 163.261074][ T2493] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.501426][ T2500] loop0: detected capacity change from 0 to 512 [ 163.525935][ T2500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.541456][ T2497] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.566: path /103/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 163.624090][ T285] EXT4-fs (loop0): unmounting filesystem. [ 163.647443][ T282] EXT4-fs (loop1): unmounting filesystem. [ 163.828908][ T2515] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.427260][ T2524] loop4: detected capacity change from 0 to 512 [ 164.430680][ T2526] netlink: 104 bytes leftover after parsing attributes in process `syz.3.573'. [ 164.445328][ T2524] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.572: invalid indirect mapped block 256 (level 2) [ 164.482184][ T2524] EXT4-fs (loop4): 2 truncates cleaned up [ 164.488290][ T2524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.901268][ T2528] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 164.995286][ T2535] fuse: Unknown parameter 'fd0x0000000000000003' [ 165.051695][ T28] audit: type=1400 audit(1750926529.750:463): avc: denied { write } for pid=2519 comm="syz.4.572" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.315009][ T28] audit: type=1400 audit(1750926529.750:464): avc: denied { add_name } for pid=2519 comm="syz.4.572" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.368740][ T28] audit: type=1400 audit(1750926529.770:465): avc: denied { read append open } for pid=2519 comm="syz.4.572" path="/123/file1/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.401478][ T284] EXT4-fs (loop4): unmounting filesystem. [ 165.405250][ T28] audit: type=1400 audit(1750926529.980:466): avc: denied { map } for pid=2519 comm="syz.4.572" path="/123/file1/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.469367][ T28] audit: type=1400 audit(1750926529.990:467): avc: denied { write } for pid=2519 comm="syz.4.572" path="/123/file1/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.548265][ T2539] FAULT_INJECTION: forcing a failure. [ 165.548265][ T2539] name failslab, interval 1, probability 0, space 0, times 1 [ 165.561408][ T2539] CPU: 0 PID: 2539 Comm: syz.1.575 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 165.571170][ T2539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.581274][ T2539] Call Trace: [ 165.584579][ T2539] [ 165.587535][ T2539] __dump_stack+0x21/0x24 [ 165.591906][ T2539] dump_stack_lvl+0xee/0x150 [ 165.596530][ T2539] ? __cfi_dump_stack_lvl+0x8/0x8 [ 165.601700][ T2539] ? __stack_depot_save+0x36/0x480 [ 165.606886][ T2539] dump_stack+0x15/0x24 [ 165.611092][ T2539] should_fail_ex+0x3d4/0x520 [ 165.615806][ T2539] __should_failslab+0xac/0xf0 [ 165.620609][ T2539] should_failslab+0x9/0x20 [ 165.625148][ T2539] slab_pre_alloc_hook+0x30/0x1e0 [ 165.630217][ T2539] kmem_cache_alloc_lru+0x49/0x280 [ 165.635354][ T2539] ? shmem_alloc_inode+0x28/0x40 [ 165.640323][ T2539] shmem_alloc_inode+0x28/0x40 [ 165.645115][ T2539] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 165.650605][ T2539] new_inode_pseudo+0x70/0x1f0 [ 165.655387][ T2539] new_inode+0x28/0x1e0 [ 165.659563][ T2539] ? _raw_spin_lock+0x8e/0xe0 [ 165.664272][ T2539] shmem_get_inode+0x349/0xc20 [ 165.669078][ T2539] __shmem_file_setup+0x113/0x2b0 [ 165.674140][ T2539] shmem_file_setup+0x2f/0x40 [ 165.678836][ T2539] __se_sys_memfd_create+0x1e6/0x3b0 [ 165.684140][ T2539] __x64_sys_memfd_create+0x5b/0x70 [ 165.689361][ T2539] x64_sys_call+0x235/0x9a0 [ 165.693911][ T2539] do_syscall_64+0x4c/0xa0 [ 165.698335][ T2539] ? clear_bhb_loop+0x30/0x80 [ 165.703135][ T2539] ? clear_bhb_loop+0x30/0x80 [ 165.707842][ T2539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.713759][ T2539] RIP: 0033:0x7fe47858e929 [ 165.718213][ T2539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.737920][ T2539] RSP: 002b:00007fe4793e2e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 165.746359][ T2539] RAX: ffffffffffffffda RBX: 0000000000000246 RCX: 00007fe47858e929 [ 165.754363][ T2539] RDX: 00007fe4793e2ef0 RSI: 0000000000000000 RDI: 00007fe4786114cc [ 165.762345][ T2539] RBP: 0000200000000ac0 R08: 00007fe4793e2bb7 R09: 00007fe4793e2e40 [ 165.770326][ T2539] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000740 [ 165.778321][ T2539] R13: 00007fe4793e2ef0 R14: 00007fe4793e2eb0 R15: 00002000000006c0 [ 165.786349][ T2539] [ 165.842688][ T2544] FAULT_INJECTION: forcing a failure. [ 165.842688][ T2544] name failslab, interval 1, probability 0, space 0, times 0 [ 165.855413][ T2544] CPU: 0 PID: 2544 Comm: syz.4.576 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 165.865177][ T2544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.874114][ T2539] loop1: detected capacity change from 0 to 1024 [ 165.875255][ T2544] Call Trace: [ 165.875263][ T2544] [ 165.888166][ T2544] __dump_stack+0x21/0x24 [ 165.892542][ T2544] dump_stack_lvl+0xee/0x150 [ 165.897178][ T2544] ? __cfi_dump_stack_lvl+0x8/0x8 [ 165.902248][ T2544] ? __stack_depot_save+0x36/0x480 [ 165.907411][ T2544] dump_stack+0x15/0x24 [ 165.911611][ T2544] should_fail_ex+0x3d4/0x520 [ 165.916307][ T2544] __should_failslab+0xac/0xf0 [ 165.921081][ T2544] should_failslab+0x9/0x20 [ 165.925625][ T2544] slab_pre_alloc_hook+0x30/0x1e0 [ 165.930705][ T2544] kmem_cache_alloc_lru+0x49/0x280 [ 165.935931][ T2544] ? shmem_alloc_inode+0x28/0x40 [ 165.940907][ T2544] shmem_alloc_inode+0x28/0x40 [ 165.945709][ T2544] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 165.951202][ T2544] new_inode_pseudo+0x70/0x1f0 [ 165.955999][ T2544] new_inode+0x28/0x1e0 [ 165.960174][ T2544] ? _raw_spin_lock+0x8e/0xe0 [ 165.964955][ T2544] shmem_get_inode+0x349/0xc20 [ 165.969739][ T2544] __shmem_file_setup+0x113/0x2b0 [ 165.974792][ T2544] shmem_file_setup+0x2f/0x40 [ 165.979498][ T2544] __se_sys_memfd_create+0x1e6/0x3b0 [ 165.984814][ T2544] __x64_sys_memfd_create+0x5b/0x70 [ 165.990065][ T2544] x64_sys_call+0x235/0x9a0 [ 165.994617][ T2544] do_syscall_64+0x4c/0xa0 [ 165.999166][ T2544] ? clear_bhb_loop+0x30/0x80 [ 166.003872][ T2544] ? clear_bhb_loop+0x30/0x80 [ 166.008730][ T2544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.014653][ T2544] RIP: 0033:0x7f388db8e929 [ 166.019081][ T2544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.038703][ T2544] RSP: 002b:00007f388ea60e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 166.047135][ T2544] RAX: ffffffffffffffda RBX: 0000000000000246 RCX: 00007f388db8e929 [ 166.055204][ T2544] RDX: 00007f388ea60ef0 RSI: 0000000000000000 RDI: 00007f388dc114cc [ 166.063268][ T2544] RBP: 0000200000000ac0 R08: 00007f388ea60bb7 R09: 00007f388ea60e40 [ 166.071247][ T2544] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000740 [ 166.079222][ T2544] R13: 00007f388ea60ef0 R14: 00007f388ea60eb0 R15: 00002000000006c0 [ 166.087204][ T2544] [ 166.104582][ T2539] EXT4-fs: Ignoring removed orlov option [ 166.110336][ T2539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.134998][ T2550] loop3: detected capacity change from 0 to 256 [ 166.151332][ T2539] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.155069][ T2550] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿ' [ 166.191690][ T414] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.446962][ T28] audit: type=1400 audit(1750926531.130:468): avc: denied { view } for pid=2549 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 166.708594][ T282] EXT4-fs (loop1): unmounting filesystem. [ 166.722568][ T2565] loop2: detected capacity change from 0 to 512 [ 166.804440][ T2565] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.871958][ T2561] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.579: path /121/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 167.300923][ T28] audit: type=1400 audit(1750926531.990:469): avc: denied { bind } for pid=2572 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.360905][ T28] audit: type=1400 audit(1750926532.030:470): avc: denied { setopt } for pid=2572 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.404534][ T28] audit: type=1400 audit(1750926532.030:471): avc: denied { write } for pid=2572 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.472055][ T286] EXT4-fs (loop2): unmounting filesystem. [ 167.718584][ T2589] loop3: detected capacity change from 0 to 128 [ 167.752037][ T2590] loop2: detected capacity change from 0 to 512 [ 167.890261][ T2590] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.945119][ T2590] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.586: path /122/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 167.967118][ T2589] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.000118][ T2589] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.032605][ T6] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.104353][ T2585] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.222002][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.239022][ T6] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.258400][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.274656][ T6] usb 1-1: config 0 descriptor?? [ 168.428541][ T286] EXT4-fs (loop2): unmounting filesystem. [ 168.435973][ T283] EXT4-fs (loop3): unmounting filesystem. [ 168.690573][ T6] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 168.715951][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001A/input/input28 [ 168.801041][ T1919] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.818056][ T6] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 169.012506][ T1919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.052728][ T1919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.091058][ T1919] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 169.100544][ T1919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.112589][ T1919] usb 3-1: config 0 descriptor?? [ 169.238600][ T19] usb 1-1: USB disconnect, device number 13 [ 169.732937][ T28] audit: type=1400 audit(1750926534.330:472): avc: denied { read write } for pid=2626 comm="syz.1.599" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 169.802244][ T28] audit: type=1400 audit(1750926534.330:473): avc: denied { open } for pid=2626 comm="syz.1.599" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 169.914651][ T2638] fuse: Unknown parameter 'fd0x0000000000000003' [ 170.071025][ T1919] usbhid 3-1:0.0: can't add hid device: -71 [ 170.077429][ T1919] usbhid: probe of 3-1:0.0 failed with error -71 [ 170.086056][ T1919] usb 3-1: USB disconnect, device number 6 [ 170.180532][ T2643] fuse: Unknown parameter 'fd0x0000000000000003' [ 170.283410][ T2646] FAULT_INJECTION: forcing a failure. [ 170.283410][ T2646] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.296556][ T2646] CPU: 1 PID: 2646 Comm: syz.4.603 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 170.306305][ T2646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.316471][ T2646] Call Trace: [ 170.319771][ T2646] [ 170.322712][ T2646] __dump_stack+0x21/0x24 [ 170.327072][ T2646] dump_stack_lvl+0xee/0x150 [ 170.331688][ T2646] ? __cfi_dump_stack_lvl+0x8/0x8 [ 170.336742][ T2646] dump_stack+0x15/0x24 [ 170.340921][ T2646] should_fail_ex+0x3d4/0x520 [ 170.345625][ T2646] should_fail+0xb/0x10 [ 170.349814][ T2646] should_fail_usercopy+0x1a/0x20 [ 170.354917][ T2646] _copy_to_user+0x1e/0x90 [ 170.359373][ T2646] simple_read_from_buffer+0xe9/0x160 [ 170.364786][ T2646] proc_fail_nth_read+0x19a/0x210 [ 170.369872][ T2646] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 170.375473][ T2646] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 170.381055][ T2646] vfs_read+0x26e/0x8c0 [ 170.385369][ T2646] ? __cfi_vfs_read+0x10/0x10 [ 170.390082][ T2646] ? __kasan_check_write+0x14/0x20 [ 170.395237][ T2646] ? mutex_lock+0x8d/0x1a0 [ 170.399699][ T2646] ? __cfi_mutex_lock+0x10/0x10 [ 170.404583][ T2646] ? __fdget_pos+0x2cd/0x380 [ 170.409203][ T2646] ? ksys_read+0x71/0x240 [ 170.413572][ T2646] ksys_read+0x140/0x240 [ 170.417842][ T2646] ? __cfi_ksys_read+0x10/0x10 [ 170.422650][ T2646] ? fpregs_restore_userregs+0x128/0x260 [ 170.428320][ T2646] __x64_sys_read+0x7b/0x90 [ 170.432880][ T2646] x64_sys_call+0x2f/0x9a0 [ 170.437354][ T2646] do_syscall_64+0x4c/0xa0 [ 170.441805][ T2646] ? clear_bhb_loop+0x30/0x80 [ 170.446498][ T2646] ? clear_bhb_loop+0x30/0x80 [ 170.451204][ T2646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.457144][ T2646] RIP: 0033:0x7f388db8d33c [ 170.461649][ T2646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 170.482012][ T2646] RSP: 002b:00007f388ea40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.490460][ T2646] RAX: ffffffffffffffda RBX: 00007f388ddb6160 RCX: 00007f388db8d33c [ 170.498527][ T2646] RDX: 000000000000000f RSI: 00007f388ea400a0 RDI: 000000000000000a [ 170.506519][ T2646] RBP: 00007f388ea40090 R08: 0000000000000000 R09: 0000000000000000 [ 170.514510][ T2646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.520865][ C0] sched: RT throttling activated [ 170.527457][ T2646] R13: 0000000000000000 R14: 00007f388ddb6160 R15: 00007ffdb07bd618 [ 170.535473][ T2646] [ 170.758113][ T2647] loop2: detected capacity change from 0 to 128 [ 170.825841][ T2647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 170.902706][ T2654] netlink: 104 bytes leftover after parsing attributes in process `syz.4.605'. [ 170.921660][ T2647] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.111178][ T2650] xt_TPROXY: Can be used only with -p tcp or -p udp [ 171.227175][ T286] EXT4-fs (loop2): unmounting filesystem. [ 171.457595][ T2666] loop0: detected capacity change from 0 to 512 [ 172.283429][ T2666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 172.352764][ T2664] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.608: path /111/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 172.574376][ T285] EXT4-fs (loop0): unmounting filesystem. [ 172.630565][ T28] audit: type=1400 audit(1750926537.320:474): avc: denied { ioctl } for pid=2678 comm="syz.0.611" path="socket:[22333]" dev="sockfs" ino=22333 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.657031][ T2679] overlayfs: failed to resolve './file2': -2 [ 172.693115][ T2685] netlink: 'syz.2.615': attribute type 27 has an invalid length. [ 172.702763][ T28] audit: type=1400 audit(1750926537.390:475): avc: denied { create } for pid=2684 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.763093][ T28] audit: type=1400 audit(1750926537.460:476): avc: denied { mount } for pid=2684 comm="syz.2.615" name="/" dev="configfs" ino=8021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 172.807527][ T28] audit: type=1400 audit(1750926537.480:477): avc: denied { create } for pid=2689 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.839521][ T2685] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.846969][ T2685] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.856623][ T28] audit: type=1400 audit(1750926537.530:478): avc: denied { setopt } for pid=2684 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.857654][ T2694] loop0: detected capacity change from 0 to 512 [ 172.906960][ T28] audit: type=1326 audit(1750926537.580:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2684 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096658e929 code=0x7ffc0000 [ 172.972846][ T28] audit: type=1326 audit(1750926537.580:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2684 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096658e929 code=0x7ffc0000 [ 173.005261][ T2694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.616: inode #2214592512: comm syz.0.616: iget: illegal inode # [ 173.036389][ T2694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.616: error while reading EA inode 2214592512 err=-117 [ 173.061847][ T2694] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 173.090116][ T2694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.616: inode #2214592512: comm syz.0.616: iget: illegal inode # [ 173.105437][ T2694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.616: error while reading EA inode 2214592512 err=-117 [ 173.118633][ T2694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.616: inode #1: comm syz.0.616: iget: illegal inode # [ 173.133688][ T2698] loop4: detected capacity change from 0 to 256 [ 173.150363][ T2694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.616: error while reading EA inode 1 err=-117 [ 173.150972][ T2698] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.186848][ T2698] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 173.195945][ T2694] EXT4-fs (loop0): 1 orphan inode deleted [ 173.197319][ T2698] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 173.210924][ T2694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.240472][ T2698] FAULT_INJECTION: forcing a failure. [ 173.240472][ T2698] name failslab, interval 1, probability 0, space 0, times 0 [ 173.253872][ T28] audit: type=1400 audit(1750926537.950:481): avc: denied { getopt } for pid=2689 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.286029][ T2698] CPU: 0 PID: 2698 Comm: syz.4.617 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 173.288100][ T28] audit: type=1400 audit(1750926537.970:482): avc: denied { name_bind } for pid=2689 comm="syz.0.616" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 173.295800][ T2698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.295813][ T2698] Call Trace: [ 173.295819][ T2698] [ 173.295826][ T2698] __dump_stack+0x21/0x24 [ 173.338210][ T2698] dump_stack_lvl+0xee/0x150 [ 173.342854][ T2698] ? __cfi_dump_stack_lvl+0x8/0x8 [ 173.347931][ T2698] ? xas_start+0x31e/0x3e0 [ 173.352400][ T2698] ? xas_load+0x390/0x3b0 [ 173.356407][ T28] audit: type=1400 audit(1750926537.970:483): avc: denied { node_bind } for pid=2689 comm="syz.0.616" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 173.356776][ T2698] dump_stack+0x15/0x24 [ 173.381540][ T2698] should_fail_ex+0x3d4/0x520 [ 173.386358][ T2698] __should_failslab+0xac/0xf0 [ 173.391260][ T2698] ? exfat_get_dentry_set+0x156/0x1360 [ 173.396761][ T2698] should_failslab+0x9/0x20 [ 173.401351][ T2698] __kmem_cache_alloc_node+0x3d/0x2c0 [ 173.406779][ T2698] ? exfat_get_dentry_set+0x1360/0x1360 [ 173.412394][ T2698] ? exfat_get_dentry_set+0x156/0x1360 [ 173.417892][ T2698] kmalloc_trace+0x29/0xb0 [ 173.422357][ T2698] exfat_get_dentry_set+0x156/0x1360 [ 173.427773][ T2698] ? __cfi_find_get_entries+0x10/0x10 [ 173.433191][ T2698] ? mlock_page_drain_local+0x10f/0x190 [ 173.438866][ T2698] ? truncate_inode_pages_range+0xbef/0xcc0 [ 173.444907][ T2698] ? __cfi_exfat_get_dentry_set+0x10/0x10 [ 173.450751][ T2698] ? exfat_set_vol_flags+0xed/0x2e0 [ 173.456079][ T2698] __exfat_write_inode+0x21d/0x880 [ 173.461270][ T2698] __exfat_truncate+0x40b/0x880 [ 173.466342][ T2698] ? __cfi___exfat_truncate+0x10/0x10 [ 173.472366][ T2698] ? current_time+0x1e6/0x2b0 [ 173.477696][ T2698] ? __cfi_current_time+0x10/0x10 [ 173.482850][ T2698] exfat_truncate+0x108/0x370 [ 173.487587][ T2698] exfat_write_end+0x20a/0x3d0 [ 173.492401][ T2698] generic_perform_write+0x3a2/0x6d0 [ 173.497712][ T2698] ? file_update_time+0x2dd/0x340 [ 173.502747][ T2698] ? __cfi_generic_perform_write+0x10/0x10 [ 173.508574][ T2698] ? __cfi_file_update_time+0x10/0x10 [ 173.513970][ T2698] __generic_file_write_iter+0x227/0x580 [ 173.519793][ T2698] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 173.525539][ T2698] ? __cfi___generic_file_write_iter+0x10/0x10 [ 173.531695][ T2698] ? rwsem_write_trylock+0x130/0x300 [ 173.537177][ T2698] ? generic_write_checks_count+0x3c6/0x4a0 [ 173.543086][ T2698] ? generic_write_checks+0xa8/0x100 [ 173.548389][ T2698] generic_file_write_iter+0xae/0x310 [ 173.553788][ T2698] vfs_write+0x5db/0xca0 [ 173.558095][ T2698] ? slab_free_freelist_hook+0xc2/0x190 [ 173.563668][ T2698] ? __cfi_vfs_write+0x10/0x10 [ 173.568447][ T2698] ? __cfi_mutex_lock+0x10/0x10 [ 173.573398][ T2698] ? __fdget_pos+0x2cd/0x380 [ 173.578007][ T2698] ? ksys_write+0x71/0x240 [ 173.582438][ T2698] ksys_write+0x140/0x240 [ 173.586793][ T2698] ? __cfi_ksys_write+0x10/0x10 [ 173.591651][ T2698] ? debug_smp_processor_id+0x17/0x20 [ 173.597033][ T2698] __x64_sys_write+0x7b/0x90 [ 173.601646][ T2698] x64_sys_call+0x27b/0x9a0 [ 173.606250][ T2698] do_syscall_64+0x4c/0xa0 [ 173.610673][ T2698] ? clear_bhb_loop+0x30/0x80 [ 173.615350][ T2698] ? clear_bhb_loop+0x30/0x80 [ 173.620035][ T2698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.625931][ T2698] RIP: 0033:0x7f388db8e929 [ 173.630392][ T2698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.650369][ T2698] RSP: 002b:00007f388ea82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.658811][ T2698] RAX: ffffffffffffffda RBX: 00007f388ddb5fa0 RCX: 00007f388db8e929 [ 173.666809][ T2698] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000004 [ 173.674791][ T2698] RBP: 00007f388ea82090 R08: 0000000000000000 R09: 0000000000000000 [ 173.682773][ T2698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.691182][ T2698] R13: 0000000000000000 R14: 00007f388ddb5fa0 R15: 00007ffdb07bd618 [ 173.699202][ T2698] [ 173.791785][ T285] EXT4-fs (loop0): unmounting filesystem. [ 176.817234][ T2733] loop1: detected capacity change from 0 to 512 [ 176.829290][ T2732] loop0: detected capacity change from 0 to 256 [ 176.836758][ T2733] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 176.848508][ T2733] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.627: path /119/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 176.899782][ T2732] FAT-fs (loop0): Unrecognized mount option "shorÏame=win95" or missing value [ 177.004521][ T2739] loop3: detected capacity change from 0 to 512 [ 177.198911][ T282] EXT4-fs (loop1): unmounting filesystem. [ 177.214041][ T2739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.259403][ T2737] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.626: path /126/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 178.433541][ T283] EXT4-fs (loop3): unmounting filesystem. [ 178.601835][ T975] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 180.440955][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 180.440984][ T28] audit: type=1400 audit(1750926545.090:485): avc: denied { ioctl } for pid=2759 comm="syz.1.636" path="socket:[22520]" dev="sockfs" ino=22520 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 180.621353][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.634998][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.750939][ T975] usb 3-1: device not accepting address 7, error -71 [ 181.287557][ T2787] loop4: detected capacity change from 0 to 128 [ 181.294323][ T2787] ext4: Unknown parameter 'uid' [ 181.593941][ T2789] loop0: detected capacity change from 0 to 512 [ 182.167844][ T28] audit: type=1400 audit(1750926546.860:486): avc: denied { unlink } for pid=2785 comm="syz.4.641" name="#3" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 182.298259][ T2789] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 182.341583][ T2788] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.640: path /118/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 182.363734][ T28] audit: type=1400 audit(1750926547.040:487): avc: denied { create } for pid=2791 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.391381][ T28] audit: type=1400 audit(1750926547.040:488): avc: denied { setopt } for pid=2791 comm="syz.2.642" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.413961][ T28] audit: type=1400 audit(1750926547.040:489): avc: denied { connect } for pid=2791 comm="syz.2.642" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.423196][ T2798] netlink: 104 bytes leftover after parsing attributes in process `syz.4.644'. [ 182.554718][ T285] EXT4-fs (loop0): unmounting filesystem. [ 182.601040][ T2770] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 182.605390][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.892940][ T2770] Bluetooth: hci0: command 0x1003 tx timeout [ 183.105364][ T2810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 184.351880][ T2835] loop0: detected capacity change from 0 to 512 [ 184.378583][ T2835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.390183][ T2835] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.653: path /120/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 184.469897][ T2838] device lo entered promiscuous mode [ 184.481032][ T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.911239][ T28] audit: type=1400 audit(1750926550.440:490): avc: denied { write } for pid=2837 comm="syz.3.656" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.971960][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.987113][ T285] EXT4-fs (loop0): unmounting filesystem. [ 186.000952][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.035678][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 186.039107][ T2843] FAULT_INJECTION: forcing a failure. [ 186.039107][ T2843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.056221][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.063568][ T2843] CPU: 1 PID: 2843 Comm: syz.0.657 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 186.075577][ T2843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.085678][ T2843] Call Trace: [ 186.088996][ T2843] [ 186.091964][ T2843] __dump_stack+0x21/0x24 [ 186.096331][ T2843] dump_stack_lvl+0xee/0x150 [ 186.100965][ T2843] ? __cfi_dump_stack_lvl+0x8/0x8 [ 186.106087][ T2843] dump_stack+0x15/0x24 [ 186.110287][ T2843] should_fail_ex+0x3d4/0x520 [ 186.111433][ T19] usb 2-1: config 0 descriptor?? [ 186.115001][ T2843] should_fail+0xb/0x10 [ 186.124118][ T2843] should_fail_usercopy+0x1a/0x20 [ 186.129184][ T2843] _copy_to_user+0x1e/0x90 [ 186.133628][ T2843] simple_read_from_buffer+0xe9/0x160 [ 186.139047][ T2843] proc_fail_nth_read+0x19a/0x210 [ 186.144123][ T2843] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 186.149712][ T2843] ? security_file_permission+0x94/0xb0 [ 186.155298][ T2843] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 186.160892][ T2843] vfs_read+0x26e/0x8c0 [ 186.165105][ T2843] ? __cfi_vfs_read+0x10/0x10 [ 186.169818][ T2843] ? __kasan_check_write+0x14/0x20 [ 186.174961][ T2843] ? mutex_lock+0x8d/0x1a0 [ 186.179410][ T2843] ? __cfi_mutex_lock+0x10/0x10 [ 186.184303][ T2843] ? __fdget_pos+0x2cd/0x380 [ 186.188936][ T2843] ? ksys_read+0x71/0x240 [ 186.193318][ T2843] ksys_read+0x140/0x240 [ 186.197608][ T2843] ? __cfi_ksys_read+0x10/0x10 [ 186.202408][ T2843] ? debug_smp_processor_id+0x17/0x20 [ 186.207906][ T2843] __x64_sys_read+0x7b/0x90 [ 186.212463][ T2843] x64_sys_call+0x2f/0x9a0 [ 186.217362][ T2843] do_syscall_64+0x4c/0xa0 [ 186.221977][ T2843] ? clear_bhb_loop+0x30/0x80 [ 186.226688][ T2843] ? clear_bhb_loop+0x30/0x80 [ 186.231406][ T2843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.237352][ T2843] RIP: 0033:0x7f2cd1d8d33c [ 186.241797][ T2843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.260975][ T1919] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.261433][ T2843] RSP: 002b:00007f2cd2b33030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.261460][ T2843] RAX: ffffffffffffffda RBX: 00007f2cd1fb5fa0 RCX: 00007f2cd1d8d33c [ 186.285456][ T2843] RDX: 000000000000000f RSI: 00007f2cd2b330a0 RDI: 0000000000000005 [ 186.293615][ T2843] RBP: 00007f2cd2b33090 R08: 0000000000000000 R09: 0000000000000000 [ 186.301625][ T2843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.309634][ T2843] R13: 0000000000000000 R14: 00007f2cd1fb5fa0 R15: 00007ffc3193e138 [ 186.317647][ T2843] [ 186.466485][ T2848] loop2: detected capacity change from 0 to 512 [ 186.525220][ T2848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 186.536724][ T2848] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.655: path /137/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 186.645921][ T19] usbhid 2-1:0.0: can't add hid device: -71 [ 186.652016][ T19] usbhid: probe of 2-1:0.0 failed with error -71 [ 186.671944][ T19] usb 2-1: USB disconnect, device number 6 [ 186.678083][ T1919] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 186.690522][ T1919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.701613][ T1919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.702192][ T304] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 186.725894][ T1919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 186.759945][ T1919] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 186.771691][ T286] EXT4-fs (loop2): unmounting filesystem. [ 186.777649][ T1919] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 186.786044][ T1919] usb 4-1: Manufacturer: syz [ 186.793977][ T1919] usb 4-1: config 0 descriptor?? [ 186.969370][ T304] usb 1-1: Using ep0 maxpacket: 16 [ 186.975915][ T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.997330][ T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.020902][ T304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.033824][ T304] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.042956][ T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.053190][ T304] usb 1-1: config 0 descriptor?? [ 187.387245][ T1919] appleir 0003:05AC:8243.001B: item fetching failed at offset 0/1 [ 187.395430][ T1919] appleir 0003:05AC:8243.001B: parse failed [ 187.401458][ T1919] appleir: probe of 0003:05AC:8243.001B failed with error -22 [ 187.684015][ T304] usbhid 1-1:0.0: can't add hid device: -71 [ 187.693461][ T304] usbhid: probe of 1-1:0.0 failed with error -71 [ 187.712593][ T304] usb 1-1: USB disconnect, device number 14 [ 188.736398][ T350] usb 4-1: USB disconnect, device number 9 [ 189.066435][ T2896] loop3: detected capacity change from 0 to 512 [ 189.145617][ T2896] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.189813][ T2893] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.668: path /133/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 189.307694][ T2900] xt_TPROXY: Can be used only with -p tcp or -p udp [ 189.409635][ T2910] device syzkaller0 entered promiscuous mode [ 189.423757][ T2910] FAULT_INJECTION: forcing a failure. [ 189.423757][ T2910] name failslab, interval 1, probability 0, space 0, times 0 [ 189.449718][ T2910] CPU: 0 PID: 2910 Comm: syz.4.675 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 189.459594][ T2910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.469904][ T2910] Call Trace: [ 189.473215][ T2910] [ 189.476181][ T2910] __dump_stack+0x21/0x24 [ 189.480542][ T2910] dump_stack_lvl+0xee/0x150 [ 189.485178][ T2910] ? __cfi_dump_stack_lvl+0x8/0x8 [ 189.490240][ T2910] ? __local_bh_enable_ip+0x58/0x80 [ 189.495483][ T2910] ? release_sock+0x169/0x1c0 [ 189.500208][ T2910] dump_stack+0x15/0x24 [ 189.504512][ T2910] should_fail_ex+0x3d4/0x520 [ 189.509240][ T2910] __should_failslab+0xac/0xf0 [ 189.514129][ T2910] should_failslab+0x9/0x20 [ 189.518675][ T2910] kmem_cache_alloc_node+0x42/0x340 [ 189.523903][ T2910] ? __alloc_skb+0xea/0x4b0 [ 189.528442][ T2910] __alloc_skb+0xea/0x4b0 [ 189.532799][ T2910] ? netlink_autobind+0x168/0x1a0 [ 189.537849][ T2910] netlink_sendmsg+0x626/0xbc0 [ 189.542661][ T2910] ? __cfi_netlink_sendmsg+0x10/0x10 [ 189.548093][ T2910] ? security_socket_sendmsg+0x93/0xb0 [ 189.553615][ T2910] ? __cfi_netlink_sendmsg+0x10/0x10 [ 189.559051][ T2910] ____sys_sendmsg+0x5a9/0x990 [ 189.563846][ T2910] ? __sys_sendmsg_sock+0x40/0x40 [ 189.568914][ T2910] ? import_iovec+0x7c/0xb0 [ 189.573451][ T2910] ___sys_sendmsg+0x21c/0x290 [ 189.578151][ T2910] ? __sys_sendmsg+0x270/0x270 [ 189.582940][ T2910] ? __kasan_check_write+0x14/0x20 [ 189.588079][ T2910] ? proc_fail_nth_write+0x17a/0x1f0 [ 189.593393][ T2910] ? vfs_write+0x9d6/0xca0 [ 189.597841][ T2910] ? __fdget+0x19c/0x220 [ 189.602106][ T2910] __x64_sys_sendmsg+0x1f0/0x2c0 [ 189.607159][ T2910] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 189.612661][ T2910] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 189.618770][ T2910] x64_sys_call+0x171/0x9a0 [ 189.623309][ T2910] do_syscall_64+0x4c/0xa0 [ 189.627838][ T2910] ? clear_bhb_loop+0x30/0x80 [ 189.632691][ T2910] ? clear_bhb_loop+0x30/0x80 [ 189.637402][ T2910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.643323][ T2910] RIP: 0033:0x7f388db8e929 [ 189.647766][ T2910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.667421][ T2910] RSP: 002b:00007f388ea82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.675893][ T2910] RAX: ffffffffffffffda RBX: 00007f388ddb5fa0 RCX: 00007f388db8e929 [ 189.684016][ T2910] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000007 [ 189.692122][ T2910] RBP: 00007f388ea82090 R08: 0000000000000000 R09: 0000000000000000 [ 189.700109][ T2910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.708084][ T2910] R13: 0000000000000000 R14: 00007f388ddb5fa0 R15: 00007ffdb07bd618 [ 189.716073][ T2910] [ 189.821734][ T283] EXT4-fs (loop3): unmounting filesystem. [ 189.941414][ T2918] fuse: Bad value for 'fd' [ 190.144698][ T2920] FAULT_INJECTION: forcing a failure. [ 190.144698][ T2920] name failslab, interval 1, probability 0, space 0, times 0 [ 190.157511][ T2920] CPU: 1 PID: 2920 Comm: syz.4.677 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 190.167274][ T2920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.177361][ T2920] Call Trace: [ 190.180665][ T2920] [ 190.183617][ T2920] __dump_stack+0x21/0x24 [ 190.187980][ T2920] dump_stack_lvl+0xee/0x150 [ 190.192643][ T2920] ? __cfi_dump_stack_lvl+0x8/0x8 [ 190.197793][ T2920] ? __stack_depot_save+0x17f/0x480 [ 190.203104][ T2920] dump_stack+0x15/0x24 [ 190.207284][ T2920] should_fail_ex+0x3d4/0x520 [ 190.211998][ T2920] __should_failslab+0xac/0xf0 [ 190.216818][ T2920] should_failslab+0x9/0x20 [ 190.221368][ T2920] slab_pre_alloc_hook+0x30/0x1e0 [ 190.226420][ T2920] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 190.232180][ T2920] kmem_cache_alloc_lru+0x49/0x280 [ 190.237335][ T2920] ? shmem_alloc_inode+0x28/0x40 [ 190.242296][ T2920] ? new_inode_pseudo+0x5d/0x1f0 [ 190.247256][ T2920] shmem_alloc_inode+0x28/0x40 [ 190.252044][ T2920] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 190.257527][ T2920] new_inode_pseudo+0x70/0x1f0 [ 190.262310][ T2920] new_inode+0x28/0x1e0 [ 190.266478][ T2920] ? _raw_spin_lock+0x8e/0xe0 [ 190.271188][ T2920] shmem_get_inode+0x349/0xc20 [ 190.275997][ T2920] __shmem_file_setup+0x113/0x2b0 [ 190.281059][ T2920] shmem_file_setup+0x2f/0x40 [ 190.285774][ T2920] __se_sys_memfd_create+0x1e6/0x3b0 [ 190.291096][ T2920] __x64_sys_memfd_create+0x5b/0x70 [ 190.296478][ T2920] x64_sys_call+0x235/0x9a0 [ 190.301027][ T2920] do_syscall_64+0x4c/0xa0 [ 190.305479][ T2920] ? clear_bhb_loop+0x30/0x80 [ 190.310281][ T2920] ? clear_bhb_loop+0x30/0x80 [ 190.314983][ T2920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.320994][ T2920] RIP: 0033:0x7f388db8e929 [ 190.325462][ T2920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.345099][ T2920] RSP: 002b:00007f388ea3fe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 190.353657][ T2920] RAX: ffffffffffffffda RBX: 0000000000000246 RCX: 00007f388db8e929 [ 190.361654][ T2920] RDX: 00007f388ea3fef0 RSI: 0000000000000000 RDI: 00007f388dc114cc [ 190.369656][ T2920] RBP: 0000200000000ac0 R08: 00007f388ea3fbb7 R09: 00007f388ea3fe40 [ 190.377657][ T2920] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000740 [ 190.385664][ T2920] R13: 00007f388ea3fef0 R14: 00007f388ea3feb0 R15: 00002000000006c0 [ 190.393676][ T2920] [ 190.402025][ T2919] loop4: detected capacity change from 0 to 1024 [ 190.408848][ T2919] EXT4-fs: Ignoring removed orlov option [ 190.414756][ T2919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.506958][ T2919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.866319][ T284] EXT4-fs (loop4): unmounting filesystem. [ 191.515838][ T2957] syz.4.687[2957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.515987][ T2957] syz.4.687[2957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.201597][ T2960] netlink: 104 bytes leftover after parsing attributes in process `syz.2.689'. [ 192.402927][ T2955] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.477912][ T2964] netlink: 104 bytes leftover after parsing attributes in process `syz.4.690'. [ 194.857618][ T2976] loop1: detected capacity change from 0 to 512 [ 194.970680][ T2976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.982830][ T2976] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.693: path /134/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 195.221203][ T282] EXT4-fs (loop1): unmounting filesystem. [ 195.324897][ T2999] loop1: detected capacity change from 0 to 128 [ 195.632538][ T3002] loop1: detected capacity change from 0 to 256 [ 195.644305][ T3002] exfat: Deprecated parameter 'utf8' [ 195.649952][ T3002] exfat: Deprecated parameter 'namecase' [ 196.485598][ T3002] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1dd7500f, utbl_chksum : 0xe619d30d) [ 197.315692][ T3011] loop0: detected capacity change from 0 to 512 [ 197.472110][ T3011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 197.517749][ T3007] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.700: path /126/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 197.551130][ T3015] loop1: detected capacity change from 0 to 512 [ 197.607718][ T3015] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.698758][ T3015] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.712079][ T285] EXT4-fs (loop0): unmounting filesystem. [ 198.726496][ T3015] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 198.814646][ T3015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 198.838786][ T3015] System zones: 1-12 [ 198.852987][ T3015] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.703: corrupted in-inode xattr [ 199.082357][ T3015] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.703: couldn't read orphan inode 15 (err -117) [ 199.187246][ T3015] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 199.308337][ T28] audit: type=1400 audit(1750926564.000:491): avc: denied { lock } for pid=3014 comm="syz.1.703" path="/136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuacct.usage_sys" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 199.479718][ T3039] loop3: detected capacity change from 0 to 256 [ 199.492322][ T28] audit: type=1400 audit(1750926564.180:492): avc: denied { mounton } for pid=3034 comm="syz.3.707" path="/139/file0" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 199.871246][ T28] audit: type=1400 audit(1750926564.230:493): avc: denied { mount } for pid=3034 comm="syz.3.707" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 200.032965][ T3043] loop2: detected capacity change from 0 to 512 [ 200.050700][ T3043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.063612][ T3043] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.709: path /151/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 200.209318][ T282] EXT4-fs (loop1): unmounting filesystem. [ 200.216163][ T286] EXT4-fs (loop2): unmounting filesystem. [ 201.765156][ T3060] loop4: detected capacity change from 0 to 128 [ 201.780706][ T28] audit: type=1400 audit(1750926566.470:494): avc: denied { read write } for pid=3062 comm="syz.2.715" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 201.874267][ T28] audit: type=1400 audit(1750926566.520:495): avc: denied { open } for pid=3062 comm="syz.2.715" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 202.010791][ T28] audit: type=1400 audit(1750926566.700:496): avc: denied { ioctl } for pid=3062 comm="syz.2.715" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 202.134390][ T28] audit: type=1400 audit(1750926566.740:497): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 202.156621][ T3074] capability: warning: `syz.3.716' uses deprecated v2 capabilities in a way that may be insecure [ 202.499690][ T3078] loop4: detected capacity change from 0 to 512 [ 202.586911][ T3078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.667666][ T3078] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.717: path /152/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 202.833647][ T3081] netlink: 104 bytes leftover after parsing attributes in process `syz.3.719'. [ 203.203372][ T3090] device syzkaller0 entered promiscuous mode [ 203.517936][ T284] EXT4-fs (loop4): unmounting filesystem. [ 204.091863][ T3111] loop3: detected capacity change from 0 to 256 [ 205.550359][ T3116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.701350][ T1919] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.066650][ T3128] loop4: detected capacity change from 0 to 512 [ 206.726478][ T3128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 206.772869][ T28] audit: type=1400 audit(1750926571.470:498): avc: denied { getopt } for pid=3126 comm="syz.0.731" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.794107][ T3127] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.730: path /154/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 208.057932][ T3132] xt_TPROXY: Can be used only with -p tcp or -p udp [ 208.111437][ T1919] usb 2-1: device descriptor read/all, error -71 [ 208.139265][ T3141] loop1: detected capacity change from 0 to 256 [ 208.517972][ T3145] FAULT_INJECTION: forcing a failure. [ 208.517972][ T3145] name failslab, interval 1, probability 0, space 0, times 0 [ 208.530685][ T3145] CPU: 1 PID: 3145 Comm: syz.0.731 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 208.540519][ T3145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.550595][ T3145] Call Trace: [ 208.553893][ T3145] [ 208.556842][ T3145] __dump_stack+0x21/0x24 [ 208.561213][ T3145] dump_stack_lvl+0xee/0x150 [ 208.565856][ T3145] ? __cfi_dump_stack_lvl+0x8/0x8 [ 208.570936][ T3145] dump_stack+0x15/0x24 [ 208.575156][ T3145] should_fail_ex+0x3d4/0x520 [ 208.579880][ T3145] __should_failslab+0xac/0xf0 [ 208.584680][ T3145] ? __se_sys_mount+0x153/0x380 [ 208.589579][ T3145] should_failslab+0x9/0x20 [ 208.594135][ T3145] __kmem_cache_alloc_node+0x3d/0x2c0 [ 208.599536][ T3145] ? __se_sys_mount+0x153/0x380 [ 208.604495][ T3145] kmalloc_trace+0x29/0xb0 [ 208.608932][ T3145] __se_sys_mount+0x153/0x380 [ 208.613621][ T3145] ? __x64_sys_mount+0xd0/0xd0 [ 208.618394][ T3145] ? __kasan_check_write+0x14/0x20 [ 208.623516][ T3145] ? fpregs_restore_userregs+0x128/0x260 [ 208.629175][ T3145] __x64_sys_mount+0xbf/0xd0 [ 208.633801][ T3145] x64_sys_call+0x65d/0x9a0 [ 208.638315][ T3145] do_syscall_64+0x4c/0xa0 [ 208.642737][ T3145] ? clear_bhb_loop+0x30/0x80 [ 208.647437][ T3145] ? clear_bhb_loop+0x30/0x80 [ 208.652149][ T3145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.658079][ T3145] RIP: 0033:0x7f2cd1d8e929 [ 208.662516][ T3145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.682282][ T3145] RSP: 002b:00007f2cd1bff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.690725][ T3145] RAX: ffffffffffffffda RBX: 00007f2cd1fb6160 RCX: 00007f2cd1d8e929 [ 208.698764][ T3145] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 208.706837][ T3145] RBP: 00007f2cd1bff090 R08: 0000200000000340 R09: 0000000000000000 [ 208.714820][ T3145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.722795][ T3145] R13: 0000000000000000 R14: 00007f2cd1fb6160 R15: 00007ffc3193e138 [ 208.730876][ T3145] [ 208.734794][ T284] EXT4-fs (loop4): unmounting filesystem. [ 208.753488][ T3141] FAT-fs (loop1): Directory bread(block 64) failed [ 208.770633][ T3141] FAT-fs (loop1): Directory bread(block 65) failed [ 208.777461][ T3141] FAT-fs (loop1): Directory bread(block 66) failed [ 208.784561][ T3141] FAT-fs (loop1): Directory bread(block 67) failed [ 208.791299][ T3141] FAT-fs (loop1): Directory bread(block 68) failed [ 208.797899][ T3141] FAT-fs (loop1): Directory bread(block 69) failed [ 208.807308][ T3141] FAT-fs (loop1): Directory bread(block 70) failed [ 208.813309][ T3154] netlink: 104 bytes leftover after parsing attributes in process `syz.4.734'. [ 208.815818][ T3141] FAT-fs (loop1): Directory bread(block 71) failed [ 208.848247][ T3141] FAT-fs (loop1): Directory bread(block 72) failed [ 208.863307][ T3141] FAT-fs (loop1): Directory bread(block 73) failed [ 209.271216][ T28] audit: type=1400 audit(1750926573.910:499): avc: denied { write } for pid=3139 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 211.530455][ T3192] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.670037][ T3199] loop3: detected capacity change from 0 to 512 [ 211.790209][ T3199] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 211.875881][ T1919] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 211.919682][ T3199] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.744: path /148/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 212.452162][ T1919] usb 1-1: config 1 has an invalid descriptor of length 87, skipping remainder of the config [ 212.467196][ T1919] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.498512][ T1919] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 33771, setting to 64 [ 212.529920][ T1919] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.553801][ T1919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.575876][ T1919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.585926][ T3215] loop2: detected capacity change from 0 to 256 [ 212.593461][ T1919] usb 1-1: Product: syz [ 212.597792][ T1919] usb 1-1: Manufacturer: syz [ 212.616161][ T3215] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.627845][ T1919] usb 1-1: SerialNumber: syz [ 212.646949][ T3215] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 212.662208][ T283] EXT4-fs (loop3): unmounting filesystem. [ 212.685923][ T28] audit: type=1400 audit(1750926577.380:500): avc: denied { connect } for pid=3214 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.707949][ T28] audit: type=1400 audit(1750926577.380:501): avc: denied { read } for pid=3214 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.748403][ T28] audit: type=1400 audit(1750926577.430:502): avc: denied { write } for pid=3214 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.788341][ T3224] netlink: 44 bytes leftover after parsing attributes in process `syz.2.754'. [ 212.861556][ T28] audit: type=1400 audit(1750926577.510:503): avc: denied { create } for pid=3221 comm="syz.3.753" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.944678][ T28] audit: type=1400 audit(1750926577.520:504): avc: denied { ioctl } for pid=3221 comm="syz.3.753" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24436 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 213.894249][ T3241] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.985318][ T1919] cdc_ncm 1-1:1.0: bind() failure [ 214.004203][ T1919] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 214.012640][ T1919] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 214.023674][ T1919] usb 1-1: USB disconnect, device number 15 [ 214.793128][ T3256] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 215.037715][ T3255] loop1: detected capacity change from 0 to 512 [ 215.475829][ T3255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.493586][ T28] audit: type=1400 audit(1750926579.440:505): avc: denied { mount } for pid=3249 comm="syz.3.762" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 215.525261][ T3251] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.761: path /148/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 215.684737][ T282] EXT4-fs (loop1): unmounting filesystem. [ 215.931060][ T3262] FAULT_INJECTION: forcing a failure. [ 215.931060][ T3262] name failslab, interval 1, probability 0, space 0, times 0 [ 215.932737][ T3264] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 215.943824][ T3262] CPU: 0 PID: 3262 Comm: syz.2.764 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 215.961746][ T3262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.971823][ T3262] Call Trace: [ 215.975118][ T3262] [ 215.978122][ T3262] __dump_stack+0x21/0x24 [ 215.982515][ T3262] dump_stack_lvl+0xee/0x150 [ 215.987143][ T3262] ? __cfi_dump_stack_lvl+0x8/0x8 [ 215.992463][ T3262] dump_stack+0x15/0x24 [ 215.997201][ T3262] should_fail_ex+0x3d4/0x520 [ 216.002071][ T3262] ? getname_flags+0xb9/0x500 [ 216.006771][ T3262] __should_failslab+0xac/0xf0 [ 216.011812][ T3262] should_failslab+0x9/0x20 [ 216.016340][ T3262] kmem_cache_alloc+0x3b/0x330 [ 216.021634][ T3262] getname_flags+0xb9/0x500 [ 216.026157][ T3262] user_path_at_empty+0x30/0x1c0 [ 216.031199][ T3262] __se_sys_mount+0x2e3/0x380 [ 216.035962][ T3262] ? __x64_sys_mount+0xd0/0xd0 [ 216.040765][ T3262] ? __cfi_ksys_write+0x10/0x10 [ 216.045635][ T3262] __x64_sys_mount+0xbf/0xd0 [ 216.050281][ T3262] x64_sys_call+0x65d/0x9a0 [ 216.054831][ T3262] do_syscall_64+0x4c/0xa0 [ 216.059384][ T3262] ? clear_bhb_loop+0x30/0x80 [ 216.064089][ T3262] ? clear_bhb_loop+0x30/0x80 [ 216.068779][ T3262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.074689][ T3262] RIP: 0033:0x7f096658e929 [ 216.079127][ T3262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.099271][ T3262] RSP: 002b:00007f0967373038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.107713][ T3262] RAX: ffffffffffffffda RBX: 00007f09667b6080 RCX: 00007f096658e929 [ 216.115713][ T3262] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 216.123719][ T3262] RBP: 00007f0967373090 R08: 0000200000000340 R09: 0000000000000000 [ 216.131974][ T3262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.139973][ T3262] R13: 0000000000000000 R14: 00007f09667b6080 R15: 00007fff7703bbb8 [ 216.148150][ T3262] [ 216.346556][ T28] audit: type=1326 audit(1750926580.870:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 216.578317][ T28] audit: type=1326 audit(1750926580.880:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.4.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388db8e929 code=0x7ffc0000 [ 216.771074][ T28] audit: type=1400 audit(1750926581.030:508): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 217.036716][ T28] audit: type=1400 audit(1750926581.240:509): avc: denied { map } for pid=3266 comm="syz.3.767" path="socket:[24779]" dev="sockfs" ino=24779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 217.144646][ T3290] netlink: 104 bytes leftover after parsing attributes in process `syz.3.772'. [ 217.530531][ T3296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 217.687681][ T3303] loop1: detected capacity change from 0 to 256 [ 218.198998][ T3314] loop0: detected capacity change from 0 to 512 [ 218.349350][ T3314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 218.377687][ T3314] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.777: path /138/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 218.505297][ T3306] loop4: detected capacity change from 0 to 40427 [ 218.514878][ T3320] FAULT_INJECTION: forcing a failure. [ 218.514878][ T3320] name failslab, interval 1, probability 0, space 0, times 0 [ 218.526060][ T3306] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 218.535839][ T3320] CPU: 0 PID: 3320 Comm: syz.2.780 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 218.545792][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.556044][ T3320] Call Trace: [ 218.559434][ T3320] [ 218.562464][ T3320] __dump_stack+0x21/0x24 [ 218.566834][ T3320] dump_stack_lvl+0xee/0x150 [ 218.571475][ T3320] ? __cfi_dump_stack_lvl+0x8/0x8 [ 218.576597][ T3320] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 218.582620][ T3320] ? __wake_up+0x11b/0x190 [ 218.587108][ T3320] dump_stack+0x15/0x24 [ 218.591304][ T3320] should_fail_ex+0x3d4/0x520 [ 218.591412][ T3306] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 218.596118][ T3320] __should_failslab+0xac/0xf0 [ 218.605628][ T3306] F2FS-fs (loop4): invalid crc value [ 218.609040][ T3320] should_failslab+0x9/0x20 [ 218.616729][ T3306] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 218.619004][ T3320] kmem_cache_alloc_node+0x42/0x340 [ 218.632877][ T3306] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 218.634739][ T3320] ? __alloc_skb+0xea/0x4b0 [ 218.648102][ T3320] ? security_sid_to_context+0x33/0x40 [ 218.653624][ T3320] __alloc_skb+0xea/0x4b0 [ 218.657997][ T3320] ctnetlink_conntrack_event+0x398/0x1200 [ 218.663777][ T3320] ? __cfi_ctnetlink_conntrack_event+0x10/0x10 [ 218.667533][ T3306] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 218.670064][ T3320] ? ctnetlink_conntrack_event+0xe8e/0x1200 [ 218.677319][ T3306] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 218.683190][ T3320] __nf_conntrack_eventmask_report+0x125/0x230 [ 218.683232][ T3320] nf_conntrack_eventmask_report+0x21b/0x3e0 [ 218.683255][ T3320] ? __cfi_nf_conntrack_eventmask_report+0x10/0x10 [ 218.683278][ T3320] ? __kasan_check_write+0x14/0x20 [ 218.715512][ T3320] nf_ct_delete+0xce/0x430 [ 218.719975][ T3320] ? memset+0x35/0x40 [ 218.724006][ T3320] ? nf_ct_iterate_cleanup+0xf8/0x4d0 [ 218.729424][ T3320] ? nf_ct_iterate_cleanup+0xf8/0x4d0 [ 218.734837][ T3320] nf_ct_iterate_cleanup+0x31d/0x4d0 [ 218.740168][ T3320] ? __cfi_ctnetlink_flush_iterate+0x10/0x10 [ 218.744793][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 218.744812][ T28] audit: type=1400 audit(1750926583.430:513): avc: denied { create } for pid=3305 comm="syz.4.776" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 218.746189][ T3320] ? nf_ct_iterate_cleanup+0xf8/0x4d0 [ 218.760592][ T3306] device bridge1 entered promiscuous mode [ 218.772251][ T3320] ? __cfi_ctnetlink_flush_iterate+0x10/0x10 [ 218.772295][ T3320] nf_ct_iterate_cleanup_net+0xe1/0x130 [ 218.772318][ T3320] ctnetlink_del_conntrack+0x6ef/0x820 [ 218.787987][ T28] audit: type=1400 audit(1750926583.430:514): avc: denied { mounton } for pid=3305 comm="syz.4.776" path="/162/bus/bus" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 218.789456][ T3320] ? __cfi_ctnetlink_del_conntrack+0x10/0x10 [ 218.799020][ T28] audit: type=1400 audit(1750926583.500:515): avc: denied { write } for pid=3305 comm="syz.4.776" name="bus" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 218.800510][ T3320] ? __cfi_mutex_lock+0x10/0x10 [ 218.845903][ T28] audit: type=1400 audit(1750926583.500:516): avc: denied { add_name } for pid=3305 comm="syz.4.776" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 218.850170][ T3320] nfnetlink_rcv_msg+0x662/0x850 [ 218.855243][ T28] audit: type=1400 audit(1750926583.500:517): avc: denied { setattr } for pid=3305 comm="syz.4.776" name="work" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 218.875166][ T3320] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 218.875209][ T3320] ? selinux_capable+0x29c/0x380 [ 218.875240][ T3320] netlink_rcv_skb+0x1f2/0x440 [ 218.875265][ T3320] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 218.875291][ T3320] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 218.875318][ T3320] ? ns_capable+0x8c/0xf0 [ 218.880368][ T2185] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 218.901980][ T3320] ? netlink_net_capable+0x125/0x160 [ 218.902020][ T3320] nfnetlink_rcv+0x26f/0x2150 [ 218.902048][ T3320] ? unwind_get_return_address+0x4d/0x90 [ 218.956816][ T3320] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 218.963001][ T3320] ? arch_stack_walk+0xfc/0x150 [ 218.967877][ T3320] ? __stack_depot_save+0x36/0x480 [ 218.973018][ T3320] ? slab_post_alloc_hook+0x4f/0x2d0 [ 218.978365][ T3320] ? kmem_cache_alloc_node+0x181/0x340 [ 218.983835][ T3320] ? __alloc_skb+0xea/0x4b0 [ 218.988365][ T3320] ? __cfi_nfnetlink_rcv+0x10/0x10 [ 218.993486][ T3320] ? kasan_set_track+0x60/0x70 [ 218.998260][ T3320] ? kasan_set_track+0x4b/0x70 [ 219.003126][ T3320] ? kasan_save_alloc_info+0x25/0x30 [ 219.008430][ T3320] ? __kasan_kmalloc+0x95/0xb0 [ 219.013201][ T3320] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 219.019111][ T3320] ? __alloc_skb+0x236/0x4b0 [ 219.023711][ T3320] ? netlink_sendmsg+0x626/0xbc0 [ 219.028660][ T3320] ? ____sys_sendmsg+0x5a9/0x990 [ 219.033599][ T3320] ? ___sys_sendmsg+0x21c/0x290 [ 219.038539][ T3320] ? __x64_sys_sendmsg+0x1f0/0x2c0 [ 219.043655][ T3320] ? x64_sys_call+0x171/0x9a0 [ 219.048345][ T3320] ? do_syscall_64+0x4c/0xa0 [ 219.052946][ T3320] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.059023][ T3320] ? selinux_nlmsg_lookup+0x33c/0x4c0 [ 219.064494][ T3320] ? selinux_netlink_send+0x6db/0x790 [ 219.069899][ T3320] ? __cfi_selinux_netlink_send+0x10/0x10 [ 219.075834][ T3320] ? _copy_from_iter+0x58f/0xfd0 [ 219.080916][ T3320] ? __netlink_lookup+0x387/0x3b0 [ 219.086176][ T3320] netlink_unicast+0x8b1/0xa30 [ 219.091071][ T3320] netlink_sendmsg+0x8aa/0xbc0 [ 219.095897][ T3320] ? __cfi_netlink_sendmsg+0x10/0x10 [ 219.101512][ T3320] ? security_socket_sendmsg+0x93/0xb0 [ 219.107104][ T3320] ? __cfi_netlink_sendmsg+0x10/0x10 [ 219.112538][ T3320] ____sys_sendmsg+0x5a9/0x990 [ 219.117420][ T3320] ? __sys_sendmsg_sock+0x40/0x40 [ 219.122486][ T3320] ? import_iovec+0x7c/0xb0 [ 219.127027][ T3320] ___sys_sendmsg+0x21c/0x290 [ 219.131728][ T3320] ? __sys_sendmsg+0x270/0x270 [ 219.136507][ T3320] ? __kasan_check_write+0x14/0x20 [ 219.141894][ T3320] ? proc_fail_nth_write+0x17a/0x1f0 [ 219.147304][ T3320] ? vfs_write+0x9d6/0xca0 [ 219.151786][ T3320] ? __fdget+0x19c/0x220 [ 219.156183][ T3320] __x64_sys_sendmsg+0x1f0/0x2c0 [ 219.161235][ T3320] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 219.166705][ T3320] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 219.172815][ T3320] x64_sys_call+0x171/0x9a0 [ 219.177357][ T3320] do_syscall_64+0x4c/0xa0 [ 219.181780][ T3320] ? clear_bhb_loop+0x30/0x80 [ 219.186715][ T3320] ? clear_bhb_loop+0x30/0x80 [ 219.191466][ T3320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.197395][ T3320] RIP: 0033:0x7f096658e929 [ 219.201836][ T3320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.221813][ T3320] RSP: 002b:00007f0967394038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.230253][ T3320] RAX: ffffffffffffffda RBX: 00007f09667b5fa0 RCX: 00007f096658e929 [ 219.238270][ T3320] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000004 [ 219.246292][ T3320] RBP: 00007f0967394090 R08: 0000000000000000 R09: 0000000000000000 [ 219.254373][ T3320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.262376][ T3320] R13: 0000000000000000 R14: 00007f09667b5fa0 R15: 00007fff7703bbb8 [ 219.270569][ T3320] [ 219.273779][ T28] audit: type=1400 audit(1750926583.500:518): avc: denied { remove_name } for pid=3305 comm="syz.4.776" name="#b" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 219.297001][ T28] audit: type=1400 audit(1750926583.500:519): avc: denied { rename } for pid=3305 comm="syz.4.776" name="#b" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.319922][ T28] audit: type=1400 audit(1750926583.500:520): avc: denied { unlink } for pid=3305 comm="syz.4.776" name="#b" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 219.343038][ T28] audit: type=1400 audit(1750926583.500:521): avc: denied { unlink } for pid=3305 comm="syz.4.776" name="#c" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.365960][ T285] EXT4-fs (loop0): unmounting filesystem. [ 219.368403][ T28] audit: type=1400 audit(1750926583.500:522): avc: denied { remove_name } for pid=284 comm="syz-executor" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.414905][ T3329] loop2: detected capacity change from 0 to 256 [ 219.422163][ T3329] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.432967][ T3329] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 219.442477][ T3329] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x114aabd0, checksum : 0x1119abd0) [ 219.453216][ T3329] exFAT-fs (loop2): invalid boot region [ 219.458792][ T3329] exFAT-fs (loop2): failed to recognize exfat type [ 219.503281][ T3332] FAULT_INJECTION: forcing a failure. [ 219.503281][ T3332] name failslab, interval 1, probability 0, space 0, times 0 [ 219.522106][ T3332] CPU: 1 PID: 3332 Comm: syz.0.783 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 219.531887][ T3332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.542144][ T3332] Call Trace: [ 219.545444][ T3332] [ 219.548480][ T3332] __dump_stack+0x21/0x24 [ 219.552879][ T3332] dump_stack_lvl+0xee/0x150 [ 219.557533][ T3332] ? __cfi_dump_stack_lvl+0x8/0x8 [ 219.562612][ T3332] dump_stack+0x15/0x24 [ 219.566806][ T3332] should_fail_ex+0x3d4/0x520 [ 219.571518][ T3332] ? __nf_conntrack_alloc+0xf3/0x3c0 [ 219.576856][ T3332] __should_failslab+0xac/0xf0 [ 219.581669][ T3332] should_failslab+0x9/0x20 [ 219.586197][ T3332] kmem_cache_alloc+0x3b/0x330 [ 219.591071][ T3332] __nf_conntrack_alloc+0xf3/0x3c0 [ 219.596187][ T3332] nf_conntrack_alloc+0x2f/0x40 [ 219.601218][ T3332] ctnetlink_create_conntrack+0xcf/0xe30 [ 219.606874][ T3332] ? ctnetlink_get_ct_unconfirmed+0x190/0x190 [ 219.612980][ T3332] ? nf_conntrack_find_get+0x154/0x250 [ 219.618558][ T3332] ? __cfi_nf_conntrack_find_get+0x10/0x10 [ 219.624730][ T3332] ctnetlink_new_conntrack+0x5aa/0x12e0 [ 219.630314][ T3332] ? __cfi_ctnetlink_new_conntrack+0x10/0x10 [ 219.636398][ T3332] ? __nla_validate+0x60/0x60 [ 219.641185][ T3332] ? search_extable+0x8c/0xd0 [ 219.645888][ T3332] ? __cfi_search_extable+0x10/0x10 [ 219.651193][ T3332] ? mutex_lock+0x8d/0x1a0 [ 219.655616][ T3332] ? __cfi_mutex_lock+0x10/0x10 [ 219.660477][ T3332] nfnetlink_rcv_msg+0x662/0x850 [ 219.665438][ T3332] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 219.670912][ T3332] ? selinux_capable+0x29c/0x380 [ 219.675865][ T3332] netlink_rcv_skb+0x1f2/0x440 [ 219.680643][ T3332] ? __cfi_nfnetlink_rcv_msg+0x10/0x10 [ 219.686119][ T3332] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 219.691860][ T3332] ? ns_capable+0x8c/0xf0 [ 219.696245][ T3332] ? netlink_net_capable+0x125/0x160 [ 219.701553][ T3332] nfnetlink_rcv+0x26f/0x2150 [ 219.706271][ T3332] ? unwind_get_return_address+0x4d/0x90 [ 219.711945][ T3332] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 219.718134][ T3332] ? arch_stack_walk+0xfc/0x150 [ 219.723114][ T3332] ? __stack_depot_save+0x36/0x480 [ 219.728259][ T3332] ? slab_post_alloc_hook+0x4f/0x2d0 [ 219.733642][ T3332] ? kmem_cache_alloc_node+0x181/0x340 [ 219.739213][ T3332] ? __alloc_skb+0xea/0x4b0 [ 219.743832][ T3332] ? __cfi_nfnetlink_rcv+0x10/0x10 [ 219.748984][ T3332] ? kasan_set_track+0x60/0x70 [ 219.753767][ T3332] ? kasan_set_track+0x4b/0x70 [ 219.758826][ T3332] ? kasan_save_alloc_info+0x25/0x30 [ 219.764397][ T3332] ? __kasan_kmalloc+0x95/0xb0 [ 219.769217][ T3332] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 219.775237][ T3332] ? __alloc_skb+0x236/0x4b0 [ 219.780136][ T3332] ? netlink_sendmsg+0x626/0xbc0 [ 219.785183][ T3332] ? ____sys_sendmsg+0x5a9/0x990 [ 219.790501][ T3332] ? ___sys_sendmsg+0x21c/0x290 [ 219.795425][ T3332] ? __x64_sys_sendmsg+0x1f0/0x2c0 [ 219.800934][ T3332] ? x64_sys_call+0x171/0x9a0 [ 219.806059][ T3332] ? do_syscall_64+0x4c/0xa0 [ 219.810673][ T3332] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.816954][ T3332] ? selinux_nlmsg_lookup+0x33c/0x4c0 [ 219.822548][ T3332] ? selinux_netlink_send+0x6db/0x790 [ 219.828666][ T3332] ? __cfi_selinux_netlink_send+0x10/0x10 [ 219.834518][ T3332] ? _copy_from_iter+0x58f/0xfd0 [ 219.839539][ T3332] ? __netlink_lookup+0x387/0x3b0 [ 219.844797][ T3332] netlink_unicast+0x8b1/0xa30 [ 219.849594][ T3332] netlink_sendmsg+0x8aa/0xbc0 [ 219.854593][ T3332] ? __cfi_netlink_sendmsg+0x10/0x10 [ 219.860070][ T3332] ? security_socket_sendmsg+0x93/0xb0 [ 219.865645][ T3332] ? __cfi_netlink_sendmsg+0x10/0x10 [ 219.871486][ T3332] ____sys_sendmsg+0x5a9/0x990 [ 219.876781][ T3332] ? __sys_sendmsg_sock+0x40/0x40 [ 219.882086][ T3332] ? import_iovec+0x7c/0xb0 [ 219.886608][ T3332] ___sys_sendmsg+0x21c/0x290 [ 219.891397][ T3332] ? __sys_sendmsg+0x270/0x270 [ 219.896293][ T3332] ? __kasan_check_write+0x14/0x20 [ 219.901436][ T3332] ? proc_fail_nth_write+0x17a/0x1f0 [ 219.906758][ T3332] ? vfs_write+0x9d6/0xca0 [ 219.911206][ T3332] ? __fdget+0x19c/0x220 [ 219.915476][ T3332] __x64_sys_sendmsg+0x1f0/0x2c0 [ 219.920624][ T3332] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 219.926117][ T3332] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 219.932292][ T3332] x64_sys_call+0x171/0x9a0 [ 219.936842][ T3332] do_syscall_64+0x4c/0xa0 [ 219.941287][ T3332] ? clear_bhb_loop+0x30/0x80 [ 219.945971][ T3332] ? clear_bhb_loop+0x30/0x80 [ 219.950679][ T3332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.956690][ T3332] RIP: 0033:0x7f2cd1d8e929 [ 219.961161][ T3332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.981063][ T3332] RSP: 002b:00007f2cd2b33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.989558][ T3332] RAX: ffffffffffffffda RBX: 00007f2cd1fb5fa0 RCX: 00007f2cd1d8e929 [ 219.997651][ T3332] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 220.005844][ T3332] RBP: 00007f2cd2b33090 R08: 0000000000000000 R09: 0000000000000000 [ 220.013835][ T3332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.021824][ T3332] R13: 0000000000000000 R14: 00007f2cd1fb5fa0 R15: 00007ffc3193e138 [ 220.030159][ T3332] [ 220.084267][ T3336] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.176679][ T2185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.187922][ T2185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.197786][ T2185] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.275024][ T3343] netlink: 104 bytes leftover after parsing attributes in process `syz.0.787'. [ 220.344221][ T2185] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.353521][ T2185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.363202][ T2185] usb 4-1: config 0 descriptor?? [ 220.664711][ T3358] loop4: detected capacity change from 0 to 2048 [ 220.776048][ T2185] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 220.791272][ T3358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 220.811959][ T2185] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 220.934870][ T2185] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 221.196066][ T3318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.229007][ T3318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.263166][ T2185] usb 4-1: USB disconnect, device number 10 [ 221.610081][ T284] EXT4-fs (loop4): unmounting filesystem. [ 221.613758][ T3378] loop1: detected capacity change from 0 to 256 [ 221.728839][ T3382] loop0: detected capacity change from 0 to 512 [ 221.924854][ T3382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.949495][ T3382] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.793: path /142/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 222.018972][ T3378] FAT-fs (loop1): Directory bread(block 64) failed [ 222.053259][ T3378] FAT-fs (loop1): Directory bread(block 65) failed [ 222.106309][ T3378] FAT-fs (loop1): Directory bread(block 66) failed [ 222.160305][ T3378] FAT-fs (loop1): Directory bread(block 67) failed [ 222.192066][ T3378] FAT-fs (loop1): Directory bread(block 68) failed [ 222.206536][ T3378] FAT-fs (loop1): Directory bread(block 69) failed [ 222.213487][ T3378] FAT-fs (loop1): Directory bread(block 70) failed [ 222.220372][ T3378] FAT-fs (loop1): Directory bread(block 71) failed [ 222.227174][ T3378] FAT-fs (loop1): Directory bread(block 72) failed [ 222.233965][ T3378] FAT-fs (loop1): Directory bread(block 73) failed [ 222.637590][ T285] EXT4-fs (loop0): unmounting filesystem. [ 223.039840][ T3414] netlink: 104 bytes leftover after parsing attributes in process `syz.2.804'. [ 223.142162][ T3418] netlink: 104 bytes leftover after parsing attributes in process `syz.3.805'. [ 223.945012][ T3432] loop1: detected capacity change from 0 to 512 [ 223.961785][ T3432] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.968560][ T3432] EXT4-fs: Conflicting test_dummy_encryption options [ 224.326654][ T3432] usb usb1: usbfs: process 3432 (syz.1.808) did not claim interface 0 before use [ 224.399462][ T3440] loop4: detected capacity change from 0 to 256 [ 224.470109][ T3445] loop3: detected capacity change from 0 to 512 [ 224.476785][ T414] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.489486][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 224.489503][ T28] audit: type=1400 audit(1750926589.180:531): avc: denied { write } for pid=3439 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 224.500599][ T3445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.547197][ T28] audit: type=1400 audit(1750926589.230:532): avc: denied { create } for pid=3447 comm="syz.2.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.571994][ T3445] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2768: inode #11: comm syz.3.813: corrupted xattr block 95 [ 224.586614][ T3445] EXT4-fs (loop3): Remounting filesystem read-only [ 224.593370][ T3445] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.813: bg 0: block 7: invalid block bitmap [ 224.610904][ T3445] EXT4-fs (loop3): Remounting filesystem read-only [ 224.625751][ T3445] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 224.733094][ T3454] loop0: detected capacity change from 0 to 256 [ 224.740863][ T3445] EXT4-fs (loop3): Remounting filesystem read-only [ 224.747457][ T3445] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2934: inode #11: comm syz.3.813: corrupted xattr block 95 [ 224.763003][ T3445] EXT4-fs (loop3): Remounting filesystem read-only [ 224.770702][ T3445] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 224.799765][ T3445] EXT4-fs (loop3): 1 orphan inode deleted [ 224.805701][ T3445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 225.888577][ T3452] loop4: detected capacity change from 0 to 40427 [ 225.896013][ T3452] F2FS-fs (loop4): fault_type options not supported [ 225.905083][ T3452] F2FS-fs (loop4): invalid crc value [ 225.921952][ T3452] F2FS-fs (loop4): Found nat_bits in checkpoint [ 226.023354][ T28] audit: type=1400 audit(1750926590.680:533): avc: denied { mounton } for pid=3444 comm="syz.3.813" path="/161/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.072910][ T3475] loop2: detected capacity change from 0 to 256 [ 226.185957][ T3452] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 226.265404][ T3468] f2fs_ckpt-7:4: attempt to access beyond end of device [ 226.265404][ T3468] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.328155][ T28] audit: type=1400 audit(1750926591.020:534): avc: denied { rename } for pid=3451 comm="syz.4.815" name="bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 226.363428][ T3452] tipc: Started in network mode [ 226.780651][ T3452] tipc: Node identity , cluster identity 4711 [ 226.805877][ T28] audit: type=1400 audit(1750926591.500:535): avc: denied { read } for pid=3451 comm="syz.4.815" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 226.868551][ T28] audit: type=1400 audit(1750926591.530:536): avc: denied { open } for pid=3451 comm="syz.4.815" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 226.890544][ T284] syz-executor: attempt to access beyond end of device [ 226.890544][ T284] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 226.981412][ T284] syz-executor: attempt to access beyond end of device [ 226.981412][ T284] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 227.010142][ T3488] loop2: detected capacity change from 0 to 256 [ 227.043323][ T283] EXT4-fs (loop3): unmounting filesystem. [ 227.124714][ T28] audit: type=1400 audit(1750926591.820:537): avc: denied { create } for pid=3485 comm="syz.0.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 227.560569][ T3498] loop3: detected capacity change from 0 to 1024 [ 227.596058][ T3498] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.691855][ T28] audit: type=1400 audit(1750926592.380:538): avc: denied { mounton } for pid=3497 comm="syz.3.827" path="/164/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 227.714816][ T28] audit: type=1400 audit(1750926592.380:539): avc: denied { map } for pid=3497 comm="syz.3.827" path="/164/file1/bus" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.144184][ T3498] syz.3.827: attempt to access beyond end of device [ 228.144184][ T3498] loop3: rw=2051, sector=232, nr_sectors = 794 limit=1024 [ 228.209859][ T28] audit: type=1400 audit(1750926592.900:540): avc: denied { mounton } for pid=3516 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 228.254720][ T283] EXT4-fs (loop3): unmounting filesystem. [ 228.264384][ T305] device bridge_slave_1 left promiscuous mode [ 228.274508][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.284174][ T305] device bridge_slave_0 left promiscuous mode [ 228.290506][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.299363][ T305] device veth1_macvtap left promiscuous mode [ 228.305613][ T305] device veth0_vlan left promiscuous mode [ 228.484857][ T3522] netlink: 236 bytes leftover after parsing attributes in process `syz.3.833'. [ 228.521026][ T1100] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 228.654170][ T3526] loop3: detected capacity change from 0 to 1024 [ 228.774415][ T3526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 228.783782][ T3526] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.933251][ T1100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.604706][ T1100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.658339][ T1100] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.04 [ 229.668582][ T1100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.682242][ T1100] usb 3-1: config 0 descriptor?? [ 229.725243][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.732392][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.739984][ T3516] device bridge_slave_0 entered promiscuous mode [ 229.747381][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.754618][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.778995][ T3544] loop0: detected capacity change from 0 to 4096 [ 229.791498][ T3516] device bridge_slave_1 entered promiscuous mode [ 229.802840][ T3544] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 229.866241][ T283] EXT4-fs (loop3): unmounting filesystem. [ 229.878788][ T3544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'. [ 229.941749][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.948868][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.956269][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.963388][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.053547][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.063416][ T2776] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.077658][ T2776] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.091322][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.099938][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.107043][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.107151][ T1100] logitech-djreceiver 0003:046D:C534.001D: item fetching failed at offset 2/5 [ 230.115059][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.123698][ T1100] logitech-djreceiver 0003:046D:C534.001D: logi_dj_probe: parse failed [ 230.132435][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.139996][ T1100] logitech-djreceiver: probe of 0003:046D:C534.001D failed with error -22 [ 230.147032][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.169291][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.186729][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.208372][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.238154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.253402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.266271][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.279131][ T3516] device veth0_vlan entered promiscuous mode [ 230.302111][ T3516] device veth1_macvtap entered promiscuous mode [ 230.326807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.338951][ T1919] usb 3-1: USB disconnect, device number 9 [ 230.354141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.363195][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.386136][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 230.386166][ T28] audit: type=1400 audit(1750926595.080:548): avc: denied { mounton } for pid=3516 comm="syz-executor" path="/root/syzkaller.qpYLHm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 230.723081][ T285] EXT4-fs (loop0): unmounting filesystem. [ 230.776565][ T3561] netlink: 96 bytes leftover after parsing attributes in process `syz.0.840'. [ 232.019391][ T3595] loop3: detected capacity change from 0 to 512 [ 332.110803][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 332.117848][ C1] (detected by 1, t=10002 jiffies, g=19369, q=259 ncpus=2) [ 332.125157][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294970408-4294960405), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 332.138549][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g19369 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 332.149933][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 332.160256][ C1] rcu: RCU grace-period kthread stack dump: [ 332.166170][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 332.176985][ C1] Call Trace: [ 332.180370][ C1] [ 332.183315][ C1] __schedule+0xb87/0x14e0 [ 332.187767][ C1] ? release_firmware_map_entry+0x194/0x194 [ 332.193686][ C1] ? __mod_timer+0x7ae/0xb30 [ 332.198304][ C1] schedule+0xbd/0x170 [ 332.202404][ C1] schedule_timeout+0x12c/0x2e0 [ 332.207283][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 332.212688][ C1] ? __cfi_process_timeout+0x10/0x10 [ 332.218011][ C1] ? prepare_to_swait_event+0x308/0x320 [ 332.223606][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 332.228494][ C1] ? rcu_gp_init+0xf10/0xf10 [ 332.233121][ C1] rcu_gp_kthread+0x95/0x370 [ 332.237744][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 332.242973][ C1] ? __kasan_check_read+0x11/0x20 [ 332.248019][ C1] ? __kthread_parkme+0x142/0x180 [ 332.253062][ C1] kthread+0x281/0x320 [ 332.257188][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 332.262421][ C1] ? __cfi_kthread+0x10/0x10 [ 332.267034][ C1] ret_from_fork+0x1f/0x30 [ 332.271476][ C1] [ 332.274519][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 332.280861][ C1] CPU: 1 PID: 3584 Comm: syz.3.846 Not tainted 6.1.141-syzkaller-00030-g44c8456c4231 #0 [ 332.290612][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.300681][ C1] RIP: 0010:handle_softirqs+0x144/0x600 [ 332.306254][ C1] Code: 85 e8 10 ee a6 03 65 66 89 1d 18 d0 c0 7e 48 c7 c7 20 02 49 85 e8 fc ed a6 03 65 44 89 25 dc cd bf 7e fb 49 c7 c5 c0 a0 e0 86 <44> 89 65 ac b8 ff ff ff ff 0f bc 45 ac 89 c3 ff c3 0f 84 a2 02 00 [ 332.325971][ C1] RSP: 0018:ffffc900001b0f30 EFLAGS: 00000286 [ 332.332060][ C1] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0520ee78e0d37500 [ 332.340044][ C1] RDX: 1ffffffff0f2c808 RSI: ffffffff85490220 RDI: ffffffff85a9fce0 [ 332.348039][ C1] RBP: ffffc900001b0fc0 R08: ffffffff87964048 R09: ffffffff87964058 [ 332.356056][ C1] R10: ffffffff87964043 R11: 1ffffffff0f2c808 R12: 0000000000000000 [ 332.364049][ C1] R13: ffffffff86e0a0c0 R14: 0000000000000008 R15: ffff88811426a880 [ 332.372125][ C1] FS: 00007f94dea906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 332.381069][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.387670][ C1] CR2: 00007f4a8a614000 CR3: 000000011f3bd000 CR4: 00000000003526a0 [ 332.395659][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.403641][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.411626][ C1] Call Trace: [ 332.414921][ C1] [ 332.417779][ C1] ? irqtime_account_irq+0xc4/0x240 [ 332.423007][ C1] __irq_exit_rcu+0x52/0xf0 [ 332.427530][ C1] irq_exit_rcu+0x9/0x10 [ 332.431797][ C1] sysvec_irq_work+0xa6/0xc0 [ 332.436407][ C1] [ 332.439348][ C1] [ 332.442287][ C1] asm_sysvec_irq_work+0x1b/0x20 [ 332.447240][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 332.453336][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 ba b8 56 01 5d c3 0f 1f 84 00 00 00 00 [ 332.472955][ C1] RSP: 0018:ffffc90000cf7c20 EFLAGS: 00000246 [ 332.479049][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 332.487123][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 332.495106][ C1] RBP: ffffc90000cf7c20 R08: dffffc0000000000 R09: fffff5200019ef81 [ 332.503093][ C1] R10: 0000000000000000 R11: ffffffff81341a40 R12: 0000000000000000 [ 332.511077][ C1] R13: dffffc0000000001 R14: ffffffff8648ab50 R15: dffffc0000000000 [ 332.519067][ C1] ? __cfi_native_apic_msr_write+0x10/0x10 [ 332.524912][ C1] x2apic_send_IPI_self+0x6f/0x80 [ 332.529958][ C1] arch_irq_work_raise+0x98/0xf0 [ 332.534919][ C1] __irq_work_queue_local+0x115/0x190 [ 332.540314][ C1] irq_work_queue+0x9e/0x150 [ 332.545274][ C1] bpf_send_signal_common+0x2b2/0x420 [ 332.550668][ C1] ? __set_printk_clr_event+0x80/0x80 [ 332.556158][ C1] bpf_send_signal+0x19/0x20 [ 332.560769][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 332.566242][ C1] bpf_trace_run2+0xff/0x250 [ 332.570855][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 332.576093][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 332.582267][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 332.587399][ C1] trace_sys_enter+0x3d/0x50 [ 332.592004][ C1] syscall_trace_enter+0xf3/0x150 [ 332.597043][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 332.602786][ C1] do_syscall_64+0x24/0xa0 [ 332.607215][ C1] ? clear_bhb_loop+0x30/0x80 [ 332.611909][ C1] ? clear_bhb_loop+0x30/0x80 [ 332.616602][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.622505][ C1] RIP: 0033:0x7f94ddb2ab19 [ 332.627027][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 332.646649][ C1] RSP: 002b:00007f94dea8fb40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 332.655090][ C1] RAX: ffffffffffffffda RBX: 00007f94dddb5fa8 RCX: 00007f94ddb2ab19 [ 332.663087][ C1] RDX: 00007f94dea8fb40 RSI: 00007f94dea8fc70 RDI: 0000000000000011 [ 332.671075][ C1] RBP: 00007f94dddb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 332.679064][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f94dddb5fac [ 332.687049][ C1] R13: 0000000000000000 R14: 00007ffd7fdf3ba0 R15: 00007ffd7fdf3c88 [ 332.695040][ C1] [ 429.000770][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 197s! [ 429.009778][ C0] Showing busy workqueues and worker pools: [ 429.015713][ C0] workqueue events: flags=0x0 [ 429.020410][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.020461][ C0] pending: kfree_rcu_monitor [ 429.020491][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=12/256 refcnt=13 [ 429.020532][ C0] pending: bpf_prog_free_deferred, bpf_prog_free_deferred, bpf_prog_free_deferred, bpf_prog_free_deferred, free_work, psi_avgs_work, vmstat_shepherd, key_garbage_collector, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 429.065625][ C0] workqueue events_long: flags=0x0 [ 429.070771][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.070823][ C0] pending: br_fdb_cleanup [ 429.070858][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 429.070902][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 429.070988][ C0] workqueue events_unbound: flags=0x2 [ 429.108151][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=5/512 refcnt=7 [ 429.108194][ C0] in-flight: 901:fsnotify_mark_destroy_workfn fsnotify_mark_destroy_workfn, 305:fsnotify_connector_destroy_workfn [ 429.108296][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 429.108340][ C0] workqueue events_power_efficient: flags=0x80 [ 429.141651][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 429.141711][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, gc_worker, check_lifetime [ 429.141814][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.141856][ C0] pending: neigh_managed_work, neigh_periodic_work [ 429.141905][ C0] workqueue rcu_gp: flags=0x8 [ 429.180261][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.180306][ C0] pending: process_srcu, process_srcu [ 429.180350][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 429.180387][ C0] in-flight: 19:process_srcu [ 429.180413][ C0] pending: srcu_invoke_callbacks, srcu_invoke_callbacks, process_srcu [ 429.180468][ C0] workqueue mm_percpu_wq: flags=0x8 [ 429.220337][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.220388][ C0] pending: vmstat_update [ 429.220422][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.220464][ C0] pending: vmstat_update [ 429.220500][ C0] workqueue writeback: flags=0x4a [ 429.250054][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.250100][ C0] pending: wb_workfn, wb_workfn [ 429.250141][ C0] workqueue kblockd: flags=0x18 [ 429.267433][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 429.267480][ C0] pending: blk_mq_timeout_work [ 429.267507][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=4/256 refcnt=5 [ 429.267547][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 429.267626][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.304425][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.304484][ C0] pending: work_fn [ 429.304522][ C0] workqueue mld: flags=0x40008 [ 429.321039][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=7 [ 429.321085][ C0] pending: mld_dad_work [ 429.321121][ C0] inactive: mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work [ 429.321235][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=9 [ 429.321273][ C0] pending: mld_dad_work [ 429.321304][ C0] inactive: mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work [ 429.321444][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.372462][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=6 [ 429.372516][ C0] pending: addrconf_dad_work [ 429.372556][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work [ 429.372655][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=16 [ 429.372694][ C0] pending: addrconf_dad_work [ 429.372728][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 429.373053][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.441422][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.441474][ C0] pending: wg_packet_encrypt_worker [ 429.441506][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.441549][ C0] pending: wg_packet_encrypt_worker [ 429.441577][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.473262][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.473312][ C0] pending: wg_packet_encrypt_worker [ 429.473342][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.473392][ C0] pending: wg_packet_encrypt_worker [ 429.473420][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.505149][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.505199][ C0] pending: wg_packet_encrypt_worker [ 429.505227][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.505269][ C0] pending: wg_packet_encrypt_worker [ 429.505300][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.536976][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.537025][ C0] pending: wg_packet_encrypt_worker [ 429.537056][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.537099][ C0] pending: wg_packet_encrypt_worker [ 429.537126][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.568816][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.568865][ C0] pending: wg_packet_encrypt_worker [ 429.568895][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.568940][ C0] pending: wg_packet_encrypt_worker [ 429.568967][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.600779][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.600831][ C0] pending: wg_packet_encrypt_worker [ 429.600861][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.600905][ C0] pending: wg_packet_encrypt_worker [ 429.600932][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.632615][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.632664][ C0] pending: wg_packet_encrypt_worker [ 429.632694][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.632735][ C0] pending: wg_packet_encrypt_worker [ 429.632762][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.664468][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.664519][ C0] pending: wg_packet_encrypt_worker [ 429.664548][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.664590][ C0] pending: wg_packet_encrypt_worker [ 429.664616][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.696302][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.696352][ C0] pending: wg_packet_encrypt_worker [ 429.696389][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.696432][ C0] pending: wg_packet_encrypt_worker [ 429.696471][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.728001][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.728045][ C0] pending: wg_packet_handshake_send_worker [ 429.728087][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.746851][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.746898][ C0] pending: wg_packet_encrypt_worker [ 429.746927][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.746968][ C0] pending: wg_packet_encrypt_worker [ 429.746996][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.778787][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.778837][ C0] pending: wg_packet_encrypt_worker [ 429.778867][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.778908][ C0] pending: wg_packet_encrypt_worker [ 429.778935][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.810390][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.810443][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.810511][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.832099][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.832149][ C0] pending: wg_packet_encrypt_worker [ 429.832179][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.832222][ C0] pending: wg_packet_encrypt_worker [ 429.832250][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=197s workers=5 idle: 1919 6 350 722 [ 429.832387][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=197s workers=8 idle: 2776 43 3532 10 313 8