last executing test programs: 3m53.347188179s ago: executing program 0 (id=1494): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e2200"], 0x0) 3m53.308929641s ago: executing program 0 (id=1495): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x200048cc, &(0x7f0000000300)=ANY=[], 0x81, 0x151a, &(0x7f0000002a80)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) capget(0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="687567653d616c77617990c500"]) chdir(&(0x7f0000000040)='./bus/../file0\x00') r4 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0) fallocate(r4, 0x0, 0x0, 0x1000f4) 3m49.435937756s ago: executing program 0 (id=1507): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[], 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m48.088674786s ago: executing program 0 (id=1511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x45e294f300622cb4) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m47.989227314s ago: executing program 0 (id=1514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) 3m47.848703495s ago: executing program 0 (id=1518): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x200000, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0xfcff, &(0x7f0000000440)="f4e966"}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 3m34.349360093s ago: executing program 4 (id=1594): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2008410, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="dd8c5296ca9f73154fa61d2f48231e064bdc3ba1f00ab7c8ac6abab05313a1f3f7d297d893da20186e749d98ea9fd9e581d670c795458b60306688602c"], 0x80, 0x5557, &(0x7f0000009300)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) unshare(0x20400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)={0x50000001}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000093c0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000009500)={0x0, 0x0, &(0x7f00000094c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1cf51b00", @ANYBLOB="2d0208d8bf287a9d847040ca9833e41742418e3300f0dca230ab763d8f310cdbefc9e89df1dfda552ceeb137112ce5c9e19ff94abe8bbffcd880c5bfbf7613fbbec2e472e19710778ae118e3a61363807d814cc94887e01f20f9ee2a1ec16ed15bb5aae9204d1e8ce5f5753ba7100000005e780666c599f6b4302672df017195a8f30cac2d75aacf5bdd9a4c1ddc002b2ccd74000000000000009f8738050f393c7d", @ANYBLOB="010029bd7000fbdbdf252b00000008000200", @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@default_permissions}]}) 3m32.689255978s ago: executing program 32 (id=1518): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x200000, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3, 0xfcff, &(0x7f0000000440)="f4e966"}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 3m31.995661244s ago: executing program 4 (id=1611): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x7, 0xc, 0x8008, 0x6, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x400, 0x3ff, 0xfffffff4, 0x4, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x800001, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x5, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x71c7, 0x964e, 0x2d5, 0x149, 0x4], [0x66ac, 0xfffffff9, 0x4, 0x10, 0x8e, 0x7, 0x13e, 0x4, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x6, 0x2, 0x8d1, 0xfffffff7, 0xfffffffa, 0xe0, 0x6, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x7, 0x40009, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x5, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0x80000000, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0x10001, 0xd5d, 0xa0c787d, 0xffffff4e, 0x10001, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x8000fe, 0xff, 0x58, 0x80000000, 0x0, 0xe, 0x7fff, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0x6, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x41, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x380, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r6 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) r7 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x21, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r7) 3m31.457239528s ago: executing program 4 (id=1616): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1, "a1abbcb00733199eb100"}}}]}, 0x48}}, 0x44084) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008810) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="000325bd70000b40c4ca200000000800030075b16fb5d0f9d3f106b8cdc7da3ecc818bb581b587ff3991eac868688f1e2a4f9b605eaee3beb032a6d5d0ef0568d657fd9b07792f271b05ec6eab3fd93a964cc0699ffb17151a77dac14b517546474f89ee0d217b618fd454a2f8d06bccc820a15a617151f5e9b591e8979f82e3e5790f203114cdcf7d0887a089c40080ff9cc9af27f0c8e520f90234045ea9155a4c0a43119cfea14bbb1fd6c60ed9dc6c34f5a8e830d833839b085075b64426567eeced0b86f3bad378ce29a29601301a552e0365220f522bc23ed02577e41bb7dd07ab1bc357", @ANYRES32, @ANYBLOB="0c0099005d01000056000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x30000041) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 3m31.418644521s ago: executing program 4 (id=1618): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x710, 0x8, 0x2, 0x8, {{0x28, 0x4, 0x2, 0x0, 0xa0, 0x64, 0x0, 0x4e, 0x29, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x2f, 0x1, 0x7, [{@empty, 0xf19}, {@private=0xa010101, 0x6}, {@multicast2, 0x3}, {@remote, 0xa}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x1}]}, @timestamp={0x44, 0x24, 0x6, 0x0, 0x2, [0x2b6, 0x0, 0x4, 0x2, 0x7f, 0xe64, 0x8001, 0x5f57a855]}, @ssrr={0x89, 0x1f, 0x2a, [@multicast2, @local, @remote, @multicast1, @private=0xa010100, @remote, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x6}, {@private=0xa010101, 0x8}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000dc0)=ANY=[], 0x1, 0x1207, &(0x7f0000003000)="$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") creat(&(0x7f0000001740)='./bus\x00', 0xa1) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x66842, 0x19) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x50000, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) r5 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r5, &(0x7f00000000c0)='wchan\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r8, 0x0) setreuid(r8, 0xee01) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000300)=@sr0, r8, &(0x7f0000000340)) pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3c) 3m31.112006966s ago: executing program 4 (id=1620): socket(0x400000000010, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r7, 0xffffffffffffffff, 0x26}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000540), &(0x7f0000000a40)=@udp6=r8, 0x2}, 0x20) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000280)=""/185, 0xb9, 0x20000000, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$binfmt_misc(r9, &(0x7f0000000340)="c78ee8fc2e93231612749b1cd06e352bb9013848b6bf165e09ee2833fb22757394aaa826e14e1eda570c1b523ab385527485e21d1243308f156ee0fd0fc41fc76690de1adf5d9fe9f57627bcb7e939b71b53fc0feec42273410df47e0c86d6a4c302c05d427b535db9b52d4712d8d34f1ff623ace3f957ccff5000947368dc02891a818fb627acd5859bdb24997640b928eb", 0x92) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) 3m30.624844606s ago: executing program 4 (id=1622): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e2200"], 0x0) 3m30.57575482s ago: executing program 33 (id=1622): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e2200"], 0x0) 8.744119479s ago: executing program 1 (id=2727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x24, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220700000085"], 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063", 0x3c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) 6.181041128s ago: executing program 3 (id=2739): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e2200"], 0x0) 6.085043025s ago: executing program 3 (id=2741): socket$inet6(0xa, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f00000004c0)="e0"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x45e294f300622cb4) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x1e}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004720400000002000a00070000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r6], 0x48) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.065737587s ago: executing program 6 (id=2742): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x4b, 0xa, 0xff, {0xc, @esp_ip6_spec={@private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x101, 0x1}, {0x0, @multicast, 0x56bd, 0xf8d, [0x3, 0x4]}, @tcp_ip4_spec={@multicast1, @remote, 0x4e23, 0x4e21, 0x3}, {0x0, @multicast, 0x3, 0x3524, [0x3, 0x8002]}, 0x0, 0x7fff}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000640)=ANY=[], 0x0, 0x243, &(0x7f0000001ac0)="$eJzs3c9qE1scB/DfJGmb3rtIFnd1uXAHdOGqtH2CFKkgdqVkoS602BYkCQULgVYxdOUT+CQ+hxvfwAcQutNFYWQyadNC1Abzp9TPZ5MDM9/z+53khKzm5Pl/ndbO/sHe8ZvPUa0mUWpEIzmJqEcpcksBANw037IsTrLCeMlKaVo9AQDTdcXf/+UZtgQATNmjx08ebGxtbT5M02pE5123mUTxWlzf2IuX0Y7dWI1anEZk54rxvftbm1FJc/W43el1m3my8+zjYP6NLxH9/FrUoj46v5YWLuR73eZC/DWo38jz61GLf0bn10fko7kYd25d6H8lavHpRexHO3Yizw7zb9fS9G72/uvrp3nHeT7pdZtL/fuGsvLMPxwAAAAAAAAAAAAAAAAAAAAAAG6slTRN0yz7kGVZ1rt0/k75tH99JT1Tv3w+T5EfcT5QuT/XhfN1VvMSSXH/MF+JfytRmefaAQAAAAAAAAAAAAAAAAAA4Lo4ODxqbbfbu68mOjh7rH/yM//uIMqD1tpJxDXopz9YzvuZTa3/Y8xajTFLROnwqHW2u1rbSfwiVZ3SJslGbL/yD1OLE6q++PdkV5FExML5m/mzm0uxMOFvCgAAAAAAAAAAAAAAAAAAMGPDh35HXDyeQ0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAfD//8fY9AbhK+YmvMSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+AN8DwAA//8oAXoy") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffffd) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x0) 5.950451416s ago: executing program 3 (id=2743): syz_usb_connect(0x0, 0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000003640)=[{{&(0x7f0000000440)=@llc, 0x80, &(0x7f0000000040)=[{&(0x7f0000003800)=""/234, 0xea}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f00000004c0)=""/120, 0x78}], 0x3, &(0x7f0000000740)=""/157, 0x9d}, 0x82b}, {{&(0x7f00000008c0)=@can, 0x80, &(0x7f00000034c0)=[{&(0x7f00000009c0)=""/152, 0x98}, {&(0x7f0000000280)=""/21, 0x15}, {&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/176, 0xb0}, {&(0x7f0000001d00)=""/232, 0xe8}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000580)=""/143, 0x8f}], 0x9, &(0x7f0000002e80)=""/241, 0xf1}, 0x39}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000002f80)=""/176, 0xb0}, {&(0x7f0000000800)=""/43, 0x2b}], 0x2, 0x0, 0xffffffffffffffb1}, 0x1}, {{&(0x7f0000003040)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003580)=[{&(0x7f00000030c0)=""/246, 0xf6}, {&(0x7f00000031c0)=""/170, 0xaa}, {&(0x7f0000003280)=""/111, 0x6f}, {&(0x7f0000003300)=""/179, 0xb3}, {&(0x7f00000033c0)=""/137, 0x89}, {&(0x7f0000003480)=""/16, 0x10}, {&(0x7f0000003740)=""/183, 0xb7}], 0x7, &(0x7f0000003600)=""/56, 0x38}, 0x7ff}], 0x4, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x453, 0x2, 0x70bd29, 0x25dfdbff, "9ed5d168166552c7461a4f511b3c0d392d7fdeb09e38e11fd507d12f91225ff9564f18aff1d95ad52ae8c802f9a3dcf1d559959a5f14b58c8d624ae21cc1a5e8ea11181d55f8"}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4010) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaab557a0758659080600010800060400010180c2000002e00000020180c200000ee0000001a91db8c254a1164238135889df79020e1e56d4489260e54437f5180d22f2d7a10fe2c322267c7720e8549a8d998ec7fea580600f30272c3a5278a00a1f84dad7d1b601ea35460a89e675ef9dec7cd2ccecf27f0002000000000000e07c36772f5e939d62e5cd0a72583d6fce254c53e254716239b3da9ab25cb7db7755d823d90aba5efad528"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.615378185s ago: executing program 1 (id=2746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="a8", 0x1}], 0x1}, 0x4040001) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, &(0x7f0000000240)=r10) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x1, r10}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 3.640223244s ago: executing program 1 (id=2749): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r6 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) r7 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x21, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r7) 3.056164492s ago: executing program 1 (id=2754): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="666f7369782c6e6f696e6c696e655f496174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c000000000000000000"], 0x1, 0x5532, &(0x7f000000b4c0)="$eJzs3M2LG2UYAPAnu91+WxcR9NaBIuxCszTbbdGDsGqLH9hS/Dh40mwyDWmTzLJJ07UXPXgUD/4nouDJo3+DB8/eigfFmxDJzKw2UnGh2aTd/n4weeZ98+bJ84Yl8MwsCeCptZz88VslzsSJiFiMiNMR+XmlPHKbRXgxIs5GxMIDR6Wc/3viaEScjIgz4+RFzkr51Nfnh+cu/frO7z/8dOzIqW++/3l+uwYOxvK+V74UEd3t4vxut4hZq4i3yvn6sJ1/e3Q3hvm4u1E80b1djrMi3k238gx363vr6nm82CrWZ9t3+uN4s1NvjGOrfTOf3+4Vb9gftvby5C+4Vd/Jx810K4/tfpbH1r2irt17xXfbvf6gyNMs832ap4/BYC8W8+luWuxn+3YeG71BOV/kzZrp7jgOy1i+XTSyTjOvY2vfH+sT5912785uMkx3+u2sl1xaq728Vrtcre1kzXSQblTr3ebljWSl1Rkvqw7SenezlWWtTrrWyLqryUqr0ajWasnKlXSrXe8ltdraxbUL1Uur5dn55M3rHyadZrIyjq+3e3cGr45Go5vZTlK8YjVZX7v4ympyrpa8f+1GcuO9q1ev3fjg4ysfXX/t2ttvlIsmy7qfbiQr6xfW16u1C9X12uoTtv92p588dP+j0eiz/9n/F2XRU9w/PJLKvAsAePLo/4F52H//H49l/x/6/6l4fPrf/fb/g0Pa/09v/1oyZsYfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAU+uXpW/fyk+Wi/Gpcv6Zcuq5clyJiIWIGD3EYhydyLlY5ln6j/VL/6rhx0rkGcbvcaw8TkbEZnn8+exBfwoAAABweH33+dmvim69eFied0HMUnHRZuH0J1PKV4mIpeX7U8q2MH54fkrJ4oWIOBK7U8qWX8A6PqVkxSW3I9PKti+LE+H4A6FShIWZlgMAAMzEZCcw2y4EAACAWfpy3gUwH5XYu5W5dy84/8/7f24InpgYTdo8+PoAAACAR1eZdwEAAADAgcv7f7//BwAAAIdb8ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF/s3E9O6lAUB+DTQh+8f3nkxblbcQbLcAnGkUPDAtwES8AtuAHWgDOXYMDQlsQaNMbe0mC+L2kvtyE/TgmTcy8pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06bFYzu5vz+/a5my27aS5GwAAAOCQdbGclS8m1fx3ff1vfel/Pc8iIo+IQ737IH40Mgd1TvHO+4s3NTxElAm7zxjVx6+IuKiP539dfwsAAADwfa3mi2nVrVenSd8FcUzVok3+5zJRXhYRxeQpUVq+O50lCit/38O4SZRWLmCNE4VVS27DVGmfMmgM41dDVg35UcsBAACOotkJNLqQUR/1AAAA0JWrvgugMx/u6Gex38rc7wXvW/56Q/BnYwYAAACcoKzvAgAAAIDOlf3/KTz/79o/EAAAAODLquf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KV1sZyt5otp25zNtp00dwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zPOwqEQBiEwd71ncnc/7DSoKmpSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw5nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXP3vHEUYQCA525vLziAYgxyYYRAooCGOJeQkJYCZFHwE5As5xIMFz4SFySKkNzQIddpEJQIIYFMl/+QOpHShC7FFUFClEGzH874Q3AoZHcTP480N++N73beWVsnvztrAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQm777MM7iw3wZ96uxW/evrcX+9p4+urF1Zym2GPeaTPrJ8Er6pLfYXiIAAAAcHlld34cQ7ubbK7Hvzxf1f16/Jtb83z9fxnU9v7fur/u69o/tt1/vvbQz0Xw5Tzzo+fXJ+MT+VAaPb5Ud8deD0p7hY//6xkFx5otrL1nxDel/sPniNC/OZ+/bmzffGxbhkceVOADwqI7XfRXUvw/FftRmYgAcGoOk8K7r/2y+3ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmjDdDM/WcS+EsDR4GEe3719bO6i/sXVnqW5nrl/fSo8ZD5GHEM6vT8YnGlxL112+cvXT1clkfKn54NUQQpOTzh30pY9meHsIrZwfwf8U9Kuf9X94Tfx46EKqHQpa/mACAOCpk1ct1vV38+2VONZbCOHBD7vr/zeSOMxY/9/7+MytdK60/h+VQ8eaWWW3LW9c/GL58pWrb61fXL0wvjD+7O2To3dGp86ePn12ubhWsuyKCQAAAI9mWLW0/u8v7N//P5rEYcb6/8vvRl+nc2X763927f+3nQkAAMDh9sJrf/7RO2C8NxyGr1Y3Ni6Nysed5yfLxxZS/c+OVC2t/7OFtrMCAAAAmjDd7O3a/z+XxGHG/f/nfnz55/SYWQhhrtr/P772+eRcc8vpjKzq063+Jv6cuKXlAgAA0BFzVUv3//Pi/v/+zi0P/RDCm6+XcfVvAGeq/7P3v/kpnSu9//9Uc0vspP5ieT6KfjGEwWLbGQEAAPA0e6Zqsdj/Pd9e+eSXox8O3f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//8fwkxT") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8442, 0x5c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000440)={[{@nolazytime}, {@orlov}, {@usrjquota}, {@usrjquota}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x513, &(0x7f0000000c40)="$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") 2.95733775s ago: executing program 6 (id=2756): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e2200"], 0x0) 2.914476663s ago: executing program 6 (id=2758): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1, "a1abbcb00733199eb100"}}}]}, 0x48}}, 0x44084) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008810) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="000325bd70000b40c4ca200000000800030075b16fb5d0f9d3f106b8cdc7da3ecc818bb581b587ff3991eac868688f1e2a4f9b605eaee3beb032a6d5d0ef0568d657fd9b07792f271b05ec6eab3fd93a964cc0699ffb17151a77dac14b517546474f89ee0d217b618fd454a2f8d06bccc820a15a617151f5e9b591e8979f82e3e5790f203114cdcf7d0887a089c40080ff9cc9af27f0c8e520f90234045ea9155a4c0a43119cfea14bbb1fd6c60ed9dc6c34f5a8e830d833839b085075b64426567eeced0b86f3bad378ce29a29601301a552e0365220f522bc23ed02577e41bb7dd07ab1bc357", @ANYRES32=r4, @ANYBLOB="0c0099005d01000056000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x30000041) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 2.860591518s ago: executing program 3 (id=2759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='rpcgss_svc_unwrap_failed\x00', r3}, 0x18) getrlimit(0x0, &(0x7f0000000000)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.751234986s ago: executing program 6 (id=2760): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.656074574s ago: executing program 6 (id=2761): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b35, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f00000000c0), 0xfe68) r5 = socket(0x1e, 0x4, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x72) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x101d0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) 1.955571521s ago: executing program 3 (id=2763): eventfd2(0xce77, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000bb00551a000018120000000000000000", @ANYRESDEC=r0, @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002cc0)={0x401, 0x101, 0x4, 0x7, 0x990}, 0x14) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400002d0521000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06000000040000c2b2564c3280eae6776a4e4b115800ff0f000007000000a8b20a5f254c02a6152c889d5e2700000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r8}, 0x18) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 1.914766885s ago: executing program 5 (id=2764): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r0 = socket(0x840000000002, 0x3, 0xfa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) connect$inet(r0, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r6 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) r7 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x21, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r7) 1.825208952s ago: executing program 2 (id=2766): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7, 0x80, 0x1, 0x2, {{0x19, 0x4, 0x0, 0x6, 0x64, 0x66, 0x0, 0x10, 0x2f, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0x17, 0x62, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102]}, @ssrr={0x89, 0x13, 0x8, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @timestamp={0x44, 0x10, 0x6b, 0x0, 0xc, [0x3, 0x0, 0x9]}, @noop, @timestamp_addr={0x44, 0x14, 0xfc, 0x1, 0x4, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x200000000006, 0x4, 0xc, 0x7ffc1ffb}, {0xc000, 0x9, 0x14, 0x1}]}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, 0xfffffffffffffffc, 0x40810) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 1.760902387s ago: executing program 2 (id=2767): socket$inet6(0xa, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f00000004c0)="e0"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x45e294f300622cb4) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @float={0x2, 0x0, 0x0, 0x10, 0x4}, @typedef={0xfffffffd, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004720400000002000a00070000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r6], 0x48) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.657129055s ago: executing program 2 (id=2768): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e2200"], 0x0) 1.616110409s ago: executing program 6 (id=2769): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendfile(r0, r2, &(0x7f0000000100)=0x80, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000001280)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0xffffffff, 0x8010, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_fuse_handle_req(r5, &(0x7f0000001780)="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", 0x2000, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x2b, 0xeb, 0x0, 0x6793, 0x20, 0x3, 0x8, 0x0, 0x0, 0x10, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="04"], 0x0) 1.515310227s ago: executing program 2 (id=2770): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPIHVD4kZR7DiKnaUJPaRnrkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep25qN6FJ7Cj+fKTRvDdv4u/3NZ336pfGL4CRdT0i9iNiIiI+jYjZ7HouO+Kj9pHc9+Tg/srhwf2VXLRan/wjl7Yn16LraxLXstcsRsQPvhPx49zzcRu7exvL1WplO6vPN2tb843dvVvrteW1ylpls1xeWlxa+OD2++Vz6+tbtYms9OXHv9//xk+TtGayK939OE/trheO4iTGI+J7FxFsCMay/kwMOxFeSj4iXo+It9PnfzbG0u8mAHCVtVqz0ZrtrgMAV10+XQPL5UvZWsBM5POlUnsN742YzlfrjebNu/WdzdX2WtlcFPJ316uVhWytcC4KuaS+mJaf1svH6rcj4rWI+PnkVFovrdSrq8P8hw8AjLBrx+b/f0+2538A4IorDjsBAGDgzP8AMHrM/wAwesz/ADB62vP/1LDTAAAGyPt/ABg95n8AGCnf//jj5GgdZp9/vfrZ7s5G/bNbq5XGRqm2s1JaqW9vldbq9bX0M3tqJ71etV7fWnwvdu7NfXOr0Zxv7O7dqdV3Npt30s/1vlMppHftD6BnAEA/r7316E+5ZEb+cCo9omsvh8JQMwMuWn7YCQBDMzbsBIChsdsXjK4zvMe3PABXRI8tep9R7PULQq1Wq3VxKQEX7MYXrP/DqOpa//e/gGHEWP+H0WX9H0ZXq5U77Z7/cdobAYDLzRo/0Ofn/69n599kPxz40erxOx5eZFYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwuXX2/y1le4HPRD5fKkW8EhFzUcjdXa9WFiLi1Yj442RhMqkvDjlnAOCs8n/NZft/3Zh9d+aZpjevHRUnIuInv/zkF/eWm83tP0RM5P452bnefJhdLw8+ewDgZJ15Oj13vZF/cnB/pXMMMp+/fTsiiu34hwcTcXgUfzzG03MxChEx/a9cVm/Lda1dnMX+g4j4fK/+52ImXQNp73x6PH4S+5VBxJ/qxM8/Ez+f5tY+J38WnzuHXGDUPErGn496PX/5uJ6eez//xXSEOrts/EteauUwHQOfxu+Mf2N9xr/rp43x3u++2y5NPd/2IOKL4xGd2Idd408nfq5P/HdPGf/PX3rz7X5trV9F3Ije8btjzTdrW/ON3b1b67XltcpaZbNcXlpcWvjg9vvl+XSNer7/bPD3D2++2q8t6f90n/jFE/r/1VP2/9f//fSHX3lB/K+/0yt+Pt54QfxkTvzaKeMvT/+22K8tib/ap/8nff9vnjL+47/sPbdtOAAwPI3dvY3larWy/bKFw7N9uYLC/1FI/spegjR6Fr41qFgT0bvpZ++0n+ljTa3WS8XqN2Kcx6obcBkcPfQR8Z9hJwMAAAAAAAAAAAAAAPQ0iN9YGnYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLr+FwAA//8Xqc+p") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x47}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0xa2, 0xc1, &(0x7f0000001400)="5e690209778bd9f9a3df2eb8ad2acfb7c8ada63e8d21cb5986a7e8c7be67ba8f6044c0c15810f7e71f93c2653d74a01ad42252f2a01f2cbeddc91e62379035c8d206582a38776dc132aa18f322f879ae73fb2015234c0a5089cba0eb2e550e60bf92fb33a0c6522d348a823f48f946bf255b443c65aa0423ce831cd39dde6cc0316ffef0a6cace745ab09432530bcbcbb8854d5c31244f0f972d8a2e85d3fc17901e", &(0x7f00000014c0)=""/193, 0x8001, 0x0, 0x6d, 0x6c, &(0x7f00000015c0)="de74a020f7e9e44f073f13d8a1f8f5db4873ea3d5ec370a8358c570ceca0a977b0ee8e4cb22f1e057eea47e77e9fee0e88ba0a8c6409ba3d3f8ca7d974459ae22692d5ca1c6d89a4ca26dd8476dc3833430ec6ecc274e9348ef72442665a24e860f5497ffb8478df61ae4afbd3", &(0x7f00000016c0)="5c9c51764a6c6eb9eee7afce040c55693675edaac9a57f7206c28fb912812c574b17dc3f729cb99a15ecdaf4f55a2558dabc36c52c7de71bb73e6f1a3d13a4549e32b606b793fe4bc70aefee49c76cd6e8c1d09d6bbf8d905f5518f7c7098069a14a818e1bfb40367b64785b", 0x7, 0x0, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000000900)="$eJzs3M1vFGUYAPBnZrcgX7YS/OBDraKR+NHSgsjBi0YTD5qY6AGPa1sIslBDayKEKBqDR0Pi3Xg08S/wpBejxoOJV70bEmK4AJ7WzO4M3V12S7tsu9X9/ZJZ3nfm3bzPszPv7jszTAMYWuPZSxKxPSL+iIjRRrW1wXjjnxvXLszcvHZhJola7a2/k3q769cuzBRNi/dtKyrliPSzJPZ26Hfh3PlTlWp17mxen1w8/f7kwrnzz508XTkxd2LuzPTRo4cPTb1wZPr5vuSZ5XV9z0fz+3a/9s7lN2aOXX7352+TIv+2PPpkfLmNT9Zqfe5usHY0lZPyAANhVUqNYRoj9fE/GqVY2nmj8eqnAw0OWFO1Wq32QPfNF2vA/1gSg44AGIzihz47/y2Wm+s099gIrr7UOAHK8r6RL40t5UjzNiNt57f9NB4Rxy7+81W2xJ2vQ2xdozAAgCHyfTb/ebZ1/tfYkkbzdaF783soYxFxX0TsjIgjEbErIu6PqLd9MCIeWmX/7TdJbp//pFd6SmyFsvnfi/m9rdb5XzH7i7FSXttRz38kOX6yOncw/0wOxMjmrD61TB8/vPL7F922Nc//siXrv5gL5nFcKW9ufc9sZbFyNzk3u/pJxJ5yp/yTW3cCkojYHRF7euzj5NPf7Ou27c75L6Mc1V97jKlQ+zriqcb+vxht+ReS5e9PTt4T1bmDk8VRcbtffrv0Zrf+7yr/Psj2/9aOx/+t/MeS5vu1C6vv49Kfn3c9p+np+C9HZVPydsu6DyuLi2enIjYlrzeCXlpfOjvd1m56qX2W/4H9ncf/zlj6JPZGRHYQPxwRj0TEo3nsj0XE4xGxf5n8f3r5ifd6z39tZfnPrmr/LxU2RfuazoXSqR+/a+l0bDX5Z/v/cL10IF+zku+/lcTV29EMAAAA/z1pRGyPJJ24VU7TiYnG/+HfFVvT6vzC4jPH5z84M9t4RmAsRtLiStdo0/XQqfy0vqhPt9UP5deNvyxtqdcnZuars4NOHobcti7jP/NXadDRAWuut+e10r7HAaw/z2vC8DL+YXgZ/zC8Ooz/LSODCARYd51+/z8eQBzA+is3veZ/EwwYEs7/YXgZ/zC8jH8YSgtb4s4PyW/cwuaNEcYwFiLdEGEorFFh0N9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fFvAAAA///2v+dl") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000a00000000000000000100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.35207236s ago: executing program 5 (id=2771): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1, "a1abbcb00733199eb100"}}}]}, 0x48}}, 0x44084) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008810) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="000325bd70000b40c4ca200000000800030075b16fb5d0f9d3f106b8cdc7da3ecc818bb581b587ff3991eac868688f1e2a4f9b605eaee3beb032a6d5d0ef0568d657fd9b07792f271b05ec6eab3fd93a964cc0699ffb17151a77dac14b517546474f89ee0d217b618fd454a2f8d06bccc820a15a617151f5e9b591e8979f82e3e5790f203114cdcf7d0887a089c40080ff9cc9af27f0c8e520f90234045ea9155a4c0a43119cfea14bbb1fd6c60ed9dc6c34f5a8e830d833839b085075b64426567eeced0b86f3bad378ce29a29601301a552e0365220f522bc23ed02577e41bb7dd07ab1bc357", @ANYRES32=r4, @ANYBLOB="0c0099005d01000056000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x30000041) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 1.321017823s ago: executing program 5 (id=2772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) pread64(r2, &(0x7f0000002340)=""/249, 0xf9, 0x4ee) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20) getsockopt(r1, 0x28, 0x2, &(0x7f0000000040)=""/63, &(0x7f0000000080)=0x3f) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000002300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x3c, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3d42}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fef2df2d9bc662538b6b828f20a0339594911e26250f0000001c0007800c00030003000000000000000800"], 0x30}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 1.293496015s ago: executing program 5 (id=2773): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b35, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f00000000c0), 0xfe68) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x101d0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) 1.291284115s ago: executing program 1 (id=2774): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff02000000000000000000000000000100004e2200"], 0x0) 492.14519ms ago: executing program 3 (id=2775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x48, 0x5, 0x84}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f0000000780)=[{&(0x7f0000000100)="452ea27c8bd8018d531b71", 0xb}], 0x1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000008cb06a781000000000001090224000100003000090400000203000200092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8800, &(0x7f0000000200)={0x5, 0x84, 0x100000}, 0x20) syz_usb_control_io$hid(r6, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711867000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r9, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x1697, 0x0, 0x0, 0x41100}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r12}, 0x10) socket(0x10, 0x80002, 0x0) 257.239289ms ago: executing program 2 (id=2776): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='xprt_ping\x00', r3, 0x0, 0x40000000030a9}, 0x18) unshare(0x2040400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x82) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) fallocate(r1, 0x8, 0x4000, 0x4000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 234.956671ms ago: executing program 5 (id=2777): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 211.304223ms ago: executing program 1 (id=2778): socket$inet6(0xa, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f00000004c0)="e0"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x45e294f300622cb4) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @float={0x2, 0x0, 0x0, 0x10, 0x4}, @typedef={0xfffffffd, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004720400000002000a00070000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r6], 0x48) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 136.093619ms ago: executing program 5 (id=2779): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b35, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f00000000c0), 0xfe68) r6 = socket(0x1e, 0x4, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x72) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x101d0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) 0s ago: executing program 2 (id=2780): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8a"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x1, 0xfffffffffffffffc, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e30, 0x0, @loopback, 0x2}, 0x1c) recvmmsg(r2, &(0x7f0000009440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/66, 0x42}, 0x5}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}, 0x9}], 0x2, 0x822b, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@deltaction={0x5c, 0x31, 0x137, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x5c}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000140)=0x4) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="a65b3a9d1ffbe1c54f05ee4487c1aa8a8067462f", 0x14, 0x4008811, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000001400)="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", 0x5c6, 0x6d91fb6102dc910c, 0x0, 0x1267bd6a23834406) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000a40)="$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") capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f60}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x76d, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x6) kernel console output (not intermixed with test programs): ][ T8025] ? sock_poll+0x3d0/0x3d0 [ 501.428312][ T8025] ? __fget_files+0x2c4/0x320 [ 501.433007][ T8025] ? security_file_ioctl+0x84/0xa0 [ 501.438220][ T8025] ? sock_poll+0x3d0/0x3d0 [ 501.442668][ T8025] __se_sys_ioctl+0x121/0x1a0 [ 501.447537][ T8025] __x64_sys_ioctl+0x7b/0x90 [ 501.452148][ T8025] x64_sys_call+0x2f/0x9a0 [ 501.456574][ T8025] do_syscall_64+0x4c/0xa0 [ 501.460999][ T8025] ? clear_bhb_loop+0x50/0xa0 [ 501.465689][ T8025] ? clear_bhb_loop+0x50/0xa0 [ 501.470401][ T8025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.476315][ T8025] RIP: 0033:0x7fd473f6c9a9 [ 501.480765][ T8025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.500592][ T8025] RSP: 002b:00007fd4725d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.509111][ T8025] RAX: ffffffffffffffda RBX: 00007fd474193fa0 RCX: 00007fd473f6c9a9 [ 501.517089][ T8025] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000009 [ 501.525111][ T8025] RBP: 00007fd4725d5090 R08: 0000000000000000 R09: 0000000000000000 [ 501.533103][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.541173][ T8025] R13: 0000000000000000 R14: 00007fd474193fa0 R15: 00007fff4af83e88 [ 501.549162][ T8025] [ 501.598198][ T8025] device pim6reg1 entered promiscuous mode [ 501.678390][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2360'. [ 501.713320][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2360'. [ 501.818633][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2363'. [ 501.831242][ T30] audit: type=1400 audit(1753946450.327:3907): avc: denied { map } for pid=8044 comm="syz.2.2365" path="socket:[43379]" dev="sockfs" ino=43379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 501.846726][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2363'. [ 501.889900][ T30] audit: type=1400 audit(1753946450.347:3908): avc: denied { read accept } for pid=8044 comm="syz.2.2365" path="socket:[43379]" dev="sockfs" ino=43379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 502.015825][ T8054] incfs: Options parsing error. -22 [ 502.021532][ T8054] incfs: mount failed -22 [ 502.145483][ T8014] loop5: detected capacity change from 0 to 131072 [ 502.199242][ T8014] F2FS-fs (loop5): Invalid log sectors per block(570425347) log sectorsize(9) [ 502.208294][ T8014] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 502.217782][ T8014] F2FS-fs (loop5): invalid crc value [ 502.235434][ T8014] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 502.268074][ T8014] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 502.278094][ T8014] F2FS-fs (loop5): Bad quota inode 2:50331648 [ 502.284340][ T8014] F2FS-fs (loop5): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 502.295586][ T8014] F2FS-fs (loop5): Cannot turn on quotas: error -22 [ 502.305527][ T8014] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 502.316100][ T8014] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b [ 502.335399][ T30] audit: type=1400 audit(1753946450.827:3909): avc: denied { create } for pid=8013 comm="syz.5.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 502.342025][ T8014] bridge0: port 3(vlan2) entered blocking state [ 502.355717][ T30] audit: type=1400 audit(1753946450.827:3910): avc: denied { ioctl } for pid=8013 comm="syz.5.2352" path="socket:[44343]" dev="sockfs" ino=44343 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 502.365571][ T8014] bridge0: port 3(vlan2) entered disabled state [ 502.394385][ T8014] device vlan2 entered promiscuous mode [ 502.401038][ T30] audit: type=1400 audit(1753946450.827:3911): avc: denied { setopt } for pid=8013 comm="syz.5.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 502.439483][ T30] audit: type=1400 audit(1753946450.827:3912): avc: denied { write } for pid=8013 comm="syz.5.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 502.551840][ T30] audit: type=1400 audit(1753946451.047:3913): avc: denied { write } for pid=8073 comm="syz.1.2375" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 502.706005][ T8078] fuse: Bad value for 'fd' [ 502.743022][ T8083] loop6: detected capacity change from 0 to 1024 [ 502.779491][ T8086] FAULT_INJECTION: forcing a failure. [ 502.779491][ T8086] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 502.797929][ T8083] EXT4-fs (loop6): Ignoring removed orlov option [ 502.813412][ T8086] CPU: 1 PID: 8086 Comm: syz.3.2379 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 502.823356][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.833629][ T8086] Call Trace: [ 502.836929][ T8086] [ 502.840047][ T8086] __dump_stack+0x21/0x30 [ 502.844487][ T8086] dump_stack_lvl+0xee/0x150 [ 502.849209][ T8086] ? show_regs_print_info+0x20/0x20 [ 502.854435][ T8086] dump_stack+0x15/0x20 [ 502.858606][ T8086] should_fail+0x3c1/0x510 [ 502.863043][ T8086] should_fail_alloc_page+0x55/0x80 [ 502.866661][ T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 502.868267][ T8086] prepare_alloc_pages+0x156/0x600 [ 502.880942][ T8086] ? __alloc_pages_bulk+0xab0/0xab0 [ 502.886208][ T8086] ? __x64_sys_ioctl+0x7b/0x90 [ 502.888215][ T8083] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 502.890997][ T8086] ? x64_sys_call+0x2f/0x9a0 [ 502.910178][ T8086] ? do_syscall_64+0x4c/0xa0 [ 502.914793][ T8086] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 502.920889][ T8086] __alloc_pages+0x10a/0x440 [ 502.925505][ T8086] ? prep_new_page+0x110/0x110 [ 502.930378][ T8086] kmalloc_order+0x4c/0x160 [ 502.934914][ T8086] kmalloc_order_trace+0x18/0xb0 [ 502.939875][ T8086] __kmalloc+0x199/0x2c0 [ 502.944152][ T8086] ? slhc_init+0xb0/0x770 [ 502.948525][ T8086] slhc_init+0x160/0x770 [ 502.952796][ T8086] ppp_ioctl+0x125f/0x16a0 [ 502.957258][ T8086] ? mutex_unlock+0x89/0x220 [ 502.961883][ T8086] ? __mutex_lock_slowpath+0x10/0x10 [ 502.967355][ T8086] ? ppp_poll+0x250/0x250 [ 502.971715][ T8086] ? security_file_ioctl+0x84/0xa0 [ 502.976847][ T8086] ? ppp_poll+0x250/0x250 [ 502.981193][ T8086] __se_sys_ioctl+0x121/0x1a0 [ 502.985997][ T8086] __x64_sys_ioctl+0x7b/0x90 [ 502.990613][ T8086] x64_sys_call+0x2f/0x9a0 [ 502.995041][ T8086] do_syscall_64+0x4c/0xa0 [ 502.999458][ T8086] ? clear_bhb_loop+0x50/0xa0 [ 503.004138][ T8086] ? clear_bhb_loop+0x50/0xa0 [ 503.008826][ T8086] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 503.014735][ T8086] RIP: 0033:0x7fc06cd5e9a9 [ 503.019164][ T8086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.038863][ T8086] RSP: 002b:00007fc06b3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.047288][ T8086] RAX: ffffffffffffffda RBX: 00007fc06cf85fa0 RCX: 00007fc06cd5e9a9 [ 503.055268][ T8086] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000003 [ 503.063269][ T8086] RBP: 00007fc06b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 503.071593][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.079565][ T8086] R13: 0000000000000000 R14: 00007fc06cf85fa0 R15: 00007ffd548539b8 [ 503.087567][ T8086] [ 503.158053][ T8091] device batadv_slave_1 entered promiscuous mode [ 503.206706][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 503.213350][ T8090] device batadv_slave_1 left promiscuous mode [ 503.386711][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.409995][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.424212][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 503.433776][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.446071][ T20] usb 2-1: config 0 descriptor?? [ 503.487529][ T20] hub 2-1:0.0: USB hub found [ 503.582407][ T8100] loop3: detected capacity change from 0 to 512 [ 503.760405][ T8100] EXT4-fs (loop3): Ignoring removed orlov option [ 503.913382][ T8100] EXT4-fs (loop3): 1 orphan inode deleted [ 503.919261][ T8100] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,journal_dev=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 503.938034][ T8100] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.038743][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 504.671903][ T20] hub 2-1:0.0: 1 port detected [ 504.761283][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 504.761300][ T30] audit: type=1400 audit(1753946453.257:3918): avc: denied { bind } for pid=8110 comm="syz.5.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 505.076669][ T20] hub 2-1:0.0: activate --> -90 [ 505.105444][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2384'. [ 505.119034][ T8122] loop3: detected capacity change from 0 to 8192 [ 505.201652][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2384'. [ 505.289125][ T30] audit: type=1326 audit(1753946453.567:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a929df9a9 code=0x7ffc0000 [ 505.341097][ T30] audit: type=1326 audit(1753946453.637:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.5.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a929df9a9 code=0x7ffc0000 [ 505.546108][ T8074] device pim6reg1 entered promiscuous mode [ 505.597303][ T972] usb 2-1: USB disconnect, device number 4 [ 505.856328][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2393'. [ 505.875676][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2393'. [ 505.974581][ T8136] loop5: detected capacity change from 0 to 40427 [ 505.994709][ T8136] F2FS-fs (loop5): Unrecognized mount option "fosix" or missing value [ 506.067859][ T8144] binder: 8143:8144 ioctl c0306201 200000000280 returned -14 [ 506.128062][ T30] audit: type=1400 audit(1753946454.627:3921): avc: denied { setopt } for pid=8146 comm="syz.2.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 506.165352][ T8136] loop5: detected capacity change from 0 to 512 [ 506.218585][ T30] audit: type=1400 audit(1753946454.717:3922): avc: denied { bind } for pid=8146 comm="syz.2.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 506.219347][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 506.251182][ T8136] EXT4-fs (loop5): Ignoring removed orlov option [ 506.311042][ T8136] EXT4-fs (loop5): 1 orphan inode deleted [ 506.326600][ T8136] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,orlov,usrjquota=,usrjquota=,nojournal_checksum,journal_dev=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 506.348833][ T8136] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.456585][ T378] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 506.498865][ T8138] loop6: detected capacity change from 0 to 131072 [ 506.512044][ T8138] F2FS-fs (loop6): Unrecognized mount option "teSt_dummy_encryption" or missing value [ 506.560901][ T8166] loop2: detected capacity change from 0 to 256 [ 506.579660][ T8168] loop6: detected capacity change from 0 to 512 [ 506.587422][ T8166] exfat: Deprecated parameter 'utf8' [ 506.595684][ T8166] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 506.638361][ T8167] binder: 8164:8167 ioctl c0306201 200000000280 returned -14 [ 506.682603][ T8166] netlink: 'syz.2.2402': attribute type 6 has an invalid length. [ 506.708667][ T8168] EXT4-fs (loop6): 1 orphan inode deleted [ 506.714514][ T8168] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 506.716621][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 506.725788][ T8168] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.768673][ T30] audit: type=1326 audit(1753946455.267:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 506.963058][ T8178] loop5: detected capacity change from 0 to 8192 [ 507.619591][ T30] audit: type=1326 audit(1753946455.887:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 507.663687][ T30] audit: type=1326 audit(1753946455.887:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 507.746774][ T378] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 507.774644][ T378] usb 2-1: config 0 interface 0 has no altsetting 1 [ 507.836619][ T30] audit: type=1326 audit(1753946455.887:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 507.896687][ T378] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 507.917379][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.945562][ T30] audit: type=1326 audit(1753946455.937:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8165 comm="syz.2.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 508.029665][ T378] usb 2-1: SerialNumber: syz [ 508.042277][ T378] usb 2-1: config 0 descriptor?? [ 508.071255][ T8196] FAULT_INJECTION: forcing a failure. [ 508.071255][ T8196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.087456][ T378] usb-storage 2-1:0.0: USB Mass Storage device detected [ 508.400780][ T8196] CPU: 0 PID: 8196 Comm: syz.5.2408 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 508.410869][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 508.420954][ T8196] Call Trace: [ 508.424260][ T8196] [ 508.427212][ T8196] __dump_stack+0x21/0x30 [ 508.431573][ T8196] dump_stack_lvl+0xee/0x150 [ 508.436299][ T8196] ? show_regs_print_info+0x20/0x20 [ 508.441524][ T8196] dump_stack+0x15/0x20 [ 508.445787][ T8196] should_fail+0x3c1/0x510 [ 508.450312][ T8196] should_fail_usercopy+0x1a/0x20 [ 508.455355][ T8196] _copy_from_user+0x20/0xd0 [ 508.460052][ T8196] bpf_test_init+0x13d/0x1c0 [ 508.464717][ T8196] bpf_prog_test_run_skb+0x193/0x1150 [ 508.470107][ T8196] ? __kasan_check_write+0x14/0x20 [ 508.475235][ T8196] ? fput_many+0x15a/0x1a0 [ 508.479696][ T8196] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 508.485739][ T8196] bpf_prog_test_run+0x3d5/0x620 [ 508.490722][ T8196] ? bpf_prog_query+0x230/0x230 [ 508.495598][ T8196] ? selinux_bpf+0xce/0xf0 [ 508.500030][ T8196] ? security_bpf+0x82/0xa0 [ 508.504555][ T8196] __sys_bpf+0x52c/0x730 [ 508.508806][ T8196] ? bpf_link_show_fdinfo+0x310/0x310 [ 508.514304][ T8196] ? debug_smp_processor_id+0x17/0x20 [ 508.519710][ T8196] __x64_sys_bpf+0x7c/0x90 [ 508.524167][ T8196] x64_sys_call+0x4b9/0x9a0 [ 508.528674][ T8196] do_syscall_64+0x4c/0xa0 [ 508.533090][ T8196] ? clear_bhb_loop+0x50/0xa0 [ 508.537862][ T8196] ? clear_bhb_loop+0x50/0xa0 [ 508.542561][ T8196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.548548][ T8196] RIP: 0033:0x7f1a929df9a9 [ 508.552966][ T8196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.572690][ T8196] RSP: 002b:00007f1a91048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 508.581124][ T8196] RAX: ffffffffffffffda RBX: 00007f1a92c06fa0 RCX: 00007f1a929df9a9 [ 508.589111][ T8196] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 508.597094][ T8196] RBP: 00007f1a91048090 R08: 0000000000000000 R09: 0000000000000000 [ 508.605082][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.613056][ T8196] R13: 0000000000000000 R14: 00007f1a92c06fa0 R15: 00007ffce2459a18 [ 508.621148][ T8196] [ 508.627065][ T8191] loop6: detected capacity change from 0 to 512 [ 508.634235][ T378] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 508.707459][ T8191] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 508.720610][ T8191] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 508.770900][ T8210] loop2: detected capacity change from 0 to 128 [ 508.819885][ T8212] binder: 8211:8212 ioctl c0306201 200000000280 returned -14 [ 508.912503][ T8217] loop5: detected capacity change from 0 to 16 [ 508.948814][ T8221] fuse: Bad value for 'fd' [ 508.980794][ T8217] erofs: (device loop5): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 509.108389][ T8225] syz.6.2415[8225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.108923][ T8225] syz.6.2415[8225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.157512][ T8225] loop6: detected capacity change from 0 to 512 [ 509.232154][ T8225] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 509.308884][ T8225] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 509.325487][ T8225] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.384633][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2415'. [ 510.427111][ T972] usb 2-1: USB disconnect, device number 5 [ 510.529337][ T8230] bridge0: port 3(vlan2) entered blocking state [ 510.535660][ T8230] bridge0: port 3(vlan2) entered forwarding state [ 510.564621][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 510.564638][ T30] audit: type=1400 audit(1753946459.057:3955): avc: denied { ioctl } for pid=8231 comm="syz.3.2419" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 510.651484][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 510.672093][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.721917][ T30] audit: type=1400 audit(1753946459.097:3956): avc: denied { getopt } for pid=8239 comm="syz.6.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 510.749598][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 510.775445][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 510.803277][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 510.848400][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 510.876721][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.224454][ T30] audit: type=1400 audit(1753946459.677:3957): avc: denied { execute } for pid=8244 comm="syz.1.2423" path="/512/file1" dev="tmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 511.267149][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.318872][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 511.349189][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 511.361726][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 511.372250][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 511.381863][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.390636][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 511.399316][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.408605][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.567664][ T8258] loop5: detected capacity change from 0 to 256 [ 511.657259][ T8259] loop3: detected capacity change from 0 to 256 [ 511.708123][ T8259] exfat: Deprecated parameter 'utf8' [ 511.724070][ T8259] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 511.862815][ T8255] binder: 8254:8255 ioctl c0306201 200000000280 returned -14 [ 512.096932][ T8265] FAULT_INJECTION: forcing a failure. [ 512.096932][ T8265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.141511][ T8265] CPU: 0 PID: 8265 Comm: syz.6.2429 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 512.151738][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.161819][ T8265] Call Trace: [ 512.165136][ T8265] [ 512.168079][ T8265] __dump_stack+0x21/0x30 [ 512.172431][ T8265] dump_stack_lvl+0xee/0x150 [ 512.177045][ T8265] ? show_regs_print_info+0x20/0x20 [ 512.182298][ T8265] dump_stack+0x15/0x20 [ 512.186499][ T8265] should_fail+0x3c1/0x510 [ 512.190939][ T8265] should_fail_usercopy+0x1a/0x20 [ 512.195983][ T8265] _copy_to_user+0x20/0x90 [ 512.200537][ T8265] simple_read_from_buffer+0xe9/0x160 [ 512.205936][ T8265] proc_fail_nth_read+0x19a/0x210 [ 512.210995][ T8265] ? proc_fault_inject_write+0x2f0/0x2f0 [ 512.216676][ T8265] ? security_file_permission+0x83/0xa0 [ 512.222306][ T8265] ? proc_fault_inject_write+0x2f0/0x2f0 [ 512.227976][ T8265] vfs_read+0x282/0xbe0 [ 512.232175][ T8265] ? kernel_read+0x1f0/0x1f0 [ 512.236825][ T8265] ? __kasan_check_write+0x14/0x20 [ 512.241959][ T8265] ? mutex_lock+0x95/0x1a0 [ 512.246402][ T8265] ? wait_for_completion_killable_timeout+0x10/0x10 [ 512.253021][ T8265] ? __fget_files+0x2c4/0x320 [ 512.257758][ T8265] ? __fdget_pos+0x2d2/0x380 [ 512.262382][ T8265] ? ksys_read+0x71/0x240 [ 512.266735][ T8265] ksys_read+0x140/0x240 [ 512.271001][ T8265] ? vfs_write+0xf70/0xf70 [ 512.275486][ T8265] ? debug_smp_processor_id+0x17/0x20 [ 512.280936][ T8265] __x64_sys_read+0x7b/0x90 [ 512.285588][ T8265] x64_sys_call+0x96d/0x9a0 [ 512.290129][ T8265] do_syscall_64+0x4c/0xa0 [ 512.294584][ T8265] ? clear_bhb_loop+0x50/0xa0 [ 512.299307][ T8265] ? clear_bhb_loop+0x50/0xa0 [ 512.304046][ T8265] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 512.309982][ T8265] RIP: 0033:0x7fbfe651f3bc [ 512.314421][ T8265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.334329][ T8265] RSP: 002b:00007fbfe4b89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.342775][ T8265] RAX: ffffffffffffffda RBX: 00007fbfe6747fa0 RCX: 00007fbfe651f3bc [ 512.350903][ T8265] RDX: 000000000000000f RSI: 00007fbfe4b890a0 RDI: 0000000000000009 [ 512.358936][ T8265] RBP: 00007fbfe4b89090 R08: 0000000000000000 R09: 0000000000000000 [ 512.367239][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.375243][ T8265] R13: 0000000000000000 R14: 00007fbfe6747fa0 R15: 00007fff211c15d8 [ 512.383328][ T8265] [ 512.390179][ T8271] loop3: detected capacity change from 0 to 512 [ 512.414457][ T8271] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 512.437849][ T8271] EXT4-fs (loop3): 1 truncate cleaned up [ 512.444683][ T8271] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 512.750467][ T8279] syz.2.2431[8279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.750848][ T8279] syz.2.2431[8279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.793565][ T8279] loop2: detected capacity change from 0 to 512 [ 512.841147][ T8279] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 513.051295][ T8279] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 513.067520][ T8279] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.113685][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2431'. [ 513.816828][ T8294] FAULT_INJECTION: forcing a failure. [ 513.816828][ T8294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.830787][ T8294] CPU: 0 PID: 8294 Comm: syz.3.2434 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 513.840730][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.850818][ T8294] Call Trace: [ 513.854176][ T8294] [ 513.857140][ T8294] __dump_stack+0x21/0x30 [ 513.861508][ T8294] dump_stack_lvl+0xee/0x150 [ 513.866164][ T8294] ? show_regs_print_info+0x20/0x20 [ 513.871492][ T8294] dump_stack+0x15/0x20 [ 513.875664][ T8294] should_fail+0x3c1/0x510 [ 513.880086][ T8294] should_fail_usercopy+0x1a/0x20 [ 513.885125][ T8294] _copy_from_user+0x20/0xd0 [ 513.889753][ T8294] bpf_test_init+0x13d/0x1c0 [ 513.894350][ T8294] bpf_prog_test_run_skb+0x193/0x1150 [ 513.899749][ T8294] ? __kasan_check_write+0x14/0x20 [ 513.904864][ T8294] ? fput_many+0x15a/0x1a0 [ 513.909413][ T8294] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 513.915322][ T8294] bpf_prog_test_run+0x3d5/0x620 [ 513.920373][ T8294] ? bpf_prog_query+0x230/0x230 [ 513.925234][ T8294] ? selinux_bpf+0xce/0xf0 [ 513.929669][ T8294] ? security_bpf+0x82/0xa0 [ 513.934175][ T8294] __sys_bpf+0x52c/0x730 [ 513.938548][ T8294] ? bpf_link_show_fdinfo+0x310/0x310 [ 513.943932][ T8294] ? debug_smp_processor_id+0x17/0x20 [ 513.949315][ T8294] __x64_sys_bpf+0x7c/0x90 [ 513.953740][ T8294] x64_sys_call+0x4b9/0x9a0 [ 513.958242][ T8294] do_syscall_64+0x4c/0xa0 [ 513.962664][ T8294] ? clear_bhb_loop+0x50/0xa0 [ 513.967344][ T8294] ? clear_bhb_loop+0x50/0xa0 [ 513.972045][ T8294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 513.977942][ T8294] RIP: 0033:0x7fc06cd5e9a9 [ 513.982362][ T8294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.001972][ T8294] RSP: 002b:00007fc06b3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.010385][ T8294] RAX: ffffffffffffffda RBX: 00007fc06cf85fa0 RCX: 00007fc06cd5e9a9 [ 514.018371][ T8294] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 514.026354][ T8294] RBP: 00007fc06b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 514.034326][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.042401][ T8294] R13: 0000000000000000 R14: 00007fc06cf85fa0 R15: 00007ffd548539b8 [ 514.050469][ T8294] [ 514.056136][ T30] audit: type=1326 audit(1753946462.547:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 514.095656][ T8296] input: syz0 as /devices/virtual/input/input7 [ 514.146645][ T30] audit: type=1326 audit(1753946462.587:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 514.226593][ T30] audit: type=1326 audit(1753946462.587:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 514.289027][ T30] audit: type=1326 audit(1753946462.587:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 514.366767][ T30] audit: type=1326 audit(1753946462.587:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 514.446595][ T30] audit: type=1326 audit(1753946462.587:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 514.516584][ T30] audit: type=1326 audit(1753946462.587:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.2.2437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd473f6c9a9 code=0x7ffc0000 [ 514.652784][ T8301] loop6: detected capacity change from 0 to 40427 [ 514.685182][ T8301] F2FS-fs (loop6): Unrecognized mount option "fosix" or missing value [ 514.907051][ T8312] loop5: detected capacity change from 0 to 128 [ 515.174113][ T8313] loop6: detected capacity change from 0 to 512 [ 515.222197][ T8313] EXT4-fs (loop6): Ignoring removed orlov option [ 515.248149][ T8313] EXT4-fs (loop6): 1 orphan inode deleted [ 515.253964][ T8313] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,orlov,usrjquota=,usrjquota=,nojournal_checksum,journal_dev=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 515.273269][ T8313] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.496567][ T378] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 515.578447][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 515.578465][ T30] audit: type=1400 audit(1753946464.077:3978): avc: denied { append } for pid=8329 comm="syz.2.2450" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 515.656770][ T8336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.664053][ T8336] IPv6: NLM_F_CREATE should be set when creating new route [ 515.671478][ T8336] IPv6: NLM_F_CREATE should be set when creating new route [ 515.693228][ T30] audit: type=1400 audit(1753946464.187:3979): avc: denied { mounton } for pid=8335 comm="syz.3.2451" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 515.726784][ T8336] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 515.742933][ T30] audit: type=1400 audit(1753946464.227:3980): avc: denied { connect } for pid=8335 comm="syz.3.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 515.766609][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 515.770539][ T30] audit: type=1400 audit(1753946464.237:3981): avc: denied { bind } for pid=8335 comm="syz.3.2451" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 515.811588][ T30] audit: type=1400 audit(1753946464.237:3982): avc: denied { name_bind } for pid=8335 comm="syz.3.2451" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 515.835261][ T30] audit: type=1400 audit(1753946464.237:3983): avc: denied { node_bind } for pid=8335 comm="syz.3.2451" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 515.976654][ T378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.013744][ T378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.028678][ T378] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 516.047451][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.061876][ T378] usb 2-1: config 0 descriptor?? [ 516.192832][ T8356] FAULT_INJECTION: forcing a failure. [ 516.192832][ T8356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.205957][ T8356] CPU: 0 PID: 8356 Comm: syz.2.2454 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 516.215865][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.226094][ T8356] Call Trace: [ 516.229382][ T8356] [ 516.232310][ T8356] __dump_stack+0x21/0x30 [ 516.236641][ T8356] dump_stack_lvl+0xee/0x150 [ 516.241662][ T8356] ? show_regs_print_info+0x20/0x20 [ 516.246955][ T8356] dump_stack+0x15/0x20 [ 516.251109][ T8356] should_fail+0x3c1/0x510 [ 516.255524][ T8356] should_fail_usercopy+0x1a/0x20 [ 516.260561][ T8356] _copy_to_user+0x20/0x90 [ 516.265073][ T8356] simple_read_from_buffer+0xe9/0x160 [ 516.270449][ T8356] proc_fail_nth_read+0x19a/0x210 [ 516.275485][ T8356] ? proc_fault_inject_write+0x2f0/0x2f0 [ 516.281122][ T8356] ? security_file_permission+0x83/0xa0 [ 516.286676][ T8356] ? proc_fault_inject_write+0x2f0/0x2f0 [ 516.292422][ T8356] vfs_read+0x282/0xbe0 [ 516.296670][ T8356] ? kernel_read+0x1f0/0x1f0 [ 516.301265][ T8356] ? __kasan_check_write+0x14/0x20 [ 516.306387][ T8356] ? mutex_lock+0x95/0x1a0 [ 516.310819][ T8356] ? wait_for_completion_killable_timeout+0x10/0x10 [ 516.317511][ T8356] ? __fget_files+0x2c4/0x320 [ 516.322197][ T8356] ? __fdget_pos+0x2d2/0x380 [ 516.326797][ T8356] ? ksys_read+0x71/0x240 [ 516.331156][ T8356] ksys_read+0x140/0x240 [ 516.335398][ T8356] ? vfs_write+0xf70/0xf70 [ 516.339820][ T8356] ? debug_smp_processor_id+0x17/0x20 [ 516.345372][ T8356] __x64_sys_read+0x7b/0x90 [ 516.349878][ T8356] x64_sys_call+0x96d/0x9a0 [ 516.354386][ T8356] do_syscall_64+0x4c/0xa0 [ 516.358804][ T8356] ? clear_bhb_loop+0x50/0xa0 [ 516.363484][ T8356] ? clear_bhb_loop+0x50/0xa0 [ 516.368161][ T8356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 516.374057][ T8356] RIP: 0033:0x7fd473f6b3bc [ 516.378473][ T8356] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 516.398263][ T8356] RSP: 002b:00007fd472593030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.406694][ T8356] RAX: ffffffffffffffda RBX: 00007fd474194160 RCX: 00007fd473f6b3bc [ 516.414760][ T8356] RDX: 000000000000000f RSI: 00007fd4725930a0 RDI: 0000000000000005 [ 516.423175][ T8356] RBP: 00007fd472593090 R08: 0000000000000000 R09: 0000000000000000 [ 516.431248][ T8356] R10: fffffffdfffffffc R11: 0000000000000246 R12: 0000000000000001 [ 516.439477][ T8356] R13: 0000000000000000 R14: 00007fd474194160 R15: 00007fff4af83e88 [ 516.447985][ T8356] [ 516.768015][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 516.795244][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 517.152170][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 517.159160][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 517.165983][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 517.172929][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 517.179843][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 517.206713][ T378] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 517.224659][ T378] savu 0003:1E7D:2D5A.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 517.244351][ T378] usb 2-1: USB disconnect, device number 6 [ 517.344621][ T8369] device pim6reg1 entered promiscuous mode [ 517.691284][ T8370] fido_id[8370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 518.112065][ T8387] device pim6reg1 entered promiscuous mode [ 518.261553][ T20] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 518.277265][ T8387] FAULT_INJECTION: forcing a failure. [ 518.277265][ T8387] name failslab, interval 1, probability 0, space 0, times 0 [ 518.290601][ T8387] CPU: 1 PID: 8387 Comm: syz.2.2464 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 518.300540][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.310748][ T8387] Call Trace: [ 518.314076][ T8387] [ 518.314091][ T8387] __dump_stack+0x21/0x30 [ 518.314125][ T8387] dump_stack_lvl+0xee/0x150 [ 518.326032][ T8387] ? show_regs_print_info+0x20/0x20 [ 518.326641][ T8390] FAULT_INJECTION: forcing a failure. [ 518.326641][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 518.331338][ T8387] ? skb_put+0x10e/0x1f0 [ 518.331369][ T8387] ? memcpy+0x56/0x70 [ 518.331389][ T8387] dump_stack+0x15/0x20 [ 518.356746][ T8387] should_fail+0x3c1/0x510 [ 518.361201][ T8387] ? netlink_trim+0x193/0x230 [ 518.366005][ T8387] __should_failslab+0xa4/0xe0 [ 518.370828][ T8387] should_failslab+0x9/0x20 [ 518.375532][ T8387] slab_pre_alloc_hook+0x3b/0xe0 [ 518.380493][ T8387] ? netlink_trim+0x193/0x230 [ 518.385338][ T8387] ? netlink_trim+0x193/0x230 [ 518.390185][ T8387] __kmalloc_track_caller+0x6c/0x2c0 [ 518.395498][ T8387] ? netlink_trim+0x193/0x230 [ 518.400196][ T8387] ? netlink_trim+0x193/0x230 [ 518.404889][ T8387] pskb_expand_head+0x11b/0x11d0 [ 518.409840][ T8387] netlink_trim+0x193/0x230 [ 518.414355][ T8387] netlink_broadcast_filtered+0x78/0x1230 [ 518.420088][ T8387] ? kasan_unpoison+0x67/0x90 [ 518.424867][ T8387] ? rtmsg_ifinfo_build_skb+0xd8/0x180 [ 518.430335][ T8387] nlmsg_notify+0xed/0x1b0 [ 518.434761][ T8387] rtmsg_ifinfo+0xea/0x130 [ 518.439187][ T8387] dev_close_many+0x279/0x4d0 [ 518.443894][ T8387] ? debug_smp_processor_id+0x17/0x20 [ 518.449303][ T8387] ? __dev_open+0x4c0/0x4c0 [ 518.453826][ T8387] ? _raw_spin_lock+0x8e/0xe0 [ 518.458511][ T8387] ? __kasan_check_read+0x11/0x20 [ 518.463630][ T8387] unregister_netdevice_many+0x44c/0x1990 [ 518.469375][ T8387] ? __mod_timer+0x7ae/0xb30 [ 518.474001][ T8387] ? alloc_netdev_mqs+0xc90/0xc90 [ 518.479037][ T8387] ? add_timer+0x68/0x80 [ 518.483301][ T8387] ? __queue_delayed_work+0x173/0x200 [ 518.488705][ T8387] ? queue_delayed_work_on+0x101/0x150 [ 518.494175][ T8387] ? __kasan_check_read+0x11/0x20 [ 518.499224][ T8387] unregister_netdevice_queue+0x31c/0x360 [ 518.505054][ T8387] ? __kasan_check_read+0x11/0x20 [ 518.510090][ T8387] ? list_netdevice+0x4c0/0x4c0 [ 518.514952][ T8387] ? linkwatch_fire_event+0x307/0x380 [ 518.520420][ T8387] __tun_detach+0xca6/0x1450 [ 518.525026][ T8387] tun_chr_close+0x92/0x140 [ 518.529637][ T8387] ? tun_chr_open+0x540/0x540 [ 518.534617][ T8387] __fput+0x20b/0x8b0 [ 518.538610][ T8387] ____fput+0x15/0x20 [ 518.542604][ T8387] task_work_run+0x127/0x190 [ 518.547201][ T8387] exit_to_user_mode_loop+0xd0/0xe0 [ 518.552402][ T8387] exit_to_user_mode_prepare+0x5a/0xa0 [ 518.557871][ T8387] syscall_exit_to_user_mode+0x1a/0x30 [ 518.563354][ T8387] do_syscall_64+0x58/0xa0 [ 518.567772][ T8387] ? clear_bhb_loop+0x50/0xa0 [ 518.572462][ T8387] ? clear_bhb_loop+0x50/0xa0 [ 518.577145][ T8387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 518.583043][ T8387] RIP: 0033:0x7fd473f6c9a9 [ 518.587458][ T8387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.607069][ T8387] RSP: 002b:00007fd4725d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 518.615754][ T8387] RAX: 0000000000000000 RBX: 00007fd474193fa0 RCX: 00007fd473f6c9a9 [ 518.623771][ T8387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 518.631939][ T8387] RBP: 00007fd4725d5090 R08: 0000000000000000 R09: 0000000000000000 [ 518.640001][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.648159][ T8387] R13: 0000000000000000 R14: 00007fd474193fa0 R15: 00007fff4af83e88 [ 518.656179][ T8387] [ 518.659205][ T8390] CPU: 0 PID: 8390 Comm: syz.1.2463 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 518.669329][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.679416][ T8390] Call Trace: [ 518.682716][ T8390] [ 518.685663][ T8390] __dump_stack+0x21/0x30 [ 518.690020][ T8390] dump_stack_lvl+0xee/0x150 [ 518.694632][ T8390] ? show_regs_print_info+0x20/0x20 [ 518.699847][ T8390] ? unwind_get_return_address+0x4d/0x90 [ 518.706112][ T8390] ? stack_trace_save+0xe0/0xe0 [ 518.710999][ T8390] dump_stack+0x15/0x20 [ 518.715277][ T8390] should_fail+0x3c1/0x510 [ 518.719712][ T8390] __should_failslab+0xa4/0xe0 [ 518.724500][ T8390] should_failslab+0x9/0x20 [ 518.729018][ T8390] slab_pre_alloc_hook+0x3b/0xe0 [ 518.734012][ T8390] kmem_cache_alloc_trace+0x48/0x270 [ 518.739325][ T8390] ? ipv6_flowlabel_opt+0xa7c/0x1e10 [ 518.744746][ T8390] ipv6_flowlabel_opt+0xa7c/0x1e10 [ 518.749891][ T8390] ? proc_pident_instantiate+0x69/0x2b0 [ 518.755463][ T8390] ? proc_pident_lookup+0x1c0/0x270 [ 518.760680][ T8390] ? proc_tid_base_lookup+0x2b/0x30 [ 518.765902][ T8390] ? do_sys_openat2+0xa1/0x7b0 [ 518.770683][ T8390] ? __x64_sys_openat+0x136/0x160 [ 518.775733][ T8390] ? ipv6_flowlabel_opt_get+0x5c0/0x5c0 [ 518.781303][ T8390] ? avc_has_perm_noaudit+0x2f4/0x460 [ 518.786694][ T8390] ? __kasan_check_write+0x14/0x20 [ 518.791827][ T8390] ? _raw_spin_lock_bh+0x8e/0xe0 [ 518.796779][ T8390] ? _raw_spin_lock_irq+0xe0/0xe0 [ 518.801838][ T8390] ? __local_bh_enable_ip+0x58/0x80 [ 518.807054][ T8390] ? _raw_spin_unlock_bh+0x51/0x60 [ 518.812185][ T8390] ? lock_sock_nested+0x1f1/0x290 [ 518.817235][ T8390] ? sock_init_data+0xc0/0xc0 [ 518.821932][ T8390] ? avc_has_perm+0x158/0x240 [ 518.826629][ T8390] ? __kasan_check_write+0x14/0x20 [ 518.831775][ T8390] ? _copy_from_user+0x95/0xd0 [ 518.836572][ T8390] ipv6_setsockopt+0xa0f/0x38a0 [ 518.841641][ T8390] ? ipv6_update_options+0x410/0x410 [ 518.846980][ T8390] ? is_bpf_text_address+0x177/0x190 [ 518.852301][ T8390] ? __kernel_text_address+0xa0/0x100 [ 518.857707][ T8390] ? unwind_get_return_address+0x4d/0x90 [ 518.863498][ T8390] ? stack_trace_save+0xe0/0xe0 [ 518.868373][ T8390] ? arch_stack_walk+0xee/0x140 [ 518.873254][ T8390] ? stack_trace_save+0x98/0xe0 [ 518.878133][ T8390] ? __stack_depot_save+0x34/0x480 [ 518.883383][ T8390] ? memcpy+0x56/0x70 [ 518.887391][ T8390] ? avc_has_perm_noaudit+0x2f4/0x460 [ 518.892822][ T8390] ? __x64_sys_openat+0x136/0x160 [ 518.897873][ T8390] ? x64_sys_call+0x219/0x9a0 [ 518.902569][ T8390] ? avc_denied+0x1b0/0x1b0 [ 518.907089][ T8390] ? kstrtouint_from_user+0x1a0/0x200 [ 518.912477][ T8390] ? avc_has_perm+0x158/0x240 [ 518.917167][ T8390] ? avc_has_perm_noaudit+0x460/0x460 [ 518.922553][ T8390] ? proc_fail_nth_write+0x17a/0x1f0 [ 518.927866][ T8390] ? proc_fail_nth_read+0x210/0x210 [ 518.933226][ T8390] ? security_file_permission+0x79/0xa0 [ 518.938796][ T8390] ? selinux_socket_setsockopt+0x21c/0x300 [ 518.944628][ T8390] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 518.950461][ T8390] ? vfs_write+0xc17/0xf70 [ 518.954897][ T8390] ? __fget_files+0x2c4/0x320 [ 518.959590][ T8390] udpv6_setsockopt+0x92/0xb0 [ 518.964374][ T8390] sock_common_setsockopt+0xa0/0xb0 [ 518.969590][ T8390] ? sock_common_recvmsg+0x1b0/0x1b0 [ 518.974890][ T8390] __sys_setsockopt+0x2f0/0x460 [ 518.979844][ T8390] ? __kasan_check_write+0x14/0x20 [ 518.984978][ T8390] ? __ia32_sys_recv+0xb0/0xb0 [ 518.989801][ T8390] ? ksys_write+0x1eb/0x240 [ 518.994500][ T8390] ? __ia32_sys_read+0x90/0x90 [ 518.999285][ T8390] __x64_sys_setsockopt+0xbf/0xd0 [ 519.004328][ T8390] x64_sys_call+0x982/0x9a0 [ 519.008850][ T8390] do_syscall_64+0x4c/0xa0 [ 519.013281][ T8390] ? clear_bhb_loop+0x50/0xa0 [ 519.017975][ T8390] ? clear_bhb_loop+0x50/0xa0 [ 519.022665][ T8390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.028571][ T8390] RIP: 0033:0x7fd1d16da9a9 [ 519.033054][ T8390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.052852][ T8390] RSP: 002b:00007fd1cfd22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 519.061462][ T8390] RAX: ffffffffffffffda RBX: 00007fd1d1902080 RCX: 00007fd1d16da9a9 [ 519.069453][ T8390] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000009 [ 519.077628][ T8390] RBP: 00007fd1cfd22090 R08: 0000000000000020 R09: 0000000000000000 [ 519.085714][ T8390] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 519.093715][ T8390] R13: 0000000000000000 R14: 00007fd1d1902080 R15: 00007ffc8d708e18 [ 519.101720][ T8390] [ 519.183393][ T30] audit: type=1400 audit(1753946467.677:3984): avc: denied { wake_alarm } for pid=8391 comm="syz.1.2465" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 519.386699][ T20] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 519.399547][ T20] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 519.486815][ T20] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 519.502116][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 519.510485][ T20] usb 7-1: SerialNumber: syz [ 519.536672][ T8379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 519.558962][ T20] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 519.570293][ T20] cdc_acm: probe of 7-1:1.0 failed with error -12 [ 519.602468][ T30] audit: type=1400 audit(1753946468.097:3985): avc: denied { relabelfrom } for pid=8409 comm="syz.3.2471" name="" dev="pipefs" ino=45144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 519.644441][ T30] audit: type=1400 audit(1753946468.117:3986): avc: denied { mac_admin } for pid=8409 comm="syz.3.2471" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 519.674504][ T8420] loop2: detected capacity change from 0 to 128 [ 519.972432][ T785] usb 7-1: USB disconnect, device number 4 [ 520.197471][ T8426] loop1: detected capacity change from 0 to 8192 [ 520.225108][ T30] audit: type=1400 audit(1753946468.717:3987): avc: denied { mounton } for pid=8425 comm="syz.1.2476" path="/519/bus/bus" dev="loop1" ino=1048700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 520.456460][ T8430] FAULT_INJECTION: forcing a failure. [ 520.456460][ T8430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.470351][ T8430] CPU: 1 PID: 8430 Comm: syz.1.2477 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 520.480277][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.490539][ T8430] Call Trace: [ 520.493868][ T8430] [ 520.496849][ T8430] __dump_stack+0x21/0x30 [ 520.501351][ T8430] dump_stack_lvl+0xee/0x150 [ 520.506136][ T8430] ? show_regs_print_info+0x20/0x20 [ 520.511404][ T8430] ? vfs_write+0xc17/0xf70 [ 520.515845][ T8430] dump_stack+0x15/0x20 [ 520.520012][ T8430] should_fail+0x3c1/0x510 [ 520.524432][ T8430] should_fail_usercopy+0x1a/0x20 [ 520.529474][ T8430] _copy_from_user+0x20/0xd0 [ 520.534084][ T8430] __sys_bpf+0x233/0x730 [ 520.538329][ T8430] ? bpf_link_show_fdinfo+0x310/0x310 [ 520.543713][ T8430] ? debug_smp_processor_id+0x17/0x20 [ 520.549185][ T8430] __x64_sys_bpf+0x7c/0x90 [ 520.553708][ T8430] x64_sys_call+0x4b9/0x9a0 [ 520.558222][ T8430] do_syscall_64+0x4c/0xa0 [ 520.562663][ T8430] ? clear_bhb_loop+0x50/0xa0 [ 520.567351][ T8430] ? clear_bhb_loop+0x50/0xa0 [ 520.572054][ T8430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 520.577961][ T8430] RIP: 0033:0x7fd1d16da9a9 [ 520.582393][ T8430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.602107][ T8430] RSP: 002b:00007fd1cfd01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 520.610629][ T8430] RAX: ffffffffffffffda RBX: 00007fd1d1902160 RCX: 00007fd1d16da9a9 [ 520.618641][ T8430] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 520.626621][ T8430] RBP: 00007fd1cfd01090 R08: 0000000000000000 R09: 0000000000000000 [ 520.634862][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.642924][ T8430] R13: 0000000000000000 R14: 00007fd1d1902160 R15: 00007ffc8d708e18 [ 520.650903][ T8430] [ 520.669131][ T8430] loop1: detected capacity change from 0 to 4096 [ 520.847022][ T8430] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 521.081719][ T30] audit: type=1400 audit(1753946469.577:3988): avc: denied { create } for pid=8433 comm="syz.5.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 521.586807][ T8443] loop6: detected capacity change from 0 to 4096 [ 521.594043][ T30] audit: type=1400 audit(1753946469.717:3989): avc: denied { ioctl } for pid=8439 comm="syz.5.2480" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 521.858118][ T8443] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 522.170108][ T8453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8453 comm=syz.1.2481 [ 522.337535][ T8459] tipc: Started in network mode [ 522.358903][ T8459] tipc: Node identity 66bcc56ed6b, cluster identity 4711 [ 522.374298][ T8459] tipc: Enabled bearer , priority 0 [ 522.394857][ T8458] tipc: Disabling bearer [ 522.937079][ T8478] loop6: detected capacity change from 0 to 1024 [ 523.003206][ T8478] EXT4-fs (loop6): Ignoring removed orlov option [ 523.035388][ T8478] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 524.106581][ T785] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 524.526993][ T30] audit: type=1326 audit(1753946472.937:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 524.551209][ T785] usb 2-1: device descriptor read/64, error -71 [ 524.670271][ T30] audit: type=1326 audit(1753946472.937:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 524.713140][ T30] audit: type=1326 audit(1753946472.937:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 524.742155][ T30] audit: type=1326 audit(1753946472.937:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 524.777086][ T8512] FAULT_INJECTION: forcing a failure. [ 524.777086][ T8512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.790899][ T30] audit: type=1326 audit(1753946472.937:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 524.814511][ T8512] CPU: 1 PID: 8512 Comm: syz.6.2503 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 524.824697][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.834794][ T8512] Call Trace: [ 524.838111][ T8512] [ 524.841136][ T8512] __dump_stack+0x21/0x30 [ 524.845505][ T8512] dump_stack_lvl+0xee/0x150 [ 524.850097][ T8512] ? show_regs_print_info+0x20/0x20 [ 524.855592][ T8512] dump_stack+0x15/0x20 [ 524.859756][ T8512] should_fail+0x3c1/0x510 [ 524.864203][ T8512] should_fail_usercopy+0x1a/0x20 [ 524.869251][ T8512] _copy_to_user+0x20/0x90 [ 524.873677][ T8512] simple_read_from_buffer+0xe9/0x160 [ 524.879065][ T8512] proc_fail_nth_read+0x19a/0x210 [ 524.884093][ T8512] ? proc_fault_inject_write+0x2f0/0x2f0 [ 524.889741][ T8512] ? security_file_permission+0x83/0xa0 [ 524.895392][ T8512] ? proc_fault_inject_write+0x2f0/0x2f0 [ 524.901139][ T8512] vfs_read+0x282/0xbe0 [ 524.905313][ T8512] ? kernel_read+0x1f0/0x1f0 [ 524.910005][ T8512] ? __kasan_check_write+0x14/0x20 [ 524.915120][ T8512] ? mutex_lock+0x95/0x1a0 [ 524.919715][ T8512] ? wait_for_completion_killable_timeout+0x10/0x10 [ 524.926319][ T8512] ? __fget_files+0x2c4/0x320 [ 524.931012][ T8512] ? __fdget_pos+0x2d2/0x380 [ 524.936165][ T8512] ? ksys_read+0x71/0x240 [ 524.940500][ T8512] ksys_read+0x140/0x240 [ 524.944768][ T8512] ? fput+0x1a/0x20 [ 524.948587][ T8512] ? vfs_write+0xf70/0xf70 [ 524.953004][ T8512] ? debug_smp_processor_id+0x17/0x20 [ 524.958385][ T8512] __x64_sys_read+0x7b/0x90 [ 524.962893][ T8512] x64_sys_call+0x96d/0x9a0 [ 524.967403][ T8512] do_syscall_64+0x4c/0xa0 [ 524.971832][ T8512] ? clear_bhb_loop+0x50/0xa0 [ 524.976706][ T8512] ? clear_bhb_loop+0x50/0xa0 [ 524.981385][ T8512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.987370][ T8512] RIP: 0033:0x7fbfe651f3bc [ 524.991876][ T8512] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 525.011483][ T8512] RSP: 002b:00007fbfe4b89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.019912][ T8512] RAX: ffffffffffffffda RBX: 00007fbfe6747fa0 RCX: 00007fbfe651f3bc [ 525.028034][ T8512] RDX: 000000000000000f RSI: 00007fbfe4b890a0 RDI: 0000000000000008 [ 525.036013][ T8512] RBP: 00007fbfe4b89090 R08: 0000000000000000 R09: 0000000000000000 [ 525.043988][ T8512] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 525.052229][ T8512] R13: 0000000000000000 R14: 00007fbfe6747fa0 R15: 00007fff211c15d8 [ 525.060212][ T8512] [ 525.066160][ T30] audit: type=1326 audit(1753946472.937:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 525.094807][ T30] audit: type=1326 audit(1753946472.947:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 525.120097][ T30] audit: type=1326 audit(1753946472.947:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8496 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 525.238732][ T8524] loop5: detected capacity change from 0 to 1024 [ 525.318361][ T8524] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.2506: Invalid block bitmap block 0 in block_group 0 [ 525.332524][ T8524] EXT4-fs error (device loop5): ext4_acquire_dquot:6198: comm syz.5.2506: Failed to acquire dquot type 0 [ 525.344337][ T8524] EXT4-fs error (device loop5): ext4_free_blocks:6223: comm syz.5.2506: Freeing blocks not in datazone - block = 0, count = 4096 [ 525.358062][ T8524] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.2506: Invalid inode bitmap blk 0 in block_group 0 [ 525.362938][ T8529] loop3: detected capacity change from 0 to 4096 [ 525.371699][ T8524] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 525.385872][ T8524] EXT4-fs (loop5): 1 orphan inode deleted [ 525.386789][ T785] usb 2-1: device descriptor read/64, error -71 [ 525.391693][ T8524] EXT4-fs (loop5): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback. [ 525.422073][ T8529] EXT4-fs (loop3): Test dummy encryption mode enabled [ 525.424492][ T345] EXT4-fs error (device loop5): ext4_release_dquot:6234: comm kworker/u4:4: Failed to release dquot type 0 [ 525.443720][ T8529] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 525.686644][ T785] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 525.966615][ T785] usb 2-1: device descriptor read/64, error -71 [ 526.262022][ T8544] loop1: detected capacity change from 0 to 8192 [ 526.687696][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 526.687724][ T30] audit: type=1400 audit(1753946475.187:4025): avc: denied { relabelfrom } for pid=8541 comm="syz.5.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 526.957134][ T30] audit: type=1400 audit(1753946475.207:4026): avc: denied { relabelto } for pid=8541 comm="syz.5.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 527.162442][ T8552] syz.2.2515[8552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.162910][ T8552] syz.2.2515[8552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.208125][ T8552] loop2: detected capacity change from 0 to 512 [ 528.067696][ T8553] fuse: Unknown parameter 'fN' [ 528.332382][ T30] audit: type=1326 audit(1753946476.827:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8551 comm="syz.6.2517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfe65209a9 code=0x7efc0000 [ 528.356105][ T8552] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 528.387885][ T8552] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 528.404372][ T8552] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.432825][ T8564] loop5: detected capacity change from 0 to 512 [ 528.497188][ T8564] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 528.545780][ T8564] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2518: bg 0: block 131: padding at end of block bitmap is not set [ 528.597084][ T8564] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 528.620987][ T8564] EXT4-fs (loop5): 1 truncate cleaned up [ 528.665704][ T8564] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,grpquota,i_version,dioread_nolock,,errors=continue. Quota mode: writeback. [ 529.371687][ T8586] loop5: detected capacity change from 0 to 512 [ 529.561164][ T8589] loop3: detected capacity change from 0 to 8192 [ 530.081734][ T8586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 530.597825][ T8586] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 530.656896][ T8586] EXT4-fs (loop5): 1 truncate cleaned up [ 530.672796][ T8586] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,stripe=0x0000000000000080,quota,,errors=continue. Quota mode: writeback. [ 530.775380][ T8582] loop2: detected capacity change from 0 to 40427 [ 530.812324][ T8582] F2FS-fs (loop2): Unrecognized mount option "fosix" or missing value [ 530.865743][ T8596] binder: 8595:8596 ioctl c0306201 200000000280 returned -14 [ 531.061559][ T8607] syz.5.2531[8607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.061952][ T8607] syz.5.2531[8607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.105148][ T8607] loop5: detected capacity change from 0 to 512 [ 531.209929][ T8607] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 531.370563][ T8607] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 531.386918][ T8607] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.868936][ T8613] loop2: detected capacity change from 0 to 512 [ 531.910229][ T8613] EXT4-fs (loop2): Ignoring removed orlov option [ 531.958988][ T8613] EXT4-fs (loop2): 1 orphan inode deleted [ 531.964823][ T8613] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,orlov,usrjquota=,usrjquota=,nojournal_checksum,journal_dev=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 531.983705][ T8613] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.099311][ T8622] FAULT_INJECTION: forcing a failure. [ 532.099311][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 532.126450][ T8622] CPU: 0 PID: 8622 Comm: syz.6.2536 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 532.136450][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.146721][ T8622] Call Trace: [ 532.150034][ T8622] [ 532.153085][ T8622] __dump_stack+0x21/0x30 [ 532.157625][ T8622] dump_stack_lvl+0xee/0x150 [ 532.162242][ T8622] ? show_regs_print_info+0x20/0x20 [ 532.167469][ T8622] ? security_inode_alloc+0x33/0x110 [ 532.172826][ T8622] ? new_inode_pseudo+0x91/0x210 [ 532.177784][ T8622] ? __sock_create+0x12c/0x7a0 [ 532.182563][ T8622] ? __sys_socketpair+0x1a1/0x590 [ 532.187812][ T8622] ? x64_sys_call+0x36/0x9a0 [ 532.192419][ T8622] ? do_syscall_64+0x4c/0xa0 [ 532.197060][ T8622] dump_stack+0x15/0x20 [ 532.201220][ T8622] should_fail+0x3c1/0x510 [ 532.205846][ T8622] __should_failslab+0xa4/0xe0 [ 532.210634][ T8622] should_failslab+0x9/0x20 [ 532.215257][ T8622] slab_pre_alloc_hook+0x3b/0xe0 [ 532.220218][ T8622] ? sk_prot_alloc+0x5f/0x320 [ 532.225006][ T8622] kmem_cache_alloc+0x44/0x260 [ 532.229784][ T8622] sk_prot_alloc+0x5f/0x320 [ 532.234295][ T8622] sk_alloc+0x38/0x430 [ 532.238374][ T8622] tipc_sk_create+0xe6/0x1df0 [ 532.243071][ T8622] ? __kasan_check_write+0x14/0x20 [ 532.248195][ T8622] ? _raw_spin_lock+0x8e/0xe0 [ 532.252888][ T8622] ? _raw_spin_trylock_bh+0x130/0x130 [ 532.258312][ T8622] ? security_inode_alloc+0xc0/0x110 [ 532.263798][ T8622] ? inode_init_always+0x729/0x990 [ 532.268936][ T8622] __sock_create+0x38d/0x7a0 [ 532.273568][ T8622] __sys_socketpair+0x1a1/0x590 [ 532.278427][ T8622] __x64_sys_socketpair+0x9b/0xb0 [ 532.283730][ T8622] x64_sys_call+0x36/0x9a0 [ 532.288173][ T8622] do_syscall_64+0x4c/0xa0 [ 532.292627][ T8622] ? clear_bhb_loop+0x50/0xa0 [ 532.297314][ T8622] ? clear_bhb_loop+0x50/0xa0 [ 532.302002][ T8622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.307928][ T8622] RIP: 0033:0x7fbfe65209a9 [ 532.312349][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.331971][ T8622] RSP: 002b:00007fbfe4b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 532.340399][ T8622] RAX: ffffffffffffffda RBX: 00007fbfe6747fa0 RCX: 00007fbfe65209a9 [ 532.348379][ T8622] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 532.356371][ T8622] RBP: 00007fbfe4b89090 R08: 0000000000000000 R09: 0000000000000000 [ 532.364366][ T8622] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001 [ 532.372335][ T8622] R13: 0000000000000000 R14: 00007fbfe6747fa0 R15: 00007fff211c15d8 [ 532.380399][ T8622] [ 532.392639][ T8620] binder: 8619:8620 ioctl c0306201 200000000280 returned -14 [ 532.986588][ T548] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 533.366668][ T548] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.377122][ T548] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 533.475546][ T8662] binder: 8661:8662 ioctl c0306201 200000000280 returned -14 [ 533.556742][ T548] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 533.570476][ T548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.611435][ T548] usb 2-1: Product: syz [ 533.615981][ T548] usb 2-1: Manufacturer: syz [ 533.620894][ T548] usb 2-1: SerialNumber: syz [ 533.633512][ T548] usb 2-1: config 0 descriptor?? [ 533.818475][ T8671] FAULT_INJECTION: forcing a failure. [ 533.818475][ T8671] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.831912][ T8671] CPU: 1 PID: 8671 Comm: syz.5.2551 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 533.841835][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.851910][ T8671] Call Trace: [ 533.855210][ T8671] [ 533.858238][ T8671] __dump_stack+0x21/0x30 [ 533.862588][ T8671] dump_stack_lvl+0xee/0x150 [ 533.867214][ T8671] ? show_regs_print_info+0x20/0x20 [ 533.872435][ T8671] ? compat_start_thread+0x20/0x20 [ 533.877651][ T8671] dump_stack+0x15/0x20 [ 533.881822][ T8671] should_fail+0x3c1/0x510 [ 533.886258][ T8671] should_fail_alloc_page+0x55/0x80 [ 533.891482][ T8671] prepare_alloc_pages+0x156/0x600 [ 533.896635][ T8671] ? __alloc_pages_bulk+0xab0/0xab0 [ 533.901847][ T8671] __alloc_pages+0x10a/0x440 [ 533.906430][ T8671] ? unlock_page_memcg+0x115/0x130 [ 533.911544][ T8671] ? prep_new_page+0x110/0x110 [ 533.916331][ T8671] ? page_remove_rmap+0xe3b/0xef0 [ 533.921377][ T8671] ? page_add_file_rmap+0x6f0/0x6f0 [ 533.926599][ T8671] ? mark_page_accessed+0x3b6/0x8d0 [ 533.929167][ T8674] binder: 8673:8674 ioctl c0306201 200000000c40 returned -22 [ 533.931965][ T8671] __get_free_pages+0x10/0x30 [ 533.944016][ T8671] __tlb_remove_page_size+0x17b/0x300 [ 533.949414][ T8671] unmap_page_range+0x1013/0x1d90 [ 533.954445][ T8671] ? __schedule+0xb76/0x14c0 [ 533.959041][ T8671] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 533.965374][ T8671] ? pagevec_lru_move_fn+0x490/0x490 [ 533.971180][ T8671] ? __kasan_check_read+0x11/0x20 [ 533.976206][ T8671] unmap_vmas+0x258/0x360 [ 533.980535][ T8671] ? unmap_page_range+0x1d90/0x1d90 [ 533.985741][ T8671] ? tlb_gather_mmu+0x22a/0x2f0 [ 533.990597][ T8671] unmap_region+0x202/0x360 [ 533.995120][ T8671] ? irqentry_exit_cond_resched+0x29/0x30 [ 534.000847][ T8671] ? mmap_write_downgrade+0x70/0x70 [ 534.006167][ T8671] ? __vma_rb_erase+0xa12/0xa80 [ 534.011280][ T8671] ? __split_vma+0x38a/0x3e0 [ 534.015871][ T8671] __do_munmap+0xa0e/0xfe0 [ 534.020293][ T8671] mmap_region+0x82c/0x1800 [ 534.024797][ T8671] ? irqentry_exit+0x37/0x40 [ 534.029392][ T8671] ? sysvec_reschedule_ipi+0x78/0x80 [ 534.034773][ T8671] do_mmap+0x76c/0xe40 [ 534.038960][ T8671] __se_sys_remap_file_pages+0x479/0x790 [ 534.044730][ T8671] ? sysvec_reschedule_ipi+0x78/0x80 [ 534.050044][ T8671] __x64_sys_remap_file_pages+0xbf/0xd0 [ 534.055604][ T8671] x64_sys_call+0x522/0x9a0 [ 534.060115][ T8671] do_syscall_64+0x4c/0xa0 [ 534.064533][ T8671] ? clear_bhb_loop+0x50/0xa0 [ 534.069223][ T8671] ? clear_bhb_loop+0x50/0xa0 [ 534.073902][ T8671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.079806][ T8671] RIP: 0033:0x7f1a929df9a9 [ 534.084228][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.104098][ T8671] RSP: 002b:00007f1a91027038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 534.112517][ T8671] RAX: ffffffffffffffda RBX: 00007f1a92c07080 RCX: 00007f1a929df9a9 [ 534.120493][ T8671] RDX: 0000000000000000 RSI: 0000000000400d00 RDI: 000020000051c000 [ 534.128464][ T8671] RBP: 00007f1a91027090 R08: 0000000000000000 R09: 0000000000000000 [ 534.136448][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.144435][ T8671] R13: 0000000000000000 R14: 00007f1a92c07080 R15: 00007ffce2459a18 [ 534.152423][ T8671] [ 534.192457][ T8679] loop3: detected capacity change from 0 to 1024 [ 534.212915][ T8681] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 534.223954][ T30] audit: type=1400 audit(1753946482.717:4028): avc: denied { relabelto } for pid=8680 comm="syz.2.2554" name="cgroup.procs" dev="cgroup" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mount_exec_t:s0" [ 534.225888][ T8669] loop5: detected capacity change from 0 to 512 [ 534.251774][ T30] audit: type=1400 audit(1753946482.717:4029): avc: denied { associate } for pid=8680 comm="syz.2.2554" name="cgroup.procs" dev="cgroup" ino=265 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mount_exec_t:s0" [ 534.259771][ T548] usb 2-1: USB disconnect, device number 9 [ 534.303297][ T8681] device pim6reg1 entered promiscuous mode [ 534.407817][ T8679] EXT4-fs (loop3): Ignoring removed orlov option [ 534.428037][ T8691] loop6: detected capacity change from 0 to 256 [ 534.447285][ T8691] exfat: Unknown parameter '' [ 534.466109][ T8679] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 534.981974][ T8706] FAULT_INJECTION: forcing a failure. [ 534.981974][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 535.015148][ T8706] CPU: 1 PID: 8706 Comm: syz.1.2560 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 535.025204][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.035382][ T8706] Call Trace: [ 535.038694][ T8706] [ 535.041646][ T8706] __dump_stack+0x21/0x30 [ 535.046003][ T8706] dump_stack_lvl+0xee/0x150 [ 535.050625][ T8706] ? show_regs_print_info+0x20/0x20 [ 535.055845][ T8706] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 535.062094][ T8706] dump_stack+0x15/0x20 [ 535.066283][ T8706] should_fail+0x3c1/0x510 [ 535.070733][ T8706] __should_failslab+0xa4/0xe0 [ 535.075520][ T8706] should_failslab+0x9/0x20 [ 535.080051][ T8706] slab_pre_alloc_hook+0x3b/0xe0 [ 535.085194][ T8706] __kmalloc+0x6d/0x2c0 [ 535.089511][ T8706] ? kvmalloc_node+0x206/0x300 [ 535.094301][ T8706] kvmalloc_node+0x206/0x300 [ 535.098922][ T8706] ? vm_mmap+0xb0/0xb0 [ 535.103014][ T8706] ? __kasan_check_write+0x14/0x20 [ 535.108330][ T8706] pfifo_fast_init+0x112/0x7a0 [ 535.113130][ T8706] qdisc_create_dflt+0x142/0x3a0 [ 535.118092][ T8706] dev_activate+0x2a0/0x1060 [ 535.122713][ T8706] __dev_open+0x3aa/0x4c0 [ 535.127066][ T8706] ? dev_open+0x230/0x230 [ 535.131415][ T8706] ? _raw_spin_unlock_bh+0x51/0x60 [ 535.136542][ T8706] ? dev_set_rx_mode+0x212/0x2c0 [ 535.141500][ T8706] ? __kasan_check_read+0x11/0x20 [ 535.146629][ T8706] __dev_change_flags+0x20a/0x6a0 [ 535.151683][ T8706] ? dev_get_flags+0x1e0/0x1e0 [ 535.156470][ T8706] ? __kasan_slab_free+0x11/0x20 [ 535.161505][ T8706] dev_change_flags+0x88/0x1a0 [ 535.166288][ T8706] dev_ifsioc+0x147/0xe70 [ 535.170640][ T8706] ? dev_ioctl+0xd10/0xd10 [ 535.175228][ T8706] ? __kasan_check_write+0x14/0x20 [ 535.180337][ T8706] ? mutex_lock+0x95/0x1a0 [ 535.184844][ T8706] ? wait_for_completion_killable_timeout+0x10/0x10 [ 535.191526][ T8706] ? dev_get_by_name_rcu+0xc8/0xf0 [ 535.196639][ T8706] dev_ioctl+0x560/0xd10 [ 535.200885][ T8706] sock_do_ioctl+0x22e/0x300 [ 535.205478][ T8706] ? sock_show_fdinfo+0xa0/0xa0 [ 535.210328][ T8706] ? selinux_file_ioctl+0x377/0x480 [ 535.215531][ T8706] sock_ioctl+0x4bc/0x6b0 [ 535.219869][ T8706] ? sock_poll+0x3d0/0x3d0 [ 535.224286][ T8706] ? __fget_files+0x2c4/0x320 [ 535.228969][ T8706] ? security_file_ioctl+0x84/0xa0 [ 535.234081][ T8706] ? sock_poll+0x3d0/0x3d0 [ 535.238499][ T8706] __se_sys_ioctl+0x121/0x1a0 [ 535.243200][ T8706] __x64_sys_ioctl+0x7b/0x90 [ 535.247797][ T8706] x64_sys_call+0x2f/0x9a0 [ 535.252215][ T8706] do_syscall_64+0x4c/0xa0 [ 535.256654][ T8706] ? clear_bhb_loop+0x50/0xa0 [ 535.261339][ T8706] ? clear_bhb_loop+0x50/0xa0 [ 535.266430][ T8706] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.272348][ T8706] RIP: 0033:0x7fd1d16da9a9 [ 535.276773][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.296496][ T8706] RSP: 002b:00007fd1cfd43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.304927][ T8706] RAX: ffffffffffffffda RBX: 00007fd1d1901fa0 RCX: 00007fd1d16da9a9 [ 535.312905][ T8706] RDX: 0000200000000380 RSI: 0000000000008914 RDI: 000000000000000c [ 535.320881][ T8706] RBP: 00007fd1cfd43090 R08: 0000000000000000 R09: 0000000000000000 [ 535.328864][ T8706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.336923][ T8706] R13: 0000000000000000 R14: 00007fd1d1901fa0 R15: 00007ffc8d708e18 [ 535.344903][ T8706] [ 535.357025][ T8706] device pim6reg1 entered promiscuous mode [ 535.636840][ T8714] loop2: detected capacity change from 0 to 8192 [ 536.730498][ T548] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 537.016559][ T548] usb 7-1: Using ep0 maxpacket: 32 [ 537.082411][ T8728] FAULT_INJECTION: forcing a failure. [ 537.082411][ T8728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.103210][ T8716] loop3: detected capacity change from 0 to 512 [ 537.112715][ T8728] CPU: 0 PID: 8728 Comm: syz.5.2569 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 537.122673][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.132796][ T8728] Call Trace: [ 537.136116][ T8728] [ 537.139155][ T8728] __dump_stack+0x21/0x30 [ 537.143612][ T8728] dump_stack_lvl+0xee/0x150 [ 537.148227][ T8728] ? show_regs_print_info+0x20/0x20 [ 537.153443][ T8728] dump_stack+0x15/0x20 [ 537.157610][ T8728] should_fail+0x3c1/0x510 [ 537.162052][ T8728] should_fail_usercopy+0x1a/0x20 [ 537.167113][ T8728] _copy_to_user+0x20/0x90 [ 537.171927][ T8728] simple_read_from_buffer+0xe9/0x160 [ 537.177317][ T8728] proc_fail_nth_read+0x19a/0x210 [ 537.182360][ T8728] ? proc_fault_inject_write+0x2f0/0x2f0 [ 537.188125][ T8728] ? security_file_permission+0x83/0xa0 [ 537.193814][ T8728] ? proc_fault_inject_write+0x2f0/0x2f0 [ 537.199454][ T8728] vfs_read+0x282/0xbe0 [ 537.203615][ T8728] ? kernel_read+0x1f0/0x1f0 [ 537.208208][ T8728] ? __kasan_check_write+0x14/0x20 [ 537.213319][ T8728] ? mutex_lock+0x95/0x1a0 [ 537.217740][ T8728] ? wait_for_completion_killable_timeout+0x10/0x10 [ 537.224334][ T8728] ? __fget_files+0x2c4/0x320 [ 537.229204][ T8728] ? __fdget_pos+0x2d2/0x380 [ 537.233828][ T8728] ? ksys_read+0x71/0x240 [ 537.238267][ T8728] ksys_read+0x140/0x240 [ 537.242702][ T8728] ? vfs_write+0xf70/0xf70 [ 537.247228][ T8728] ? __kasan_check_write+0x14/0x20 [ 537.252364][ T8728] ? switch_fpu_return+0x15d/0x2c0 [ 537.257496][ T8728] __x64_sys_read+0x7b/0x90 [ 537.262117][ T8728] x64_sys_call+0x96d/0x9a0 [ 537.266624][ T8728] do_syscall_64+0x4c/0xa0 [ 537.271052][ T8728] ? clear_bhb_loop+0x50/0xa0 [ 537.275817][ T8728] ? clear_bhb_loop+0x50/0xa0 [ 537.280500][ T8728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 537.286402][ T8728] RIP: 0033:0x7f1a929de3bc [ 537.290913][ T8728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 537.310646][ T8728] RSP: 002b:00007f1a91048030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 537.319077][ T8728] RAX: ffffffffffffffda RBX: 00007f1a92c06fa0 RCX: 00007f1a929de3bc [ 537.327068][ T8728] RDX: 000000000000000f RSI: 00007f1a910480a0 RDI: 0000000000000007 [ 537.335041][ T8728] RBP: 00007f1a91048090 R08: 0000000000000000 R09: 0000000000000000 [ 537.343012][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.350984][ T8728] R13: 0000000000000000 R14: 00007f1a92c06fa0 R15: 00007ffce2459a18 [ 537.358988][ T8728] [ 537.376705][ T548] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.387742][ T548] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.397571][ T548] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 537.411697][ T548] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.420476][ T548] usb 7-1: config 0 descriptor?? [ 537.437951][ T8735] loop5: detected capacity change from 0 to 128 [ 537.601853][ T8741] loop5: detected capacity change from 0 to 1024 [ 537.636590][ T289] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 537.643887][ T8741] EXT4-fs (loop5): Ignoring removed orlov option [ 537.652670][ T8741] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 537.661325][ T30] audit: type=1400 audit(1753946486.157:4030): avc: denied { accept } for pid=8742 comm="syz.1.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 537.692578][ T8712] device pim6reg1 entered promiscuous mode [ 538.116648][ T548] usbhid 7-1:0.0: can't add hid device: -71 [ 538.122732][ T548] usbhid: probe of 7-1:0.0 failed with error -71 [ 538.130389][ T548] usb 7-1: USB disconnect, device number 5 [ 538.176687][ T289] usb 3-1: config index 0 descriptor too short (expected 12050, got 18) [ 538.186675][ T289] usb 3-1: config 6 has an invalid interface number: 57 but max is -1 [ 538.194935][ T289] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 0 [ 538.204239][ T289] usb 3-1: config 6 has no interface number 0 [ 538.210984][ T289] usb 3-1: config 6 interface 57 has no altsetting 0 [ 538.256591][ T30] audit: type=1400 audit(1753946486.747:4031): avc: denied { getopt } for pid=8759 comm="syz.1.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 538.276759][ T8760] loop1: detected capacity change from 0 to 512 [ 538.292040][ T8760] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 538.307552][ T8760] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.2579: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 4097, max 4(4), depth 0(0) [ 538.325913][ T8760] EXT4-fs (loop1): get root inode failed [ 538.332017][ T8760] EXT4-fs (loop1): mount failed [ 538.396825][ T289] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.1b [ 538.413309][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.491307][ T289] usb 3-1: Product: syz [ 538.495827][ T289] usb 3-1: Manufacturer: syz [ 538.516626][ T289] usb 3-1: SerialNumber: syz [ 538.595401][ T8766] syz.6.2580[8766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.595792][ T8766] syz.6.2580[8766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.638808][ T8766] loop6: detected capacity change from 0 to 512 [ 538.731421][ T8766] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 538.921185][ T8766] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,mblk_io_submit,grpjquota=,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 538.937612][ T8766] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.196568][ T8772] loop1: detected capacity change from 0 to 256 [ 540.497056][ T289] usb-storage 3-1:6.57: USB Mass Storage device detected [ 540.588298][ T289] usb 3-1: USB disconnect, device number 15 [ 540.646114][ T8785] device pim6reg1 entered promiscuous mode [ 540.686962][ T8785] FAULT_INJECTION: forcing a failure. [ 540.686962][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 540.730813][ T8785] CPU: 0 PID: 8785 Comm: syz.1.2586 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 540.740773][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.751035][ T8785] Call Trace: [ 540.754340][ T8785] [ 540.757307][ T8785] __dump_stack+0x21/0x30 [ 540.761664][ T8785] dump_stack_lvl+0xee/0x150 [ 540.766295][ T8785] ? show_regs_print_info+0x20/0x20 [ 540.771720][ T8785] ? memcpy+0x56/0x70 [ 540.775729][ T8785] ? skb_put+0x10e/0x1f0 [ 540.780000][ T8785] ? memcpy+0x56/0x70 [ 540.784050][ T8785] dump_stack+0x15/0x20 [ 540.788237][ T8785] should_fail+0x3c1/0x510 [ 540.792732][ T8785] ? netlink_trim+0x193/0x230 [ 540.797547][ T8785] __should_failslab+0xa4/0xe0 [ 540.802339][ T8785] should_failslab+0x9/0x20 [ 540.806865][ T8785] slab_pre_alloc_hook+0x3b/0xe0 [ 540.811824][ T8785] ? netlink_trim+0x193/0x230 [ 540.816519][ T8785] ? netlink_trim+0x193/0x230 [ 540.821205][ T8785] __kmalloc_track_caller+0x6c/0x2c0 [ 540.826498][ T8785] ? netlink_trim+0x193/0x230 [ 540.831186][ T8785] ? netlink_trim+0x193/0x230 [ 540.835865][ T8785] pskb_expand_head+0x11b/0x11d0 [ 540.840807][ T8785] netlink_trim+0x193/0x230 [ 540.845315][ T8785] netlink_broadcast_filtered+0x78/0x1230 [ 540.851044][ T8785] ? kasan_unpoison+0x67/0x90 [ 540.855820][ T8785] ? rtmsg_ifinfo_build_skb+0xd8/0x180 [ 540.861304][ T8785] nlmsg_notify+0xed/0x1b0 [ 540.865724][ T8785] rtmsg_ifinfo+0xea/0x130 [ 540.870142][ T8785] dev_close_many+0x279/0x4d0 [ 540.874819][ T8785] ? ttwu_do_activate+0x174/0x280 [ 540.879851][ T8785] ? __dev_open+0x4c0/0x4c0 [ 540.884356][ T8785] ? __kasan_check_read+0x11/0x20 [ 540.889390][ T8785] unregister_netdevice_many+0x44c/0x1990 [ 540.895125][ T8785] ? __queue_work+0x913/0xc60 [ 540.899811][ T8785] ? alloc_netdev_mqs+0xc90/0xc90 [ 540.904927][ T8785] ? __queue_delayed_work+0x188/0x200 [ 540.910389][ T8785] ? queue_delayed_work_on+0x101/0x150 [ 540.915869][ T8785] ? __kasan_check_read+0x11/0x20 [ 540.920933][ T8785] unregister_netdevice_queue+0x31c/0x360 [ 540.926658][ T8785] ? __kasan_check_read+0x11/0x20 [ 540.931692][ T8785] ? list_netdevice+0x4c0/0x4c0 [ 540.936555][ T8785] ? linkwatch_fire_event+0x307/0x380 [ 540.941934][ T8785] __tun_detach+0xca6/0x1450 [ 540.946532][ T8785] tun_chr_close+0x92/0x140 [ 540.951232][ T8785] ? tun_chr_open+0x540/0x540 [ 540.955913][ T8785] __fput+0x20b/0x8b0 [ 540.959996][ T8785] ____fput+0x15/0x20 [ 540.963982][ T8785] task_work_run+0x127/0x190 [ 540.968605][ T8785] exit_to_user_mode_loop+0xd0/0xe0 [ 540.973806][ T8785] exit_to_user_mode_prepare+0x5a/0xa0 [ 540.979282][ T8785] syscall_exit_to_user_mode+0x1a/0x30 [ 540.984744][ T8785] do_syscall_64+0x58/0xa0 [ 540.989158][ T8785] ? clear_bhb_loop+0x50/0xa0 [ 540.993837][ T8785] ? clear_bhb_loop+0x50/0xa0 [ 540.998516][ T8785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 541.004411][ T8785] RIP: 0033:0x7fd1d16da9a9 [ 541.008829][ T8785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.028600][ T8785] RSP: 002b:00007fd1cfd43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 541.037032][ T8785] RAX: 0000000000000000 RBX: 00007fd1d1901fa0 RCX: 00007fd1d16da9a9 [ 541.045009][ T8785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 541.053009][ T8785] RBP: 00007fd1cfd43090 R08: 0000000000000000 R09: 0000000000000000 [ 541.061013][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.069017][ T8785] R13: 0000000000000000 R14: 00007fd1d1901fa0 R15: 00007ffc8d708e18 [ 541.076997][ T8785] [ 541.316642][ T8803] syz.2.2591[8803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.317029][ T8803] syz.2.2591[8803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.726672][ T289] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 541.778077][ T8808] loop1: detected capacity change from 0 to 2048 [ 542.074240][ T8811] loop6: detected capacity change from 0 to 512 [ 542.089649][ T8808] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.2595: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 542.116651][ T289] usb 4-1: Using ep0 maxpacket: 16 [ 542.134719][ T8811] EXT4-fs (loop6): Ignoring removed oldalloc option [ 542.150557][ T8808] EXT4-fs (loop1): Remounting filesystem read-only [ 542.166886][ T8808] EXT4-fs (loop1): get root inode failed [ 542.175076][ T8811] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 542.191492][ T8808] EXT4-fs (loop1): mount failed [ 542.197160][ T8811] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.309256][ T8811] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.2596: invalid size [ 542.320888][ T30] audit: type=1400 audit(1753946490.787:4032): avc: denied { setattr } for pid=8810 comm="syz.6.2596" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.343432][ T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.362948][ T30] audit: type=1400 audit(1753946490.807:4033): avc: denied { remove_name } for pid=8810 comm="syz.6.2596" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.385776][ T30] audit: type=1400 audit(1753946490.807:4034): avc: denied { rename } for pid=8810 comm="syz.6.2596" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 542.415454][ T30] audit: type=1400 audit(1753946490.807:4035): avc: denied { rmdir } for pid=8810 comm="syz.6.2596" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.416963][ T289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 542.463147][ T8819] loop2: detected capacity change from 0 to 512 [ 542.493854][ T8819] EXT4-fs (loop2): Ignoring removed oldalloc option [ 542.515470][ T289] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 542.533140][ T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.543110][ T8819] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 542.562655][ T8819] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.568139][ T289] usb 4-1: config 0 descriptor?? [ 542.578964][ T30] audit: type=1326 audit(1753946491.077:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.1.2603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1d16da9a9 code=0x0 [ 542.612188][ T8832] loop6: detected capacity change from 0 to 512 [ 542.681418][ T8835] netlink: 'syz.1.2603': attribute type 16 has an invalid length. [ 542.681449][ T8832] EXT4-fs (loop6): Ignoring removed oldalloc option [ 542.696459][ T8835] netlink: 'syz.1.2603': attribute type 17 has an invalid length. [ 542.711108][ T8835] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 542.719477][ T8832] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 542.727515][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.772100][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.867691][ T8838] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.2599: invalid size [ 542.900872][ T8832] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.178270][ T289] HID 045e:07da: Invalid code 65791 type 1 [ 543.544699][ T289] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input8 [ 543.586397][ T8841] netlink: 'syz.1.2604': attribute type 16 has an invalid length. [ 543.596172][ T289] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 543.616463][ T8841] netlink: 'syz.1.2604': attribute type 17 has an invalid length. [ 543.779675][ T8843] device pim6reg1 entered promiscuous mode [ 544.066465][ T8853] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 544.077442][ T8853] FAULT_INJECTION: forcing a failure. [ 544.077442][ T8853] name failslab, interval 1, probability 0, space 0, times 0 [ 544.090204][ T8853] CPU: 1 PID: 8853 Comm: syz.5.2607 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 544.100149][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.110308][ T8853] Call Trace: [ 544.113608][ T8853] [ 544.116635][ T8853] __dump_stack+0x21/0x30 [ 544.120985][ T8853] dump_stack_lvl+0xee/0x150 [ 544.125585][ T8853] ? show_regs_print_info+0x20/0x20 [ 544.130795][ T8853] ? irqentry_exit_cond_resched+0x29/0x30 [ 544.136528][ T8853] dump_stack+0x15/0x20 [ 544.140699][ T8853] should_fail+0x3c1/0x510 [ 544.145131][ T8853] __should_failslab+0xa4/0xe0 [ 544.149909][ T8853] should_failslab+0x9/0x20 [ 544.154431][ T8853] slab_pre_alloc_hook+0x3b/0xe0 [ 544.159382][ T8853] kmem_cache_alloc_trace+0x48/0x270 [ 544.164683][ T8853] ? __se_sys_mount+0x153/0x380 [ 544.169552][ T8853] __se_sys_mount+0x153/0x380 [ 544.174251][ T8853] ? __x64_sys_mount+0xd0/0xd0 [ 544.179044][ T8853] ? sysvec_reschedule_ipi+0x78/0x80 [ 544.184361][ T8853] __x64_sys_mount+0xbf/0xd0 [ 544.188983][ T8853] x64_sys_call+0x6bf/0x9a0 [ 544.193512][ T8853] do_syscall_64+0x4c/0xa0 [ 544.197956][ T8853] ? clear_bhb_loop+0x50/0xa0 [ 544.202659][ T8853] ? clear_bhb_loop+0x50/0xa0 [ 544.207472][ T8853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 544.213485][ T8853] RIP: 0033:0x7f1a929df9a9 [ 544.217965][ T8853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.237772][ T8853] RSP: 002b:00007f1a91006038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 544.246386][ T8853] RAX: ffffffffffffffda RBX: 00007f1a92c07160 RCX: 00007f1a929df9a9 [ 544.254387][ T8853] RDX: 0000200000000b80 RSI: 0000200000000340 RDI: 0000000000000000 [ 544.262487][ T8853] RBP: 00007f1a91006090 R08: 0000200000000380 R09: 0000000000000000 [ 544.270497][ T8853] R10: 0000000000200008 R11: 0000000000000246 R12: 0000000000000001 [ 544.278570][ T8853] R13: 0000000000000000 R14: 00007f1a92c07160 R15: 00007ffce2459a18 [ 544.286605][ T8853] [ 544.481096][ T8855] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 544.753710][ T30] audit: type=1400 audit(1753946492.997:4037): avc: denied { unlink } for pid=8845 comm="syz.2.2606" name="#b" dev="tmpfs" ino=2896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 544.779973][ T30] audit: type=1400 audit(1753946493.007:4038): avc: denied { remount } for pid=8845 comm="syz.2.2606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 544.788637][ T8806] xt_hashlimit: size too large, truncated to 1048576 [ 544.822994][ T8806] xt_hashlimit: max too large, truncated to 1048576 [ 544.830563][ T8861] loop1: detected capacity change from 0 to 128 [ 544.840569][ T785] usb 4-1: USB disconnect, device number 7 [ 544.854890][ T8863] device pim6reg1 entered promiscuous mode [ 544.911953][ T8861] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0101) [ 544.933818][ T8861] FAT-fs (loop1): Filesystem has been set read-only [ 545.069862][ T8872] SELinux: Context : is not valid (left unmapped). [ 545.076844][ T30] audit: type=1400 audit(1753946493.577:4039): avc: denied { relabelto } for pid=8871 comm="syz.6.2615" name="rdma.current" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 545.108234][ T30] audit: type=1400 audit(1753946493.577:4040): avc: denied { associate } for pid=8871 comm="syz.6.2615" name="rdma.current" dev="tmpfs" ino=1171 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 545.134068][ T30] audit: type=1400 audit(1753946493.577:4041): avc: denied { ioctl } for pid=8871 comm="syz.6.2615" path="/211/rdma.current" dev="tmpfs" ino=1171 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 545.171296][ T8876] FAULT_INJECTION: forcing a failure. [ 545.171296][ T8876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.184477][ T8876] CPU: 0 PID: 8876 Comm: syz.1.2616 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 545.194400][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.204481][ T8876] Call Trace: [ 545.207756][ T8876] [ 545.210687][ T8876] __dump_stack+0x21/0x30 [ 545.215113][ T8876] dump_stack_lvl+0xee/0x150 [ 545.219713][ T8876] ? show_regs_print_info+0x20/0x20 [ 545.224909][ T8876] dump_stack+0x15/0x20 [ 545.229060][ T8876] should_fail+0x3c1/0x510 [ 545.233490][ T8876] should_fail_usercopy+0x1a/0x20 [ 545.238513][ T8876] _copy_from_user+0x20/0xd0 [ 545.243109][ T8876] bpf_test_init+0x13d/0x1c0 [ 545.247708][ T8876] bpf_prog_test_run_skb+0x193/0x1150 [ 545.253091][ T8876] ? __kasan_check_write+0x14/0x20 [ 545.258212][ T8876] ? fput_many+0x15a/0x1a0 [ 545.262651][ T8876] ? __bpf_prog_test_run_raw_tp+0x2b0/0x2b0 [ 545.268543][ T8876] bpf_prog_test_run+0x3d5/0x620 [ 545.273482][ T8876] ? bpf_prog_query+0x230/0x230 [ 545.278347][ T8876] ? selinux_bpf+0xce/0xf0 [ 545.282767][ T8876] ? security_bpf+0x82/0xa0 [ 545.287268][ T8876] __sys_bpf+0x52c/0x730 [ 545.291682][ T8876] ? bpf_link_show_fdinfo+0x310/0x310 [ 545.297059][ T8876] ? debug_smp_processor_id+0x17/0x20 [ 545.302450][ T8876] __x64_sys_bpf+0x7c/0x90 [ 545.306878][ T8876] x64_sys_call+0x4b9/0x9a0 [ 545.311385][ T8876] do_syscall_64+0x4c/0xa0 [ 545.315802][ T8876] ? clear_bhb_loop+0x50/0xa0 [ 545.320479][ T8876] ? clear_bhb_loop+0x50/0xa0 [ 545.325161][ T8876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 545.331070][ T8876] RIP: 0033:0x7fd1d16da9a9 [ 545.335632][ T8876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.355443][ T8876] RSP: 002b:00007fd1cfd43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 545.363960][ T8876] RAX: ffffffffffffffda RBX: 00007fd1d1901fa0 RCX: 00007fd1d16da9a9 [ 545.372031][ T8876] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 545.380098][ T8876] RBP: 00007fd1cfd43090 R08: 0000000000000000 R09: 0000000000000000 [ 545.388261][ T8876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.396420][ T8876] R13: 0000000000000000 R14: 00007fd1d1901fa0 R15: 00007ffc8d708e18 [ 545.404400][ T8876] [ 545.558022][ T8880] netlink: 'syz.6.2615': attribute type 4 has an invalid length. [ 545.565922][ T8880] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2615'. [ 545.966049][ T8879] loop5: detected capacity change from 0 to 8192 [ 547.017484][ T8885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8885 comm=syz.1.2618 [ 547.714896][ T785] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 548.076666][ T785] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 548.096604][ T785] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.180407][ T785] usb 4-1: config 0 interface 0 has no altsetting 0 [ 548.187400][ T785] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 548.206635][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.221111][ T785] usb 4-1: config 0 descriptor?? [ 548.284633][ T8919] FAULT_INJECTION: forcing a failure. [ 548.284633][ T8919] name failslab, interval 1, probability 0, space 0, times 0 [ 548.297600][ T8919] CPU: 1 PID: 8919 Comm: syz.1.2625 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 548.307514][ T8919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.317596][ T8919] Call Trace: [ 548.320900][ T8919] [ 548.323842][ T8919] __dump_stack+0x21/0x30 [ 548.328189][ T8919] dump_stack_lvl+0xee/0x150 [ 548.332792][ T8919] ? show_regs_print_info+0x20/0x20 [ 548.338007][ T8919] ? __local_bh_enable_ip+0x58/0x80 [ 548.343220][ T8919] ? _raw_spin_unlock_bh+0x51/0x60 [ 548.348343][ T8919] dump_stack+0x15/0x20 [ 548.352509][ T8919] should_fail+0x3c1/0x510 [ 548.356938][ T8919] __should_failslab+0xa4/0xe0 [ 548.361714][ T8919] should_failslab+0x9/0x20 [ 548.366228][ T8919] slab_pre_alloc_hook+0x3b/0xe0 [ 548.371209][ T8919] ? __alloc_skb+0xe0/0x740 [ 548.375812][ T8919] kmem_cache_alloc+0x44/0x260 [ 548.380592][ T8919] __alloc_skb+0xe0/0x740 [ 548.385059][ T8919] netlink_sendmsg+0x602/0xb70 [ 548.389859][ T8919] ? irqentry_exit+0x37/0x40 [ 548.394466][ T8919] ? netlink_getsockopt+0x530/0x530 [ 548.399688][ T8919] ? security_socket_sendmsg+0x82/0xa0 [ 548.405171][ T8919] ? netlink_getsockopt+0x530/0x530 [ 548.410422][ T8919] ____sys_sendmsg+0x5a2/0x8c0 [ 548.410456][ T8919] ? __sys_sendmsg_sock+0x40/0x40 [ 548.410478][ T8919] ? import_iovec+0x7c/0xb0 [ 548.410501][ T8919] ___sys_sendmsg+0x1f0/0x260 [ 548.410522][ T8919] ? __sys_sendmsg+0x250/0x250 [ 548.410549][ T8919] ? __fdget+0x1a1/0x230 [ 548.410571][ T8919] __x64_sys_sendmsg+0x1e2/0x2a0 [ 548.410591][ T8919] ? release_firmware_map_entry+0x190/0x190 [ 548.410622][ T8919] ? ___sys_sendmsg+0x260/0x260 [ 548.410640][ T8919] ? ksys_write+0x1eb/0x240 [ 548.410661][ T8919] ? __kasan_check_write+0x14/0x20 [ 548.410682][ T8919] ? switch_fpu_return+0x15d/0x2c0 [ 548.410707][ T8919] x64_sys_call+0x4b/0x9a0 [ 548.410726][ T8919] do_syscall_64+0x4c/0xa0 [ 548.410745][ T8919] ? clear_bhb_loop+0x50/0xa0 [ 548.410763][ T8919] ? clear_bhb_loop+0x50/0xa0 [ 548.410781][ T8919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 548.410800][ T8919] RIP: 0033:0x7fd1d16da9a9 [ 548.410819][ T8919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.410836][ T8919] RSP: 002b:00007fd1cfd01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.410857][ T8919] RAX: ffffffffffffffda RBX: 00007fd1d1902160 RCX: 00007fd1d16da9a9 [ 548.410872][ T8919] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 548.410885][ T8919] RBP: 00007fd1cfd01090 R08: 0000000000000000 R09: 0000000000000000 [ 548.410898][ T8919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.410910][ T8919] R13: 0000000000000000 R14: 00007fd1d1902160 R15: 00007ffc8d708e18 [ 548.410928][ T8919] [ 548.420764][ T8921] loop6: detected capacity change from 0 to 1024 [ 548.638669][ T8921] EXT4-fs (loop6): Ignoring removed orlov option [ 548.661412][ T8921] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 548.731937][ T8933] fuse: blksize only supported for fuseblk [ 548.817749][ T785] pantherlord 0003:0810:0002.0008: report_id 0 is invalid [ 548.835193][ T785] pantherlord 0003:0810:0002.0008: item 0 1 1 8 parsing failed [ 548.843035][ T785] pantherlord 0003:0810:0002.0008: parse failed [ 549.235049][ T8890] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 549.289184][ T785] pantherlord: probe of 0003:0810:0002.0008 failed with error -22 [ 550.273433][ T8968] loop1: detected capacity change from 0 to 512 [ 550.322811][ T60] usb 4-1: USB disconnect, device number 8 [ 550.350293][ T8968] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2642: bg 0: block 393: padding at end of block bitmap is not set [ 550.365039][ T8968] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 550.384967][ T8968] EXT4-fs (loop1): 2 truncates cleaned up [ 550.393952][ T8968] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 550.854629][ T9005] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 550.864023][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 550.864037][ T30] audit: type=1400 audit(1753946499.357:4044): avc: denied { relabelto } for pid=9002 comm="syz.1.2657" name="561" dev="tmpfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 550.936688][ T9007] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 550.996993][ T30] audit: type=1400 audit(1753946499.367:4045): avc: denied { associate } for pid=9002 comm="syz.1.2657" name="561" dev="tmpfs" ino=3094 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex" [ 551.028047][ T8997] binder: 8996:8997 ioctl c0306201 200000000280 returned -14 [ 551.043418][ T8993] binder: 8992:8993 ioctl c0306201 200000000280 returned -14 [ 551.142185][ T30] audit: type=1400 audit(1753946499.637:4046): avc: denied { write } for pid=284 comm="syz-executor" name="561" dev="tmpfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 551.181422][ T30] audit: type=1400 audit(1753946499.637:4047): avc: denied { remove_name } for pid=284 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 551.208751][ T30] audit: type=1400 audit(1753946499.637:4048): avc: denied { rmdir } for pid=284 comm="syz-executor" name="561" dev="tmpfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 551.660023][ T972] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 551.724286][ T30] audit: type=1400 audit(1753946500.217:4049): avc: denied { bind } for pid=9037 comm="syz.6.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 551.906585][ T972] usb 6-1: Using ep0 maxpacket: 32 [ 552.026621][ T972] usb 6-1: New USB device found, idVendor=056a, idProduct=0032, bcdDevice= 0.00 [ 552.035899][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.045536][ T972] usb 6-1: config 0 descriptor?? [ 552.054209][ T9044] binder: 9043:9044 ioctl c0306201 200000000280 returned -14 [ 552.092478][ T9051] loop1: detected capacity change from 0 to 512 [ 552.157050][ T9051] EXT4-fs (loop1): Ignoring removed oldalloc option [ 552.168346][ T9051] EXT4-fs (loop1): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 552.183698][ T9051] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.916664][ T785] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 553.088186][ T972] wacom 0003:056A:0032.0009: unknown main item tag 0x0 [ 553.095144][ T972] wacom 0003:056A:0032.0009: unknown main item tag 0x0 [ 553.102130][ T972] wacom 0003:056A:0032.0009: unknown main item tag 0x0 [ 553.109214][ T972] wacom 0003:056A:0032.0009: unknown main item tag 0x0 [ 553.116194][ T972] wacom 0003:056A:0032.0009: unknown main item tag 0x0 [ 553.125073][ T972] wacom 0003:056A:0032.0009: hidraw0: USB HID v40.00 Device [HID 056a:0032] on usb-dummy_hcd.5-1/input0 [ 553.145648][ T972] usb 6-1: USB disconnect, device number 8 [ 553.148093][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2676'. [ 553.246777][ T785] usb 4-1: Using ep0 maxpacket: 8 [ 553.300262][ T9072] fido_id[9072]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 553.396649][ T785] usb 4-1: config 128 has an invalid interface number: 40 but max is 0 [ 553.405039][ T785] usb 4-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 553.439938][ T785] usb 4-1: config 128 has an invalid descriptor of length 38, skipping remainder of the config [ 553.453108][ T785] usb 4-1: config 128 has no interface number 0 [ 553.460077][ T785] usb 4-1: config 128 interface 40 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 553.474008][ T785] usb 4-1: config 128 interface 40 has no altsetting 0 [ 553.481510][ T785] usb 4-1: New USB device found, idVendor=2dc8, idProduct=e745, bcdDevice=89.14 [ 553.491237][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.954298][ T9085] binder: 9084:9085 ioctl c0306201 200000000280 returned -14 [ 553.985038][ T9079] loop5: detected capacity change from 0 to 40427 [ 554.001486][ T9079] F2FS-fs (loop5): Unrecognized mount option "fosix" or missing value [ 554.052683][ T9091] loop2: detected capacity change from 0 to 512 [ 554.116038][ T9091] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 554.133491][ T9091] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.236725][ T9079] loop5: detected capacity change from 0 to 512 [ 554.239225][ T9102] loop2: detected capacity change from 0 to 1024 [ 554.258055][ T9099] FAULT_INJECTION: forcing a failure. [ 554.258055][ T9099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.260577][ T9102] EXT4-fs (loop2): Ignoring removed orlov option [ 554.278494][ T9079] EXT4-fs (loop5): Ignoring removed orlov option [ 554.282125][ T9102] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 554.293176][ T9099] CPU: 1 PID: 9099 Comm: syz.6.2686 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 554.309221][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.319299][ T9099] Call Trace: [ 554.322604][ T9099] [ 554.325559][ T9099] __dump_stack+0x21/0x30 [ 554.329920][ T9099] dump_stack_lvl+0xee/0x150 [ 554.334544][ T9099] ? show_regs_print_info+0x20/0x20 [ 554.339746][ T9099] dump_stack+0x15/0x20 [ 554.343906][ T9099] should_fail+0x3c1/0x510 [ 554.348359][ T9099] should_fail_usercopy+0x1a/0x20 [ 554.353419][ T9099] _copy_to_user+0x20/0x90 [ 554.357848][ T9099] simple_read_from_buffer+0xe9/0x160 [ 554.363226][ T9099] proc_fail_nth_read+0x19a/0x210 [ 554.368319][ T9099] ? proc_fault_inject_write+0x2f0/0x2f0 [ 554.374066][ T9099] ? security_file_permission+0x83/0xa0 [ 554.379645][ T9099] ? proc_fault_inject_write+0x2f0/0x2f0 [ 554.385311][ T9099] vfs_read+0x282/0xbe0 [ 554.389509][ T9099] ? kernel_read+0x1f0/0x1f0 [ 554.394216][ T9099] ? __kasan_check_write+0x14/0x20 [ 554.399359][ T9099] ? mutex_lock+0x95/0x1a0 [ 554.403821][ T9099] ? wait_for_completion_killable_timeout+0x10/0x10 [ 554.410439][ T9099] ? __fget_files+0x2c4/0x320 [ 554.415167][ T9099] ? __fdget_pos+0x2d2/0x380 [ 554.419781][ T9099] ? ksys_read+0x71/0x240 [ 554.424169][ T9099] ksys_read+0x140/0x240 [ 554.428451][ T9099] ? vfs_write+0xf70/0xf70 [ 554.432897][ T9099] ? __kasan_check_write+0x14/0x20 [ 554.438038][ T9099] ? switch_fpu_return+0x15d/0x2c0 [ 554.443572][ T9099] __x64_sys_read+0x7b/0x90 [ 554.448102][ T9099] x64_sys_call+0x96d/0x9a0 [ 554.452627][ T9099] do_syscall_64+0x4c/0xa0 [ 554.457173][ T9099] ? clear_bhb_loop+0x50/0xa0 [ 554.462034][ T9099] ? clear_bhb_loop+0x50/0xa0 [ 554.466726][ T9099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 554.472658][ T9099] RIP: 0033:0x7fbfe651f3bc [ 554.477076][ T9099] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 554.496711][ T9099] RSP: 002b:00007fbfe4b89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.505186][ T9099] RAX: ffffffffffffffda RBX: 00007fbfe6747fa0 RCX: 00007fbfe651f3bc [ 554.513189][ T9099] RDX: 000000000000000f RSI: 00007fbfe4b890a0 RDI: 0000000000000004 [ 554.521192][ T9099] RBP: 00007fbfe4b89090 R08: 0000000000000000 R09: 0000000000000000 [ 554.529201][ T9099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.537206][ T9099] R13: 0000000000000000 R14: 00007fbfe6747fa0 R15: 00007fff211c15d8 [ 554.545214][ T9099] [ 554.691207][ T9079] EXT4-fs (loop5): 1 orphan inode deleted [ 554.704115][ T9079] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,orlov,usrjquota=,usrjquota=,nojournal_checksum,journal_dev=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 554.724593][ T9079] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.760812][ T30] audit: type=1400 audit(1753946503.257:4050): avc: denied { write } for pid=9116 comm="syz.1.2689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 554.838415][ T972] kernel read not supported for file /1652/statm (pid: 972 comm: kworker/0:6) [ 555.096641][ T30] audit: type=1326 audit(1753946503.577:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9122 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a929df9a9 code=0x7ffc0000 [ 555.120476][ T30] audit: type=1326 audit(1753946503.577:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9122 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a929df9a9 code=0x7ffc0000 [ 555.145671][ T30] audit: type=1326 audit(1753946503.637:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9122 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a929df9a9 code=0x7ffc0000 [ 555.250898][ T9127] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 555.356701][ T785] usb 4-1: string descriptor 0 read error: -71 [ 555.367226][ T785] usb 4-1: USB disconnect, device number 9 [ 556.005927][ T9146] loop5: detected capacity change from 0 to 128 [ 556.021192][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 556.021210][ T30] audit: type=1400 audit(1753946504.517:4092): avc: denied { read } for pid=9147 comm="syz.1.2699" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 556.052792][ T30] audit: type=1400 audit(1753946504.517:4093): avc: denied { open } for pid=9147 comm="syz.1.2699" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 556.453245][ T9159] binder: 9158:9159 ioctl c0306201 200000000280 returned -14 [ 556.476705][ T60] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 556.630085][ T9175] loop6: detected capacity change from 0 to 256 [ 556.659336][ T9177] loop5: detected capacity change from 0 to 128 [ 556.694065][ T9175] FAT-fs (loop6): Directory bread(block 64) failed [ 556.700703][ T9175] FAT-fs (loop6): Directory bread(block 65) failed [ 556.707505][ T9175] FAT-fs (loop6): Directory bread(block 66) failed [ 556.714134][ T9175] FAT-fs (loop6): Directory bread(block 67) failed [ 556.720816][ T9175] FAT-fs (loop6): Directory bread(block 68) failed [ 556.726671][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 556.727401][ T9175] FAT-fs (loop6): Directory bread(block 69) failed [ 556.739332][ T9175] FAT-fs (loop6): Directory bread(block 70) failed [ 556.745885][ T9175] FAT-fs (loop6): Directory bread(block 71) failed [ 556.752483][ T9175] FAT-fs (loop6): Directory bread(block 72) failed [ 556.759066][ T9175] FAT-fs (loop6): Directory bread(block 73) failed [ 556.772570][ T9175] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006c61) [ 556.876671][ T60] usb 2-1: config 0 has an invalid interface number: 101 but max is 1 [ 556.891996][ T60] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.924442][ T60] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 557.149825][ T9183] loop3: detected capacity change from 0 to 8192 [ 557.214418][ T60] usb 2-1: config 0 has no interface number 0 [ 557.807798][ T60] usb 2-1: config 0 interface 101 has no altsetting 0 [ 557.819860][ T9188] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2709'. [ 557.839260][ T60] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 557.872767][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.920363][ T60] usb 2-1: config 0 descriptor?? [ 557.977084][ T60] hub 2-1:0.101: bad descriptor, ignoring hub [ 557.983362][ T60] hub: probe of 2-1:0.101 failed with error -5 [ 558.333857][ T30] audit: type=1400 audit(1753946506.827:4094): avc: denied { mounton } for pid=9203 comm="syz.1.2715" path="/574/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 558.386677][ T9071] usb 2-1: USB disconnect, device number 10 [ 558.461801][ T9211] overlayfs: statfs failed on './file0' [ 558.602432][ T9207] loop3: detected capacity change from 0 to 40427 [ 559.231404][ T9225] loop2: detected capacity change from 0 to 128 [ 559.277732][ T30] audit: type=1326 audit(1753946507.767:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 559.316627][ T9228] loop6: detected capacity change from 0 to 256 [ 559.324291][ T30] audit: type=1326 audit(1753946507.777:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 559.354905][ T30] audit: type=1326 audit(1753946507.777:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 559.379473][ T30] audit: type=1326 audit(1753946507.777:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 559.404213][ T30] audit: type=1326 audit(1753946507.777:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 559.428081][ T30] audit: type=1326 audit(1753946507.797:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 559.487998][ T30] audit: type=1326 audit(1753946507.797:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 559.802159][ T9239] loop1: detected capacity change from 0 to 8192 [ 559.815243][ T9240] 9pnet: Insufficient options for proto=fd [ 561.396631][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 561.396650][ T30] audit: type=1326 audit(1753946509.887:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 561.437991][ T9244] binder: BINDER_SET_CONTEXT_MGR already set [ 561.502483][ T9244] binder: 9243:9244 ioctl 4018620d 2000000001c0 returned -16 [ 561.562224][ T30] audit: type=1326 audit(1753946509.887:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9222 comm="syz.3.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 561.956562][ T9071] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 562.558280][ T9071] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 562.741841][ T9071] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.978377][ T9071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.985385][ T9071] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 562.994615][ T9071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.171529][ T9071] usb 2-1: config 0 descriptor?? [ 563.968297][ T9071] pantherlord 0003:0810:0002.000A: report_id 0 is invalid [ 563.975655][ T9071] pantherlord 0003:0810:0002.000A: item 0 1 1 8 parsing failed [ 564.016795][ T9071] pantherlord 0003:0810:0002.000A: parse failed [ 564.053560][ T9071] pantherlord: probe of 0003:0810:0002.000A failed with error -22 [ 564.122844][ T9299] loop6: detected capacity change from 0 to 256 [ 564.176258][ T9248] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 564.191519][ T9301] binder: 9300:9301 ioctl c0306201 200000000280 returned -14 [ 564.199824][ T9299] FAT-fs (loop6): Unrecognized mount option "" or missing value [ 564.477771][ T9310] loop2: detected capacity change from 0 to 128 [ 564.506605][ T548] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 564.544642][ T30] audit: type=1400 audit(1753946513.037:4135): avc: denied { write } for pid=9298 comm="syz.6.2742" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 564.579252][ T9310] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2744'. [ 564.593951][ T9310] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2744'. [ 564.616587][ T9310] netlink: 38 bytes leftover after parsing attributes in process `syz.2.2744'. [ 564.746587][ T548] usb 4-1: Using ep0 maxpacket: 16 [ 564.866703][ T548] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 564.880913][ T548] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 564.908479][ T548] usb 4-1: config 0 has no interface number 0 [ 565.557781][ T9071] usb 2-1: USB disconnect, device number 11 [ 565.596706][ T548] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 565.608041][ T548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.620253][ T548] usb 4-1: Product: syz [ 565.627620][ T548] usb 4-1: Manufacturer: syz [ 565.634375][ T548] usb 4-1: SerialNumber: syz [ 565.647146][ T548] usb 4-1: config 0 descriptor?? [ 565.688199][ T548] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 565.695684][ T548] usb 4-1: No valid video chain found. [ 566.183048][ T9327] syz.3.2743[9327] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.183161][ T9327] syz.3.2743[9327] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.198579][ T30] audit: type=1400 audit(1753946514.697:4136): avc: denied { audit_write } for pid=9304 comm="syz.3.2743" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 566.304356][ T30] audit: type=1107 audit(1753946514.697:4137): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='žÕÑheRÇFOQ<9-Þ°ž8áÕÑ/‘"_ùVO¯ñÙZÕ*èÈù£ÜñÕY•š_µŒbJâÁ¥èêUø' [ 566.819892][ T9333] loop2: detected capacity change from 0 to 256 [ 566.939793][ T9333] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x20261ffc, utbl_chksum : 0xe619d30d) [ 567.168426][ T9343] binder: 9342:9343 ioctl c0306201 200000000280 returned -14 [ 567.311414][ T548] usb 4-1: USB disconnect, device number 10 [ 567.427648][ T9341] loop1: detected capacity change from 0 to 40427 [ 567.437122][ T30] audit: type=1326 audit(1753946515.937:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 567.482188][ T30] audit: type=1326 audit(1753946515.937:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 567.506681][ T30] audit: type=1326 audit(1753946515.937:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 567.534910][ T30] audit: type=1326 audit(1753946515.937:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 567.560571][ T9341] F2FS-fs (loop1): Unrecognized mount option "fosix" or missing value [ 567.582439][ T30] audit: type=1326 audit(1753946515.937:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 567.608385][ T30] audit: type=1326 audit(1753946515.937:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 567.674923][ T30] audit: type=1326 audit(1753946515.937:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 568.058975][ T30] audit: type=1326 audit(1753946515.937:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 568.092791][ T30] audit: type=1326 audit(1753946515.937:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 568.234705][ T30] audit: type=1326 audit(1753946515.957:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06cd5e9a9 code=0x7ffc0000 [ 568.269608][ T9341] loop1: detected capacity change from 0 to 512 [ 568.386612][ T9341] EXT4-fs (loop1): Ignoring removed orlov option [ 568.437852][ T9341] EXT4-fs (loop1): 1 orphan inode deleted [ 568.443648][ T9341] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,orlov,usrjquota=,usrjquota=,nojournal_checksum,journal_dev=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 568.472628][ T9379] binder: 9378:9379 ioctl c0306201 200000000280 returned -14 [ 568.538023][ T9341] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.675602][ T9391] loop2: detected capacity change from 0 to 1024 [ 568.719406][ T9391] EXT4-fs (loop2): Ignoring removed orlov option [ 568.733401][ T9391] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 569.953329][ T9409] loop2: detected capacity change from 0 to 1024 [ 569.967193][ T9411] hub 6-0:1.0: USB hub found [ 569.970535][ T9413] binder: BINDER_SET_CONTEXT_MGR already set [ 569.972136][ T9411] hub 6-0:1.0: 1 port detected [ 569.980915][ T9413] binder: 9412:9413 ioctl 4018620d 2000000001c0 returned -16 [ 569.997893][ T60] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 570.000842][ T9409] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 570.035281][ T9409] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 570.097885][ T9409] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.2776: Allocating blocks 497-513 which overlap fs metadata [ 570.112138][ T9409] EXT4-fs (loop2): pa ffff88811165c7e0: logic 128, phys. 385, len 8 [ 570.120339][ T9409] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 570.172875][ T3861] ================================================================== [ 570.181098][ T3861] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 570.188514][ T3861] Read of size 4 at addr ffff88813c3c7018 by task kworker/u4:11/3861 [ 570.196592][ T3861] [ 570.198936][ T3861] CPU: 1 PID: 3861 Comm: kworker/u4:11 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 570.209191][ T3861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.219280][ T3861] Workqueue: writeback wb_workfn (flush-7:2) [ 570.225305][ T3861] Call Trace: [ 570.228678][ T3861] [ 570.231622][ T3861] __dump_stack+0x21/0x30 [ 570.235969][ T3861] dump_stack_lvl+0xee/0x150 [ 570.240575][ T3861] ? show_regs_print_info+0x20/0x20 [ 570.245798][ T3861] ? load_image+0x3a0/0x3a0 [ 570.250325][ T3861] print_address_description+0x7f/0x2c0 [ 570.255982][ T3861] ? ext4_find_extent+0xbeb/0xe20 [ 570.261035][ T3861] kasan_report+0xf1/0x140 [ 570.265468][ T3861] ? __read_extent_tree_block+0x1e8/0x790 [ 570.271206][ T3861] ? ext4_find_extent+0xbeb/0xe20 [ 570.276256][ T3861] __asan_report_load4_noabort+0x14/0x20 [ 570.281904][ T3861] ext4_find_extent+0xbeb/0xe20 [ 570.286805][ T3861] ext4_ext_map_blocks+0x1de/0x6280 [ 570.292029][ T3861] ? release_firmware_map_entry+0x190/0x190 [ 570.297963][ T3861] ? __kasan_slab_alloc+0xcf/0xf0 [ 570.303010][ T3861] ? __kasan_slab_alloc+0xbd/0xf0 [ 570.308182][ T3861] ? __kasan_check_read+0x11/0x20 [ 570.313395][ T3861] ? __cond_resched+0xb0/0xb0 [ 570.318086][ T3861] ? worker_thread+0xa59/0x1200 [ 570.322961][ T3861] ? ext4_ext_release+0x10/0x10 [ 570.327826][ T3861] ? irqentry_exit+0x37/0x40 [ 570.332425][ T3861] ? ext4_map_blocks+0x677/0x1b20 [ 570.337448][ T3861] ext4_map_blocks+0x97b/0x1b20 [ 570.342294][ T3861] ? slab_post_alloc_hook+0x6d/0x2b0 [ 570.347587][ T3861] ? ext4_issue_zeroout+0x250/0x250 [ 570.352792][ T3861] ? ext4_inode_journal_mode+0x19a/0x480 [ 570.358644][ T3861] ext4_writepages+0x11e7/0x2f90 [ 570.363589][ T3861] ? arch_stack_walk+0x108/0x140 [ 570.368537][ T3861] ? ext4_readpage+0x220/0x220 [ 570.373305][ T3861] ? __switch_to+0x51d/0xe20 [ 570.376689][ T60] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.377894][ T3861] ? compat_start_thread+0x20/0x20 [ 570.388353][ T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.393128][ T3861] ? __this_cpu_preempt_check+0x13/0x20 [ 570.407698][ T3861] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 570.414574][ T3861] ? ext4_readpage+0x220/0x220 [ 570.419361][ T3861] do_writepages+0x48a/0x6c0 [ 570.423965][ T3861] ? __kasan_check_read+0x11/0x20 [ 570.429000][ T3861] ? preempt_schedule_common+0xbe/0xf0 [ 570.434462][ T3861] ? preempt_schedule+0xa7/0xb0 [ 570.439329][ T3861] ? schedule_preempt_disabled+0x20/0x20 [ 570.444972][ T3861] ? __writepage+0x130/0x130 [ 570.449581][ T3861] ? __switch_to+0x51d/0xe20 [ 570.454187][ T3861] ? preempt_schedule_thunk+0x16/0x18 [ 570.459592][ T3861] __writeback_single_inode+0xd5/0x9c0 [ 570.465337][ T3861] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 570.471317][ T3861] writeback_sb_inodes+0x9c0/0x1590 [ 570.476538][ T3861] ? queue_io+0x4c0/0x4c0 [ 570.477042][ T60] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 570.480902][ T3861] ? __kasan_check_read+0x11/0x20 [ 570.490101][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 570.495059][ T3861] ? queue_io+0x382/0x4c0 [ 570.504164][ T60] usb 7-1: SerialNumber: syz [ 570.507393][ T3861] wb_writeback+0x3f1/0x980 [ 570.507428][ T3861] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 570.522621][ T3861] ? preempt_schedule+0xa7/0xb0 [ 570.527485][ T3861] ? schedule_preempt_disabled+0x20/0x20 [ 570.533123][ T3861] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 570.538756][ T3861] ? preempt_schedule_thunk+0x16/0x18 [ 570.544129][ T3861] wb_workfn+0x38f/0xe20 [ 570.548369][ T3861] ? inode_wait_for_writeback+0x200/0x200 [ 570.554099][ T3861] ? compat_start_thread+0x20/0x20 [ 570.559318][ T3861] ? __this_cpu_preempt_check+0x13/0x20 [ 570.564866][ T3861] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 570.571540][ T3861] ? _raw_spin_unlock+0x4d/0x70 [ 570.576389][ T3861] ? finish_task_switch+0x16b/0x780 [ 570.581583][ T3861] ? __switch_to_asm+0x3a/0x60 [ 570.586482][ T3861] ? __schedule+0xb76/0x14c0 [ 570.591109][ T3861] process_one_work+0x6be/0xba0 [ 570.595988][ T3861] worker_thread+0xa59/0x1200 [ 570.600670][ T3861] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 570.606134][ T3861] kthread+0x411/0x500 [ 570.610300][ T3861] ? worker_clr_flags+0x190/0x190 [ 570.615326][ T3861] ? kthread_blkcg+0xd0/0xd0 [ 570.620034][ T3861] ret_from_fork+0x1f/0x30 [ 570.624599][ T3861] [ 570.627634][ T3861] [ 570.629986][ T3861] The buggy address belongs to the page: [ 570.635609][ T3861] page:ffffea0004f0f1c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13c3c7 [ 570.645854][ T3861] flags: 0x4000000000000000(zone=1) [ 570.651154][ T3861] raw: 4000000000000000 0000000000000000 ffffea0004f0f1c8 0000000000000000 [ 570.660340][ T3861] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 570.668992][ T3861] page dumped because: kasan: bad access detected [ 570.675412][ T3861] page_owner tracks the page as freed [ 570.680788][ T3861] page last allocated via order 7, migratetype Unmovable, gfp_mask 0x542dc0(GFP_USER|__GFP_NOWARN|__GFP_COMP|__GFP_ZERO|__GFP_ACCOUNT), pid 8731, ts 537362865950, free_ts 540607583209 [ 570.698970][ T3861] post_alloc_hook+0x192/0x1b0 [ 570.703739][ T3861] prep_new_page+0x1c/0x110 [ 570.708240][ T3861] get_page_from_freelist+0x2cc5/0x2d50 [ 570.713795][ T3861] __alloc_pages+0x18f/0x440 [ 570.718393][ T3861] __get_free_pages+0x10/0x30 [ 570.723171][ T3861] __se_sys_io_uring_setup+0xfa7/0x29a0 [ 570.728740][ T3861] __x64_sys_io_uring_setup+0x5b/0x70 [ 570.734116][ T3861] x64_sys_call+0x5f4/0x9a0 [ 570.738645][ T3861] do_syscall_64+0x4c/0xa0 [ 570.743060][ T3861] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 570.748960][ T3861] page last free stack trace: [ 570.753631][ T3861] __free_pages_ok+0x91a/0x9e0 [ 570.758438][ T3861] free_compound_page+0x89/0xa0 [ 570.763503][ T3861] io_ring_exit_work+0xed3/0x15e0 [ 570.768620][ T3861] process_one_work+0x6be/0xba0 [ 570.773478][ T3861] worker_thread+0xa59/0x1200 [ 570.778169][ T3861] kthread+0x411/0x500 [ 570.782242][ T3861] ret_from_fork+0x1f/0x30 [ 570.786682][ T3861] [ 570.789089][ T3861] Memory state around the buggy address: [ 570.794710][ T3861] ffff88813c3c6f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 570.802777][ T3861] ffff88813c3c6f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 570.810853][ T3861] >ffff88813c3c7000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 570.818908][ T3861] ^ [ 570.823776][ T3861] ffff88813c3c7080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 570.831946][ T3861] ffff88813c3c7100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 570.840011][ T3861] ================================================================== [ 570.848083][ T3861] Disabling lock debugging due to kernel taint [ 570.859940][ T3861] ------------[ cut here ]------------ [ 570.865501][ T3861] kernel BUG at fs/ext4/inode.c:2433! [ 570.871437][ T3861] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 570.876638][ T9071] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 570.877529][ T3861] CPU: 0 PID: 3861 Comm: kworker/u4:11 Tainted: G B 5.15.189-syzkaller-00091-gf32b52534f1d #0 [ 570.896636][ T3861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.906712][ T3861] Workqueue: writeback wb_workfn (flush-7:2) [ 570.912814][ T3861] RIP: 0010:ext4_writepages+0x2eed/0x2f90 [ 570.918764][ T3861] Code: 00 74 08 48 89 df e8 22 01 ce ff 48 8b 3b 48 8b 74 24 28 48 8b 54 24 30 44 89 e9 45 89 f0 e8 6a 9b 07 00 eb 51 e8 23 86 8f ff <0f> 0b e8 1c 86 8f ff eb 2f e8 15 86 8f ff eb 5f e8 0e 86 8f ff 31 [ 570.938394][ T3861] RSP: 0018:ffffc9000120f100 EFLAGS: 00010293 [ 570.944488][ T3861] RAX: ffffffff81d929ad RBX: ffff888133135900 RCX: ffff888117638000 [ 570.952483][ T3861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 570.960457][ T3861] RBP: ffffc9000120f470 R08: dffffc0000000000 R09: ffffed1026626b19 [ 570.968430][ T3861] R10: ffffed1026626b19 R11: 1ffff11026626b18 R12: dffffc0000000000 [ 570.976488][ T3861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.984459][ T3861] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 570.993396][ T3861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.000180][ T3861] CR2: 000000110c2f5d92 CR3: 000000010d320000 CR4: 00000000003506b0 [ 571.008464][ T3861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 571.016641][ T3861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 571.024609][ T3861] Call Trace: [ 571.027920][ T3861] [ 571.030857][ T3861] ? arch_stack_walk+0x108/0x140 [ 571.035808][ T3861] ? ext4_readpage+0x220/0x220 [ 571.040570][ T3861] ? __switch_to+0x51d/0xe20 [ 571.045171][ T3861] ? compat_start_thread+0x20/0x20 [ 571.050283][ T3861] ? __this_cpu_preempt_check+0x13/0x20 [ 571.055875][ T3861] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 571.062558][ T3861] ? ext4_readpage+0x220/0x220 [ 571.067614][ T3861] do_writepages+0x48a/0x6c0 [ 571.072737][ T3861] ? __kasan_check_read+0x11/0x20 [ 571.077770][ T3861] ? preempt_schedule_common+0xbe/0xf0 [ 571.083243][ T3861] ? preempt_schedule+0xa7/0xb0 [ 571.088091][ T3861] ? schedule_preempt_disabled+0x20/0x20 [ 571.093720][ T3861] ? __writepage+0x130/0x130 [ 571.098307][ T3861] ? __switch_to+0x51d/0xe20 [ 571.102898][ T3861] ? preempt_schedule_thunk+0x16/0x18 [ 571.108290][ T3861] __writeback_single_inode+0xd5/0x9c0 [ 571.113752][ T3861] ? wbc_attach_and_unlock_inode+0x194/0x5f0 [ 571.119744][ T3861] writeback_sb_inodes+0x9c0/0x1590 [ 571.124947][ T3861] ? queue_io+0x4c0/0x4c0 [ 571.129290][ T3861] ? __kasan_check_read+0x11/0x20 [ 571.134330][ T3861] ? queue_io+0x382/0x4c0 [ 571.138662][ T3861] wb_writeback+0x3f1/0x980 [ 571.143167][ T3861] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 571.149168][ T3861] ? preempt_schedule+0xa7/0xb0 [ 571.154193][ T3861] ? schedule_preempt_disabled+0x20/0x20 [ 571.159939][ T3861] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 571.165585][ T3861] ? preempt_schedule_thunk+0x16/0x18 [ 571.170963][ T3861] wb_workfn+0x38f/0xe20 [ 571.175224][ T3861] ? inode_wait_for_writeback+0x200/0x200 [ 571.180941][ T3861] ? compat_start_thread+0x20/0x20 [ 571.186070][ T3861] ? __this_cpu_preempt_check+0x13/0x20 [ 571.191612][ T3861] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 571.198300][ T3861] ? _raw_spin_unlock+0x4d/0x70 [ 571.203149][ T3861] ? finish_task_switch+0x16b/0x780 [ 571.208350][ T3861] ? __switch_to_asm+0x3a/0x60 [ 571.213125][ T3861] ? __schedule+0xb76/0x14c0 [ 571.217715][ T3861] process_one_work+0x6be/0xba0 [ 571.222582][ T3861] worker_thread+0xa59/0x1200 [ 571.227270][ T3861] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 571.232877][ T3861] kthread+0x411/0x500 [ 571.236967][ T3861] ? worker_clr_flags+0x190/0x190 [ 571.242094][ T3861] ? kthread_blkcg+0xd0/0xd0 [ 571.246701][ T3861] ret_from_fork+0x1f/0x30 [ 571.251333][ T3861] [ 571.254362][ T3861] Modules linked in: [ 571.259076][ T3861] ---[ end trace 57c416a7f002317e ]--- [ 571.264599][ T3861] RIP: 0010:ext4_writepages+0x2eed/0x2f90 [ 571.271132][ T3861] Code: 00 74 08 48 89 df e8 22 01 ce ff 48 8b 3b 48 8b 74 24 28 48 8b 54 24 30 44 89 e9 45 89 f0 e8 6a 9b 07 00 eb 51 e8 23 86 8f ff <0f> 0b e8 1c 86 8f ff eb 2f e8 15 86 8f ff eb 5f e8 0e 86 8f ff 31 [ 571.290879][ T3861] RSP: 0018:ffffc9000120f100 EFLAGS: 00010293 [ 571.296542][ T9071] usb 4-1: Using ep0 maxpacket: 8 [ 571.297287][ T3861] RAX: ffffffff81d929ad RBX: ffff888133135900 RCX: ffff888117638000 [ 571.310296][ T3861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 571.318305][ T3861] RBP: ffffc9000120f470 R08: dffffc0000000000 R09: ffffed1026626b19 [ 571.326298][ T3861] R10: ffffed1026626b19 R11: 1ffff11026626b18 R12: dffffc0000000000 [ 571.334366][ T3861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.342396][ T3861] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 571.351409][ T3861] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.358042][ T3861] CR2: 000000110c2f5d92 CR3: 000000010d320000 CR4: 00000000003506b0 [ 571.366056][ T3861] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 571.374132][ T3861] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 571.382236][ T3861] Kernel panic - not syncing: Fatal exception [ 571.388561][ T3861] Kernel Offset: disabled [ 571.392919][ T3861] Rebooting in 86400 seconds..