last executing test programs: 12m45.475112464s ago: executing program 0 (id=1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r1}, 0x18) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xa) 12m30.02629187s ago: executing program 32 (id=1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r1}, 0x18) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xa) 9m6.614034672s ago: executing program 2 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r4, 0x0, 0x2000, 0x800, &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) dup3(r6, r5, 0x0) 9m5.76293867s ago: executing program 2 (id=607): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001600)=""/4081, 0x7, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000500)={0x0, 0x2, 0x4, @tid=r3}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000044b58dffe51754d1c64be4b5ae5960b8a6c99a985901e6", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030001000000008500000083000000bf09000000000000550901000000000095000008000000fec87c1164c5a28d00b702000043e7b55385e2ff008500fd00000000005c22000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = gettid() gettid() tkill(r7, 0x12) 9m4.719630203s ago: executing program 2 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r4, 0x0, 0x2000, 0x800, &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) dup3(r6, r5, 0x0) 9m3.717519783s ago: executing program 2 (id=620): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000740)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='vfat\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) ioperm(0x0, 0x2, 0x2) socket(0x2b, 0x800, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000404c05d503000000000001090224000100000000090400020103000200092100000301220500090581030800040000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, &(0x7f00000000c0)={0x40, 0x11, 0x5, {0x5, 0x24, "b1cb1a"}}, 0x0, 0x0, 0x0}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) 9m2.928783506s ago: executing program 2 (id=624): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x513, &(0x7f0000000440)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) close(r0) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) close(0x3) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 9m2.910188248s ago: executing program 2 (id=625): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x692303) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r1) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)=')\x00I\xe3\x9a\x01\xb8b\xeb\x96\xd1\xc4\x88\x0e.\\\x88W\xa3?\xaf&DZzqi3\x1a\x02\x84\x9a\x02H\xef\xd8\x944%8:\xf3#n\xd4q\xf7\xc7\xf3\xbcf8d\xe3]\xbb\x95C<\xda\xa5\xe3\xe0\x81b\x16\x10>w\xdft\xffU\x8dn\xcaL_A\xecC|?F\xe9\x00\x131\xde\x84-6\xec\x0f\x00\x00\x00\x00\x00\x00\x00\xed{0\xe6\xb8', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x400000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x1, 0x0, @void}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800000000000000b60000400000000070"]) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000003a4c5fbd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000300002000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000006c0)='sched_switch\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x30741, &(0x7f00000004c0)={[{@grpjquota}, {@barrier}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@discard}, {@noblock_validity}, {@resuid}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") socket$inet6_udp(0xa, 0x2, 0x0) 8m47.728572192s ago: executing program 33 (id=625): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x692303) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, r1) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)=')\x00I\xe3\x9a\x01\xb8b\xeb\x96\xd1\xc4\x88\x0e.\\\x88W\xa3?\xaf&DZzqi3\x1a\x02\x84\x9a\x02H\xef\xd8\x944%8:\xf3#n\xd4q\xf7\xc7\xf3\xbcf8d\xe3]\xbb\x95C<\xda\xa5\xe3\xe0\x81b\x16\x10>w\xdft\xffU\x8dn\xcaL_A\xecC|?F\xe9\x00\x131\xde\x84-6\xec\x0f\x00\x00\x00\x00\x00\x00\x00\xed{0\xe6\xb8', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x400000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r3, 0x1, 0x0, @void}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800000000000000b60000400000000070"]) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000003a4c5fbd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000300002000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000006c0)='sched_switch\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x30741, &(0x7f00000004c0)={[{@grpjquota}, {@barrier}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@discard}, {@noblock_validity}, {@resuid}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") socket$inet6_udp(0xa, 0x2, 0x0) 8m10.452407484s ago: executing program 6 (id=870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000c40)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0xfffffe01, {{0x2, 0x4e21, @remote}}, 0x1, 0x3, [{{0x2, 0x7, @multicast2}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @local}}]}, 0x210) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xcf}]}, 0x1c}}, 0x40000) r3 = timerfd_create(0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000080)={r5, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r6, 0x1, r4, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000280)={r6, 0x0, 0x5}) ppoll(&(0x7f00000000c0)=[{r3, 0x318a}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[], 0x1c}], 0x1}, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r9, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r7, &(0x7f0000000180)='\x00', 0xfdfe}]) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) io_cancel(r9, 0x0, &(0x7f0000000240)) clock_adjtime(0x7, &(0x7f0000000840)={0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000000000100, 0xfffffffffffffffd, 0xfffffffffffffffd}) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb) 8m9.466757153s ago: executing program 6 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x44) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r9}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="fb3e0021c551eb80c200000088a83000"], 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pwrite64(r7, &(0x7f0000000040)="43572654b114b1a9e187499a390710a1", 0x16, 0x6) 8m6.641953059s ago: executing program 6 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r3, 0x0, 0x2000, 0x800, &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) syz_socket_connect_nvme_tcp() 8m3.329309334s ago: executing program 6 (id=898): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x127000, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000080)=0x4, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x11, 0xffffffffffffffff, 0x39bbe000) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000340)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@uni_xlateno}, {@numtail}, {@shortname_lower}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") unshare(0x12000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2a) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="0f32350001000065660fd1a0dcaf000066ba4300ed0f01ca360f0948b870000000000000000f23d02e660fc7b4a50070000035100000020f23f866430f38800dd05600000f1a3ac74424000b000000c744240200200000c7441906000200000f011424c44105dc74e5c0", 0x6a}], 0x1, 0x4d, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRESHEX=r6, @ANYRESHEX=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r10}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8m2.225590222s ago: executing program 6 (id=902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xfffffffffffffeb5) inotify_init1(0x800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$packet(0x11, 0x3, 0x300) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008cf54332f2c59eb891da4384a0457b9761cb63c0a727d5e70e7df251ad0a02c1db27eb658c08d0506c6717c2660dbea3122607e5a47b714569aa2397c5aa27f49c766574261f838042768253405aafd78cf12edca0dc1ae697ac7366444d7b6a5a7daee9cc8e69b32be60e153c3ca5c47deeb862352c6de32bedf1f28bf9c56ddb9f25af7e391c"], 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000000000000edffffffffffffff00000000cc20a76a5df67263f2f271b1e42be0188da47fe7ef26efa1744fb3c9a4a526e93f5af9e93a660a3756a6a552c96b13dcd702cedcdd59f3c74f8c0e5b00cee0a74cf4ec355495f9e55b7248adc8a6129560de529612297ecf2b7e5d43a10c2a58914e3784edbcfa71036a950c83fb29b86db2f5a96eb098"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000300020000", 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0\x00'}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x38, 0x4, @thr={&(0x7f0000001380)="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", &(0x7f0000000340)="08d15c9df5d18c48c08fbf3cc7ff4ace8b5763ee306ff34ea5529db4b4258d2ab505845535555da2026cf63d004327ddb5cedaf09c2ce5d3717dd90d54423e43f4a1d973842fd9e3821218a0857f2beeaf77274383f5edabea61"}}, &(0x7f0000000140)) 8m1.800622076s ago: executing program 6 (id=908): unshare(0x400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8400000010000504000783007b00000000000000", @ANYRES32=0x0, @ANYBLOB="0200000000000200240012800b00010065727370616e000014000280050016000000000006000e0058"], 0x84}}, 0x20000010) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r12}, 0x10) write$cgroup_int(r11, &(0x7f0000000200), 0x43451) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r13 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r13, 0x29, 0x40, 0x0, &(0x7f0000000000)) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r14, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 8m1.61949944s ago: executing program 34 (id=908): unshare(0x400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8400000010000504000783007b00000000000000", @ANYRES32=0x0, @ANYBLOB="0200000000000200240012800b00010065727370616e000014000280050016000000000006000e0058"], 0x84}}, 0x20000010) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r12}, 0x10) write$cgroup_int(r11, &(0x7f0000000200), 0x43451) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r13 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r13, 0x29, 0x40, 0x0, &(0x7f0000000000)) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r14, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1m44.476752978s ago: executing program 7 (id=2362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = eventfd(0x9) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r11}, 0x10) setitimer(0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000004c0)={0x1, r8}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x3f2, 0x200, 0x70bd2c, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x400c014) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") 1m40.377171515s ago: executing program 7 (id=2373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) pivot_root(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00004783bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x5, 0x6, 0xa9, 0x3, 0xb2, 0x1}) 1m39.398674893s ago: executing program 7 (id=2379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) pivot_root(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x5, 0x6, 0xa9, 0x3, 0xb2, 0x1}) 1m37.878680494s ago: executing program 7 (id=2381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@umask={'umask', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6000) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000000200)={0x90, 0xffffffffffffffda, 0x0, {0x4, 0x2, 0x1, 0x9, 0x20000003, 0x2, {0x3, 0xfff, 0x1, 0x8, 0xfff, 0x3, 0x1, 0xf, 0x4, 0xa000, 0xa, 0x0, 0x0, 0x0, 0xd331}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xd, &(0x7f0000000380)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x98}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x85, &(0x7f0000000a80)=""/133, 0x40f00, 0x22, '\x00', r9, 0x25, r1, 0x8, &(0x7f00000004c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0, r0, r0, r0]}, 0x94) 1m37.367919995s ago: executing program 7 (id=2390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000080), 0x10) bind$can_raw(r5, &(0x7f0000000040), 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m37.144042273s ago: executing program 7 (id=2392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) pivot_root(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x5, 0x6, 0xa9, 0x3, 0xb2, 0x1}) 1m37.107814106s ago: executing program 35 (id=2392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) pivot_root(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x5, 0x6, 0xa9, 0x3, 0xb2, 0x1}) 8.27465647s ago: executing program 3 (id=2907): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x800001ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x800, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x1, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x378, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xe, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000a00), 0x4) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x10400, &(0x7f00000004c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d9e51ac3fbcdc77796469722c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c696f636861727365743d63703836362c636f6465706167653d3835372c73686f72746e616d653d6d697865642c646f733178666c6f7070792c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c00"], 0x1, 0x36b, &(0x7f0000000140)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjyXj6apN3uSivr/n7QZPqf+c/M+yB5fW2mLyxF8/x0XLhy5XLMzJSivPTYUlwtxXxk0bMb47IJMQDg1nA1pfgz5UbrZianlE5gWgDAMeq+/78UEbWYzyNvfn1Y++TdHwBuecXP/7OHtTngPkDEa8cyJQDgmI3d/79/X3Wl+1XufVv2e38A+B946tnnHl9ejXiyVpuJWH97q75Vj0cG9csX4pVoxVqcjrm4FpFfKHQeSt3Hs+dWV07XarV2/DIf9YiYKhLr+ZXCctbNr8ZizMV8kV9cbaSUsrOfra4s1roiYrfdHT/WS1v16ThVjP/jqVgbXHj0Ouk+RZxbXTlTKzqor/fy2xF7gz9U6Mx/Iebi+xf73aRUKUqrKxcXe5Me5G/Vq3G+vxcOvAMCAAAAAAAAAAAAAAAAAAAAAAA3ZaHWN99fPyd1nvOVchYWJtR318fJ84v1gfby9YFSNUVKf7zxUP2dLPatDzS6Ps+WhQQBAAAAAAAAAAAAAAAAAACgb3O7Eo1Wa21jc3unOVxob2xuT0VEJ/Lqt598NRvjba5TKOdDVCP6Q9SKYXeajZT1GqcsYjw96wzei3z0eX/GRWR6/1ZMnEb14KpW6477fn5/ELk36/X896BNFpM3MBtMo/XoSM/rd+ZTupEd1S+cGY5Ux0e/lFIairw1nH7x+fEOoxRRvvEDt9OcioPbpE7hm8sv310t9n7jy5R74MG5py+99+FvzUarM3J0j2BlY/NaajZKvcZHGL3oLnUPweDcKEVeKA2fCeXDOtzbH2lkP/z+zD3vfne0nZCGI693zueRNlm+OZ+OplfyQmeaI1Wzg/Te+dtam55w8l+vcBPH9K4Pvvg4pZ9+PfIQA1NjLxulf/3CAwAAAAAAAAAAAAAAAAAAjBn6rHjxoet2XjF9WNbDT5zQ9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRAz+//9QYW83RiJHKfzVnpBVXdvYjKj815sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBt7p8AAAD//6LrZGI=") socket$inet6_udp(0xa, 0x2, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x2008410, &(0x7f0000000140)=ANY=[], 0xfd, 0x559b, &(0x7f0000005d40)="$eJzs3EtvG1UUAOA7TtJ3S4RYsOtIFZIj1VadPgS7Aq14iFYRjwUrcGzHcmt7othxTFZIsEQs+CcIJFYs+Q0sWLNDLEDskEDzMG1oU7DiOEr7fdL4zNyZHN8zGsU6M4kD8Mxajv/4LQoXwukQwkII4VwUsvWoWDI38/BiCOFiCKH00BIV4/8MnAghnAkhXEiT5zmjYtdXl0eXrv/69u/f/3hy8ezX3/10dFUD87e4Z+ulEEJvM1/f6eUxaefxXjFeH3Wy2Ls2KmK+o3e/2E7yuNNazzLs1CfH1bN4tZ0fn2xuD9K40a030tjubGTjm/38DQej9iRP9gP36lvZdrO1nsXOIMliezef13g3/922OxjmeZpFvk+y9GE4nMR8vDVu5fVs3s9ioz8sxvO8SbM1TuOoiMXbhUbSbWbzWJ/+bB8X73T62+N41NoadJJ+fL1ae7lau1GpbSXN1rB1rVLvNW9ci8vtbmfygXSznSTtbqvaSHorcbndaFRqtbi8lJ7eflyrVa9Wr1SurxRrl+M37n4Qd5txOY2vdfrbJzrdQbyRbMW3Wuuden8lXq1efWUlvlSL37uzFq+9e/v2nbX3P7r14d1X77z1enHQI9OKy6tXVlcrtSuV1drKIdR/qtj5cP397XFl2Kr3Hld/+rmbTfS/6x8epP7Pi3lNUX90sNMDT+YCA5jaI/1/0P8Dh++49/9hlv1/2lLp/5/c/6f9b2mf/jcuF43qIfe/s+7/F9OLa4r69+v/j2v9cFD6fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ9bPS9+8ma0s59tni/HzxdDzxXYUQiiFEP56jIVwYk/OhSLP0j7HL/1rDj9EIcuQvsfJYjkTQrhZLH8+d9hnAQAAAJ5e33568cu8W89flo96QsxTftOmdO7jGeWLQghLy7/MKFspfXlhRsmy63sxjGeULbuBdWpGyfJbbouzyva/LEzCZ+cfDGYFRXkozXU6AADAXCzsCfPtQgAAAJinL456AhyNKEweZU6eBWd/ef/g0ebpPfsAAACAYyg66gkAAAAAU5v2f3az/t/3/wEAAMDTLf/+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgb3bu5sZpIAoA8LOz3uzyIyLEnVa4bcqgBI7clt0CONFBSggt0EBu3MONEiKM4hlFMopDJNuYjb5Psp2xR2/eRLm8sTIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKYf1Xr59dPbz33j1HV9f193+f6l6XHCMLMBAAAAjtlW62XzYZHaz/P9l/nW69wuIqKM41X8LK5bMWdNnHlUHf2rP3L4FtFE2I8xz8eziHiXj92rsb8FAAAAuFybx9VdqtbTaTF1QvxLadGmfPF+oHhFRFSLnyf73J4drdyf3vTPKtn/vq/i40DRmgWsm4GCpSW3q+PProcapG3WuuSZ3DxE7PISXTnOuAAAwJTalUBHFQIAAMAF+DB1AkyjOJwO7xnn6ZJfCN62WgAAAMATVEydAAAAANDD3/81fKj9x9v/L+z/BwAAAP+BtP8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY9pW6+XmcXXX9fzhzDi/6n6GmxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GZ/3lEwhIEojN7/qXaSDbt1uRBLa5tzIOEjwxQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDuvefK+4tPYk3znQ369RpJ/R42lC42145EjWxfGs38BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBkf15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7pd7/8n5gaZ5K508bS8UiydtXYumrsPWgcPRhv/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi5+5546i6AACfmd3ZxHlfhDHIhQMKEgU0xN6EhJRQgCwKfgKS5ayDYUMgcUEiC+QGKuQ6DR8lQkgg0+U/pI6lNKFL4cJI1KDZnXHGicGLMTOb+Hmku/fM5u7ccycjy8d3bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLWm/F8WsSt/GVyGJfv3dleXcz7zYf63K31uzN5y+Nkv4m+fOPwkx9vL1QPTk1XDj6vPxkAAACOhlZZ30fEvWxjPu/TyUH9n5Vj8pr/26eGcVnPP1z3b26vHi/+aaas/3/5+f5zOxNNDufJT7q03O/NPZpK+z9a4th7et8R7cGVH/zspTX4D0nfWXt2Kxtcz+Sr27ff6gzCY3VkCwAcxOmyL4Ly+6G87zaZGABHRrtSeJf1f2uy2ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6rC1Fv8r4yQiZtoP4tzm9uriXv2t9bszZTt/8+Z69Zz5KbKIWFru97Ia1zLurl2/8eFCv9+7OkKQFp8ZafD+wamIOIzz/KvgvRHGRPz9mOL2jOZW8ddBMh5pNBqU9+245HOYQXnv7TVmIiIOfuYGvhgBAPBEy4qW1/X3so35/L1kKuKP73bX/y9X4thV96e7jqv1//33z9+pzlWt/7t1LfAxMLty+ePZa9dvvLp8eeFS71Lvo9fOdF/vnr1w7tyF2fxazc0uRdqbazpNAAAAHmOdolXr/3Tq0f3/E5U4Rtz//+Tr7mfVuVrq/z092PRrOhMAAICjqLMTPfPi778le4xIOp34dGFl5Wp3+LpzfGb4Wmu6B3SsaNX6vzXVdFYAAABAHbbWkl37/xcrcYy4////70/+WD1nKyImIq5ERO/04pX+xfqWM9b+2S8Gn/zmIJ8afKTT7DoBAABozkTRqvv/2eD5/3TnkYc0Il55aRiXf+tqlPq/9fYXP1Tnqj7/f7a+JY6jNKaH1yPN++mI9nTTKQEAAPAkO160JIn4NduY/+CnE+92PP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULc/AwAA///waipp") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x0) r7 = signalfd(r3, &(0x7f0000000a40)={[0x1ff]}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0xc0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_newaddr={0x2c, 0x14, 0x200, 0x70bd28, 0x25dfdbfb, {0xa, 0x3f, 0x24, 0xfe, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x1, 0x5cb, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x5cf080, 0x54) fstatfs(r8, 0x0) 5.697643166s ago: executing program 8 (id=2915): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10000000024804001c0012800b00010062726964676500000c00028005002b"], 0x3c}, 0x1, 0x0, 0x0, 0xc8b6}, 0x0) 5.658942499s ago: executing program 8 (id=2918): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@nodioread_nolock}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000ffff00000000000000000000000000fe8000000000000000000000000000aa"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r7 = dup2(r6, r6) connect$netlink(r7, &(0x7f0000002500)=@unspec, 0xc) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a50a00001800000061116c0000200000180000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000030528bd706f55da46109c692d00", @ANYRES32=0x0, @ANYBLOB="8b800000000000001800128008000100677265000c00028008000600ac14143a"], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r9 = getpid() setpgid(0xffffffffffffffff, r9) 5.163805428s ago: executing program 3 (id=2921): ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x2a, 0x1, 0x6, 0x9, 0x3ff, 0x2, 0x6, 0x9, 0x1ff, 0x40, 0x100, 0xfffffff7, 0x2, 0x38, 0x3, 0xfffb, 0x1, 0x200}, [{0x2, 0x9, 0xfffffffffffffffe, 0x10001, 0x3, 0x0, 0x3, 0x9f65}, {0x2, 0x7, 0x8, 0x6, 0x8000000000000000, 0x5, 0xa89, 0x5}, {0x0, 0x4, 0x3, 0x66, 0xffffffffffff0001, 0x619, 0x9, 0xffff}], "cf542ef961354b0604957d63aa392db86d4ae89819a4b46fbd303d4ce65f37c343f8f791e4aca6ef60ad119e29fc5b8f9e0f29b452d5de779f7d18498e8d162ff997d98867939dcac1b8b9183cc6e9ec2be6f05fa3c7b003feb1ceb76b49cb11c595c633c9f7bf4f4b959e53ea58508d003fe9213481a5edac443c4d669b3876d07f4b55129463749a5d3f02bd0b5c2105331dec3d63d9f74be36b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x783) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000880), 0x4, 0x10001) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000008c0)=""/43) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000940)={'mangle\x00', 0x0, [0x7, 0x80000000, 0x1, 0x378, 0x64d]}, &(0x7f00000009c0)=0x54) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x15, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x3f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x3, 0x6, 0x0, 0xb, 0x10, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @generic={0x9, 0x7, 0xf, 0x100, 0x8cfb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000b00)='syzkaller\x00', 0x3, 0x8, &(0x7f0000000b40)=""/8, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x4, 0x1, 0x8, 0x10001}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000bc0)=[r3, r3, r3, r3, r3, 0x1, r3], &(0x7f0000000c00)=[{0x1, 0x2, 0x1, 0x8}, {0x4, 0x3, 0x0, 0x6}, {0x3, 0x3, 0x2, 0xe}, {0x5, 0x5, 0x9, 0x2}, {0x1, 0x4, 0x6, 0xa}], 0x10, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000a00)='workqueue_queue_work\x00', r4, 0x0, 0x7ff}, 0x18) r6 = openat(r3, &(0x7f0000000d80)='./file0/file0\x00', 0x3854e0, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'gre0\x00', 0x0, 0x700, 0x80, 0xe1, 0xd, {{0x16, 0x4, 0x1, 0x20, 0x58, 0x68, 0x0, 0xf, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1b, 0x8b, [@remote, @loopback, @private=0xa010100, @private=0xa010100, @private=0xa010100, @loopback]}, @ssrr={0x89, 0x27, 0xce, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @rand_addr=0x64010101, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102]}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=@newqdisc={0x30, 0x24, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x7, 0xe}, {0x3, 0xfff1}, {0x10, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x20e}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xa3e4dfa6c7ad496f}, 0x20000800) fsetxattr$security_selinux(r2, &(0x7f0000000f80), &(0x7f0000000fc0)='system_u:object_r:shadow_t:s0\x00', 0x1e, 0x0) lstat(&(0x7f00000010c0)='./file0/file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$incfs(&(0x7f0000001000)='./file0/file0\x00', &(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x20, &(0x7f0000001180)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x6}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x7fff}}], [{@fowner_gt={'fowner>', r8}}, {@subj_role}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x7, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000001240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', r7, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001280)=[{0x1, 0x3, 0xb, 0x1}, {0x4, 0x3, 0xa, 0xb}, {0x0, 0x1, 0x5, 0x8}, {0x5, 0x2, 0x2, 0x9}, {0x0, 0x1, 0x3, 0xc}, {0x5, 0x2, 0xd, 0x4}, {0x5, 0x5, 0x5, 0x8}, {0x0, 0x2, 0x2, 0x4}], 0x10, 0x80000001}, 0x94) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getpid() syz_usb_connect$uac1(0x1, 0xe2, &(0x7f00000013c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x4, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7804, 0x2}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0xa, "ed2388"}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x8, 0x7, "9f4cfa8ec9"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x6, 0x3, "8cb50d5cbaf6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7fff, 0xffa6, 0xe1, "bde44ceb4e"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x796, 0x0, 0x7, "8170052b2f5beb3e"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xc, 0x4, {0x7, 0x25, 0x1, 0x82, 0xf, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0xa, 0xa1, "06"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8f3d, 0xe, 0xb, "ae19"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x1, 0x5, 0x0, '@=Y'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x38, 0x5, 0x4, "219a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x6, 0x5, {0x7, 0x25, 0x1, 0x2, 0xd, 0xb}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x340, 0x40, 0x2, 0x67, 0x18, 0x3}, 0x6d, &(0x7f0000001500)={0x5, 0xf, 0x6d, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7, 0xf, 0xd, [0xc0c0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x4d, 0xcdf, 0x4}, @generic={0x2b, 0x10, 0x2, "4b418f9914a7758e6a411e3741b64510fb584d8652c00fcc8d1bde22868baab480bf18558fb44cbd"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x3, 0xff11, 0x7, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x8, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xf3, 0x4, 0x8001, 0xd}]}, 0x3, [{0xf4, &(0x7f0000001580)=@string={0xf4, 0x3, "db027ee93afc82db5efdea368b2ee862064639b6687d9d4a72128575fcb97311f5c92afc8b87e99752cbaf0869ceecb71638552b915b81ae1ccaf7293123861565c404178f0573429eed373458c822b9b148aef6cc698570839da72d716e520cc249f229119a6a4dcc98466137ba2a803caf7c0944cfc5b814e7dacf3326a9d9279b1bcd09c382a427e77f1b12229e812e0b3957f25270c630e30b93e32502c250ff3b681f6156443512cc255de27992c17c588c2c65c3e6c25dfd0a87f20929dd09aa60561295580d1e0907ef273560330f61db591634705098ed14f1534ecb8b19ae22579e12dd88c9161221ac89fa383b"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x402}}, {0xf5, &(0x7f00000016c0)=@string={0xf5, 0x3, "85e81e6233e3836ec8e12ac41d7e2c5c0fbda6b7355577946521b98e310af5cec3f0351caa03d1d8021847ba80f738e6390b68b30a68b896727b51e067d196b554613d7e86c015192fdcc1547b1fbbcab5dff532dd561477e220e6a3fd7c802e8e9b3f1369a20347fe3f5f56ac9fd2d70fe10ebc277efb9c4337d825deb8f0ef18b82ea818dd4cd4e48fd5b964b2fcb9effb726713068d151f62b2ebcd0d77eb8e0de44fd3219ca8e3dbefa7f675bb00a2fcfd195dc67888919f34b85a82a21ba9ed0a1cb80f68336308a69562353875ac3e4ab8771e51d6e57dd776455fc04cff238eadb96121eb25a34f4f731f78bea5d40e"}}]}) r9 = getpid() r10 = syz_open_procfs$userns(r9, &(0x7f0000001800)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000001880)={0x10001, 0x0, &(0x7f0000001840)=[r0, r1, r10, r2, r2, 0xffffffffffffffff]}, 0x6) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r3) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, r12, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000001a00)=""/254) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001b80)={0x5, &(0x7f0000001b40)=[{0xc, 0x4}, {0x9394, 0xff, 0xe, 0x100}, {0x449, 0x71, 0x9, 0xfd}, {0x101, 0x7, 0x6, 0x2}, {0x1, 0x1, 0x10, 0x4}]}) setsockopt$sock_int(r11, 0x1, 0x2f, &(0x7f0000001bc0)=0xfffff137, 0x4) 5.050928037s ago: executing program 4 (id=2923): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYRES16=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000000}, 0x10, 0x0, r0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xdb7, 0x4) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000001}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.824650715s ago: executing program 8 (id=2925): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() modify_ldt$write(0x1, &(0x7f0000000840)={0x1d9, 0x100000, 0x1000, 0x1, 0x2, 0x1, 0x0, 0x1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4, 0x0, 0x300}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_out(r7, 0x2, &(0x7f0000000780)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) link(&(0x7f0000000700)='./file1\x00', &(0x7f0000000740)='./file1\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020901030600000026bd7000fedbdf250400"], 0x30}}, 0x40010) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 3.815957356s ago: executing program 4 (id=2926): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x1, 0xffffffff, 0xf3, &(0x7f0000000140)=""/243}) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004dd57110c40703a13894010203010902240044101510010400000009044b"], 0x0) 3.534247968s ago: executing program 8 (id=2927): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e3, 0x0) 3.246805941s ago: executing program 8 (id=2930): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 3.096440023s ago: executing program 8 (id=2931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = accept4(r4, &(0x7f0000000b80)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000c00)=0x80, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003c80)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) getresgid(&(0x7f0000003f40), &(0x7f0000003f80)=0x0, &(0x7f0000003fc0)) sendmmsg$unix(r4, &(0x7f0000004040)=[{{&(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000240)="5d107b0fd499b33a9cde7985413312a231617a8c6a34f8435c47f3dd43de73db1e301d5a", 0x24}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000000340)="fd5fe2da58592dbb22231c4c1b723e3f671e3fa6663e8ab1250e0b2932b4fc33b20ec56c0dd0682668e301594b2285525b924236d069dd11eba97ef792a0e272b941d711a21910b74cba08c426847b0bb71fa123cf1b045f00d4e894979151596c6a5ea1d7cce854efaa93ada2a0a46eb448b78fbdddee5139780a72e80f3b84c98146c4f39816fe323b17673e428bfaf6c0a5b3f6a617337d58dbd633accbf5b38a71dbf7986d", 0xa7}, {&(0x7f0000000400)="6ce634c30594976a529fe4c114bbbc490b1beb7e6de959576aa551b9dffd5a0d0b10b3b3c58435d35b0fdec4a337333fcb35b0673c2ebafa82309b4e2dcd158c554ca7ba903a61d616c0f2e73ef13ead4555d00963becc8994da25fa70578ba270feebae9b3dad26f58a9bd022426cdc3c399ff55c4cadfc4a79018b2efc67e69a878a6e28617801161927f64680ea929508c499cc206c58b190c7c55103c369e4f928f5dfeab91e924c07bb2455e27056b1a1d6319adb1f66d81fdb3c2f7c0d21a5c5f21c0adec9df135210c1c555561c9780eb5ec560", 0xd7}, {&(0x7f0000000a00)="6983eb09407a7ca3424c81c3ea4c1354437b989b19f5fe6b88cad44f514b517f80ef2a0a183f9005b36d0ede8eb303c47ab0ab3cde1586863aac3ea1f8c40b858af6df9cef218e5c537931b9fd3ed33a5f2929118328f6b396e87a18afcdde4b33c37d440978312187a3290dbdd2a5631025b84314e54a238f8bd825342669c0161833432d9f710c0eb7c70548b0696aee77dca4233f6c2661d3dceed1cafc4da25af3a01a2a6790b9c1b4db8f5eb40ddb178e758e9e51768d7fc30abe66543a303e115fc782c7488d9198dd0ab06e1d59b6d164125913ee9cb09ddd4a9bf9eaa6", 0xe1}, {&(0x7f0000000280)="79febc7123e01598b91bc6cd16aa8d613e8836545ac225cf18a335ece4bb3629a957af67b9053dba58a29e6e4a4695d7b3be710e4324be3b04c15db56e5433e45521ba25ef04", 0x46}, {&(0x7f0000000500)="f26f209b854e2bdf00d4289704c77b48ec55da9163049be671c32927df1af3eaaf53c96378471815fa94776c8ffefb3b4403c7d275275b4d9a8f34f522e271d85481d4f14bf6fb9de44f64ce5298dd972eae9dfc7d76001a80cb7ee7941f708f86c64d822bd3ef8c38ba5c8a7ca121", 0x6f}], 0x7, &(0x7f0000000c40)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002c000022000000000100000b01000000811564e4d3e906a317c9fd36105619e3b96c02794713ff4484cf789d43449673434a173b5468d253389947f5d33778b7f176378af70a8e39d88237699574043ad0913e00bc5cb9d065d24b4841486ad4edfb25a45bb07cc901f8e5bfb4188d0e7610cce6bc8f8a8633fd89c8753438a20f3f06b789b4f95809b61eb2a3d8b9c0b815ba4660a86474ed436b2f93eacf0802ba389c1b4da3226fa8d7cffb3517b3a6b7acbb823f8822fa0ee4abf8776bba8054f03fde693f9b006d5cccd50e9d72b37ddff7fa65d0d57ef6f3730987aebcdae24411d6c47419f47cab771f8e9030fe618cd969cc8de47de4521da7fe67f3923076e368ea1d388f8f0dbe90649a5534b1b6c876be1024f3c5ac0a0bccbe99feb601a26f7513b7d949ea506c6580cc78767837ad6e6b40", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x40841}}, {{&(0x7f0000003d40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003dc0)="bb6aa2c9323957ab5582677397897482c26299cf1bdeab72a0afa25b992d0714870041acb664dc070b45c60d75cee0bd14a5cccb4d2e3da308d5ec4f7528c4e5dabf1c5a6dc8ed2a9de86a0a094a535a7725e5", 0x53}, {&(0x7f0000003e40)="1218558ab1bc4aa052fc0b58131ffc3ca85e6e0a95e582e85d060bf8509e72d35c1f95afe55ae213afadf8c0ed6779483898f5d5d6b6ba97bbb56171236f388f1f52a37704156961e74de90bec42b83d187f14676271a36d9d573101a4abed5344feb3cc327a78415df9d2b09163c81bab5cf5bb27a045c6f9642aea9e5b92ddb3c3c18a3d402c1af7cd20cf3720da26c21b6c9bc67167e668f75fdd61d1c5d0e569", 0xa2}], 0x2, &(0x7f0000004000)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r8}}}], 0x38, 0x4040000}}], 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) chdir(&(0x7f0000000140)='./file0\x00') r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) pwrite64(r12, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r12, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0x1000fffff, 0x400, 0xa}) 2.639036059s ago: executing program 5 (id=2933): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) r3 = io_uring_setup(0x52c, &(0x7f0000000180)={0x0, 0x81a0, 0x200, 0x0, 0x2b8}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r3, 0x20, 0x1, 0x1b40, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) 2.62851579s ago: executing program 1 (id=2934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) pivot_root(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r5}, 0x18) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x5, 0x6, 0xa9, 0x3, 0xb2, 0x1}) 2.241506771s ago: executing program 5 (id=2935): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xc2, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x17, 0x3, 0x5}]}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000580)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) unshare(0x64000600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) 2.072290105s ago: executing program 3 (id=2936): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3e00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.071407085s ago: executing program 3 (id=2937): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) process_madvise(r2, &(0x7f00000004c0)=[{&(0x7f0000000340)="33dd69a69ef605de809b349a66d140b955e070c63c651743242469fdeea6e06b340b5574f2210e148353237d921fcb66b826083208f0ce03a04735ca1d211c31406c0c0831f4ab35c72328288b", 0x4d}, {&(0x7f00000003c0)="786c0da70c0c10c49255285b839308673336390118e768f9e8d868be990f5a08af360fd5c9884bd5c624b871e333181ac30e7f3dc1eb55ac5a4dfa474060334ab278466cac320f9b", 0x48}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x7ff}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000640), 0x10000000000001d0) 1.979617802s ago: executing program 4 (id=2938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r3, 0x0, 0x2000, 0x800, &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) syz_socket_connect_nvme_tcp() r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r6, r5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.63198822s ago: executing program 1 (id=2939): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050425bd", @ANYRES32=0x0, @ANYBLOB="10000000024804001c0012800b00010062726964676500000c00028005002b"], 0x3c}, 0x1, 0x0, 0x0, 0xc8b6}, 0x0) 1.443648995s ago: executing program 1 (id=2940): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e3, 0x0) 1.404236968s ago: executing program 1 (id=2941): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) process_madvise(r2, &(0x7f00000004c0)=[{&(0x7f0000000340)="33dd69a69ef605de809b349a66d140b955e070c63c651743242469fdeea6e06b340b5574f2210e148353237d921fcb66b826083208f0ce03a04735ca1d211c31406c0c0831f4ab35c72328288b", 0x4d}, {&(0x7f00000003c0)="786c0da70c0c10c49255285b839308673336390118e768f9e8d868be990f5a08af360fd5c9884bd5c624b871e333181ac30e7f3dc1eb55ac5a4dfa474060334ab278466cac320f9b", 0x48}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x7ff}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000640), 0x10000000000001d0) 1.106548502s ago: executing program 5 (id=2942): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.105962202s ago: executing program 4 (id=2943): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.071565264s ago: executing program 4 (id=2944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) pivot_root(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r5}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00004783bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x5, 0x6, 0xa9, 0x3, 0xb2, 0x1}) 1.050910856s ago: executing program 5 (id=2945): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3120000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (fail_nth: 1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 577.988094ms ago: executing program 5 (id=2946): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000480)='./file0/file0\x00') socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) unshare(0x400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 363.603921ms ago: executing program 3 (id=2947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x793a, 0x0, 0x0, 0x0) syz_io_uring_setup(0x557f, &(0x7f0000000080)={0x0, 0xd772, 0x0, 0x4, 0x21b, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000040)) 320.235855ms ago: executing program 5 (id=2948): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000380)={0x0, 0x4, 0xffffffff, 0x3, 0x5, "28c4d95d3933aabcf900"}) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) r5 = gettid() ioctl$int_in(r4, 0x5452, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0xaf4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r9}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 319.154394ms ago: executing program 3 (id=2949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) pivot_root(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r5}, 0x18) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x5, 0x6, 0xa9, 0x3, 0xb2, 0x1}) 162.115007ms ago: executing program 4 (id=2950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x5453, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r4 = syz_open_pts(r3, 0x42) r5 = dup3(r4, r3, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) pipe2$9p(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40080) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r6) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x870, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) 138.482059ms ago: executing program 1 (id=2951): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050425bd", @ANYRES32=0x0, @ANYBLOB="10000000024804001c0012800b00010062726964676500000c00028005002b"], 0x3c}, 0x1, 0x0, 0x0, 0xc8b6}, 0x0) 0s ago: executing program 1 (id=2952): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000085ca000000499a4533f1e5f8a4edc96bdc8da56d66ceebd4ffcc2f137a4cd480b8adfdad2daaa40b3fa765cfd52f4b61f29187337a8a2de22d3ce1a19072af03"], 0x50) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) utime(&(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r6 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) kernel console output (not intermixed with test programs): _t pid=7223 comm="syz.5.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 626.686385][ T30] audit: type=1326 audit(1756317372.523:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7223 comm="syz.5.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 637.295900][ T7378] overlayfs: missing 'lowerdir' [ 638.254144][ T7393] incfs: Error accessing: ./file0. [ 638.442286][ T7393] incfs: mount failed -2 [ 638.875409][ T7411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 641.018976][ T7434] xt_TCPMSS: Only works on TCP SYN packets [ 641.039026][ T7434] mip6: mip6_destopt_init_state: spi is not 0: 3540254720 [ 642.841191][ T7480] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 642.990521][ T7486] loop7: detected capacity change from 0 to 512 [ 643.072905][ T7486] EXT4-fs (loop7): 1 orphan inode deleted [ 643.080165][ T7486] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 643.092040][ T7486] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.354377][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 643.354398][ T30] audit: type=1400 audit(1756317393.703:2381): avc: denied { setopt } for pid=7521 comm="syz.5.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 643.865957][ T30] audit: type=1326 audit(1756317394.223:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 643.896274][ T30] audit: type=1326 audit(1756317394.223:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 643.920686][ T30] audit: type=1326 audit(1756317394.223:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 643.955628][ T30] audit: type=1326 audit(1756317394.243:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 644.010280][ T30] audit: type=1326 audit(1756317394.243:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 644.064322][ T30] audit: type=1326 audit(1756317394.243:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 644.115425][ T30] audit: type=1326 audit(1756317394.243:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 644.234562][ T30] audit: type=1326 audit(1756317394.243:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 644.274109][ T30] audit: type=1326 audit(1756317394.243:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 644.400563][ T7564] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 645.383131][ T7583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 647.415271][ T7596] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2163'. [ 650.553856][ T7650] loop7: detected capacity change from 0 to 2048 [ 650.641221][ T7654] bridge: RTM_NEWNEIGH with invalid ether address [ 650.894896][ T7650] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 650.920396][ T7650] EXT4-fs error (device loop7): ext4_lookup:1858: inode #16: comm syz.7.2178: iget: bad i_size value: 8796093031208 [ 655.487191][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 655.487209][ T30] audit: type=1400 audit(1756317405.843:2429): avc: denied { prog_load } for pid=7683 comm="syz.5.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.513349][ T30] audit: type=1400 audit(1756317405.853:2430): avc: denied { create } for pid=7698 comm="syz.1.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 655.647110][ T30] audit: type=1400 audit(1756317405.853:2431): avc: denied { bpf } for pid=7683 comm="syz.5.2187" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 655.876816][ T30] audit: type=1400 audit(1756317405.853:2432): avc: denied { perfmon } for pid=7683 comm="syz.5.2187" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 655.921669][ T30] audit: type=1400 audit(1756317405.853:2433): avc: denied { setopt } for pid=7683 comm="syz.5.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 655.942233][ T30] audit: type=1400 audit(1756317405.863:2434): avc: denied { map_create } for pid=7683 comm="syz.5.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.961860][ T30] audit: type=1400 audit(1756317405.863:2435): avc: denied { create } for pid=7683 comm="syz.5.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 655.982284][ T30] audit: type=1400 audit(1756317405.863:2436): avc: denied { write } for pid=7683 comm="syz.5.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 656.002223][ T30] audit: type=1400 audit(1756317405.893:2437): avc: denied { prog_run } for pid=7698 comm="syz.1.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 656.022433][ T30] audit: type=1400 audit(1756317405.893:2438): avc: denied { execmem } for pid=7698 comm="syz.1.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 658.552738][ T7730] bridge: RTM_NEWNEIGH with invalid ether address [ 658.925944][ T7736] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2203'. [ 658.938639][ T7734] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2202'. [ 659.199183][ T7740] loop7: detected capacity change from 0 to 256 [ 659.384994][ T7740] exfat: Deprecated parameter 'namecase' [ 659.395475][ T7740] exfat: Bad value for 'fmask' [ 659.404259][ T7744] bridge: RTM_NEWNEIGH with invalid ether address [ 659.431481][ T7738] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2196'. [ 659.577046][ T7750] xt_bpf: check failed: parse error [ 660.673051][ T7765] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2213'. [ 661.316411][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 661.316424][ T30] audit: type=1326 audit(1756317411.673:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.3.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 661.319734][ T7775] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2215'. [ 662.348178][ T7782] tmpfs: Unknown parameter 'nolazyti`e' [ 662.360693][ T30] audit: type=1400 audit(1756317412.693:2462): avc: denied { read } for pid=7776 comm="syz.7.2214" dev="nsfs" ino=4026532350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 662.383243][ T30] audit: type=1400 audit(1756317412.693:2463): avc: denied { open } for pid=7776 comm="syz.7.2214" path="net:[4026532350]" dev="nsfs" ino=4026532350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 662.393575][ T7785] bridge: RTM_NEWNEIGH with invalid ether address [ 665.988240][ T30] audit: type=1400 audit(1756317416.343:2464): avc: denied { mount } for pid=7816 comm="syz.1.2225" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 667.115915][ T30] audit: type=1400 audit(1756317417.473:2465): avc: denied { mount } for pid=7830 comm="syz.5.2231" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 667.175502][ T7834] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2233'. [ 667.323828][ T30] audit: type=1400 audit(1756317417.673:2466): avc: denied { create } for pid=7842 comm="syz.1.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 668.572396][ T30] audit: type=1400 audit(1756317417.923:2467): avc: denied { create } for pid=7829 comm="syz.3.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 668.604746][ T30] audit: type=1400 audit(1756317418.193:2468): avc: denied { connect } for pid=7829 comm="syz.3.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 668.631661][ T30] audit: type=1400 audit(1756317418.333:2469): avc: denied { name_bind } for pid=7829 comm="syz.3.2232" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 668.655566][ T30] audit: type=1400 audit(1756317418.333:2470): avc: denied { node_bind } for pid=7829 comm="syz.3.2232" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 668.696687][ T30] audit: type=1400 audit(1756317419.053:2471): avc: denied { remount } for pid=7841 comm="syz.5.2236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 668.724740][ T7851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2238'. [ 668.808079][ T30] audit: type=1400 audit(1756317419.053:2472): avc: denied { ioctl } for pid=7855 comm="syz.7.2239" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 668.845482][ T30] audit: type=1400 audit(1756317419.073:2473): avc: denied { bind } for pid=7852 comm="syz.4.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 668.865168][ T30] audit: type=1400 audit(1756317419.083:2474): avc: denied { read write } for pid=7855 comm="syz.7.2239" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.736854][ T7876] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2246'. [ 670.807156][ T7886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.434913][ T7894] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2252'. [ 672.559974][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 672.561009][ T30] audit: type=1400 audit(1756317422.913:2481): avc: denied { connect } for pid=7908 comm="syz.7.2258" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 672.564537][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2258'. [ 672.690422][ T30] audit: type=1400 audit(1756317423.043:2482): avc: denied { wake_alarm } for pid=7913 comm="syz.4.2259" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 672.843837][ T7916] loop7: detected capacity change from 0 to 1024 [ 672.865559][ T7916] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 672.876196][ T30] audit: type=1400 audit(1756317424.185:2483): avc: denied { write } for pid=7908 comm="syz.7.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 672.945986][ T7916] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 672.954709][ T7916] EXT4-fs (loop7): Project quota feature not enabled. Cannot enable project quota enforcement. [ 672.993551][ T30] audit: type=1400 audit(1756317424.185:2484): avc: denied { create } for pid=7908 comm="syz.7.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 673.009768][ T7915] device wireguard0 left promiscuous mode [ 673.029981][ T30] audit: type=1400 audit(1756317424.185:2485): avc: denied { read write } for pid=7908 comm="syz.7.2258" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 673.055733][ T30] audit: type=1400 audit(1756317424.185:2486): avc: denied { open } for pid=7908 comm="syz.7.2258" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 673.075165][ T7926] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2263'. [ 673.821975][ T3101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 673.829960][ T3101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 673.844297][ T3101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 673.865835][ T7931] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2265'. [ 674.306310][ T7943] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2270'. [ 674.315659][ T439] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 675.695788][ T3101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 676.008513][ T30] audit: type=1400 audit(1756317427.355:2487): avc: denied { read write } for pid=7954 comm="syz.7.2273" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 676.046181][ T30] audit: type=1400 audit(1756317427.385:2488): avc: denied { open } for pid=7954 comm="syz.7.2273" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 676.089951][ T30] audit: type=1400 audit(1756317427.385:2489): avc: denied { ioctl } for pid=7954 comm="syz.7.2273" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 676.151393][ T7965] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 677.396202][ T7976] bridge: RTM_NEWNEIGH with invalid ether address [ 677.534167][ T7982] xt_hashlimit: max too large, truncated to 1048576 [ 677.924100][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 679.012640][ T7995] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2284'. [ 679.048649][ T7997] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2285'. [ 679.264235][ T30] audit: type=1400 audit(1756317430.575:2490): avc: denied { ioctl } for pid=8004 comm="syz.1.2288" path="socket:[35296]" dev="sockfs" ino=35296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 679.527791][ T30] audit: type=1326 audit(1756317430.605:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 679.552965][ T30] audit: type=1326 audit(1756317430.605:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 679.555006][ T8010] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2290'. [ 679.577236][ T30] audit: type=1400 audit(1756317430.875:2493): avc: denied { mount } for pid=8008 comm="syz.7.2289" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 679.608779][ T30] audit: type=1326 audit(1756317430.965:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 679.632454][ T30] audit: type=1326 audit(1756317430.965:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 679.734199][ T30] audit: type=1326 audit(1756317431.085:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 679.814243][ T30] audit: type=1326 audit(1756317431.115:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 680.212952][ T30] audit: type=1326 audit(1756317431.115:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 680.311806][ T30] audit: type=1326 audit(1756317431.115:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 680.351968][ T8030] loop7: detected capacity change from 0 to 512 [ 680.404654][ T8030] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 680.411972][ T8030] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 680.425876][ T8030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 680.434056][ T8030] System zones: 1-12 [ 680.449383][ T8030] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2228: inode #15: comm syz.7.2297: corrupted in-inode xattr [ 680.461938][ T8030] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2297: couldn't read orphan inode 15 (err -117) [ 680.475034][ T8030] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 680.498671][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2297'. [ 681.174493][ T8053] bridge: RTM_NEWNEIGH with invalid ether address [ 681.277300][ T8059] device ip6gretap0 left promiscuous mode [ 681.305232][ T8059] device veth1_macvtap left promiscuous mode [ 681.312501][ T8059] device veth1_macvtap entered promiscuous mode [ 681.322358][ T8062] cgroup: noprefix used incorrectly [ 681.331173][ T8059] device ip6gretap0 entered promiscuous mode [ 681.443745][ T8065] loop7: detected capacity change from 0 to 2048 [ 681.506257][ T8065] FAT-fs (loop7): Unrecognized mount option "ÿÿÿÿÿÿÿÿ1844674407370955161500000000000000000001244" or missing value [ 681.774552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 681.788573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 681.804489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.824272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.832699][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.839878][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.852774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.944556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.959483][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.966616][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.450004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 682.467625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 682.485078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 682.517067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 682.542821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 682.570652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 682.593542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 682.602782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 682.628864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 682.647694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 682.665307][ T8081] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2312'. [ 682.680277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 682.697109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 682.718618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 682.734606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 682.744648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 682.759909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 682.773625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 682.788710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 682.804253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 682.820351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.827036][ T8088] xt_bpf: check failed: parse error [ 682.835593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 682.851661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 682.868642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 682.943839][ T7839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 682.955339][ T7839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 682.963108][ T8091] bridge: RTM_NEWNEIGH with invalid ether address [ 682.970104][ T1452] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 683.035209][ T8097] loop7: detected capacity change from 0 to 512 [ 683.094109][ T1452] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 683.094927][ T8097] EXT4-fs (loop7): 1 orphan inode deleted [ 683.108402][ T8097] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 683.134403][ T8097] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.972555][ T2170] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 684.082890][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2326'. [ 684.349421][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 684.349441][ T30] audit: type=1400 audit(2000000000.880:2568): avc: denied { write } for pid=8123 comm="syz.1.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 684.478115][ T30] audit: type=1400 audit(2000000000.880:2569): avc: denied { read } for pid=8123 comm="syz.1.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 684.498881][ T30] audit: type=1400 audit(2000000001.050:2570): avc: denied { create } for pid=8132 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 684.520934][ T30] audit: type=1400 audit(2000000001.050:2571): avc: denied { setopt } for pid=8132 comm="syz.3.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 684.541550][ T30] audit: type=1400 audit(2000000001.260:2572): avc: denied { ioctl } for pid=8096 comm="syz.7.2319" path="/dev/input/event2" dev="devtmpfs" ino=268 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 684.603747][ T8143] syz.5.2331[8143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 684.604496][ T8143] syz.5.2331[8143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 684.640342][ T8143] netlink: 'syz.5.2331': attribute type 19 has an invalid length. [ 684.729327][ T30] audit: type=1400 audit(2000000001.520:2573): avc: denied { bind } for pid=8128 comm="syz.4.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 685.755469][ T8154] netlink: 'syz.3.2335': attribute type 4 has an invalid length. [ 685.838449][ T8161] fuse: Unknown parameter '0x00000000000000080x0000000000000008' [ 686.244168][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 686.322394][ T8174] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2343'. [ 686.794090][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 687.396338][ T30] audit: type=1400 audit(2000000003.370:2574): avc: denied { create } for pid=8175 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 687.453521][ T30] audit: type=1400 audit(2000000003.370:2575): avc: denied { connect } for pid=8175 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 689.170024][ T30] audit: type=1400 audit(2000000003.370:2576): avc: denied { shutdown } for pid=8175 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 689.232523][ T30] audit: type=1400 audit(2000000006.030:2577): avc: denied { ioctl } for pid=8195 comm="syz.7.2351" path="socket:[36365]" dev="sockfs" ino=36365 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 689.340590][ T8205] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2354'. [ 689.350772][ T8207] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2355'. [ 689.389846][ T30] audit: type=1400 audit(2000000006.190:2578): avc: denied { create } for pid=8208 comm="syz.4.2356" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 689.433167][ T30] audit: type=1400 audit(2000000006.190:2579): avc: denied { unlink } for pid=8208 comm="syz.4.2356" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 689.508954][ T30] audit: type=1326 audit(2000000006.310:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 689.538135][ T30] audit: type=1326 audit(2000000006.310:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 689.575013][ T30] audit: type=1326 audit(2000000006.310:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 689.605352][ T30] audit: type=1326 audit(2000000006.310:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 689.989329][ T30] audit: type=1326 audit(2000000006.310:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 690.013230][ T30] audit: type=1326 audit(2000000006.310:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 690.043414][ T30] audit: type=1326 audit(2000000006.310:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 690.068300][ T30] audit: type=1326 audit(2000000006.310:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.3.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 690.934238][ T8230] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2363'. [ 694.106792][ T8259] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 694.136364][ T8259] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 694.166733][ T8261] cgroup: noprefix used incorrectly [ 694.206621][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 694.214600][ T3101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 694.227055][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 694.554084][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 694.724410][ T3101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 696.767986][ T8290] loop7: detected capacity change from 0 to 256 [ 696.865470][ T8290] exfat: Deprecated parameter 'namecase' [ 696.882749][ T8290] exfat: Deprecated parameter 'utf8' [ 697.088290][ T8290] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 697.194188][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 697.194244][ T30] audit: type=1400 audit(2000000013.950:2595): avc: denied { setopt } for pid=8311 comm="syz.4.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 697.264113][ T30] audit: type=1400 audit(2000000014.060:2596): avc: denied { unmount } for pid=3590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 697.289730][ T30] audit: type=1400 audit(2000000014.060:2597): avc: denied { write } for pid=3590 comm="syz-executor" name="file0" dev="loop7" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 697.322259][ T30] audit: type=1400 audit(2000000014.060:2598): avc: denied { remove_name } for pid=3590 comm="syz-executor" name="file0" dev="loop7" ino=1048661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 697.346414][ T30] audit: type=1400 audit(2000000014.060:2599): avc: denied { unlink } for pid=3590 comm="syz-executor" name="file0" dev="loop7" ino=1048661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 697.384103][ T30] audit: type=1400 audit(2000000014.060:2600): avc: denied { rmdir } for pid=3590 comm="syz-executor" name="file0" dev="loop7" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 697.453075][ T8312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2389'. [ 697.515315][ T8] tipc: Left network mode [ 697.592989][ T30] audit: type=1400 audit(2000000014.390:2601): avc: denied { mounton } for pid=8330 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 697.737630][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.745590][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.753398][ T8330] device bridge_slave_0 entered promiscuous mode [ 697.767151][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.695326][ T30] audit: type=1400 audit(2000000015.840:2602): avc: denied { bind } for pid=8336 comm="syz.3.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.716440][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.727862][ T8330] device bridge_slave_1 entered promiscuous mode [ 700.735378][ T30] audit: type=1400 audit(2000000015.840:2603): avc: denied { listen } for pid=8336 comm="syz.3.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.771255][ T30] audit: type=1400 audit(2000000017.480:2604): avc: denied { name_bind } for pid=8354 comm="syz.4.2404" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 701.594102][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 701.814960][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 701.822670][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 701.832104][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 701.841251][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 701.849584][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.856987][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.094391][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 702.160791][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 702.169735][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 702.178295][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.185440][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.205978][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 702.214367][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 702.222468][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 702.230984][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 702.603617][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 702.616064][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 702.705537][ T8330] device veth0_vlan entered promiscuous mode [ 702.724816][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 702.744470][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 702.769855][ T8330] device veth1_macvtap entered promiscuous mode [ 702.785171][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 702.892547][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 702.975477][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 703.068751][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 703.142569][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 703.174562][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 703.183585][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 703.192259][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 703.200960][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 703.217351][ T30] audit: type=1400 audit(2000000020.020:2605): avc: denied { mounton } for pid=8330 comm="syz-executor" path="/root/syzkaller.91C1DA/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 703.289065][ T30] audit: type=1400 audit(2000000020.080:2606): avc: denied { mount } for pid=8330 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 703.314631][ T8438] loop8: detected capacity change from 0 to 512 [ 703.321486][ T30] audit: type=1400 audit(2000000020.080:2607): avc: denied { mounton } for pid=8330 comm="syz-executor" path="/root/syzkaller.91C1DA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 703.635554][ T30] audit: type=1400 audit(2000000020.080:2608): avc: denied { mounton } for pid=8330 comm="syz-executor" path="/root/syzkaller.91C1DA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 703.663592][ T30] audit: type=1400 audit(2000000020.080:2609): avc: denied { mounton } for pid=8330 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 703.687354][ T30] audit: type=1400 audit(2000000020.080:2610): avc: denied { mounton } for pid=8330 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 703.711936][ T30] audit: type=1400 audit(2000000020.080:2611): avc: denied { mount } for pid=8330 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 703.737606][ T8] device veth1_macvtap left promiscuous mode [ 703.753768][ T8438] EXT4-fs (loop8): 1 orphan inode deleted [ 703.759769][ T8] device veth0_vlan left promiscuous mode [ 703.766128][ T8438] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 703.783595][ T8438] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.846682][ T8458] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2422'. [ 704.532098][ T8466] device wg2 entered promiscuous mode [ 704.544339][ T8434] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2417'. [ 704.654535][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 705.134060][ T8413] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 705.490943][ T8494] device wg2 left promiscuous mode [ 705.536706][ T8494] cgroup: noprefix used incorrectly [ 705.555109][ T8415] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.284306][ T8413] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 706.300633][ T8413] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.327128][ T8413] usb 9-1: Product: syz [ 706.354668][ T8413] usb 9-1: Manufacturer: syz [ 706.373618][ T8413] usb 9-1: SerialNumber: syz [ 707.772093][ T8412] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 707.806703][ T30] audit: type=1400 audit(2000000024.610:2612): avc: denied { write } for pid=8518 comm="syz.8.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 707.832406][ T8516] device wireguard0 entered promiscuous mode [ 707.856101][ T8520] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2442'. [ 707.955079][ T30] audit: type=1400 audit(2000000024.760:2613): avc: denied { read } for pid=8528 comm="syz.8.2444" dev="sockfs" ino=36764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 708.193662][ T8539] device ip6gretap0 entered promiscuous mode [ 709.554191][ T30] audit: type=1400 audit(2000000026.360:2614): avc: denied { create } for pid=8568 comm="syz.1.2457" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 709.591176][ T30] audit: type=1400 audit(2000000026.390:2615): avc: denied { setattr } for pid=8568 comm="syz.1.2457" name="file0" dev="tmpfs" ino=2658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 709.615629][ T30] audit: type=1400 audit(2000000026.390:2616): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=2658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 709.914093][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 710.400675][ T30] audit: type=1400 audit(2000000027.200:2617): avc: denied { mounton } for pid=8609 comm="syz.4.2473" path="/563/file0" dev="tmpfs" ino=2988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 711.259219][ T8613] loop8: detected capacity change from 0 to 512 [ 711.684955][ T8613] EXT4-fs (loop8): orphan cleanup on readonly fs [ 711.776941][ T8613] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2467: bg 0: block 248: padding at end of block bitmap is not set [ 711.792190][ T8613] Quota error (device loop8): write_blk: dquota write failed [ 711.799773][ T8613] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 711.810149][ T8613] EXT4-fs error (device loop8): ext4_acquire_dquot:6198: comm syz.8.2467: Failed to acquire dquot type 1 [ 711.822625][ T8613] EXT4-fs (loop8): 1 truncate cleaned up [ 711.835719][ T8613] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 712.787360][ T8637] loop8: detected capacity change from 0 to 256 [ 712.836758][ T8643] fuse: Bad value for 'group_id' [ 712.842630][ T30] audit: type=1326 audit(2000000029.640:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.2483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258f17bbe9 code=0x0 [ 712.876108][ T8637] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1f7c91f3, utbl_chksum : 0xe619d30d) [ 712.914339][ T30] audit: type=1400 audit(2000000029.700:2619): avc: denied { setattr } for pid=8636 comm="syz.8.2480" name="file0" dev="loop8" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 713.350041][ T8655] cgroup: noprefix used incorrectly [ 713.617890][ T8668] loop8: detected capacity change from 0 to 2048 [ 713.701159][ T8668] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 713.822836][ T30] audit: type=1400 audit(2000000030.620:2620): avc: denied { write } for pid=8667 comm="syz.8.2490" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 713.842076][ T8411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 713.845578][ T8668] EXT4-fs error (device loop8): ext4_lookup:1858: inode #16: comm syz.8.2490: iget: bad i_size value: 8796093031208 [ 714.240194][ T30] audit: type=1400 audit(2000000030.650:2621): avc: denied { add_name } for pid=8667 comm="syz.8.2490" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 714.789806][ T8698] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2499'. [ 714.984539][ T8704] device wireguard0 entered promiscuous mode [ 715.053792][ T8709] cgroup: noprefix used incorrectly [ 715.075259][ T3101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 715.464104][ T8413] rtl8150 9-1:1.0: couldn't reset the device [ 715.471570][ T8413] rtl8150: probe of 9-1:1.0 failed with error -5 [ 715.500966][ T8413] usb 9-1: USB disconnect, device number 2 [ 716.074256][ T3101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 718.002125][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 718.002141][ T30] audit: type=1400 audit(2000000034.800:2624): avc: denied { write } for pid=8741 comm="syz.3.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 718.029090][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'. [ 718.053893][ T30] audit: type=1400 audit(2000000034.800:2625): avc: denied { nlmsg_write } for pid=8741 comm="syz.3.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 718.097863][ T30] audit: type=1400 audit(2000000034.800:2626): avc: denied { read } for pid=8741 comm="syz.3.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 718.168407][ T30] audit: type=1400 audit(2000000034.960:2627): avc: denied { write } for pid=8761 comm="syz.8.2524" name="file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 720.844036][ T30] audit: type=1400 audit(2000000034.960:2628): avc: denied { open } for pid=8761 comm="syz.8.2524" path="/15/file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 720.949498][ T30] audit: type=1400 audit(2000000034.960:2629): avc: denied { ioctl } for pid=8761 comm="syz.8.2524" path="/15/file0" dev="tmpfs" ino=97 ioctlcmd=0x1263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 721.001273][ T8782] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2529'. [ 721.858399][ T30] audit: type=1400 audit(2000000038.660:2630): avc: denied { create } for pid=8803 comm="syz.4.2538" dev="anon_inodefs" ino=38037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 721.956099][ T8824] 9pnet: Insufficient options for proto=fd [ 722.814226][ T30] audit: type=1326 audit(2000000039.610:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 722.937767][ T30] audit: type=1326 audit(2000000039.610:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 722.968195][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2552'. [ 723.044072][ T8852] 9pnet: Insufficient options for proto=fd [ 723.158464][ T30] audit: type=1326 audit(2000000039.610:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 723.183414][ T30] audit: type=1326 audit(2000000039.620:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 723.208125][ T30] audit: type=1326 audit(2000000039.620:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 723.232680][ T30] audit: type=1326 audit(2000000039.650:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 723.256978][ T30] audit: type=1326 audit(2000000039.650:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 723.935952][ T30] audit: type=1326 audit(2000000039.650:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 723.966121][ T30] audit: type=1326 audit(2000000039.650:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.4.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4514a83be9 code=0x7ffc0000 [ 724.001534][ T30] audit: type=1326 audit(2000000039.650:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 724.084103][ T30] audit: type=1326 audit(2000000039.650:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.4.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4514a83be9 code=0x7ffc0000 [ 724.116609][ T8876] loop8: detected capacity change from 0 to 2048 [ 724.132843][ T8881] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2562'. [ 724.142229][ T30] audit: type=1326 audit(2000000039.650:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.5.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 724.211486][ T8881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2562'. [ 724.461329][ T8881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2562'. [ 724.532330][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 724.546864][ T8876] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 724.578761][ T8876] EXT4-fs error (device loop8): ext4_lookup:1858: inode #16: comm syz.8.2560: iget: bad i_size value: 8796093031208 [ 724.596506][ T8897] 9pnet: Insufficient options for proto=fd [ 725.914069][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 726.737469][ T8920] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2574'. [ 726.806069][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2576'. [ 726.874639][ T8932] 9pnet: Insufficient options for proto=fd [ 726.936695][ T8934] loop8: detected capacity change from 0 to 2048 [ 727.060508][ T8940] 9pnet: Insufficient options for proto=fd [ 727.311129][ T8934] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 727.478715][ T8934] EXT4-fs error (device loop8): ext4_lookup:1858: inode #16: comm syz.8.2579: iget: bad i_size value: 8796093031208 [ 728.181128][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 728.181143][ T30] audit: type=1326 audit(2000000044.980:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4514a83c77 code=0x7ffc0000 [ 728.302220][ T30] audit: type=1326 audit(2000000045.020:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4514a82550 code=0x7ffc0000 [ 728.395419][ T30] audit: type=1326 audit(2000000045.020:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4514a8284a code=0x7ffc0000 [ 728.452832][ T30] audit: type=1326 audit(2000000045.190:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4514a83be9 code=0x7ffc0000 [ 728.478958][ T30] audit: type=1326 audit(2000000045.240:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4514a83be9 code=0x7ffc0000 [ 728.547093][ T8959] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2589'. [ 728.560209][ T30] audit: type=1326 audit(2000000045.360:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4514a83be9 code=0x7ffc0000 [ 728.584241][ T30] audit: type=1326 audit(2000000045.360:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4514a83be9 code=0x7ffc0000 [ 728.614005][ T30] audit: type=1326 audit(2000000045.360:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4514a83be9 code=0x7ffc0000 [ 728.654023][ T30] audit: type=1326 audit(2000000045.390:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4514a83be9 code=0x7ffc0000 [ 728.686803][ T30] audit: type=1326 audit(2000000045.390:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8917 comm="syz.4.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4514a83be9 code=0x7ffc0000 [ 728.712822][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2591'. [ 728.723630][ T8968] tipc: New replicast peer: 255.255.255.255 [ 728.730036][ T8968] tipc: Enabled bearer , priority 10 [ 731.044352][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 734.575122][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2603'. [ 734.732807][ T9016] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2608'. [ 734.817830][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2609'. [ 734.995298][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 734.995330][ T30] audit: type=1326 audit(2000000051.750:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.5.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.275393][ T30] audit: type=1326 audit(2000000051.750:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.5.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.300218][ T30] audit: type=1326 audit(2000000051.760:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.5.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.354499][ T30] audit: type=1326 audit(2000000051.760:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.5.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.715257][ T30] audit: type=1326 audit(2000000051.760:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.5.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.739248][ T30] audit: type=1326 audit(2000000051.770:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.5.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.766802][ T30] audit: type=1326 audit(2000000051.770:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.5.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.791915][ T30] audit: type=1326 audit(2000000051.770:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9009 comm="syz.5.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.817174][ T30] audit: type=1326 audit(2000000052.510:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.5.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.841280][ T30] audit: type=1326 audit(2000000052.510:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.5.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 735.889125][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2617'. [ 736.356481][ T9057] loop8: detected capacity change from 0 to 512 [ 737.044780][ T9057] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.2622: casefold flag without casefold feature [ 737.155758][ T9057] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2622: couldn't read orphan inode 15 (err -117) [ 737.237090][ T9057] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 739.994032][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 741.668573][ T9156] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2655'. [ 743.890949][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 743.890975][ T30] audit: type=1400 audit(2000000060.640:2915): avc: denied { watch_reads } for pid=9176 comm="syz.3.2664" path="/581/file0" dev="tmpfs" ino=3068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 744.070040][ T9184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9184 comm=syz.3.2666 [ 744.538204][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'. [ 744.542962][ T9193] loop8: detected capacity change from 0 to 512 [ 744.632852][ T9197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1844 sclass=netlink_route_socket pid=9197 comm=syz.3.2671 [ 744.648004][ T9197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9197 comm=syz.3.2671 [ 744.698066][ T9193] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 744.709383][ T9193] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.730965][ T30] audit: type=1400 audit(2000000061.530:2916): avc: denied { read write } for pid=9192 comm="syz.8.2669" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 745.191136][ T30] audit: type=1400 audit(2000000061.530:2917): avc: denied { open } for pid=9192 comm="syz.8.2669" path="/34/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 745.214897][ T30] audit: type=1326 audit(2000000061.560:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9206 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 745.238583][ T30] audit: type=1326 audit(2000000061.570:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9206 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 745.262341][ T30] audit: type=1326 audit(2000000061.990:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9206 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 745.303578][ T30] audit: type=1326 audit(2000000061.990:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9206 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 745.329319][ T30] audit: type=1326 audit(2000000061.990:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9206 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 745.354653][ T30] audit: type=1326 audit(2000000061.990:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9206 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 745.378290][ T30] audit: type=1326 audit(2000000061.990:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9206 comm="syz.3.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603ba38be9 code=0x7ffc0000 [ 745.414623][ T9216] syz.5.2675[9216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 745.414720][ T9216] syz.5.2675[9216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 745.612811][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2682'. [ 747.024127][ T8413] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 747.159598][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.166864][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.175162][ T9247] device bridge_slave_0 entered promiscuous mode [ 747.186253][ T747] tipc: Left network mode [ 747.191122][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.198531][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.206772][ T9247] device bridge_slave_1 entered promiscuous mode [ 747.213495][ T9255] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2689'. [ 747.223747][ T9255] device gretap0 entered promiscuous mode [ 747.298426][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.305534][ T9247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.312845][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.320213][ T9247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.343028][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.350746][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.359529][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 747.368480][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 747.381179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 747.389624][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.397012][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.407094][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 747.415604][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.423059][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.441096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 747.451251][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 747.471361][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 747.484562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 747.492968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 747.500674][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 747.511925][ T9247] device veth0_vlan entered promiscuous mode [ 747.523690][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 747.533613][ T9247] device veth1_macvtap entered promiscuous mode [ 747.550954][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 747.563032][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 747.571711][ T8413] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 747.581038][ T8413] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.589648][ T8413] usb 9-1: Product: syz [ 747.593861][ T8413] usb 9-1: Manufacturer: syz [ 747.598816][ T8413] usb 9-1: SerialNumber: syz [ 747.689143][ T747] device veth1_macvtap left promiscuous mode [ 747.696115][ T747] device veth0_vlan left promiscuous mode [ 748.168700][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2694'. [ 748.202227][ T9283] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 748.215639][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2697'. [ 748.465768][ T9297] xt_hashlimit: max too large, truncated to 1048576 [ 748.508595][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 748.515410][ T9299] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 748.630688][ T9302] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2704'. [ 748.655037][ T9304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 748.689076][ T9304] cgroup: noprefix used incorrectly [ 748.695586][ T8411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 749.134486][ T9307] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2706'. [ 749.155082][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2707'. [ 749.226797][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'. [ 749.236876][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 749.236890][ T30] audit: type=1400 audit(2000000066.040:3024): avc: denied { mount } for pid=9314 comm="syz.8.2710" name="/" dev="ramfs" ino=38887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 749.243318][ T9315] loop8: detected capacity change from 0 to 512 [ 749.276407][ T9316] device bridge0 entered promiscuous mode [ 749.282277][ T9316] device macsec2 entered promiscuous mode [ 749.288757][ T9316] bridge0: port 3(macsec2) entered blocking state [ 749.295243][ T9316] bridge0: port 3(macsec2) entered disabled state [ 749.302684][ T9316] device bridge0 left promiscuous mode [ 749.321081][ T30] audit: type=1400 audit(2000000066.120:3025): avc: denied { mounton } for pid=9314 comm="syz.8.2710" path="/file0" dev="ramfs" ino=39391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 749.344393][ T9315] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 749.364013][ T9315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 749.372054][ T9315] System zones: 1-12 [ 749.387816][ T9315] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2228: inode #15: comm syz.8.2710: corrupted in-inode xattr [ 749.403678][ T30] audit: type=1326 audit(2000000066.200:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 749.414008][ T9315] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2710: couldn't read orphan inode 15 (err -117) [ 749.439153][ T8411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 749.447748][ T30] audit: type=1326 audit(2000000066.250:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 749.454153][ T9315] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 749.471372][ T30] audit: type=1326 audit(2000000066.250:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 749.517365][ T30] audit: type=1326 audit(2000000066.250:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 749.541151][ T30] audit: type=1326 audit(2000000066.250:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 749.565628][ T30] audit: type=1326 audit(2000000066.250:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 749.589694][ T30] audit: type=1326 audit(2000000066.250:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 749.614190][ T30] audit: type=1326 audit(2000000066.250:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258f17bbe9 code=0x7ffc0000 [ 749.692215][ T9330] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2715'. [ 749.769957][ T9337] loop8: detected capacity change from 0 to 2048 [ 750.045079][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2719'. [ 750.554119][ T8411] Bluetooth: hci0: command 0x1003 tx timeout [ 750.560584][ T5345] Bluetooth: hci0: sending frame failed (-49) [ 751.154890][ T9360] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2726'. [ 751.544292][ T8413] rtl8150 9-1:1.0: couldn't reset the device [ 751.559093][ T8413] rtl8150: probe of 9-1:1.0 failed with error -5 [ 751.624501][ T8413] usb 9-1: USB disconnect, device number 3 [ 752.089093][ T8413] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 752.507318][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'. [ 752.834176][ T8411] Bluetooth: hci0: command 0x1001 tx timeout [ 752.840606][ T5345] Bluetooth: hci0: sending frame failed (-49) [ 753.011032][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 753.019630][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 753.029475][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 753.038607][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 753.047419][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 753.056564][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 753.065515][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 753.067935][ T9387] cgroup: noprefix used incorrectly [ 753.074279][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 753.314061][ T8413] usb 9-1: device not accepting address 4, error -71 [ 754.182567][ T9446] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.189965][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.198561][ T9446] device bridge_slave_0 entered promiscuous mode [ 754.206414][ T9446] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.213602][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.221525][ T9446] device bridge_slave_1 entered promiscuous mode [ 754.898723][ T8411] Bluetooth: hci0: command 0x1009 tx timeout [ 754.911462][ T9468] overlayfs: failed to clone upperpath [ 755.024212][ T9446] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.031315][ T9446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.038679][ T9446] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.046365][ T9446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.186312][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 755.204339][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.213289][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.246372][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 755.258453][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 755.276260][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.283349][ T9431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.304039][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 755.312801][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 755.321617][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.328721][ T9456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.336561][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 755.507909][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 755.516347][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 755.525090][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 755.726268][ T9401] tipc: Disabling bearer [ 755.731689][ T9401] tipc: Disabling bearer [ 755.739445][ T9401] tipc: Left network mode [ 755.746690][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 755.746707][ T30] audit: type=1326 audit(2000000072.550:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 755.752446][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 755.776336][ T30] audit: type=1326 audit(2000000072.550:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 755.776390][ T30] audit: type=1326 audit(2000000072.550:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 755.776416][ T30] audit: type=1326 audit(2000000072.550:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 755.776442][ T30] audit: type=1400 audit(2000000072.550:3076): avc: denied { setopt } for pid=9492 comm="syz.8.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 755.776466][ T30] audit: type=1326 audit(2000000072.550:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 755.776490][ T30] audit: type=1326 audit(2000000072.550:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 755.776515][ T30] audit: type=1326 audit(2000000072.560:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 755.776541][ T30] audit: type=1326 audit(2000000072.560:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 755.776567][ T30] audit: type=1326 audit(2000000072.560:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 755.854780][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2749'. [ 755.858725][ T9398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 755.955927][ T9456] Bluetooth: hci1: Frame reassembly failed (-84) [ 756.033287][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 756.041833][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 756.050316][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 756.058701][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 756.068411][ T9446] device veth0_vlan entered promiscuous mode [ 756.090144][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 756.098674][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 756.112854][ T9446] device veth1_macvtap entered promiscuous mode [ 756.129398][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 756.138291][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 756.146946][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 756.168430][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 756.187150][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 756.219794][ T9503] device gretap0 left promiscuous mode [ 756.254624][ T8415] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 757.646091][ T9508] device ip6gretap0 entered promiscuous mode [ 758.836163][ T8415] Bluetooth: hci1: command 0x1003 tx timeout [ 758.861869][ T8411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 758.924150][ T355] Bluetooth: hci1: sending frame failed (-49) [ 760.470906][ T8413] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 760.547052][ T439] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 760.592621][ T9539] loop3: detected capacity change from 0 to 512 [ 760.659312][ T9401] device veth1_macvtap left promiscuous mode [ 760.764666][ T8413] usb 5-1: Using ep0 maxpacket: 32 [ 760.903359][ T9539] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.2762: corrupted inode contents [ 760.916991][ T439] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 760.927593][ T9539] EXT4-fs error (device loop3): ext4_dirty_inode:6071: inode #16: comm syz.3.2762: mark_inode_dirty error [ 760.940104][ T9539] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.2762: corrupted inode contents [ 760.953814][ T9539] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.2762: mark_inode_dirty error [ 760.966572][ T9539] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.2762: corrupted inode contents [ 760.980267][ T9539] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 760.990403][ T9539] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.2762: corrupted inode contents [ 761.003666][ T9539] EXT4-fs error (device loop3): ext4_truncate:4304: inode #16: comm syz.3.2762: mark_inode_dirty error [ 761.017464][ T9539] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 761.029134][ T9539] EXT4-fs (loop3): 1 truncate cleaned up [ 761.034920][ T9539] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 761.046556][ T9539] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.094796][ T8411] Bluetooth: hci1: command 0x1001 tx timeout [ 761.132288][ T355] Bluetooth: hci1: sending frame failed (-49) [ 761.314099][ T8413] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 761.329007][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 761.329023][ T30] audit: type=1400 audit(2000000078.130:3087): avc: denied { create } for pid=9545 comm="syz.1.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 761.366369][ T8413] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.404058][ T8413] usb 5-1: config 0 has no interface number 0 [ 761.430674][ T8413] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 761.451138][ T30] audit: type=1400 audit(2000000078.160:3088): avc: denied { create } for pid=9545 comm="syz.1.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 761.494013][ T8413] usb 5-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.538518][ T30] audit: type=1400 audit(2000000078.250:3089): avc: denied { create } for pid=9545 comm="syz.1.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 761.630735][ T30] audit: type=1326 audit(2000000078.430:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.3.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e1048be9 code=0x7ffc0000 [ 761.674805][ T30] audit: type=1326 audit(2000000078.430:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.3.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e1048be9 code=0x7ffc0000 [ 761.704107][ T8413] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 761.713295][ T8413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.723409][ T30] audit: type=1326 audit(2000000078.430:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.3.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e1048be9 code=0x7ffc0000 [ 761.755927][ T8413] usb 5-1: Product: syz [ 761.764018][ T8413] usb 5-1: Manufacturer: syz [ 761.768759][ T8413] usb 5-1: SerialNumber: syz [ 761.778171][ T30] audit: type=1326 audit(2000000078.430:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.3.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e1048be9 code=0x7ffc0000 [ 761.788098][ T8413] usb 5-1: config 0 descriptor?? [ 761.825980][ T9456] Bluetooth: hci0: Frame reassembly failed (-84) [ 761.836980][ T9549] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 761.844302][ T9520] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 761.848315][ T30] audit: type=1326 audit(2000000078.430:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.3.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e1048be9 code=0x7ffc0000 [ 761.866670][ T8413] usb 5-1: invalid MIDI in EP 0 [ 761.895831][ T8413] snd-usb-audio: probe of 5-1:0.16 failed with error -22 [ 761.916471][ T30] audit: type=1326 audit(2000000078.430:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.3.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e1048be9 code=0x7ffc0000 [ 761.932575][ T8413] usb 5-1: USB disconnect, device number 4 [ 761.981230][ T30] audit: type=1326 audit(2000000078.630:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9548 comm="syz.3.2766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e1048be9 code=0x7ffc0000 [ 763.385760][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 763.461217][ T9570] futex_wake_op: syz.4.2774 tries to shift op by 144; fix this program [ 763.481633][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2774'. [ 763.647606][ T8413] Bluetooth: hci1: command 0x1009 tx timeout [ 764.013839][ T439] Bluetooth: hci0: command 0x1003 tx timeout [ 764.056450][ T9496] Bluetooth: hci0: sending frame failed (-49) [ 764.724064][ T439] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 764.994040][ T439] usb 5-1: Using ep0 maxpacket: 16 [ 765.124484][ T439] usb 5-1: config 110 has an invalid descriptor of length 242, skipping remainder of the config [ 765.135369][ T439] usb 5-1: config 110 has 0 interfaces, different from the descriptor's value: 1 [ 765.146203][ T439] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6027, bcdDevice= 0.00 [ 765.156485][ T439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.261387][ T9595] netlink: 'syz.1.2783': attribute type 3 has an invalid length. [ 765.664089][ T439] usb 5-1: string descriptor 0 read error: -71 [ 765.673555][ T439] usb 5-1: USB disconnect, device number 5 [ 766.154126][ T8413] Bluetooth: hci0: command 0x1001 tx timeout [ 766.191209][ T9300] Bluetooth: hci0: sending frame failed (-49) [ 767.325225][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 767.325241][ T30] audit: type=1326 audit(2000000084.130:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 767.374258][ T30] audit: type=1326 audit(2000000084.130:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.8.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 768.004155][ T30] audit: type=1400 audit(2000000084.770:3182): avc: denied { setopt } for pid=9626 comm="syz.4.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 768.205161][ T30] audit: type=1400 audit(2000000084.830:3183): avc: denied { write } for pid=9626 comm="syz.4.2795" path="socket:[40420]" dev="sockfs" ino=40420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 768.319416][ T8415] Bluetooth: hci0: command 0x1009 tx timeout [ 768.526744][ T9639] loop4: detected capacity change from 0 to 256 [ 768.722753][ T9639] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d) [ 768.736011][ T9639] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 768.758149][ T9639] xt_TPROXY: Can be used only with -p tcp or -p udp [ 768.765897][ T9639] device batadv_slave_0 entered promiscuous mode [ 769.928272][ T30] audit: type=1400 audit(2000000086.730:3184): avc: denied { add_name } for pid=9638 comm="syz.4.2797" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 769.959488][ T30] audit: type=1400 audit(2000000086.730:3185): avc: denied { associate } for pid=9638 comm="syz.4.2797" name="file2" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 770.051682][ T30] audit: type=1400 audit(2000000086.730:3186): avc: denied { read write } for pid=9638 comm="syz.4.2797" name="file2" dev="loop4" ino=1048674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 770.076472][ T9638] device batadv_slave_0 left promiscuous mode [ 770.087001][ T30] audit: type=1400 audit(2000000086.730:3187): avc: denied { open } for pid=9638 comm="syz.4.2797" path="/15/file2/file2" dev="loop4" ino=1048674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 770.189681][ T30] audit: type=1326 audit(2000000086.990:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 770.279521][ T30] audit: type=1326 audit(2000000087.000:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9651 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1501592be9 code=0x7ffc0000 [ 770.923799][ T9675] device ip6gretap0 entered promiscuous mode [ 771.225996][ T9683] device sit1 left promiscuous mode [ 771.238710][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 771.251912][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 771.368650][ T8411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.390963][ T8411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.407444][ T8413] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 772.144548][ T8411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 772.162610][ T8413] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 772.699534][ T9722] netlink: 'syz.1.2824': attribute type 4 has an invalid length. [ 772.720167][ T9722] netlink: 'syz.1.2824': attribute type 4 has an invalid length. [ 773.344580][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 773.344597][ T30] audit: type=1326 audit(2000000090.150:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 773.375306][ T30] audit: type=1326 audit(2000000090.160:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 773.402234][ T30] audit: type=1326 audit(2000000090.170:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 773.407060][ T9735] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 773.429250][ T30] audit: type=1326 audit(2000000090.170:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 773.433042][ T9740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 773.456060][ T30] audit: type=1326 audit(2000000090.170:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 773.464930][ T9401] Bluetooth: hci0: Frame reassembly failed (-84) [ 773.499822][ T30] audit: type=1326 audit(2000000090.180:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 773.525534][ T30] audit: type=1326 audit(2000000090.180:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 773.578036][ T30] audit: type=1326 audit(2000000090.200:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 773.602394][ T30] audit: type=1326 audit(2000000090.210:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 773.626365][ T30] audit: type=1326 audit(2000000090.210:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.8.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 774.024012][ T8415] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 774.323635][ T9767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 774.690923][ T9773] loop3: detected capacity change from 0 to 512 [ 774.753097][ T9773] EXT4-fs (loop3): orphan cleanup on readonly fs [ 774.759898][ T9773] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 774.768938][ T9773] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 774.783875][ T9773] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2841: attempt to clear invalid blocks 2 len 1 [ 774.797274][ T9773] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2841: invalid indirect mapped block 1819239214 (level 0) [ 774.813116][ T9773] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2841: invalid indirect mapped block 1819239214 (level 1) [ 774.828349][ T9773] EXT4-fs (loop3): 1 truncate cleaned up [ 774.834264][ T9773] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 774.977530][ T8415] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 774.989827][ T8415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.002274][ T8415] usb 5-1: Product: syz [ 775.007629][ T8415] usb 5-1: Manufacturer: syz [ 775.018607][ T8415] usb 5-1: SerialNumber: syz [ 775.243668][ T9780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 775.248490][ T9773] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 775.251033][ T9780] IPv6: NLM_F_CREATE should be set when creating new route [ 775.267435][ T9773] EXT4-fs error (device loop3): ext4_remount:6024: comm syz.3.2841: Abort forced by user [ 775.278764][ T9773] EXT4-fs (loop3): Remounting filesystem read-only [ 775.285389][ T9773] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 775.434103][ T8413] Bluetooth: hci0: command 0x1003 tx timeout [ 775.440290][ T5345] Bluetooth: hci0: sending frame failed (-49) [ 775.674032][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.879766][ T9800] 9pnet: Insufficient options for proto=fd [ 777.832686][ T8413] Bluetooth: hci0: command 0x1001 tx timeout [ 777.839302][ T5345] Bluetooth: hci0: sending frame failed (-49) [ 777.970242][ T9815] loop3: detected capacity change from 0 to 40427 [ 777.992399][ T9815] F2FS-fs (loop3): invalid crc value [ 778.012812][ T9815] F2FS-fs (loop3): Found nat_bits in checkpoint [ 778.058395][ T9815] F2FS-fs (loop3): Start checkpoint disabled! [ 778.087081][ T9815] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 778.253268][ T9830] syz.3.2855[9830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 778.253368][ T9830] syz.3.2855[9830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 778.372327][ T9838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9838 comm=syz.4.2862 [ 778.614835][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 778.614877][ T30] audit: type=1400 audit(2000000095.400:3226): avc: denied { read } for pid=9837 comm="syz.4.2862" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 778.817904][ T30] audit: type=1400 audit(2000000095.400:3227): avc: denied { open } for pid=9837 comm="syz.4.2862" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 778.849735][ T30] audit: type=1400 audit(2000000095.410:3228): avc: denied { mount } for pid=9837 comm="syz.4.2862" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 778.958657][ T30] audit: type=1400 audit(2000000095.760:3229): avc: denied { write } for pid=9843 comm="syz.1.2864" path="socket:[40685]" dev="sockfs" ino=40685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 779.099536][ T30] audit: type=1400 audit(2000000095.840:3230): avc: denied { read } for pid=9845 comm="syz.1.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 779.591422][ T30] audit: type=1400 audit(2000000096.390:3231): avc: denied { unmount } for pid=9247 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 779.690608][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.698501][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.709329][ T9859] device bridge_slave_0 entered promiscuous mode [ 779.720579][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.728921][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.739572][ T9859] device bridge_slave_1 entered promiscuous mode [ 779.976318][ T9398] tipc: Left network mode [ 780.085168][ T8411] Bluetooth: hci0: command 0x1009 tx timeout [ 780.148485][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.155693][ T9859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.163034][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.170296][ T9859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.197024][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 780.205096][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.212588][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.225419][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 780.233830][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.241111][ T9401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.250473][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 780.259287][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.266349][ T9401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.286490][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 780.303387][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 780.320810][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 780.335596][ T9859] device veth0_vlan entered promiscuous mode [ 780.342312][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 780.368080][ T9859] device veth1_macvtap entered promiscuous mode [ 780.385362][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 780.394713][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 780.403258][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 780.411157][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 780.421126][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 780.888681][ T9398] device bridge_slave_1 left promiscuous mode [ 780.903881][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.250888][ T30] audit: type=1326 audit(2000000097.930:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a1fcabe9 code=0x7ffc0000 [ 781.565240][ T8415] rtl8150 5-1:1.0: couldn't reset the device [ 781.894366][ T9398] device bridge_slave_0 left promiscuous mode [ 781.900710][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.908426][ T8415] rtl8150: probe of 5-1:1.0 failed with error -5 [ 781.920497][ T8415] usb 5-1: USB disconnect, device number 6 [ 781.928452][ T9398] device veth0_vlan left promiscuous mode [ 781.945488][ T30] audit: type=1326 audit(2000000097.930:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a1fcabe9 code=0x7ffc0000 [ 781.994327][ T30] audit: type=1326 audit(2000000097.930:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fc3a1fcabe9 code=0x7ffc0000 [ 782.032253][ T30] audit: type=1326 audit(2000000097.930:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9887 comm="syz.1.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a1fcabe9 code=0x7ffc0000 [ 782.249189][ T9892] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 782.258783][ T9892] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 782.322140][ T9905] loop1: detected capacity change from 0 to 512 [ 782.328758][ T9899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 782.336487][ T9899] IPv6: NLM_F_CREATE should be set when creating new route [ 782.354506][ T3101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 782.371071][ T9905] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 782.397732][ T9905] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2878: bg 0: block 131: padding at end of block bitmap is not set [ 782.418179][ T9905] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 782.433157][ T9905] EXT4-fs (loop1): 1 truncate cleaned up [ 782.439525][ T9905] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,grpquota,i_version,dioread_nolock,,errors=continue. Quota mode: writeback. [ 783.194325][ T439] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 783.717460][ T9939] loop8: detected capacity change from 0 to 512 [ 783.824882][ T9939] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.2891: inode #1: comm syz.8.2891: iget: illegal inode # [ 783.839387][ T9939] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.2891: error while reading EA inode 1 err=-117 [ 783.853226][ T9939] EXT4-fs (loop8): 1 orphan inode deleted [ 783.859421][ T9939] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,user_xattr,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 783.900032][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 783.900048][ T30] audit: type=1400 audit(2000000100.700:3238): avc: denied { mounton } for pid=9938 comm="syz.8.2891" path="/55/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.289278][ T9933] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.315513][ T9933] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.366668][ T9933] device bridge_slave_0 entered promiscuous mode [ 784.395818][ T9955] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2897'. [ 784.403051][ T9933] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.419289][ T9957] loop8: detected capacity change from 0 to 1024 [ 784.419990][ T9933] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.435119][ T9957] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 784.462251][ T9933] device bridge_slave_1 entered promiscuous mode [ 784.514832][ T9957] EXT4-fs (loop8): Unrecognized mount option "obj_type=" or missing value [ 785.887831][ T30] audit: type=1400 audit(2000000102.690:3239): avc: denied { write } for pid=9956 comm="syz.8.2896" path="socket:[41513]" dev="sockfs" ino=41513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 785.912670][ T9398] tipc: Left network mode [ 785.947157][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 785.956427][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 785.974951][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 785.983755][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 785.993528][ T9456] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.001108][ T9456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.012751][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 786.022632][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 786.032462][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.039786][ T9456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.051345][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 786.060646][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 786.111662][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 786.199218][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 786.248221][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 786.283500][ T30] audit: type=1400 audit(2000000103.080:3240): avc: denied { ioctl } for pid=9987 comm="syz.3.2905" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42216 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 786.391122][ T30] audit: type=1400 audit(2000000103.190:3241): avc: denied { mount } for pid=9956 comm="syz.8.2896" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 786.391617][ T9993] input: syz1 as /devices/virtual/input/input8 [ 786.442741][ T30] audit: type=1400 audit(2000000103.230:3242): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1147 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.464099][ T9933] device veth0_vlan entered promiscuous mode [ 786.474018][ T30] audit: type=1400 audit(2000000103.230:3243): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1147 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.498778][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 786.500423][ T30] audit: type=1400 audit(2000000103.230:3244): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1147 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.550065][ T9993] loop3: detected capacity change from 0 to 256 [ 786.550828][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 786.602832][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 786.612248][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 786.614216][ T9993] FAT-fs (loop3): Directory bread(block 64) failed [ 786.634690][ T9993] FAT-fs (loop3): Directory bread(block 65) failed [ 786.642422][ T9993] FAT-fs (loop3): Directory bread(block 66) failed [ 786.649523][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 786.649795][ T9993] FAT-fs (loop3): Directory bread(block 67) failed [ 786.665867][ T9993] FAT-fs (loop3): Directory bread(block 68) failed [ 786.667729][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 786.680904][ T9993] FAT-fs (loop3): Directory bread(block 69) failed [ 786.688458][ T9993] FAT-fs (loop3): Directory bread(block 70) failed [ 786.696443][ T9993] FAT-fs (loop3): Directory bread(block 71) failed [ 786.717173][ T9993] FAT-fs (loop3): Directory bread(block 72) failed [ 786.737623][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 786.778312][ T9993] FAT-fs (loop3): Directory bread(block 73) failed [ 786.805317][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 786.862139][ T9997] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2909'. [ 786.885768][ T9933] device veth1_macvtap entered promiscuous mode [ 786.965326][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 786.979212][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 786.988098][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 786.996809][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 788.526936][T10014] FAULT_INJECTION: forcing a failure. [ 788.526936][T10014] name failslab, interval 1, probability 0, space 0, times 0 [ 788.542138][ T30] audit: type=1326 audit(2000000105.330:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 788.584035][T10014] CPU: 1 PID: 10014 Comm: syz.8.2913 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 788.595308][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.605497][T10014] Call Trace: [ 788.608792][T10014] [ 788.611733][T10014] __dump_stack+0x21/0x30 [ 788.616073][T10014] dump_stack_lvl+0xee/0x150 [ 788.620755][T10014] ? show_regs_print_info+0x20/0x20 [ 788.626050][T10014] ? audit_log_vformat+0x37d/0x980 [ 788.631359][T10014] dump_stack+0x15/0x20 [ 788.635696][T10014] should_fail+0x3c1/0x510 [ 788.640250][T10014] __should_failslab+0xa4/0xe0 [ 788.645161][T10014] should_failslab+0x9/0x20 [ 788.649667][T10014] slab_pre_alloc_hook+0x3b/0xe0 [ 788.654846][T10014] kmem_cache_alloc_trace+0x48/0x270 [ 788.660506][T10014] ? audit_log_d_path+0xc6/0x240 [ 788.665482][T10014] audit_log_d_path+0xc6/0x240 [ 788.670352][T10014] audit_log_d_path_exe+0x42/0x70 [ 788.675401][T10014] audit_log_task+0x205/0x2e0 [ 788.680290][T10014] ? audit_core_dumps+0x110/0x110 [ 788.685352][T10014] ? migrate_enable+0x192/0x260 [ 788.690237][T10014] ? migrate_disable+0x180/0x180 [ 788.695183][T10014] audit_seccomp+0x7f/0x160 [ 788.699711][T10014] __seccomp_filter+0xb06/0x1900 [ 788.704882][T10014] ? file_end_write+0x1b0/0x1b0 [ 788.709772][T10014] ? __secure_computing+0x290/0x290 [ 788.715017][T10014] ? __kasan_check_write+0x14/0x20 [ 788.720429][T10014] ? mutex_unlock+0x89/0x220 [ 788.725038][T10014] ? __mutex_lock_slowpath+0x10/0x10 [ 788.730474][T10014] ? fput+0x1a/0x20 [ 788.734306][T10014] ? ksys_write+0x1eb/0x240 [ 788.738952][T10014] ? __ia32_sys_read+0x90/0x90 [ 788.744005][T10014] __secure_computing+0xea/0x290 [ 788.748978][T10014] syscall_trace_enter+0xcf/0x180 [ 788.754015][T10014] syscall_enter_from_user_mode+0x1f/0x30 [ 788.759746][T10014] do_syscall_64+0x24/0xa0 [ 788.764167][T10014] ? clear_bhb_loop+0x50/0xa0 [ 788.768847][T10014] ? clear_bhb_loop+0x50/0xa0 [ 788.773629][T10014] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 788.779559][T10014] RIP: 0033:0x7f87052d8be9 [ 788.784009][T10014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.803740][T10014] RSP: 002b:00007f8703d41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 788.812290][T10014] RAX: ffffffffffffffda RBX: 00007f87054fffa0 RCX: 00007f87052d8be9 [ 788.820314][T10014] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 788.828400][T10014] RBP: 00007f8703d41090 R08: 0000000000000000 R09: 0000000000000000 [ 788.836466][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.844450][T10014] R13: 00007f8705500038 R14: 00007f87054fffa0 R15: 00007ffd808f4668 [ 788.852614][T10014] [ 788.940693][ T30] audit: type=1326 audit(2000000105.330:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 788.972326][T10024] loop8: detected capacity change from 0 to 512 [ 789.090751][ T9398] device bridge_slave_1 left promiscuous mode [ 789.246250][ T3101] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 789.274389][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.283620][T10024] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.2918: inode #1: comm syz.8.2918: iget: illegal inode # [ 789.301910][ T30] audit: type=1326 audit(2000000105.330:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 789.326022][ T30] audit: type=1326 audit(2000000105.330:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87052d7550 code=0x7ffc0000 [ 789.350608][ T30] audit: type=1326 audit(2000000105.330:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87052d769f code=0x7ffc0000 [ 789.374565][ T9398] device bridge_slave_0 left promiscuous mode [ 789.384339][T10024] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.2918: error while reading EA inode 1 err=-117 [ 789.384923][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.405674][ T9398] device veth1_macvtap left promiscuous mode [ 789.417883][ T30] audit: type=1326 audit(2000000105.330:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 789.444697][T10024] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.2918: inode #1: comm syz.8.2918: iget: illegal inode # [ 789.471688][T10024] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.2918: error while reading EA inode 1 err=-117 [ 789.484796][T10024] EXT4-fs (loop8): 1 orphan inode deleted [ 789.494852][T10024] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,nodioread_nolock,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 789.524369][T10037] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2922'. [ 789.541465][ T30] audit: type=1326 audit(2000000105.680:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f87052d75fc code=0x7ffc0000 [ 789.565114][ T3101] usb 6-1: device descriptor read/64, error -71 [ 789.624021][ T30] audit: type=1326 audit(2000000105.680:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87052d769f code=0x7ffc0000 [ 789.649607][ T30] audit: type=1326 audit(2000000105.680:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87052d784a code=0x7ffc0000 [ 789.707952][ T30] audit: type=1326 audit(2000000105.680:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 789.738372][ T30] audit: type=1326 audit(2000000105.680:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10013 comm="syz.8.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87052d8be9 code=0x7ffc0000 [ 790.012620][ T60] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 790.194041][ T3101] usb 6-1: device descriptor read/64, error -71 [ 790.254001][ T60] usb 4-1: Invalid ep0 maxpacket: 64 [ 790.674547][ T60] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 790.749154][T10046] kthread_run failed with err -4 [ 790.787867][ T3101] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 790.831329][T10056] loop8: detected capacity change from 0 to 1024 [ 790.865503][T10056] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 790.879033][T10056] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.914196][ T60] usb 4-1: Invalid ep0 maxpacket: 64 [ 790.919877][ T60] usb usb4-port1: attempt power cycle [ 791.042444][ T9398] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 791.057987][ T9398] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 791.071183][ T3101] usb 6-1: device descriptor read/64, error -71 [ 791.078193][ T9398] EXT4-fs (loop8): This should not happen!! Data will be lost [ 791.078193][ T9398] [ 791.092279][ T9398] EXT4-fs (loop8): Total free blocks count 0 [ 791.098575][ T9398] EXT4-fs (loop8): Free/Dirty block details [ 791.106212][ T439] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 791.112799][ T9398] EXT4-fs (loop8): free_blocks=4293918720 [ 791.119809][ T9398] EXT4-fs (loop8): dirty_blocks=16 [ 791.126263][ T9398] EXT4-fs (loop8): Block reservation details [ 791.132558][ T9398] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 791.334433][ T60] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 791.404559][ T439] usb 5-1: Using ep0 maxpacket: 16 [ 791.474575][ T60] usb 4-1: Invalid ep0 maxpacket: 64 [ 791.494142][ T3101] usb 6-1: device descriptor read/64, error -71 [ 791.533632][ T9432] Bluetooth: hci0: Frame reassembly failed (-84) [ 791.554158][ T439] usb 5-1: config 16 has too many interfaces: 68, using maximum allowed: 32 [ 791.563239][ T439] usb 5-1: config 16 has an invalid interface number: 75 but max is 67 [ 791.571826][ T439] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 791.582428][ T439] usb 5-1: config 16 has 1 interface, different from the descriptor's value: 68 [ 791.591535][ T439] usb 5-1: config 16 has no interface number 0 [ 791.600550][T10074] loop8: detected capacity change from 0 to 512 [ 791.614222][ T3101] usb usb6-port1: attempt power cycle [ 791.624061][ T60] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 791.671578][T10074] EXT4-fs (loop8): Ignoring removed oldalloc option [ 791.680181][T10074] EXT4-fs (loop8): 1 truncate cleaned up [ 791.686222][T10074] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 791.705194][T10074] syz.8.2931[10074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 791.710017][T10074] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2931: invalid indirect mapped block 234881024 (level 0) [ 791.724254][ T60] usb 4-1: Invalid ep0 maxpacket: 64 [ 791.741595][ T60] usb usb4-port1: unable to enumerate USB device [ 791.741687][T10074] EXT4-fs (loop8): Remounting filesystem read-only [ 791.764424][ T439] usb 5-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice=94.38 [ 791.773689][ T439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.781820][ T439] usb 5-1: Product: syz [ 791.786211][ T439] usb 5-1: Manufacturer: syz [ 791.791014][ T439] usb 5-1: SerialNumber: syz [ 791.968325][T10079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 791.975780][T10079] IPv6: NLM_F_CREATE should be set when creating new route [ 792.654492][ T439] ums-sddr55 5-1:16.75: USB Mass Storage device detected [ 792.674474][ T439] ums-sddr55 5-1:16.75: Quirks match for vid 07c4 pid a103: 8 [ 792.736909][ T439] usb 5-1: USB disconnect, device number 7 [ 793.151426][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2939'. [ 793.509644][T10109] device ip6gretap0 entered promiscuous mode [ 793.534631][T10109] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 793.542416][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 793.591966][T10117] FAULT_INJECTION: forcing a failure. [ 793.591966][T10117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.605864][ T8411] Bluetooth: hci0: command 0x1003 tx timeout [ 793.612042][ T5345] Bluetooth: hci0: sending frame failed (-49) [ 793.634198][T10117] CPU: 0 PID: 10117 Comm: syz.5.2945 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 793.644611][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 793.654689][T10117] Call Trace: [ 793.657993][T10117] [ 793.660945][T10117] __dump_stack+0x21/0x30 [ 793.665312][T10117] dump_stack_lvl+0xee/0x150 [ 793.669938][T10117] ? show_regs_print_info+0x20/0x20 [ 793.675301][T10117] ? stack_trace_save+0x98/0xe0 [ 793.680192][T10117] ? __stack_depot_save+0x34/0x480 [ 793.685518][T10117] dump_stack+0x15/0x20 [ 793.689710][T10117] should_fail+0x3c1/0x510 [ 793.694149][T10117] should_fail_usercopy+0x1a/0x20 [ 793.699206][T10117] _copy_from_user+0x20/0xd0 [ 793.703865][T10117] __copy_msghdr_from_user+0xaf/0x5e0 [ 793.709277][T10117] ? _kstrtoull+0x3c0/0x4d0 [ 793.713819][T10117] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 793.719265][T10117] ? kstrtouint_from_user+0x1a0/0x200 [ 793.724771][T10117] ___sys_sendmsg+0x156/0x260 [ 793.729483][T10117] ? __sys_sendmsg+0x250/0x250 [ 793.734312][T10117] ? __fdget+0x1a1/0x230 [ 793.738758][T10117] __x64_sys_sendmsg+0x1e2/0x2a0 [ 793.743917][T10117] ? ___sys_sendmsg+0x260/0x260 [ 793.748821][T10117] ? ksys_write+0x1eb/0x240 [ 793.753341][T10117] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 793.759420][T10117] x64_sys_call+0x4b/0x9a0 [ 793.763874][T10117] do_syscall_64+0x4c/0xa0 [ 793.768312][T10117] ? clear_bhb_loop+0x50/0xa0 [ 793.772997][T10117] ? clear_bhb_loop+0x50/0xa0 [ 793.777685][T10117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 793.783592][T10117] RIP: 0033:0x7ff364a7ebe9 [ 793.788020][T10117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.807722][T10117] RSP: 002b:00007ff3634e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.816239][T10117] RAX: ffffffffffffffda RBX: 00007ff364ca5fa0 RCX: 00007ff364a7ebe9 [ 793.824218][T10117] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 793.832193][T10117] RBP: 00007ff3634e7090 R08: 0000000000000000 R09: 0000000000000000 [ 793.840355][T10117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.848345][T10117] R13: 00007ff364ca6038 R14: 00007ff364ca5fa0 R15: 00007fffe07aa498 [ 793.856535][T10117] [ 794.243771][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 794.243788][ T30] audit: type=1400 audit(2000000111.040:3261): avc: denied { mounton } for pid=10121 comm="syz.5.2946" path="/7/file0" dev="incremental-fs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 794.304775][ T9933] ------------[ cut here ]------------ [ 794.310470][ T9933] WARNING: CPU: 0 PID: 9933 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 794.322699][ T9933] Modules linked in: [ 794.327909][ T9933] CPU: 0 PID: 9933 Comm: syz-executor Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 794.339798][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 794.350491][ T9933] RIP: 0010:drop_nlink+0xc5/0x110 [ 794.356066][ T9933] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 43 3b f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4b be b3 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 794.376034][ T9933] RSP: 0018:ffffc90000ae7b28 EFLAGS: 00010293 [ 794.382207][ T9933] RAX: ffffffff81b4f185 RBX: ffff888118c23260 RCX: ffff888118f1cf00 [ 794.390578][ T9933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 794.443839][ T9933] RBP: ffffc90000ae7b50 R08: 0000000000000004 R09: 0000000000000003 [ 794.451989][ T9933] R10: fffff5200015cf54 R11: 1ffff9200015cf54 R12: dffffc0000000000 [ 794.460278][ T9933] R13: 1ffff11023184655 R14: ffff888118c232a8 R15: 0000000000000000 [ 794.478732][ T9933] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 794.490540][ T9933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.501256][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2951'. [ 794.574329][ T9933] CR2: 0000001b2e81dff8 CR3: 0000000123b0d000 CR4: 00000000003506b0 [ 794.597947][ T9933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 794.759800][ T9933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 794.775682][ T9933] Call Trace: [ 794.779024][ T9933] [ 794.781999][ T9933] shmem_rmdir+0x5b/0x90 [ 794.786785][ T9933] vfs_rmdir+0x313/0x460 [ 794.791228][ T9933] incfs_kill_sb+0x105/0x220 [ 794.795982][ T9933] deactivate_locked_super+0xa0/0x100 [ 794.801618][ T9933] deactivate_super+0xaf/0xe0 [ 794.806635][ T9933] cleanup_mnt+0x446/0x500 [ 794.811105][ T9933] __cleanup_mnt+0x19/0x20 [ 794.818942][ T9933] task_work_run+0x127/0x190 [ 794.823737][ T9933] do_exit+0xa7e/0x27a0 [ 794.828231][ T9933] ? put_task_struct+0x90/0x90 [ 794.833201][ T9933] ? __fdget_pos+0x1f7/0x380 [ 794.838339][ T9933] ? ksys_write+0x1da/0x240 [ 794.842925][ T9933] ? __ia32_sys_read+0x90/0x90 [ 794.848166][ T9933] do_group_exit+0x141/0x310 [ 794.852876][ T9933] ? debug_smp_processor_id+0x17/0x20 [ 794.858809][ T9933] __x64_sys_exit_group+0x3f/0x40 [ 794.864333][ T9933] x64_sys_call+0x832/0x9a0 [ 794.869177][ T9933] do_syscall_64+0x4c/0xa0 [ 794.874261][ T9933] ? clear_bhb_loop+0x50/0xa0 [ 794.879133][ T9933] ? clear_bhb_loop+0x50/0xa0 [ 794.883893][ T9933] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 794.889970][ T9933] RIP: 0033:0x7ff364a7ebe9 [ 794.894473][ T9933] Code: Unable to access opcode bytes at RIP 0x7ff364a7ebbf. [ 794.901921][ T9933] RSP: 002b:00007fffe07a7438 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 794.910603][ T9933] RAX: ffffffffffffffda RBX: 00007ff364b01c77 RCX: 00007ff364a7ebe9 [ 794.918903][ T9933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 794.927751][ T9933] RBP: 0000000000000016 R08: 00007fffe07a51d6 R09: 00007fffe07a86f0 [ 794.936212][ T9933] R10: 000000000000000a R11: 0000000000000246 R12: 00007fffe07a86f0 [ 794.945149][ T9933] R13: 00007ff364b01c05 R14: 00005555876334a8 R15: 00007fffe07aa8b0 [ 794.953388][ T9933] [ 794.956908][ T9933] ---[ end trace 36ee88e81b1d9376 ]--- [ 794.963562][ T9933] ================================================================== [ 794.971783][ T9933] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 794.978569][ T9933] Write of size 4 at addr 0000000000000170 by task syz-executor/9933 [ 794.987397][ T9933] [ 794.989735][ T9933] CPU: 1 PID: 9933 Comm: syz-executor Tainted: G W 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 795.001678][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 795.012054][ T9933] Call Trace: [ 795.015558][ T9933] [ 795.018507][ T9933] __dump_stack+0x21/0x30 [ 795.022891][ T9933] dump_stack_lvl+0xee/0x150 [ 795.027503][ T9933] ? show_regs_print_info+0x20/0x20 [ 795.033453][ T9933] ? _raw_spin_lock+0x8e/0xe0 [ 795.038802][ T9933] ? _raw_spin_trylock_bh+0x130/0x130 [ 795.044992][ T9933] ? ihold+0x20/0x60 [ 795.049162][ T9933] kasan_report+0xe7/0x140 [ 795.054386][ T9933] ? ihold+0x20/0x60 [ 795.059090][ T9933] kasan_check_range+0x280/0x290 [ 795.064267][ T9933] __kasan_check_write+0x14/0x20 [ 795.069461][ T9933] ihold+0x20/0x60 [ 795.073236][ T9933] vfs_rmdir+0x1f0/0x460 [ 795.077565][ T9933] incfs_kill_sb+0x105/0x220 [ 795.082470][ T9933] deactivate_locked_super+0xa0/0x100 [ 795.087977][ T9933] deactivate_super+0xaf/0xe0 [ 795.093060][ T9933] cleanup_mnt+0x446/0x500 [ 795.097686][ T9933] __cleanup_mnt+0x19/0x20 [ 795.102329][ T9933] task_work_run+0x127/0x190 [ 795.106937][ T9933] do_exit+0xa7e/0x27a0 [ 795.111123][ T9933] ? put_task_struct+0x90/0x90 [ 795.115899][ T9933] ? __fdget_pos+0x1f7/0x380 [ 795.120511][ T9933] ? ksys_write+0x1da/0x240 [ 795.125025][ T9933] ? __ia32_sys_read+0x90/0x90 [ 795.129801][ T9933] do_group_exit+0x141/0x310 [ 795.134404][ T9933] ? debug_smp_processor_id+0x17/0x20 [ 795.140123][ T9933] __x64_sys_exit_group+0x3f/0x40 [ 795.145161][ T9933] x64_sys_call+0x832/0x9a0 [ 795.149695][ T9933] do_syscall_64+0x4c/0xa0 [ 795.154151][ T9933] ? clear_bhb_loop+0x50/0xa0 [ 795.158844][ T9933] ? clear_bhb_loop+0x50/0xa0 [ 795.163716][ T9933] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 795.169627][ T9933] RIP: 0033:0x7ff364a7ebe9 [ 795.174055][ T9933] Code: Unable to access opcode bytes at RIP 0x7ff364a7ebbf. [ 795.181427][ T9933] RSP: 002b:00007fffe07a7438 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 795.189847][ T9933] RAX: ffffffffffffffda RBX: 00007ff364b01c77 RCX: 00007ff364a7ebe9 [ 795.198040][ T9933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 795.204154][ T8415] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 795.206018][ T9933] RBP: 0000000000000016 R08: 00007fffe07a51d6 R09: 00007fffe07a86f0 [ 795.206046][ T9933] R10: 000000000000000a R11: 0000000000000246 R12: 00007fffe07a86f0 [ 795.206059][ T9933] R13: 00007ff364b01c05 R14: 00005555876334a8 R15: 00007fffe07aa8b0 [ 795.206076][ T9933] [ 795.206083][ T9933] ================================================================== [ 795.206090][ T9933] Disabling lock debugging due to kernel taint [ 795.241712][ T9933] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 795.255304][ T30] audit: type=1400 audit(2000000112.040:3262): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 795.255667][ T9933] #PF: supervisor write access in kernel mode [ 795.263763][ T30] audit: type=1400 audit(2000000112.040:3263): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.285369][ T9933] #PF: error_code(0x0002) - not-present page [ 795.285400][ T9933] PGD 0 P4D 0 [ 795.285419][ T9933] Oops: 0002 [#1] PREEMPT SMP KASAN [ 795.285438][ T9933] CPU: 1 PID: 9933 Comm: syz-executor Tainted: G B W 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 795.285460][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 795.285471][ T9933] RIP: 0010:ihold+0x26/0x60 [ 795.292125][ T30] audit: type=1400 audit(2000000112.040:3264): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.313394][ T9933] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 61 b6 b3 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 30 33 f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 e1 [ 795.313417][ T9933] RSP: 0018:ffffc90000ae7b68 EFLAGS: 00010246 [ 795.313436][ T9933] RAX: ffff888118f1cf00 RBX: 0000000000000000 RCX: ffff888118f1cf00 [ 795.313452][ T9933] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 795.418178][ T9933] RBP: ffffc90000ae7b78 R08: 0000000000000004 R09: 0000000000000003 [ 795.426215][ T9933] R10: fffffbfff0e1804c R11: 1ffffffff0e1804c R12: 1ffff1102252586c [ 795.434429][ T9933] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 795.442407][ T9933] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 795.451432][ T9933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.458020][ T9933] CR2: 0000000000000170 CR3: 000000010f4bb000 CR4: 00000000003506a0 [ 795.466084][ T9933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 795.474098][ T9933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 795.482161][ T9933] Call Trace: [ 795.485442][ T9933] [ 795.488377][ T9933] vfs_rmdir+0x1f0/0x460 [ 795.492624][ T9933] incfs_kill_sb+0x105/0x220 [ 795.497307][ T9933] deactivate_locked_super+0xa0/0x100 [ 795.502686][ T9933] deactivate_super+0xaf/0xe0 [ 795.507364][ T9933] cleanup_mnt+0x446/0x500 [ 795.511783][ T9933] __cleanup_mnt+0x19/0x20 [ 795.516202][ T9933] task_work_run+0x127/0x190 [ 795.520794][ T9933] do_exit+0xa7e/0x27a0 [ 795.524955][ T9933] ? put_task_struct+0x90/0x90 [ 795.529823][ T9933] ? __fdget_pos+0x1f7/0x380 [ 795.534418][ T9933] ? ksys_write+0x1da/0x240 [ 795.538952][ T9933] ? __ia32_sys_read+0x90/0x90 [ 795.544051][ T9933] do_group_exit+0x141/0x310 [ 795.548665][ T9933] ? debug_smp_processor_id+0x17/0x20 [ 795.554137][ T9933] __x64_sys_exit_group+0x3f/0x40 [ 795.559166][ T9933] x64_sys_call+0x832/0x9a0 [ 795.563798][ T9933] do_syscall_64+0x4c/0xa0 [ 795.568302][ T9933] ? clear_bhb_loop+0x50/0xa0 [ 795.572998][ T9933] ? clear_bhb_loop+0x50/0xa0 [ 795.577692][ T9933] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 795.583693][ T9933] RIP: 0033:0x7ff364a7ebe9 [ 795.588123][ T9933] Code: Unable to access opcode bytes at RIP 0x7ff364a7ebbf. [ 795.595660][ T9933] RSP: 002b:00007fffe07a7438 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 795.604085][ T9933] RAX: ffffffffffffffda RBX: 00007ff364b01c77 RCX: 00007ff364a7ebe9 [ 795.612074][ T9933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 795.620134][ T9933] RBP: 0000000000000016 R08: 00007fffe07a51d6 R09: 00007fffe07a86f0 [ 795.628142][ T9933] R10: 000000000000000a R11: 0000000000000246 R12: 00007fffe07a86f0 [ 795.636117][ T9933] R13: 00007ff364b01c05 R14: 00005555876334a8 R15: 00007fffe07aa8b0 [ 795.644098][ T9933] [ 795.647204][ T9933] Modules linked in: [ 795.651113][ T9933] CR2: 0000000000000170 [ 795.655262][ T9933] ---[ end trace 36ee88e81b1d9377 ]--- [ 795.660743][ T9933] RIP: 0010:ihold+0x26/0x60 [ 795.665373][ T9933] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 61 b6 b3 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 30 33 f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 e1 [ 795.685252][ T9933] RSP: 0018:ffffc90000ae7b68 EFLAGS: 00010246 [ 795.691327][ T9933] RAX: ffff888118f1cf00 RBX: 0000000000000000 RCX: ffff888118f1cf00 [ 795.699312][ T9933] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 795.707309][ T9933] RBP: ffffc90000ae7b78 R08: 0000000000000004 R09: 0000000000000003 [ 795.715299][ T9933] R10: fffffbfff0e1804c R11: 1ffffffff0e1804c R12: 1ffff1102252586c [ 795.723287][ T9933] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 795.731296][ T9933] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 795.740250][ T9933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.747117][ T9933] CR2: 0000000000000170 CR3: 000000010f4bb000 CR4: 00000000003506a0 [ 795.755184][ T9933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 795.763247][ T9933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 795.771602][ T9933] Kernel panic - not syncing: Fatal exception [ 795.778024][ T9933] Kernel Offset: disabled [ 795.782353][ T9933] Rebooting in 86400 seconds..