last executing test programs: 2m22.223162042s ago: executing program 3 (id=350): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x3, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x1208411, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xfd, 0x5529, &(0x7f0000000600)="$eJzs3L1vG2UYAPDHSdOmH5QIMbD1pAopkWqrTj8EW4FWfIhWVYGBCRzbsdzavih2nJCJgREx8J8gkJgY+RsYmNkQA4gNCeR7L9BAkZDixKT5/aTzc/fe6+ee14oiPXeWAzixlrJff67ExTgbEfMRcSGi2K+UW+FWCi9ExKWImHtsq5Tjfw6cjohzEXFxkjzlrJSnPr8yvnzjp7d++ea7M6fOf/H197NbNTBrL0ZEfyPtb/dTzDspPizHG+NuEfvXx2VMJ3qL6Xw/T+Pb7bUiw3Zjb16jiNc6aX6+sTWcxPVeozmJne56Mb4xSBccjjt7eYo3PGxsFset9loRu8O8iJ3ddN2d3fS/bXc4SnlaZb6PivQxGu3FNN7eaaf1bDwqYnMwKsdT3rzV3pnEcRnLy0Uz77WKOtYO8EH/z73dHWztZOP25rCbD7IbtfpLtfrNan0zb7VH7evVRr9183q23OlNplVH7Ub/VifPO712rZn3V7LlTrNZrdez5dvttW5jkNXrtWu1q9UbK+Xelez1e+9lvVa2PImvdgdbo25vmK3nm1l6x0q2Wrv28kp2uZ69c/d+dv/BnTt377/7we33771y983Xykn/KCtbXr26ulqtX62u1ldO0Po/KYue4vrhQCqzLgDg+NH/A7NwkP6//6g8fmL/v/kg4vD7/9D/T8Wx6n9Pev9/COuHA9H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWD8sfPlGsbOUjs+X48+UQ8+Vx5WImIuI359gPk7vyzlf5ln4l/kLf6vh20oUGSbXOFNu5yLiVrn99uxhfwoAAADw9Prq40ufpW49vSzNuiCOUrppM3fhwynlW4yIhaUfp5RtbvLy/JSSFX/fp2JnStmKG1iLU0qWbrmdmla2/2R+X1h8LFRSmDvScgAAgCOxvxM42i4EAACAo/TprAtgNiqx9yhz71lw8c37vx4Int13BAAAABxDlVkXAAAAABy6ov/3+38AAADwdEu//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/s3M9t4kAUB+Bngxf2nxat9r6t7A3K2BJyzDGigDRBATlQQxqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06aFaV3Hz97Ztzm7fTp7RAAAAAJdsq/Wi/meW+t+b+z+bW7+bfhERZURcmruP4stZ5qjJqV6fvzt9vnpTw31EnXB4j0lzfYuIf8319KvrTwEAAAA+r81yNU+z9fRnNnRB9Ckt2pQ//mfKKyKimj1mSisPeX8yhdXf73FcZ0qrF7CmmcLSkts4V9q71D/346rd9KQpUlNefNmxyGxjBwAAejQ6a/qdhQAAANCnq6ELYBhFvGxlHrcCJ6lptve+nvUAAACAD6gYugAAAACgc/X8v6fz//bO/wMAAIBhpPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Wi82y9W8bc5u306e0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mz+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xs3FQcA/Nk+X0kBcQR0QxACiQEWer2Wlm6IARQx8CcgRem1BK78aDPQqkJkYUOZuyAYEUICha3/Q+dW6lK2DjcUCTEess++c9sILlFjH8nnIz2/ry3H7/t8UpSvn3MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBq9O4uTbNOZxHFx7PaD6+tZf+eRPnNz++5K1rI4qjPp/4eXqztRt7lEAAAAODqSsr4PIdxLd1azPu7k9X9anpPV/D88O4nLev7Rur/sy9o/a7//dv/F6UCdyTjZRS9sDAcnH0+ldXCzXGzP/ecZrfzO589ekvwDiT/YemGU5vcz+u7WrffaeXisjmwBgP04UfZFUP49lPX9JhMD4MhoVQrvsv5POs3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH0VZ4uoyjEMJKaxZn7jy4vr5bf3P77krZzt64sR2+mV0zu0QaQriwMRycrHU2i+3K1Wufrg2Hg8tPIFgqrjnnT70SQniCo+8peKdM9aM5Tg6hgQz3E/x9wEO0mp7g/oK4+LAXJZ/GgyTMcXJDv5AAADi00qJldf29dGc1OxYthzD+8eH6//VKHOas/+9/fPZ2daxq/d+vbYaLr7d56YvelavX3ty4tHZxcHHw2Vun+m/3T587c+ZcL39W0vPEBAAAgD0bj8fj6U67aNX6P15+fP3/eCUOc9b/X37f/7o6cKL+39Vs0a/pTAAAAI6251/9689ol+NRux2+WtvcvNyfbKf7pybbBlLds2NFq9b/yXLTWQEAAAB1GG1FD63/n6/EYc71/2d+eumX6jWTEMJSsf5/Yv3z4fn6prPQ6viX46bnCAAAQLOWilZd/0/z9//j6SsPcQjhjdcmcfE1gP9a/6dF/Z+8/+3P1bGq7/+frm+KCynuTu5H3ndDaHWbzggAAIDD7KmiZcX+H+nO6ie/Hv+w7f1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLr9EwAA//8qZjvb") 2m21.634272157s ago: executing program 3 (id=360): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r3}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x10, 0x8, 0x5d1d, {{0xb, 0x4, 0x0, 0x6, 0x2c, 0x65, 0x0, 0x8, 0x29, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x17, 0x4e, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @empty]}, @noop]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f00000003c0)={@empty, r7}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r5}, 0x12) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000065ffff007c198ff1888bf7bf3030302e758a92288ca784d26979c4aa554cbf3d6fb861660f00a988be82e721018d2442f40256ef24b8c263644e1edc2cef8028b50c6a335b54773b7a7a737f9c027f31e22136"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r10, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1200, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_loose}], [], 0x6b}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x400, 0x0, 0x10}, 0x18) 2m21.593568569s ago: executing program 3 (id=361): r0 = syz_open_dev$hiddev(&(0x7f0000000480), 0x10, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f00000004c0)) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioperm(0x0, 0x6, 0x400) clock_gettime(0xfffffffffffffff6, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000080)=ANY=[@ANYRES8=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/partitions\x00', 0x0, 0x0) accept4$vsock_stream(r9, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r10, &(0x7f0000000440)={&(0x7f0000000180)={0x24, @none={0x0, 0x2}}, 0xfc55, &(0x7f0000000400)={&(0x7f00000001c0)="32654d09910c3518ce2e3b9fe3f10976b598c867cbdde826994e5ad3f7775b322f1dd1f2cc475fe4f02ead0a9319b2aad51f162b71153a261c45a534d7f852ff2701c77bb782b9e6677d", 0x4a}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) recvmsg$unix(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 2m21.590210079s ago: executing program 3 (id=363): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000020000db210000000000000002b6f80542", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000240), &(0x7f0000000300)=r1}, 0x20) chmod(&(0x7f0000000000)='./file0\x00', 0x21) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa18088, &(0x7f0000000140)=ANY=[], 0x21, 0x1517, &(0x7f00000019c0)="$eJzs3AuYTlX7MPD7XmttxjTxNMlhWGvdmycNlkOSHJLkkCTJK0lOCaFJkoTEOEsakiTHSXIYQnKYxqRxPh9yTpKkSZKQkLC+S3993rf30Pf+/32f63vn/l3Xvqz72c+99r2fez/2s/dzPfNdj1F1mtWt2YSI4H8E/+ufZACIAYBhAJAPAAIAqBhfMf7y+jwSk/9nG2F/rofTrnUF7Fri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxs2+zCN/CScxe+/5+T8fn/P0h2mUlfbShzU89/I4X7n7Nx/3M27n/Oxv3P2bj/ORv3P2fj/uds3H/GcrL//r1j/u7gP2G51scfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Zy/SgHAb+NrXRdjjDHGGGOMMcb+PD73ta6AMcYYY4wxxhhj//chCJCACJALckMM5IFYuA7i4HrIC/kgAjdAPNwI+eEmKAAFoRAUhgQoAkVBgwELBCEUg+IQhZuhBNwCiVASSkFpcFAGykI5KA+3QgW4DSrC7VAJ7oDKUAWqQjW4E6rDXVAD7oaacA/UgtpQB+rCvVAP7oP6cD80gAegITwIjeAhaAx/gSbwMDSFR6AZPArN4TFoAS2hFbSGNv+t/BehD7wEfaEfJEN/GAADYRAMhiEwFIbByzAcXoER8CqkwEgYBa/BaHgdxsAbMBbehHHwFoyHCTARJsFkmAKp8DZMhXdgGrwL02EGzIRZkAazYQ68B3NhHsyH92EBfAALYREshiWQDh9CBiyFTPgIlsHHkAXLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBp/AdtgBO2EX7IY9sBc+hX3wGeyHz+EAfPFv5p/9XX5PBAQUKFChwlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBQNGiQkVFeOpBJYAhMxEUthKXTosCyWxfJ4K1bAClgRK2IlrISVsQpWwWpYDatjdayBNbAm1sRaWAvrYB28F+/F+7A+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAlthK2yDbbAttsV22A47YAfsiB2xM3bGJEzCLtgFu2JX7IbdsDt2xx7YA3tiL+yFL+KL+BK+hP2wluiPA3AADsJBOASH4lB8GYfjK/gKvoopOBJH4Wv4Gr6OY/AMjsU3cRyOw+piAk7ESUhiCqZiKk7FqTgNp+F0nIEzcBam4Wycg3NwLs7Defg+LsAP8ANchItwCaZjOmbgUszETFyGZzELl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBU/wU9wB+7AXbgL91x+rfFT/Aw/wxQ8gAfwIB7EQ3gID+NhzMZsPIJH8CgexWN4DI/jcTyBJ/EUnsTTeBrP4Fk8h+fwPJ7HC/h8wjdN95RcnwLiMiWUyCVyiRgRI2JFrIgTcSKvyCsiIiLiRbzIL/KLAqKAKCQKiQSRIIqKosIII0iEopgoJqIiKkqIEiJRJIpSopRwwomyoqwoL8qLCqKCqChuF5XEHaKyqCLau2qimqguOrga4m5RU9QUtURtUUfUFXVFPVFP1Bf1RQPRQDQUDUUj8ZBoLPrjEHxYXO5MMzESm4tR2EK0FK1Ea/E6Pi7aijHYTrQXHcST4k0ci51FW5cknhZdxETsKp4Vk/A50V1MwR7iBdFT9BK9xYuij2jn+op+Yjr2FwPELBwkBoshYqiYi7XF5Y7VEa+KFDFSjBKviSX4uvjtGB8n3hLjxQQxUUwSk8UUkSreFlPFO2KaeFdMFzPETDFLpInZYo54T8wV88R88b5YID4QC8UisVgsEeniQ5EhlopM8ZFYJj4WWWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im3iE7Fd7BA7xS6xW+wRe8WnYp/4TOwXn4sD4gtxUHwpDomvxGHxtcgW34gj4ltxVHwnjonvxXHxgzghTopT4kdxWvwkzoiz4pz4WZwXv4gL4qK4JLwAiVJIKZUMZC6ZW8bIPDJWXifj5PUyr8wnI/IGGS9vlPnlTbKALCgLycIyQRaRRaWWRlpJMpTFZHEZlTfLEvIWmShLylKytHSyjCwry8ny8lZZQd4mK8rbZSV5h6wsq8iqspq8U1aXd8ka8m5ZU94ja8naso6sK++V9eR9sr68XzaQD8iG8kHZSD4kG8u/yCbyYdlUPiKbyUdlc/mYbCFbylaytWwjH5dt5ROynWwvO8gnZUfZSXaWT8kk+bTsIp+RXeWzspt8TnaXz8se8gXZU/aSveVFeUl62Vf2k8myvxwgB8pBcrAcIofKYfJlOVy+IkfIV2VKDADI1+Ro+bocI9+QY+Wbcpx8S46XE+REOUlOllNkqnxbTpXvyGnyXTldzpAz5SyZJmfLIVdmmv9/kP/OP8gfIVPkSLlVbpOfyO1yh9wpd8ndco/cK/fKfXKf3C/3ywPygDwoD8pD8pA8LA/LbJktj8gj8qg8Ko/JY/K4PC5PyJPyZ/mjPC1/kmfkWXlW/izPy/PywpXXABQqoaRSKlC5VG4Vo/KoWHWdilPXq7wqn4qoG1S8ulHlVzepAqqgKqQKqwRVRBVVWhllFalQFVPFVVTdjFfeIqqUKq2cKqPKqnL/Tr4qoW5Riark3+T/UX1tVBvVVrVV7VQ71UF1UB1VR9VZdVZJKkl1UV1UV9VVdVPdVHfVXfVQPVRP1VP1Vr1VH9VH9VV9VbJKVgPUQDVIDVZD1FA1rD+o4Wq4GqFGqBSVokapUWq0Gq3GqDFqrBqrxqlxarwaryaqiWqymqxSVaqaqqaqaWqamq6mq5lqpkpTaWqOmqPmqrlqvpqvFqgFaqFaqBarxSpdpasMlaEyVaZappapLLVcLVcr1Uq1Wq1Wa9VatV6tVxvVRrVZbVZZapvaprar7Wqn2ql2q91qr9qr9ql9ar/arw6oA+qgOqgOqUPqsDqsslW2OqKOqKPqqDqmjqnj6rg6oU6oU+qUOq1OqzPqjDqnzqnz6ry6oC6oS+qSggACEYhABSrIFeQKYoKYIDaIDeKCuCBvkDeIBJEgPogP8gc3BQWCgkGhoHCQEBQJigY6MIENKAiDYkHxIBrcHJQIbgkSg5JBqaB04IIyQdmgXFA+uDWoENwWVAxuDyoFdwSVgypB1aBacGdQPbgrqBHcHdQM7glqBbWDOkHd4N6gXnBfUD+4P2gQPBA0DB4MGgUPBY2DvwRNgoeDpsEjQbPg0aB58FjQImgZtApaB23+rPkVBE0D788UfML11f10su6vB+iBepAerIfooXqYflkP16/oEfpVnaJH6lH6NT1av67H6Df0WP2mHqff0uP1BD1RT9KT9RSdqt/WU/U7epp+V0/XM/RMPUun6dl6jn5Pz9Xz9Hz9vl6gP9AL9SK9WC/R6fpDnaGX6kz9kV6mP9ZZerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbfoTvV3v0Dv1Lr1b79F79ad6n/5M79ef6wP6C31Qf6kP6a/0Yf21ztbf6CP6W31Uf6eP6e/1cf2DPqFP6lP6R31a/6TP6LP6nP5Zn9e/6Av6or6k/eUP95dP70YZZXKZXCbGxJhYE2viTJzJa/KaiImYeBNv8pv8poApYAqZQibBJJiipqi5jAyZYqaYiZqoKWFKmESTaEqZUsYZZ8qasqa8KW8qmAqmoqloKplKprKpbKqaquZOc6e5y9xl7jZ3m3vMPaa2qW3qmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimpqmpplpZpqb5qaFaWFamVamjWlj2pq2pp1pZzqYDqaj6Wg6m84mySSZLqaL6Wq6mm6mm+luupsepofpaXqa3qa36WP6mL6mr0k2yWaAGWAGmUFmiBlihplhZrgZbkaYESbFpJhRZpQZbUabMWaMGWveNOPMW2a8mWAmmklmspliUk2qmWqmmmlmmpluppuZZqZJM2lmjplj5pq5Zr6ZbxaYBWahWWgWm8Um3aSbDJNhMk2mWWaWmSyTZVaYFWaVWWXWmDVmnVlnNpgNZpPZZLaYLWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W8OmAPmoDnoEcAcNodNtsk2R8wRc9QcNcfMMXPcHDcnzAlzypwyp81pc8acMefMOXPe/GIumIvmkvEmxuaxsfY6G2evt3ltPvv7uJAtbBNsEVvUalvAFvyb2FhrE21JW+q3S0xbziZePpfa0tbZMrasLWcr2yq2qq1m77TV7V22xu/jfGDvs/Xt/baBfcDWtffaen8VN7QP2kb2UdvYPmab2Ja2qW1tm9lHbXP7mG1hW9pWtrXtaDvZzvYpm2Sftl3sM38XZ9ildp1dbzfYjXaf/cyesz/bo/Y7e97+YvvafnaYfdkOt6/YEfZVm2JH/l08zr5lx9sJdqKdZCfbKX8Xz7SzbJqdbefY9+xcO+/v4nT7oV1gM+1Cu8gutkt+jS/XlGk/ssvsxzbLLrcr7Eq7yq62a+za/13rSrvZbrFb7V77qd1ud9iddpfdbff8Gl/ej/32c3vAfmGP2G/tIfuVPWyP2Wz7za/x5f07Zr+3x+0P9oQ9aU/ZH+1p+5M9Y89e3n9/ed9/tBftJestEJIgSYoCykW5KYbyUCxdR3F0PeWlfBShGyiebqT8dBMVoIJUiApTAhWhoqTJkCWikIpRcYrSzVSCbqFEKkmlqDQ5KkNlqRyVp1upAt1GFel2qkR3UGWqQlWpGt1J1ekuqkF3U026h2pRbapDdeleqkf3UX26nxrQA9SQHqRG9BA1pr9QE3qYmtIj1Iwepeb0GLWgltSKWlMbepza0hPUjtpTB3qSOlIn6kxPURI9TV3oGepKz1I3eo660/PUg16gntSLetOL1Ideor7Uj5KpPw2ggTSIBtMQGkrD6GUaTq/QCHqVUmgkjaLXaDS9TmPoDRpLb9I4eovG0wSaSJNoMk2hVHqbptI7NI3epek0g2bSLEqj2TSH3qO5NI/m0/u0gD6ghbSIFtMSSqcPKYOWUiZ9RMvoY8qi5bSCVtIqWk1raC2to/W0gTbSJtpMW2grbaNPaDvtoJ20i3bTHtpLn9I+ynPlDfcFHaQv6RB9RYfpa8qmb+gIfUtH6Ts6Rt/TcfqBTtBJOkU/0mn6ic7QWTpHP9N5+oUu0EW6RJ4gxFCEMlRhEOYKc4cxYZ4wNrwujAuvD/OG+cJIeEMYH94Y5g9vCguEBcNCYeEwISwSFg11aEIbUhiGxcLiYTS8OSwR3hImhiXDUmHp0IVlwrJhubB8eGtYIbwtrBjeHlYK7wgrh1XCRx+oFt4ZVg/vCmuEd4c1w3vCWmHtsE5YN7w3rBfeF9YP7w8bhA+EFcIHw0bhQyFc+b1K0/CRsFn4aNg8fCxsEbYMW4Wtwzbh42Hb8ImwXdg+7BA+GXYMO4Wdw6fCpPDpsEv4zB+uTw77hwPCgeHA0Pv75eLokmh69MNoRnRpNDP6UXRZ9ONoVnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a9T7urnBoRNOOuUCl8vldjEuj4t117k4d73L6/K5iLvBxbsbXX53kyvgCrpCrrBLcEVcUaedcdaRC10xV9xF3c2uhLvFJbqSrpQr7Zwr48q61q6Na+PauidcO9fedXBPuiddJ9fJPeWeck+7Lu4Z19U967q551x397x73r3gerperrd70fVxL7m+rp9LdslugBvgBrlBbogb4oa5YW64G+5GuBEuxaW4UW6UG+1GuzFujBvrxrpxbpwb78a7iW6im+wmu1SX6qa6qW6am+YCAJjpZro0l+bmuDlurpvr5rv5bkHiArfQLXSL3WKX7tJdhstwmS7TLXPLXJbLcivcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXPb3Xa30+10u91ut9ftdfvcPrff7XcH3AF30B10h9whd9h97bLdN+6I+9Yddd+5Y+57d9z94E64k+6U+9Gddj+5M+6sO+d+dufdL+6Cu+guOe9SI29HpkbeiUyLvBuZHpkRmRmZFUmLzI7MibwXmRuZF5kfeT+yIPJBZGFkUWRxZEkkPfJhJCOyNJIZ+SiyLPJxJCuyPLIisjKyKrJagS+yPfTFfHEf9Tf7Ev4Wn+hL+lK+tHe+jM/ty/ny/lZfwd/mK/rbfSV/h6/sq/iq/jHfwrf0rXxr38Y/7tv6J3w739538E/6jr6T7+yf8kn+ad/FP+O7+md9N/+c7+6f9z38C76n7+V7+xd9H/+S7+v7+WTf3w/wA/0gP9gP8UP9MP+yH+5f8SP8qz7Fj/Sj/Gt+tH/dj/Fv+LH+TT/Ov+XH+wl+op/kJ/spPtW/7af6d/w0/66f7mf4mX6WT/Oz/Rz/np/r5/n5/n2/wH/gF/pFfrFf4tP9hz7DL/WZ/iO/zH/ss/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8J3673+F3+l1+t9/j9/pP/T7/md/vP/cH/Bf+oP/SH/Jf+cP+a5/tv/FHsr71R/13/pj/3h/3P/gT/qQ/5X/0p/1P/ow/68/5n/15/4u/4C/6S//mb9Zq/xm3zhljjDHG/j808A/W9/8HjykAEFfGv3jvr99ROPuv10sA2FTgv8aDRULHCAA83a/Hw78ttWolJydfeW6WhKD4IgCI/G4DV+Ll0AE6QRK0h/L/sL7Botd5+hfzZ4yhydHbAWL/KicGrsZX5//yn8z/+JPjMiqF5+L/ef3RRQCJxa/mXL4K/y1eDh1+/eqwPVT4J/MXbPuv6s+SkOerVIB2f5UTBwDt8vy+/rLwBDwDSX/zzAb/cJuMMcYYY4wxxnKewaJqtz+4/vz1+jxBXc3JDVfjP7o+Z4wxxhhjjDHG2LX3XK/eTz2elNS+Gw94wIMcNuj0L55zrf9nYowxxhhjjP3Zrn7ov/pYnmtZEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9v/hLY9d6HxljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFr7X8FAAD//8HaM+M=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f0000000840)='./bus\x00', 0x0, 0x1000, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x86) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mount$9p_fd(0x0, 0x0, 0x0, 0xc00, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r7, &(0x7f0000000500), 0x4) unlink(&(0x7f0000000000)='./file1\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="8510000003000000aeea273984d465d867ba0daea93fb3e5525dcf628f5000893ca5aef11c8423b47021ab40b3fd093084fca8a4f1c569d94b970d361bcdfab53f2e0455ecd156f25b5cfaa8c65d9e7975ffbbb57d6714e6d94571a9a2d5dc56939e8ccb02cd3daa6b752beecc660fe8b00244aab2e9192ed551151e8c2abd2d71f58e57580fae7fa539a03aa60ae59936858b32c853fb9c674dd8559806b12fed5ee19275265d2cbc192a21a428b65c9e60456307c6022602b188991f53fc4c74ffd23c096e16f7361289b12f8c2906d9df68002b8ef9c52a23d0083dd2771b5ece76d68a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='aufs\x00', 0xa, &(0x7f0000000440)='+-\\/,\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffffffff, 0x4) 2m21.430397796s ago: executing program 3 (id=365): ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x4, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000004000008510000006000000180a0000", @ANYRES64, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc6, &(0x7f0000000340)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000004000008510000006000000180a0000", @ANYRES64, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc6, &(0x7f0000000340)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2m21.320587771s ago: executing program 3 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) statfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f000037f000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000459e5225984f2b9700000000800007a4453464cacc522561328b68444ecb9e006d9e127ccd96475eb74e77b25749041ca187ebc5ebbf2ffdc4f76a93dbb2f9db9c361ec350ee850df952ffeed4b60c526bdac88fcf4cdbc80f3ad72991148b766b98e8a431cce7d8058ad552fa6c9f4ef8c60c79b9259882d813b601facd0989abd165610ab7635842", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xac0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) socket(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0700005a0b0000000080000001", @ANYRES64, @ANYRESHEX=r2, @ANYBLOB="982e6d218c42b6c215ddac463ce7f09c50767da44fb57f0451e6bb45ff0aa198665c7993145ad3bcba4e5ce92da2eda573b00268d67e0d738052270ec4fa2bb9782d4a7b418407aa65cd6ded8aefadeae977a383b41a30e0a028fa3c0ea3573041f0c7c0fdf70161436685f92e060000000000000062e4c25def8b0d05c63de75d9c84ef89c9d287fad9ac1a2a50b5b0824548d1609dccc8590bb8f0f1638f8cc038f4ca0fc148b86e4f29d8260280d8600000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000000000000000000000000000000000000000000ccb9c12ed8587a4d37e40a53d5c8d297dabdba5a2f5acf7b7e247941ca3520b9186fb9fa3e819fbd8ba5f8303760662e258fc1c4e2b2628b2403e02ab1117b9bf2b0b2ee19ac81a6168d61522bc77cbc2bbbf32e529e010238d95b29b4b5f7d88c5b50ad4bb6fe01ca12e0c4f6f5e3ab3b51190c033d2153b2e2eb114e754e738b2afa329f02b0573e3e2a43e5d7427aa131fe4359d3190f7d2dd3e3710569439adfd2bdbeea11da81380a3bc8b9a6a35ce36331b75f5899ec0b0489d28ad37f"], 0x50) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2m21.236984054s ago: executing program 32 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) statfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f000037f000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000459e5225984f2b9700000000800007a4453464cacc522561328b68444ecb9e006d9e127ccd96475eb74e77b25749041ca187ebc5ebbf2ffdc4f76a93dbb2f9db9c361ec350ee850df952ffeed4b60c526bdac88fcf4cdbc80f3ad72991148b766b98e8a431cce7d8058ad552fa6c9f4ef8c60c79b9259882d813b601facd0989abd165610ab7635842", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xac0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) socket(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0700005a0b0000000080000001", @ANYRES64, @ANYRESHEX=r2, @ANYBLOB="982e6d218c42b6c215ddac463ce7f09c50767da44fb57f0451e6bb45ff0aa198665c7993145ad3bcba4e5ce92da2eda573b00268d67e0d738052270ec4fa2bb9782d4a7b418407aa65cd6ded8aefadeae977a383b41a30e0a028fa3c0ea3573041f0c7c0fdf70161436685f92e060000000000000062e4c25def8b0d05c63de75d9c84ef89c9d287fad9ac1a2a50b5b0824548d1609dccc8590bb8f0f1638f8cc038f4ca0fc148b86e4f29d8260280d8600000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000000000000000000000000000000000000000000ccb9c12ed8587a4d37e40a53d5c8d297dabdba5a2f5acf7b7e247941ca3520b9186fb9fa3e819fbd8ba5f8303760662e258fc1c4e2b2628b2403e02ab1117b9bf2b0b2ee19ac81a6168d61522bc77cbc2bbbf32e529e010238d95b29b4b5f7d88c5b50ad4bb6fe01ca12e0c4f6f5e3ab3b51190c033d2153b2e2eb114e754e738b2afa329f02b0573e3e2a43e5d7427aa131fe4359d3190f7d2dd3e3710569439adfd2bdbeea11da81380a3bc8b9a6a35ce36331b75f5899ec0b0489d28ad37f"], 0x50) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 31.343741011s ago: executing program 1 (id=1171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 31.203403427s ago: executing program 1 (id=1172): syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x2080000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 31.029143574s ago: executing program 1 (id=1176): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@lazytime}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x100) sendfile(r0, r0, 0x0, 0xe0000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@lazytime}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x100) (async) sendfile(r0, r0, 0x0, 0xe0000000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) 31.028275654s ago: executing program 1 (id=1177): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x181040) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x2, 0x800, 0x2, 0x3ff, 0x5d6, 0x40, 0x8, 0x4, 0xb, 0x69, 0xffffffffffffffff, 0x38, 0xfffffffffffffff7, 0x1ff}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000240)={r1, 0x7}) socket(0x10, 0x802, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c002e39a45aa9edcfe08671a816cb673d99851079b41e699eacf742"], 0x1, 0x373, &(0x7f00000006c0)="$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") r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 28.399990646s ago: executing program 1 (id=1192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002064060000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x18) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async, rerun: 64) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) 27.652071759s ago: executing program 1 (id=1194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x96, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r12, 0x4000, r5}, 0x18) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) r14 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) fsmount(r14, 0x1, 0x1) (async) r15 = fsmount(r14, 0x1, 0x1) fchdir(r15) (async) fchdir(r15) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) 13.167763128s ago: executing program 33 (id=1194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x96, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r12, 0x4000, r5}, 0x18) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) r14 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) fsmount(r14, 0x1, 0x1) (async) r15 = fsmount(r14, 0x1, 0x1) fchdir(r15) (async) fchdir(r15) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) 4.908968531s ago: executing program 6 (id=1396): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@func]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000140)={[{@bsdgroups}, {@noquota}, {@grpjquota}, {@grpjquota}, {@oldalloc}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'grpjquota='}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'oldalloc'}}, {@dont_hash}, {@seclabel}, {@flag='mand'}, {@audit}]}, 0x2, 0x504, &(0x7f0000000c00)="$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") syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 4.653868371s ago: executing program 6 (id=1398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x383000, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0xc80, 0x24) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) r6 = dup3(r2, r5, 0x0) write$selinux_user(r6, &(0x7f0000000400)={'system_u:object_r:public_content_t:s0', 0x20, 'sysadm_u\x00'}, 0x2f) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r7, &(0x7f0000000440)={'#! ', './file0', [{}, {}], 0xa, "5f05e98b187e0777fed1d9390611e81d6e16d8cc2ecac6b2442583f9f20781b1d10bb99532bfa9e954095026926ef79c1c6517562b10989bf257a17c7f2650277e4d23dc1036c49cc87ab364c7db3a3d0a1fd47c735f7c479b560cab19adc78a54d1a87d2473"}, 0x73) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000004c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth0_to_bridge\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x6, 0x7, 0xa12c, 0x20000, 0xffffffffffffffff, 0x7, '\x00', r9, r2, 0x4, 0x5, 0x3, 0xb}, 0x50) r10 = accept$inet6(r6, 0x0, &(0x7f00000005c0)) getsockopt(r10, 0x7e90, 0x6, &(0x7f0000000600)=""/183, &(0x7f00000006c0)=0xb7) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000700)=r6) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r8) sendmsg$IEEE802154_LIST_PHY(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8) r12 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000880)) sendmsg$NL80211_CMD_GET_STATION(r12, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe4000000, 0x20}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfff}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000081}, 0x5) pivot_root(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00') socket(0x2a, 0x2, 0xfffffbff) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r13, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048000}, 0x44041) read$FUSE(r4, &(0x7f0000000b80)={0x2020}, 0x2020) sendfile(r2, r7, &(0x7f0000002bc0)=0xffffffffffffffff, 0x5) 4.625391212s ago: executing program 6 (id=1400): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000009000000040000000200000000200000bf99cb90b246829368e3c35941a0fa879bc134566e09f722aad7fd85f217129d47898805af167b24bbddb8cd640f231a0fef4c28cdce98dbd79af19c86acf073d074ccbdfff997c133e3909f3bb0562c5b588e98a67784f7894b50bcf93509751f8a9211fa4f79c6da8ff7bfc65c13a989db5c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x100002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r4}, 0x10) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x108) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70180000000396f7b8a78ff00000000bfa200000000000007020000f8ffffffb70300000800000095dd819b5249cc40cd7b7568f63d2c0d8d75d69f60e24986d2073b22bd1d4e5499187ca500003ba5eab18bba5802a61d864c5b70da7f3a7f3580ffbb509c9aeb6f367ab08da0511d2e782b289f0cf1479b2732a48b55dbab75bd1f50e886e0fd4350740e3b6479e6a46e56a88a75bf5ca330fc04ec0c05db79fb10036fadf947e16d00002ef49d1478204aef796180691a2e4ff85db4f752f000"/217], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x6, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) 4.518270817s ago: executing program 6 (id=1402): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1080c0, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008c}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) (async) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x2000844, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4040) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, r9, &(0x7f0000000000)=0x1, 0x1001) (async) write$FUSE_INIT(r1, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffffffd, 0x10400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2}}, 0x50) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 4.506006368s ago: executing program 6 (id=1404): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x8, [@restrict={0x2, 0x0, 0x0, 0xb, 0x3}, @fwd={0x3}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x10, 0x2}, {0x9, 0x2}, {0x6}, {0x4, 0x3}, {0xf}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x2e, 0x61, 0x30, 0x0, 0x5f, 0x30]}}, &(0x7f0000000240)=""/158, 0xa4, 0x9e, 0x1, 0x2, 0x10000}, 0x28) r1 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=';', 0x1}], 0x1, 0x800fff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x18000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) r6 = dup3(r4, r3, 0x0) connect$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "010096dc"}]}}, 0x0}, 0x0) r8 = syz_open_dev$loop(0x0, 0x7, 0x180862) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r9, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0xc8, &(0x7f00000012c0)="b9c25b44651dd23241963599000000110000004a16941ff5f4b4f1f04000000000000000fffffffffff16990522c77157d88010000003a5bd553000000000000007ba87197e6c3ed8ea01050d29f239a19b4a103ccddd0d09c40243f032260fe041bfa5f982b568b8c44fb48a220cdbbc197fe8226f05570d4832cda4afa9ec7ff4f4a7821f35cfa82711ff9c54036e083ddbcd1698e97a21103b007f78b054ab7e86d90e09310e457ed228e68835576af83b15d8878e000095d429779d343b2120eff0a6a03af62") r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, 0xee00, &(0x7f0000000380)={0x1, 0x0, 0x9, 0x3ff, 0x790, 0x6, 0x15, 0x7fff}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {0x1, 0x5}, [], {0x4, 0x6}, [], {0x10, 0x5}}, 0x24, 0x3) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) 2.525949713s ago: executing program 4 (id=1420): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_setup(0x8000, &(0x7f0000000900)={0x0, 0x11cd, 0x20, 0x1, 0xbe}, &(0x7f0000000980), 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x1, '@'}, 0x0}) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000201, 0xffffffffffffffff, &(0x7f0000000240)='./file1\x00') r4 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 1.657163339s ago: executing program 0 (id=1426): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/108, 0x6c}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/181, 0xb5}], 0x3, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x3, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f0000004540)=""/240, 0xf0}], 0x3}}], 0x1, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) (async) umount2(&(0x7f0000000100)='./file0\x00', 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./control\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x26, 0x35d, &(0x7f0000000540)="$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") (async) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.546070254s ago: executing program 0 (id=1427): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc091, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x20, 0x80, 0x6f9, 0xffff2028, {{0xb, 0x4, 0x3, 0xb, 0x2c, 0x65, 0x0, 0x7, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@lsrr={0x83, 0x17, 0x1a, [@rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}]}}}}}) (async, rerun: 32) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0xc, [@enum64={0xa, 0x2, 0x0, 0x13, 0x0, 0x0, [{0xb, 0x3, 0x61}, {0x8, 0x10, 0xffffff81}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0x8, 0x5}, {0x8, 0x1}, {0x9, 0x4}, {0x1, 0x5}, {0xb, 0x4}, {0x6, 0x5}, {0xd, 0x1}]}, @decl_tag={0x80c, 0x0, 0x0, 0x11, 0x3}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x30, 0x61, 0x30, 0x5f, 0x5f, 0x2e, 0x61, 0x5f, 0x0, 0x30]}}, &(0x7f0000001740)=""/4096, 0xb0, 0x1000, 0x1, 0x6}, 0x28) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/215, 0xd7, 0x0, &(0x7f00000007c0)=""/205, 0xcd}}, 0x10) (async, rerun: 64) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0xa8040, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x37}, [@jmp={0x5, 0x1, 0x2, 0x0, 0x5, 0x30, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x12, &(0x7f0000000100)=""/18, 0x41000, 0x1, '\x00', r3, @fallback=0x2, r4, 0x8, &(0x7f00000003c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x10, 0xa0a2, 0x9}, 0x10, r5, r6, 0x2, &(0x7f0000000640)=[r1, r1, r1, r1, r1], &(0x7f00000008c0)=[{0x4, 0x4, 0x5, 0x6}, {0x5, 0x3, 0x9, 0xb}], 0x10, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000001700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev}}}}}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x0, "a46a236f"}]}}, 0x0}, 0x0) 1.499849176s ago: executing program 6 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000080000000000000000000000008000000007e259bad98e60d05d407027ebf06cb5a9b4766f68e0ce76200c78db25a90d1f248ea2aae7b0a936ab5553e7f36059dc5da0f434bd91ae03310301f2db962"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r4, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) 1.034086576s ago: executing program 0 (id=1430): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000001c0)={0x1, 0x8}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4001af84, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r7, 0x4004480d, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 905.231992ms ago: executing program 0 (id=1434): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x3, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f0000000180)}, 0x20) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async) listen(r8, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r3, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRESOCT, @ANYBLOB="832e6fccf0b78b2f81e7accc32983c4c4b0da1ad63fcf0249d24c94acaa3a5072d3879b2424008eed78000a501e7265ae7761717597856a59373ba6b862b1af44f099e572a5aef3e7267d81a4784df80e2a57388df10e4ea9376f8da2049813a4ea6d5f8a88820bb4598940583139dbc946205805bedd43dd77d9f36dde14848e16ab835db3a35893ff12e0b5ec8478ddd7bf07a0344f725dd4898f4da7c3be94df9163e6da5a894f35e6bfced940433e8e416fdfd45459d4ad91d39b378ca7beac4fb9e337d3944503c045f8ee61b448c10f858568a21b787bd27d233c36e80", @ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x15) (async) sendmmsg$inet6(r8, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x10) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 834.289585ms ago: executing program 0 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000ac0)="a9701e", 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 805.526466ms ago: executing program 2 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 742.326948ms ago: executing program 2 (id=1443): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 742.078829ms ago: executing program 2 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x1161f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 707.30996ms ago: executing program 2 (id=1445): r0 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x2, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000d00)=""/164) 688.467761ms ago: executing program 2 (id=1446): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) ioctl$TCSBRKP(r0, 0x5425, 0x80000000) 136.151985ms ago: executing program 5 (id=1457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000140002007767310000000000000000000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 135.507824ms ago: executing program 4 (id=1458): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000000070103000000000000000000000000090001"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 135.085565ms ago: executing program 5 (id=1459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 78.242047ms ago: executing program 5 (id=1460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r5) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x4000080) 77.925517ms ago: executing program 4 (id=1461): rt_tgsigqueueinfo(0x0, 0x0, 0x24, &(0x7f00000002c0)={0x400a, 0x5, 0x29c}) 77.757627ms ago: executing program 4 (id=1462): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) 77.454487ms ago: executing program 4 (id=1463): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r2, 0x2d) tkill(r3, 0x14) 67.890747ms ago: executing program 5 (id=1464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) close(r2) 54.573448ms ago: executing program 5 (id=1465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 2.27968ms ago: executing program 4 (id=1466): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r2, &(0x7f0000000e80)=ANY=[], 0x78) socket$nl_route(0x10, 0x3, 0x0) 1.72483ms ago: executing program 0 (id=1467): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2c1, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', 0x0}) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYRESDEC], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r9, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa57e04f7afd3d146, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="c35950f9"], &(0x7f0000000200)='GPL\x00', 0xffb, 0x45, &(0x7f0000000280)=""/69, 0x40f00, 0xc5fac2c4c7ea4bb1, '\x00', r8, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r5, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x10, 0x3}, 0x94) 427.3µs ago: executing program 5 (id=1468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 0s ago: executing program 2 (id=1469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 274.826743][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 274.852642][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 274.873850][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 274.895915][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 274.917009][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 274.937918][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 274.958552][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 274.979065][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 274.999300][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.020112][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.040790][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.061229][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.081680][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.102444][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.122741][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.143540][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.163952][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.184153][ T42] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 275.191904][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.211983][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.232345][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 275.232358][ T30] audit: type=1326 audit(275.203:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.267585][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.287961][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.314808][ T30] audit: type=1326 audit(275.233:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.338186][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.359276][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.396274][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.426329][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.466299][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.486399][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 275.503610][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.524023][ T30] audit: type=1326 audit(275.493:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.566312][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.576364][ T30] audit: type=1326 audit(275.523:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.639270][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.643678][ T30] audit: type=1326 audit(275.543:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.683619][ T42] usb 5-1: config index 0 descriptor too short (expected 64967, got 165) [ 275.696343][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.740159][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.756739][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.766881][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.767080][ T30] audit: type=1326 audit(275.583:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.798690][ T30] audit: type=1326 audit(275.603:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.821796][ T30] audit: type=1326 audit(275.733:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.844671][ T30] audit: type=1326 audit(275.773:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.844715][ T30] audit: type=1326 audit(275.803:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc1d89d34b code=0x7ffc0000 [ 275.897429][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.918162][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.938711][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.959293][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.979526][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 275.986511][ T42] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.016715][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.038639][ T3867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.887'. [ 276.077382][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.112911][ T42] usb 5-1: Product: syz [ 276.138598][ T42] usb 5-1: Manufacturer: syz [ 276.187981][ T42] usb 5-1: SerialNumber: syz [ 276.207153][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.389749][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.426254][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.454462][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.476083][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.499357][ T3869] device macsec0 entered promiscuous mode [ 276.518296][ T3841] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.539134][ T3841] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.568292][ T3855] loop4: detected capacity change from 0 to 256 [ 276.597859][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.640586][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.646688][ T3855] exfat: Deprecated parameter 'namecase' [ 276.667067][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.687912][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.707999][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.728929][ T3840] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 276.760127][ T3855] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 276.976632][ T3841] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 277.524114][ T3841] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 277.676802][ T3841] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 277.700218][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.891'. [ 278.158506][ T3893] loop4: detected capacity change from 0 to 256 [ 278.166221][ T42] usb 5-1: 0:2 : does not exist [ 278.181427][ T42] usb 5-1: USB disconnect, device number 18 [ 278.230099][ T3889] loop2: detected capacity change from 0 to 40427 [ 278.356372][ T3889] F2FS-fs (loop2): invalid crc value [ 278.388077][ T3889] F2FS-fs (loop2): Found nat_bits in checkpoint [ 278.413968][ T3905] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 278.436634][ T1254] udevd[1254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 278.447490][ T3906] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 278.476572][ T3889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 278.496181][ T6] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 278.644655][ T3916] loop4: detected capacity change from 0 to 128 [ 278.708066][ T3916] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 278.719776][ T1254] udevd[1254]: incorrect ext4 checksum on /dev/loop4 [ 278.888668][ T3916] loop4: detected capacity change from 0 to 4096 [ 278.906073][ T3916] EXT4-fs (loop4): Test dummy encryption mode enabled [ 278.923742][ T3916] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 278.938394][ T6] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 278.947477][ T3916] EXT4-fs (loop4): Test dummy encryption mode enabled [ 278.948688][ T6] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 278.972745][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.981562][ T3916] EXT4-fs (loop4): re-mounted. Opts: test_dummy_encryption=v1,dioread_nolock,. Quota mode: writeback. [ 279.026885][ T6] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 279.437742][ T42] usb 6-1: USB disconnect, device number 12 [ 279.770541][ T3942] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 279.815587][ T3945] syz.4.909[3945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.815644][ T3945] syz.4.909[3945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.827792][ T3945] syz.4.909[3945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.839114][ T3945] syz.4.909[3945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.851138][ T3945] netlink: 'syz.4.909': attribute type 12 has an invalid length. [ 279.870973][ T3945] syz.4.909[3945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.871019][ T3945] syz.4.909[3945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.061110][ T3951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.911'. [ 281.028283][ T3965] loop4: detected capacity change from 0 to 1024 [ 281.140265][ T3965] EXT4-fs (loop4): Ignoring removed bh option [ 281.147665][ T3965] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 281.147665][ T3965] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 281.147665][ T3965] [ 281.237257][ T3965] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,noacl,. Quota mode: writeback. [ 281.260375][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 281.260391][ T30] audit: type=1400 audit(281.203:2456): avc: denied { map } for pid=3971 comm="syz.2.916" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 281.309062][ T3976] incfs_lookup_dentry err:-13 [ 281.333938][ T3972] loop2: detected capacity change from 0 to 4096 [ 281.336646][ T30] audit: type=1400 audit(281.283:2457): avc: denied { ioctl } for pid=3975 comm="syz.5.917" path="/99/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 281.530257][ T3972] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 281.919251][ T3977] binder: 3971:3977 ioctl c0306201 2000000001c0 returned -14 [ 282.251450][ T30] audit: type=1326 audit(282.223:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.0.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 282.332998][ T30] audit: type=1326 audit(282.243:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.0.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 282.411251][ T30] audit: type=1326 audit(282.243:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.0.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 282.520340][ T30] audit: type=1326 audit(282.243:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.0.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 282.544478][ T30] audit: type=1326 audit(282.243:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.0.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 282.567621][ T30] audit: type=1326 audit(282.243:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.0.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 282.606171][ T30] audit: type=1326 audit(282.243:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3983 comm="syz.0.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 282.630403][ T3998] devtmpfs: Unknown parameter 'nr_inodes닳%]3v' [ 282.640538][ T4000] loop4: detected capacity change from 0 to 1024 [ 282.668529][ T4000] EXT4-fs (loop4): Ignoring removed orlov option [ 282.689706][ T30] audit: type=1400 audit(282.603:2465): avc: denied { mount } for pid=3994 comm="syz.5.922" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 282.716638][ T4000] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 282.925405][ T4006] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 282.932891][ T4006] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 283.353239][ T4016] netlink: 'syz.1.928': attribute type 3 has an invalid length. [ 283.361243][ T4016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 284.435232][ T4038] xt_TPROXY: Can be used only with -p tcp or -p udp [ 284.586797][ T4051] devtmpfs: Unknown parameter 'dirsyncm' [ 284.606159][ T340] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 285.042821][ T4062] loop2: detected capacity change from 0 to 512 [ 285.080742][ T4060] 9pnet: Insufficient options for proto=fd [ 285.139945][ T4062] EXT4-fs warning (device loop2): ext4_xattr_inode_get:509: inode #11: comm syz.2.937: EA inode hash validation failed [ 285.152741][ T4062] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #15: comm syz.2.937: corrupted inode contents [ 285.165083][ T4062] EXT4-fs error (device loop2): ext4_dirty_inode:6085: inode #15: comm syz.2.937: mark_inode_dirty error [ 285.176845][ T4062] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #15: comm syz.2.937: corrupted inode contents [ 285.189046][ T4062] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #15: comm syz.2.937: mark_inode_dirty error [ 285.201382][ T4062] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2974: inode #15: comm syz.2.937: mark inode dirty (error -117) [ 285.214231][ T4062] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 285.223561][ T340] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 285.232545][ T4062] EXT4-fs (loop2): 1 orphan inode deleted [ 285.238462][ T340] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 285.248781][ T4062] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 285.273386][ T340] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.492566][ T340] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.506273][ T340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.514534][ T340] usb 6-1: Product: syz [ 285.522302][ T340] usb 6-1: Manufacturer: syz [ 285.529671][ T340] usb 6-1: SerialNumber: syz [ 285.608681][ T4080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'. [ 285.929025][ T4083] loop4: detected capacity change from 0 to 256 [ 285.947177][ T4047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.934'. [ 285.980486][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 285.999689][ T4045] netlink: 44 bytes leftover after parsing attributes in process `syz.5.934'. [ 286.008645][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 286.014648][ T4083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 286.029116][ T4045] xt_hashlimit: max too large, truncated to 1048576 [ 286.041879][ T4090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 286.079157][ T4094] loop2: detected capacity change from 0 to 1024 [ 286.146237][ T340] usb 6-1: 0:2 : does not exist [ 286.156674][ T340] usb 6-1: USB disconnect, device number 13 [ 286.215238][ T4113] loop2: detected capacity change from 0 to 4096 [ 286.226864][ T4113] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 286.234380][ T4113] EXT4-fs (loop2): Test dummy encryption mode enabled [ 286.243259][ T4113] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 286.268012][ T4119] loop4: detected capacity change from 0 to 1024 [ 286.277688][ T4113] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,jqfmt=vfsold,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 286.303558][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 286.303571][ T30] audit: type=1400 audit(286.283:2504): avc: denied { mount } for pid=4112 comm="syz.2.951" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 286.331895][ T30] audit: type=1400 audit(286.283:2505): avc: denied { write } for pid=4112 comm="syz.2.951" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 286.364905][ T30] audit: type=1400 audit(286.283:2506): avc: denied { add_name } for pid=4112 comm="syz.2.951" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 286.389237][ T30] audit: type=1400 audit(286.303:2507): avc: denied { write } for pid=4121 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.409174][ T30] audit: type=1400 audit(286.303:2508): avc: denied { read } for pid=4121 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.442790][ T30] audit: type=1400 audit(286.333:2509): avc: denied { read write open } for pid=4112 comm="syz.2.951" path="/143/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 286.468230][ T4119] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.479733][ T30] audit: type=1400 audit(286.363:2510): avc: denied { create } for pid=4124 comm="syz.0.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.498805][ T30] audit: type=1400 audit(286.363:2511): avc: denied { write } for pid=4124 comm="syz.0.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.517817][ T30] audit: type=1400 audit(286.363:2512): avc: denied { read } for pid=4124 comm="syz.0.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.536260][ T3405] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 286.546649][ T30] audit: type=1400 audit(286.363:2513): avc: denied { execmem } for pid=4124 comm="syz.0.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 286.603886][ T4130] loop2: detected capacity change from 0 to 512 [ 286.773949][ T4130] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 286.906202][ T3405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.916450][ T3405] usb 2-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 286.925537][ T3405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.938529][ T3405] usb 2-1: config 0 descriptor?? [ 286.993392][ T4153] loop4: detected capacity change from 0 to 128 [ 287.035692][ T4160] loop2: detected capacity change from 0 to 4096 [ 287.048226][ T4160] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 287.055709][ T4160] EXT4-fs (loop2): Test dummy encryption mode enabled [ 287.062634][ T4160] EXT4-fs (loop2): Invalid want_extra_isize 8388676 [ 287.098736][ T4153] device veth0_vlan left promiscuous mode [ 287.104938][ T4153] device veth0_vlan entered promiscuous mode [ 287.112787][ T4153] device veth1_macvtap left promiscuous mode [ 287.120174][ T4153] device veth1_macvtap entered promiscuous mode [ 287.145163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.154720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.162420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.170882][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.177926][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.185370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.193881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.203015][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.210089][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.264880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.274410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): 77: link becomes ready [ 287.284005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.293342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 287.302882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.369118][ T3412] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 287.386326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.401384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.417195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.435512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.451372][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.461564][ T3405] wacom 0003:056A:00D0.000F: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 287.471753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.481459][ T3405] wacom 0003:056A:00D0.000F: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.1-1/input0 [ 287.493271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.502269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.511571][ T3405] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D0.000F/input/input16 [ 287.524138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.534380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.542734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.551848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.561189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.569741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.578345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.586527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.594533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.614478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.633396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.650376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.673879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.683272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.746231][ T3412] usb 6-1: config 9 has an invalid interface number: 203 but max is 0 [ 287.758928][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.766174][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.773619][ T3412] usb 6-1: config 9 has no interface number 0 [ 287.780458][ T3412] usb 6-1: config 9 interface 203 has no altsetting 0 [ 287.888712][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 287.898176][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 287.907678][ T6] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 287.915199][ T6] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 287.922845][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 287.936208][ T20] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 287.946398][ T3412] usb 6-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=f9.30 [ 287.964849][ T3412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.973386][ T3412] usb 6-1: Product: syz [ 287.977699][ T3412] usb 6-1: Manufacturer: syz [ 287.982300][ T3412] usb 6-1: SerialNumber: syz [ 287.989110][ T6] usb 2-1: USB disconnect, device number 23 [ 288.056294][ T340] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 288.183444][ T4192] loop2: detected capacity change from 0 to 1024 [ 288.231013][ T4151] UDC core: couldn't find an available UDC or it's busy: -16 [ 288.239108][ T4192] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 288.269807][ T4151] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 288.309919][ T4192] EXT4-fs (loop2): Ignoring removed oldalloc option [ 288.408912][ T3412] usb 6-1: USB disconnect, device number 14 [ 288.465291][ T4192] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.477533][ T340] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 288.528507][ T4192] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,nomblk_io_submit,noauto_da_alloc,data_err=ignore,nogrpid,oldalloc,grpquota,delalloc,grpid,jqfmt=vfsv1,errors=remount-ro,. Quota mode: writeback. [ 288.697110][ T6] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 288.719006][ T4200] netlink: 9 bytes leftover after parsing attributes in process `syz.1.974'. [ 288.731565][ T4200] device gretap0 entered promiscuous mode [ 288.738495][ T4200] netlink: 5 bytes leftover after parsing attributes in process `syz.1.974'. [ 288.747697][ T4200] 0{X: renamed from gretap0 [ 288.753806][ T4200] device 30{X left promiscuous mode [ 288.760203][ T4200] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 288.900654][ T4210] netlink: 24 bytes leftover after parsing attributes in process `syz.5.978'. [ 288.911303][ T4214] futex_wake_op: syz.2.977 tries to shift op by -1; fix this program [ 288.936551][ T340] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 288.949645][ T4216] loop4: detected capacity change from 0 to 512 [ 288.970572][ T4216] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.980: bad orphan inode 13 [ 288.984034][ T4216] ext4_test_bit(bit=12, block=4) = 1 [ 288.989582][ T4216] is_bad_inode(inode)=0 [ 288.993924][ T4216] NEXT_ORPHAN(inode)=0 [ 288.998304][ T4216] max_ino=32 [ 289.001537][ T4216] i_nlink=1 [ 289.004824][ T4216] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.027587][ T4216] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.980: Unrecognised inode hash code 20 [ 289.039191][ T4216] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.980: Corrupt directory, running e2fsck is recommended [ 289.086145][ T6] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 289.251727][ T4230] loop4: detected capacity change from 0 to 512 [ 289.353269][ T4230] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 289.414424][ T4230] EXT4-fs (loop4): invalid journal inode [ 289.423266][ T4230] EXT4-fs (loop4): can't get journal size [ 289.438885][ T4230] EXT4-fs (loop4): 1 truncate cleaned up [ 289.445227][ T4230] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,sysvgroups,lazytime,,errors=continue. Quota mode: writeback. [ 290.187585][ T340] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 290.316198][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 290.436245][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.447244][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.457135][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 290.466274][ T332] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 290.473969][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.483542][ T6] usb 2-1: config 0 descriptor?? [ 290.566248][ T340] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.577209][ T340] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 290.716185][ T332] usb 6-1: Using ep0 maxpacket: 16 [ 290.746323][ T340] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.755475][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.763643][ T340] usb 3-1: Product: syz [ 290.767886][ T340] usb 3-1: Manufacturer: syz [ 290.772516][ T340] usb 3-1: SerialNumber: syz [ 290.816802][ T340] cdc_mbim 3-1:1.0: skipping garbage [ 290.855385][ T332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.866884][ T332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.876827][ T332] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 290.885871][ T332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.895912][ T332] usb 6-1: config 0 descriptor?? [ 290.967027][ T6] apple 0003:05AC:024B.0010: unknown global tag 0xe [ 290.973719][ T6] apple 0003:05AC:024B.0010: item 0 1 1 14 parsing failed [ 290.981101][ T6] apple 0003:05AC:024B.0010: parse failed [ 290.987098][ T6] apple: probe of 0003:05AC:024B.0010 failed with error -22 [ 291.504520][ T4208] input: syz1 as /devices/virtual/input/input20 [ 291.510997][ T340] cdc_mbim 3-1:1.0: bind() failure [ 291.517063][ T340] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 291.524614][ T340] cdc_ncm 3-1:1.1: bind() failure [ 291.548550][ T340] usb 3-1: USB disconnect, device number 28 [ 291.570504][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 291.570520][ T30] audit: type=1400 audit(291.543:2579): avc: denied { create } for pid=4266 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.596694][ T30] audit: type=1400 audit(291.543:2580): avc: denied { write } for pid=4266 comm="syz.0.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.675447][ T30] audit: type=1400 audit(291.643:2581): avc: denied { ioctl } for pid=4264 comm="syz.2.994" path="socket:[29852]" dev="sockfs" ino=29852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 291.723278][ T4276] netlink: 624 bytes leftover after parsing attributes in process `syz.4.996'. [ 291.761018][ T30] audit: type=1400 audit(291.643:2582): avc: denied { write } for pid=4264 comm="syz.2.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 291.789953][ T6] usb 2-1: USB disconnect, device number 24 [ 291.816479][ T4290] netlink: 24 bytes leftover after parsing attributes in process `syz.5.991'. [ 291.852875][ T332] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 292.076451][ T3412] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 292.076683][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 292.175205][ T4300] fuse: blksize only supported for fuseblk [ 292.194390][ T30] audit: type=1400 audit(292.163:2583): avc: denied { bind } for pid=4304 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.316432][ T30] audit: type=1400 audit(292.293:2584): avc: denied { setopt } for pid=4304 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.376262][ T3412] usb 3-1: Using ep0 maxpacket: 16 [ 292.460887][ T4313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1004'. [ 292.526209][ T3412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 292.562390][ T4316] loop4: detected capacity change from 0 to 40427 [ 292.621767][ T4316] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:5, blkofs:5 [ 292.636666][ T4316] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 292.696632][ T3412] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 292.705767][ T3412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.713803][ T3412] usb 3-1: Product: syz [ 292.717999][ T3412] usb 3-1: Manufacturer: syz [ 292.722604][ T3412] usb 3-1: SerialNumber: syz [ 292.728209][ T3412] usb 3-1: config 0 descriptor?? [ 292.766607][ T3412] hub 3-1:0.0: bad descriptor, ignoring hub [ 292.772552][ T3412] hub: probe of 3-1:0.0 failed with error -5 [ 292.779272][ T3412] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 292.788285][ T30] audit: type=1400 audit(292.763:2585): avc: denied { audit_write } for pid=4314 comm="syz.4.1005" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.809258][ T30] audit: type=1107 audit(292.763:2586): pid=4314 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#' [ 292.926777][ T30] audit: type=1400 audit(292.903:2587): avc: denied { mounton } for pid=4321 comm="syz.4.1006" path="/193/file0" dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 292.968334][ T4288] syz.2.999[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.968409][ T4288] syz.2.999[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.980169][ T4288] syz.2.999[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.991592][ T4288] syz.2.999[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.003199][ T4288] syz.2.999[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.014503][ T4288] syz.2.999[4288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.070833][ T30] audit: type=1400 audit(293.043:2588): avc: denied { mount } for pid=4330 comm="syz.0.1008" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 293.146239][ T3412] usb 3-1: USB disconnect, device number 29 [ 293.209931][ T3412] usb 6-1: USB disconnect, device number 15 [ 293.223289][ T4338] loop5: detected capacity change from 0 to 512 [ 293.278045][ T4338] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.290191][ T4338] EXT4-fs (loop5): orphan cleanup on readonly fs [ 293.300163][ T4338] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 293.314750][ T4338] EXT4-fs error (device loop5): ext4_acquire_dquot:6200: comm syz.5.1010: Failed to acquire dquot type 0 [ 293.329652][ T4338] EXT4-fs (loop5): 1 truncate cleaned up [ 293.335613][ T4338] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,nogrpid,resgid=0x0000000000000000,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 293.449670][ T4338] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback. [ 294.138418][ T4402] device vlan0 left promiscuous mode [ 294.144360][ T4403] loop5: detected capacity change from 0 to 16 [ 294.170096][ T4403] erofs: (device loop5): mounted with root inode @ nid 36. [ 294.267659][ T4405] loop5: detected capacity change from 0 to 1024 [ 294.276390][ T332] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 294.313873][ T4405] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,dioread_lock,errors=remount-ro,. Quota mode: writeback. [ 294.386177][ T6] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 294.542047][ T4411] SELinux: failed to load policy [ 294.596159][ T332] usb 2-1: device descriptor read/64, error -71 [ 294.627843][ T4417] loop2: detected capacity change from 0 to 4096 [ 294.646180][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 294.668670][ T4417] EXT4-fs (loop2): Test dummy encryption mode enabled [ 294.692114][ T4417] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 294.700502][ T4417] System zones: 0-5 [ 294.705113][ T4417] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 294.786310][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.798682][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.809005][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 294.822749][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 294.835980][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.848595][ T6] usb 5-1: config 0 descriptor?? [ 294.911069][ T4426] loop2: detected capacity change from 0 to 2048 [ 294.996148][ T332] usb 2-1: device descriptor read/64, error -71 [ 295.117776][ T4429] 9pnet: Insufficient options for proto=fd [ 295.266209][ T332] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 295.372864][ T4436] loop5: detected capacity change from 0 to 128 [ 295.381558][ T4436] FAT-fs (loop5): Unrecognized mount option "nodotekask=0 000000000000000000003" or missing value [ 295.466197][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 295.472193][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 295.483049][ T6] usb 5-1: USB disconnect, device number 19 [ 295.496211][ T20] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 295.556215][ T332] usb 2-1: device descriptor read/64, error -71 [ 295.707264][ T4456] xt_bpf: check failed: parse error [ 295.767676][ T4457] syz.5.1041[4457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.767779][ T4457] syz.5.1041[4457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.866205][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.888058][ T20] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 295.897655][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.906777][ T20] usb 3-1: config 0 descriptor?? [ 295.956435][ T332] usb 2-1: device descriptor read/64, error -71 [ 296.038528][ T4459] loop4: detected capacity change from 0 to 40427 [ 296.076234][ T332] usb usb2-port1: attempt power cycle [ 296.085477][ T4459] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 296.093315][ T4459] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 296.106427][ T4459] F2FS-fs (loop4): invalid crc value [ 296.115299][ T4459] F2FS-fs (loop4): Found nat_bits in checkpoint [ 296.144843][ T4459] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 296.152001][ T4459] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 296.299947][ T4465] incfs: Error accessing: ./file0. [ 296.305178][ T4465] incfs: mount failed -2 [ 296.325525][ T4467] loop4: detected capacity change from 0 to 128 [ 296.377241][ T20] smartjoyplus 0003:0925:8866.0012: item fetching failed at offset 5/7 [ 296.386052][ T20] smartjoyplus 0003:0925:8866.0012: parse failed [ 296.408243][ T20] smartjoyplus: probe of 0003:0925:8866.0012 failed with error -22 [ 296.516149][ T332] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 296.548145][ T4475] loop5: detected capacity change from 0 to 16 [ 296.588000][ T6] usb 3-1: USB disconnect, device number 30 [ 296.591816][ T4475] erofs: (device loop5): mounted with root inode @ nid 36. [ 296.603269][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 296.603284][ T30] audit: type=1400 audit(296.573:2608): avc: denied { map } for pid=4474 comm="syz.5.1047" path="/123/file1/file2" dev="loop5" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 296.617814][ T48] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.631857][ T30] audit: type=1400 audit(296.593:2609): avc: denied { execute } for pid=4474 comm="syz.5.1047" path="/123/file1/file2" dev="loop5" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 296.674819][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.696235][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.716603][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.736184][ T3412] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 296.744850][ T332] usb 2-1: device descriptor read/8, error -71 [ 296.751182][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.771781][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.792500][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.812530][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.832820][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.852709][ T4475] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.873418][ T4475] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.893982][ T4475] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.914813][ T4475] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.936174][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 296.956634][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.009387][ T4475] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.026490][ T3412] usb 5-1: device descriptor read/64, error -71 [ 297.036314][ T332] usb 2-1: device descriptor read/8, error -71 [ 297.076329][ T4475] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.116225][ T4475] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.190537][ T4475] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.226283][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.259926][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.296391][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.336637][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.376211][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.417622][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.446156][ T3412] usb 5-1: device descriptor read/64, error -71 [ 297.463435][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.497375][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.538199][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.576819][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.616340][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.657397][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.706298][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.726200][ T3412] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 297.764507][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.794985][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.816287][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.856315][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.896289][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.931211][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 297.957128][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 298.004808][ T30] audit: type=1400 audit(297.973:2610): avc: denied { bind } for pid=4501 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 298.073662][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 298.082597][ T3412] usb 5-1: device descriptor read/64, error -71 [ 298.136541][ T30] audit: type=1400 audit(297.973:2611): avc: denied { name_bind } for pid=4501 comm="syz.0.1055" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 298.146288][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 298.280403][ T30] audit: type=1400 audit(297.983:2612): avc: denied { node_bind } for pid=4501 comm="syz.0.1055" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 298.307102][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 298.526323][ T3412] usb 5-1: device descriptor read/64, error -71 [ 298.556385][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 298.656480][ T3412] usb usb5-port1: attempt power cycle [ 298.679406][ T30] audit: type=1400 audit(298.653:2613): avc: denied { write } for pid=4505 comm="syz.2.1056" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 298.712703][ T4506] usb usb8: usbfs: process 4506 (syz.2.1056) did not claim interface 0 before use [ 298.929956][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.021595][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.071812][ T4506] loop2: detected capacity change from 0 to 8192 [ 299.116196][ T3412] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 299.124263][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.175356][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.219025][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.247356][ T30] audit: type=1400 audit(299.223:2614): avc: denied { mount } for pid=4514 comm="syz.1.1060" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 299.273225][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.273957][ T4517] loop2: detected capacity change from 0 to 128 [ 299.301652][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.329114][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.349375][ T3412] usb 5-1: device descriptor read/8, error -71 [ 299.356639][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.377613][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.457810][ T4522] 9pnet: Could not find request transport: xen [ 299.462999][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.496300][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 299.496316][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 299.509694][ T4474] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 299.561151][ T30] audit: type=1400 audit(299.533:2615): avc: denied { setopt } for pid=4524 comm="syz.4.1064" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.596188][ T3412] usb 5-1: device descriptor read/8, error -71 [ 299.687904][ T30] audit: type=1400 audit(299.663:2616): avc: denied { write } for pid=4524 comm="syz.4.1064" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.726477][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1065'. [ 300.247617][ T30] audit: type=1400 audit(300.223:2617): avc: denied { bind } for pid=4550 comm="syz.5.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.776401][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 301.141608][ T3412] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 301.620633][ T4586] loop5: detected capacity change from 0 to 512 [ 301.656306][ T3412] usb 5-1: Using ep0 maxpacket: 8 [ 301.662261][ T4586] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 301.671265][ T4586] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 301.714085][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 301.714098][ T30] audit: type=1400 audit(301.683:2619): avc: denied { connect } for pid=4591 comm="syz.2.1082" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.749001][ T4586] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 301.767118][ T30] audit: type=1400 audit(301.723:2620): avc: denied { mac_admin } for pid=4584 comm="syz.5.1080" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.776286][ T3412] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 301.806004][ T3412] usb 5-1: config 179 has no interface number 0 [ 301.809644][ T30] audit: type=1400 audit(301.743:2621): avc: denied { relabelto } for pid=4584 comm="syz.5.1080" name="127" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 301.816572][ T3412] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 301.867451][ T30] audit: type=1400 audit(301.743:2622): avc: denied { associate } for pid=4584 comm="syz.5.1080" name="127" dev="tmpfs" ino=726 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 301.879524][ T3412] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 301.916156][ T3405] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 301.938534][ T3412] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 301.950199][ T3412] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 301.978156][ T3412] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 302.001899][ T3412] usb 5-1: config 179 interface 65 has no altsetting 0 [ 302.022118][ T3412] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 302.042294][ T3412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.063608][ T30] audit: type=1400 audit(302.033:2623): avc: denied { write } for pid=1919 comm="syz-executor" name="127" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 302.089399][ T30] audit: type=1400 audit(302.033:2624): avc: denied { remove_name } for pid=1919 comm="syz-executor" name="file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 302.117950][ T3412] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input21 [ 302.156235][ T30] audit: type=1400 audit(302.033:2625): avc: denied { rmdir } for pid=1919 comm="syz-executor" name="127" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 302.196141][ T3405] usb 2-1: device descriptor read/64, error -71 [ 302.325704][ T3412] usb 5-1: USB disconnect, device number 24 [ 302.336173][ T3412] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 302.596161][ T3405] usb 2-1: device descriptor read/64, error -71 [ 302.697781][ T30] audit: type=1400 audit(302.673:2626): avc: denied { mount } for pid=4611 comm="syz.0.1087" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 302.847425][ T4615] loop4: detected capacity change from 0 to 1024 [ 302.866168][ T332] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 302.866183][ T3405] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 303.176216][ T3405] usb 2-1: device descriptor read/64, error -71 [ 303.277726][ T4627] loop5: detected capacity change from 0 to 128 [ 303.345263][ T4627] attempt to access beyond end of device [ 303.345263][ T4627] loop5: rw=2049, want=250, limit=128 [ 303.358093][ T30] audit: type=1326 audit(303.333:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e1a8749 code=0x7ffc0000 [ 303.381537][ T332] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 303.386409][ T4627] attempt to access beyond end of device [ 303.386409][ T4627] loop5: rw=2049, want=140, limit=128 [ 303.390787][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.410321][ T30] audit: type=1326 audit(303.333:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm="syz.5.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e1a8749 code=0x7ffc0000 [ 303.433805][ T332] usb 3-1: config 0 descriptor?? [ 303.501963][ T4629] fuse: Bad value for 'fd' [ 303.555280][ T4629] fuse: Bad value for 'group_id' [ 303.686218][ T332] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 303.706192][ T332] asix: probe of 3-1:0.0 failed with error -32 [ 303.865123][ T3405] usb 2-1: device descriptor read/64, error -71 [ 303.889112][ T4610] loop2: detected capacity change from 0 to 40427 [ 303.898425][ T4610] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 303.912565][ T4610] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 303.921075][ T4610] F2FS-fs (loop2): fault_injection options not supported [ 303.928823][ T4610] F2FS-fs (loop2): fault_type options not supported [ 304.014652][ T3405] usb usb2-port1: attempt power cycle [ 304.109035][ T4610] F2FS-fs (loop2): invalid crc value [ 304.196287][ T4610] F2FS-fs (loop2): Found nat_bits in checkpoint [ 304.284019][ T4610] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 304.291140][ T4610] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 304.329260][ T42] usb 3-1: USB disconnect, device number 31 [ 304.337213][ T285] attempt to access beyond end of device [ 304.337213][ T285] loop2: rw=2049, want=45104, limit=40427 [ 304.395993][ T4658] loop4: detected capacity change from 0 to 40427 [ 304.456413][ T4658] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 304.466371][ T4658] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 304.474747][ T4658] F2FS-fs (loop4): Unrecognized mount option "checkpoint<=disable" or missing value [ 304.486564][ T3405] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 304.602902][ T4680] loop4: detected capacity change from 0 to 256 [ 304.656173][ T3405] usb 2-1: device descriptor read/8, error -71 [ 304.673978][ T4678] loop2: detected capacity change from 0 to 40427 [ 304.723534][ T4678] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 304.743776][ T4678] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 304.767669][ T4678] F2FS-fs (loop2): invalid crc value [ 304.812283][ T4678] F2FS-fs (loop2): Found nat_bits in checkpoint [ 304.821617][ T4700] fuse: Unknown parameter 'f_[ Z' [ 304.828179][ T4700] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 304.839538][ T4700] incfs: Options parsing error. -22 [ 304.844829][ T4700] incfs: mount failed -22 [ 304.876153][ T3405] usb 2-1: device descriptor read/8, error -71 [ 304.883978][ T4708] syz.0.1114[4708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.884055][ T4708] syz.0.1114[4708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.899713][ T4678] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 304.918917][ T4678] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 304.959546][ T4678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4678 comm=syz.2.1106 [ 305.822937][ T4713] loop5: detected capacity change from 0 to 256 [ 305.907147][ T4713] FAT-fs (loop5): bogus number of FAT sectors [ 305.936174][ T4713] FAT-fs (loop5): Can't find a valid FAT filesystem [ 305.976015][ T4715] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 306.060343][ T4718] SELinux: Context @ is not valid (left unmapped). [ 306.166161][ T332] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 306.586425][ T332] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 306.610103][ T332] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 306.684173][ T332] usb 3-1: config 0 interface 0 has no altsetting 0 [ 306.886422][ T332] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 306.917367][ T332] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 306.925702][ T332] usb 3-1: Product: syz [ 306.952446][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 306.952470][ T30] audit: type=1400 audit(306.923:2711): avc: denied { unlink } for pid=284 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=1748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 307.257380][ T332] usb 3-1: Manufacturer: syz [ 307.262026][ T332] usb 3-1: SerialNumber: syz [ 307.267518][ T332] usb 3-1: config 0 descriptor?? [ 307.306564][ T332] hub 3-1:0.0: bad descriptor, ignoring hub [ 307.312521][ T332] hub: probe of 3-1:0.0 failed with error -5 [ 307.326748][ T332] usb 3-1: selecting invalid altsetting 0 [ 307.401606][ T4731] loop5: detected capacity change from 0 to 40427 [ 307.426741][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 307.521568][ T4731] F2FS-fs (loop5): Found nat_bits in checkpoint [ 307.743447][ T4731] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 307.772964][ T30] audit: type=1400 audit(307.743:2712): avc: denied { read write } for pid=4679 comm="syz.4.1107" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 307.802457][ T4740] netlink: 'syz.4.1107': attribute type 8 has an invalid length. [ 307.966290][ T42] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 308.072630][ T30] audit: type=1400 audit(307.773:2713): avc: denied { open } for pid=4679 comm="syz.4.1107" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 308.125372][ T4731] F2FS-fs (loop5): Unrecognized mount option "H8" or missing value [ 308.256348][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 308.333920][ T4731] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1121'. [ 308.386493][ T42] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 308.397481][ T4680] attempt to access beyond end of device [ 308.397481][ T4680] loop4: rw=2049, want=544, limit=256 [ 308.425618][ T42] usb 2-1: config 0 has an invalid interface number: 150 but max is 64 [ 308.447573][ T30] audit: type=1326 audit(308.173:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 308.535749][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.559051][ T4680] attempt to access beyond end of device [ 308.559051][ T4680] loop4: rw=2049, want=1024, limit=256 [ 308.649653][ T332] usb 3-1: USB disconnect, device number 32 [ 308.663926][ T1919] attempt to access beyond end of device [ 308.663926][ T1919] loop5: rw=2049, want=45104, limit=40427 [ 308.671408][ T42] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 308.675678][ T30] audit: type=1326 audit(308.173:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 308.698594][ T4680] attempt to access beyond end of device [ 308.698594][ T4680] loop4: rw=2049, want=4104, limit=256 [ 308.721089][ T42] usb 2-1: config 0 has no interface number 0 [ 308.728057][ T42] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.746155][ T30] audit: type=1326 audit(308.173:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 308.748279][ T42] usb 2-1: config 0 interface 150 has no altsetting 0 [ 308.799895][ T30] audit: type=1326 audit(308.183:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 308.806678][ T42] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 308.848810][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.849442][ T30] audit: type=1326 audit(308.183:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8165a27749 code=0x7ffc0000 [ 308.886542][ T42] usb 2-1: config 0 descriptor?? [ 308.908117][ T30] audit: type=1326 audit(308.193:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8165a29667 code=0x7ffc0000 [ 308.931396][ T30] audit: type=1326 audit(308.193:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4755 comm="syz.0.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8165a295dc code=0x7ffc0000 [ 309.003934][ T4774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.240190][ T332] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 309.849557][ T4801] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1138'. [ 309.859147][ T332] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.946223][ T332] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 309.959317][ T332] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 310.156246][ T332] usb 3-1: New USB device found, idVendor=04b8, idProduct=1222, bcdDevice= 0.40 [ 310.165719][ T332] usb 3-1: New USB device strings: Mfr=1, Product=11, SerialNumber=3 [ 310.174119][ T332] usb 3-1: Product: syz [ 310.185726][ T332] usb 3-1: Manufacturer: syz [ 310.195643][ T332] usb 3-1: SerialNumber: syz [ 310.261282][ T4807] tap0: tun_chr_ioctl cmd 1074025677 [ 310.266773][ T4807] tap0: linktype set to 805 [ 310.271903][ T4807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1141'. [ 310.306192][ T3405] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.413937][ T4814] loop4: detected capacity change from 0 to 512 [ 310.435968][ T4814] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.1144: corrupted in-inode xattr [ 310.448521][ T4814] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1144: couldn't read orphan inode 15 (err -117) [ 310.461140][ T4814] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,abort,noload,delalloc,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 310.529450][ T332] usb 3-1: USB disconnect, device number 33 [ 310.540967][ T3405] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.554173][ T42] usb 2-1: USB disconnect, device number 33 [ 310.583562][ T4822] tipc: Enabling of bearer rejected, failed to enable media [ 310.635290][ T4828] tipc: Failed to remove unknown binding: 66,1,1/0:3435173869/3435173871 [ 310.649407][ T4828] tipc: Failed to remove unknown binding: 66,1,1/0:3435173869/3435173871 [ 310.665649][ T4841] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1151'. [ 310.704865][ T4843] kvm [4842]: vcpu0, guest rIP: 0x9138 disabled perfctr wrmsr: 0xc1 data 0x60000000 [ 310.715654][ T4843] kvm [4842]: vcpu0, guest rIP: 0x9138 disabled perfctr wrmsr: 0xc2 data 0x60000000 [ 310.732961][ T4843] kvm [4842]: vcpu0, guest rIP: 0x9138 ignored wrmsr: 0x11e data 0x60000000 [ 310.746943][ T4843] kvm [4842]: vcpu0, guest rIP: 0x9138 disabled perfctr wrmsr: 0x186 data 0x60000000 [ 310.767000][ T4843] kvm [4842]: vcpu0, guest rIP: 0x9138 disabled perfctr wrmsr: 0x187 data 0x60000000 [ 310.787149][ T1254] udevd[1254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.150/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 310.838324][ T4854] overlayfs: failed to resolve './file0': -2 [ 310.883392][ T4857] loop5: detected capacity change from 0 to 256 [ 311.116235][ T4857] FAT-fs (loop5): Directory bread(block 64) failed [ 311.123376][ T4857] FAT-fs (loop5): Directory bread(block 65) failed [ 311.130903][ T4857] FAT-fs (loop5): Directory bread(block 66) failed [ 311.137461][ T4857] FAT-fs (loop5): Directory bread(block 67) failed [ 311.144006][ T4857] FAT-fs (loop5): Directory bread(block 68) failed [ 311.150558][ T4857] FAT-fs (loop5): Directory bread(block 69) failed [ 311.157139][ T4857] FAT-fs (loop5): Directory bread(block 70) failed [ 311.163668][ T4857] FAT-fs (loop5): Directory bread(block 71) failed [ 311.170257][ T4857] FAT-fs (loop5): Directory bread(block 72) failed [ 311.176792][ T4857] FAT-fs (loop5): Directory bread(block 73) failed [ 312.476506][ T332] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 312.671487][ T4873] overlayfs: './file0' not a directory [ 312.868605][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 312.868620][ T30] audit: type=1400 audit(312.843:2754): avc: denied { unlink } for pid=284 comm="syz-executor" name="file0" dev="tmpfs" ino=1836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.971453][ T4898] loop5: detected capacity change from 0 to 512 [ 312.986259][ T332] usb 3-1: Using ep0 maxpacket: 32 [ 313.014553][ T4898] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 313.109666][ T4898] fscrypt (loop5, inode 18): Direct key flag not allowed with different contents and filenames modes [ 313.366185][ T332] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.386426][ T4912] 9pnet: Insufficient options for proto=fd [ 313.472621][ T4916] loop5: detected capacity change from 0 to 512 [ 313.491054][ T4916] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 313.500342][ T4916] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 313.510330][ T4916] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 313.519909][ T4916] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 313.533996][ T4916] System zones: 0-2, 18-18, 34-35 [ 313.540345][ T4916] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.606193][ T332] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 313.616142][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.628316][ T332] usb 3-1: Product: syz [ 313.630286][ T30] audit: type=1400 audit(313.603:2755): avc: denied { getopt } for pid=4918 comm="syz.1.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.632567][ T332] usb 3-1: Manufacturer: syz [ 313.656514][ T332] usb 3-1: SerialNumber: syz [ 313.662253][ T332] usb 3-1: config 0 descriptor?? [ 313.686781][ T30] audit: type=1400 audit(313.663:2756): avc: denied { mount } for pid=4922 comm="syz.1.1172" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 313.710594][ T30] audit: type=1400 audit(313.683:2757): avc: denied { unmount } for pid=4922 comm="syz.1.1172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 313.717174][ T332] plusb: probe of 3-1:0.0 failed with error -22 [ 313.916219][ T30] audit: type=1400 audit(313.893:2758): avc: denied { write } for pid=4926 comm="syz.0.1174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 313.917688][ T4927] fuse: Unknown parameter '00008000000000040000' [ 313.956525][ T4927] 9pnet: Insufficient options for proto=fd [ 313.976475][ T30] audit: type=1400 audit(313.923:2759): avc: denied { map } for pid=4863 comm="syz.2.1157" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.999993][ T30] audit: type=1400 audit(313.923:2760): avc: denied { call } for pid=4863 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 314.037693][ T30] audit: type=1400 audit(314.013:2761): avc: denied { ioctl } for pid=4940 comm="syz.4.1179" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 314.064999][ T4944] incfs: Options parsing error. -22 [ 314.071402][ T4944] incfs: mount failed -22 [ 314.138724][ T1035] Bluetooth: hci0: Frame reassembly failed (-84) [ 314.216173][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 314.487361][ T30] audit: type=1400 audit(314.463:2762): avc: denied { getopt } for pid=4963 comm="syz.5.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.512056][ T4964] loop5: detected capacity change from 0 to 256 [ 314.546284][ T4964] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 314.619172][ T30] audit: type=1400 audit(314.593:2763): avc: denied { setattr } for pid=4963 comm="syz.5.1184" name="file0" dev="loop5" ino=1048651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.708661][ T4971] overlayfs: failed to clone upperpath [ 315.003049][ T6] usb 3-1: USB disconnect, device number 34 [ 315.650492][ T4988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4988 comm=syz.0.1190 [ 315.828163][ T4989] loop2: detected capacity change from 0 to 512 [ 315.915288][ T4989] EXT4-fs (loop2): 1 orphan inode deleted [ 315.921129][ T4989] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,nojournal_checksum,data_err=abort,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 316.226151][ T366] Bluetooth: hci0: command 0x1003 tx timeout [ 316.232283][ T3713] Bluetooth: hci0: sending frame failed (-49) [ 316.772375][ T5008] loop5: detected capacity change from 0 to 512 [ 316.786199][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 316.849285][ T5008] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 317.188952][ T5017] loop5: detected capacity change from 0 to 128 [ 317.435963][ T5017] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.155746][ T5025] loop5: detected capacity change from 0 to 16 [ 318.195073][ T5025] erofs: Unknown parameter 'c@' [ 318.243836][ T5029] tc_dump_action: action bad kind [ 318.296143][ T366] Bluetooth: hci0: command 0x1001 tx timeout [ 318.303119][ T3713] Bluetooth: hci0: sending frame failed (-49) [ 318.463209][ T5037] netlink: 'syz.2.1204': attribute type 12 has an invalid length. [ 318.538852][ T5042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1206'. [ 318.574035][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 318.574052][ T30] audit: type=1400 audit(318.543:2765): avc: denied { read } for pid=5032 comm="syz.5.1203" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 318.629736][ T30] audit: type=1400 audit(318.543:2766): avc: denied { open } for pid=5032 comm="syz.5.1203" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 318.704358][ T30] audit: type=1326 audit(318.673:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d3b4749 code=0x7ffc0000 [ 318.731139][ T30] audit: type=1326 audit(318.703:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f839d3b4749 code=0x7ffc0000 [ 318.758188][ T5052] loop2: detected capacity change from 0 to 512 [ 318.766438][ T30] audit: type=1326 audit(318.703:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d3b4749 code=0x7ffc0000 [ 318.789628][ T30] audit: type=1326 audit(318.703:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f839d3b4749 code=0x7ffc0000 [ 318.814562][ T30] audit: type=1326 audit(318.703:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d3b4749 code=0x7ffc0000 [ 318.841614][ T5052] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 318.858051][ T30] audit: type=1326 audit(318.703:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f839d3b4749 code=0x7ffc0000 [ 318.881648][ T5052] EXT4-fs (loop2): 1 truncate cleaned up [ 318.887377][ T5052] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,noquota,grpid,init_itable,. Quota mode: none. [ 318.918055][ T30] audit: type=1326 audit(318.703:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d3b4749 code=0x7ffc0000 [ 318.941226][ T30] audit: type=1326 audit(318.703:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.2.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f839d3b4749 code=0x7ffc0000 [ 319.081571][ T5073] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1215'. [ 319.094306][ T5073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'. [ 319.658019][ T5078] loop5: detected capacity change from 0 to 512 [ 319.698175][ T5078] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 319.989130][ T5083] loop5: detected capacity change from 0 to 40427 [ 320.005914][ T5083] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 320.016197][ T5083] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 320.025982][ T5083] F2FS-fs (loop5): invalid crc value [ 320.034066][ T5083] F2FS-fs (loop5): Found nat_bits in checkpoint [ 320.222991][ T5083] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 320.246581][ T5083] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 320.351934][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1217'. [ 320.376152][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 320.470240][ T5107] loop2: detected capacity change from 0 to 1024 [ 320.481502][ T5107] EXT4-fs (loop2): Ignoring removed nobh option [ 320.488343][ T5107] EXT4-fs (loop2): Ignoring removed bh option [ 320.507467][ T5107] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 320.640132][ T5107] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1223: Allocating blocks 449-513 which overlap fs metadata [ 320.776895][ T5129] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 321.026148][ T366] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 321.136157][ T6] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 321.266158][ T366] usb 3-1: Using ep0 maxpacket: 8 [ 321.386215][ T366] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 321.396535][ T366] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 321.405669][ T366] usb 3-1: config 1 has no interface number 1 [ 321.411783][ T366] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 321.420990][ T366] usb 3-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 321.431796][ T366] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 321.496395][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 321.507376][ T6] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 321.516539][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.525164][ T6] usb 6-1: config 0 descriptor?? [ 321.546235][ T5136] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 321.596230][ T366] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.605324][ T366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.613345][ T366] usb 3-1: Product: syz [ 321.617563][ T366] usb 3-1: Manufacturer: syz [ 321.622157][ T366] usb 3-1: SerialNumber: syz [ 321.896290][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.966219][ T366] usb 3-1: 0:8 : does not exist [ 321.978600][ T366] usb 3-1: USB disconnect, device number 35 [ 321.986643][ T5136] UDC core: couldn't find an available UDC or it's busy: -16 [ 321.994050][ T5136] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 322.008260][ T6] hid-generic 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 322.229110][ T20] usb 6-1: USB disconnect, device number 16 [ 322.650294][ T5153] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1237'. [ 322.666134][ T42] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 322.832154][ T5167] loop5: detected capacity change from 0 to 128 [ 322.906145][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 322.914815][ T5167] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.946277][ T42] usb 3-1: no configurations [ 322.950909][ T42] usb 3-1: can't read configurations, error -22 [ 323.235522][ T42] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 323.486211][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 323.527273][ T42] usb 3-1: no configurations [ 323.531901][ T42] usb 3-1: can't read configurations, error -22 [ 323.538344][ T42] usb usb3-port1: attempt power cycle [ 323.855891][ T5182] loop5: detected capacity change from 0 to 1024 [ 323.907451][ T5182] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 323.992738][ T5189] sch_fq: defrate 4294967295 ignored. [ 324.005435][ T42] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 324.030450][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 324.030480][ T30] audit: type=1400 audit(324.003:2893): avc: denied { ioctl } for pid=5181 comm="syz.5.1246" path="socket:[31739]" dev="sockfs" ino=31739 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.116756][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 324.166333][ T42] usb 3-1: no configurations [ 324.171511][ T42] usb 3-1: can't read configurations, error -22 [ 324.326148][ T42] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 324.416196][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 324.464383][ T42] usb 3-1: no configurations [ 324.469140][ T42] usb 3-1: can't read configurations, error -22 [ 324.469893][ T30] audit: type=1400 audit(324.433:2894): avc: denied { ioctl } for pid=5190 comm="syz.4.1249" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 324.475555][ T42] usb usb3-port1: unable to enumerate USB device [ 324.508418][ T30] audit: type=1400 audit(324.433:2895): avc: denied { mounton } for pid=5190 comm="syz.4.1249" path="/227/file0" dev="incremental-fs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.532050][ T30] audit: type=1400 audit(324.433:2896): avc: denied { associate } for pid=5190 comm="syz.4.1249" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 324.621168][ T5198] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 324.629972][ T5198] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 324.639246][ T5200] hub 6-0:1.0: USB hub found [ 324.644074][ T5200] hub 6-0:1.0: 1 port detected [ 324.651665][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.658744][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.666179][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.673214][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.296839][ T30] audit: type=1400 audit(325.273:2897): avc: denied { create } for pid=5214 comm="syz.5.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 325.379826][ T5207] overlayfs: failed to clone upperpath [ 325.409656][ T30] audit: type=1400 audit(325.383:2898): avc: denied { read } for pid=5222 comm="syz.2.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 325.472594][ T30] audit: type=1400 audit(325.443:2899): avc: denied { ioctl } for pid=5230 comm="syz.5.1261" path="socket:[32874]" dev="sockfs" ino=32874 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.512159][ T30] audit: type=1400 audit(325.483:2900): avc: denied { mount } for pid=5233 comm="syz.0.1262" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 325.686560][ T5240] loop5: detected capacity change from 0 to 256 [ 325.747781][ T5240] exfat: Deprecated parameter 'namecase' [ 325.753606][ T5240] exfat: Deprecated parameter 'utf8' [ 325.781531][ T5240] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 325.846175][ T30] audit: type=1400 audit(325.783:2901): avc: denied { connect } for pid=5230 comm="syz.5.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.190594][ T30] audit: type=1400 audit(325.793:2902): avc: denied { write } for pid=5230 comm="syz.5.1261" path="socket:[32877]" dev="sockfs" ino=32877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.459460][ T42] hid-generic C4F6:FFFFFFFC:0006.0014: unknown main item tag 0x0 [ 326.556164][ T42] hid-generic C4F6:FFFFFFFC:0006.0014: unknown main item tag 0x6 [ 326.575446][ T42] hid-generic C4F6:FFFFFFFC:0006.0014: unknown main item tag 0xd [ 326.665468][ T42] hid-generic C4F6:FFFFFFFC:0006.0014: item fetching failed at offset 18/19 [ 326.789739][ T42] hid-generic: probe of C4F6:FFFFFFFC:0006.0014 failed with error -22 [ 326.798902][ T5264] 9pnet: Insufficient options for proto=fd [ 326.835585][ T5271] netlink: 'syz.5.1269': attribute type 12 has an invalid length. [ 327.017242][ T5278] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1272'. [ 327.095004][ T5285] loop2: detected capacity change from 0 to 256 [ 327.196571][ T5285] FAT-fs (loop2): Unrecognized mount option "unL_xlate=0" or missing value [ 327.313537][ T5291] loop5: detected capacity change from 0 to 256 [ 327.776004][ T5294] loop2: detected capacity change from 0 to 1024 [ 327.850476][ T5294] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 327.896334][ T5294] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.965874][ T5294] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 327.979377][ T5297] kvm: pic: non byte write [ 328.046690][ T5297] kvm: vcpu 0: requested 256 ns lapic timer period limited to 200000 ns [ 328.154095][ T5313] loop5: detected capacity change from 0 to 512 [ 328.259082][ T5327] loop4: detected capacity change from 0 to 512 [ 328.523192][ T5330] syz.0.1284[5330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.523625][ T5330] syz.0.1284[5330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.639156][ T5327] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 328.693037][ T5341] loop5: detected capacity change from 0 to 512 [ 328.727401][ T5341] EXT4-fs (loop5): dax option not supported [ 328.934668][ T5350] syz.4.1290[5350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.935166][ T5350] syz.4.1290[5350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.389475][ T5355] loop2: detected capacity change from 0 to 4096 [ 330.442857][ T5341] loop5: detected capacity change from 0 to 40427 [ 330.466498][ T5355] EXT4-fs (loop2): Test dummy encryption mode enabled [ 330.483780][ T5341] F2FS-fs (loop5): fault_injection options not supported [ 330.505496][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 330.505509][ T30] audit: type=1326 audit(330.473:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d89d749 code=0x7ffc0000 [ 330.512629][ T5355] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 330.553170][ T30] audit: type=1326 audit(330.473:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc1d89d749 code=0x7ffc0000 [ 330.583550][ T5341] F2FS-fs (loop5): fault_type options not supported [ 330.585811][ T30] audit: type=1326 audit(330.523:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.4.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efc1d89d749 code=0x7ffc0000 [ 330.614498][ T5341] F2FS-fs (loop5): invalid crc value [ 330.629426][ T5341] F2FS-fs (loop5): Found nat_bits in checkpoint [ 330.725095][ T5341] F2FS-fs (loop5): Start checkpoint disabled! [ 330.750913][ T5341] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 330.773635][ T5391] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1301'. [ 330.843992][ T30] audit: type=1400 audit(330.813:2914): avc: denied { create } for pid=5340 comm="syz.5.1287" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 330.882347][ T5398] loop2: detected capacity change from 0 to 128 [ 330.948351][ T5398] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 331.041864][ T1034] attempt to access beyond end of device [ 331.041864][ T1034] loop5: rw=2049, want=45104, limit=40427 [ 331.204876][ T30] audit: type=1400 audit(331.173:2915): avc: denied { mount } for pid=5420 comm="syz.0.1311" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 331.286158][ T42] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 331.656378][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 331.667441][ T42] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 331.678119][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.687340][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.736969][ T42] usb 5-1: invalid MIDI out EP 0 [ 331.742156][ T42] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 331.826277][ T30] audit: type=1400 audit(331.803:2916): avc: denied { mounton } for pid=5432 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 331.902434][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.909813][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.917480][ T5432] device bridge_slave_0 entered promiscuous mode [ 331.924821][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.931980][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.939765][ T5432] device bridge_slave_1 entered promiscuous mode [ 331.948663][ T366] usb 5-1: USB disconnect, device number 25 [ 332.721675][ T5443] 9pnet: Insufficient options for proto=fd [ 332.734641][ T30] audit: type=1400 audit(332.703:2917): avc: denied { read } for pid=5446 comm="syz.5.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 332.796831][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.804500][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.815915][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.824798][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.862459][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.869565][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.886878][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.907368][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.916683][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.925107][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.932186][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.987509][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.995611][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.005414][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.014006][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.029327][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.037906][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.071759][ T5432] device veth0_vlan entered promiscuous mode [ 333.079340][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.101243][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.112595][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 333.124683][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 333.134559][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 333.143824][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 333.225806][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.257092][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.270348][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.275691][ T30] audit: type=1400 audit(333.243:2918): avc: denied { wake_alarm } for pid=5471 comm="syz.4.1323" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 333.278660][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.309222][ T5432] device veth1_macvtap entered promiscuous mode [ 333.325103][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.333656][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 333.342539][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.355952][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.364529][ T1040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.381208][ T30] audit: type=1400 audit(333.353:2919): avc: denied { mounton } for pid=5432 comm="syz-executor" path="/root/syzkaller.bhw7P9/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 333.419656][ T30] audit: type=1400 audit(333.383:2920): avc: denied { mount } for pid=5432 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 333.498041][ T5473] loop4: detected capacity change from 0 to 512 [ 333.609263][ T5477] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1312'. [ 333.618801][ T5477] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1312'. [ 333.855026][ T5473] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1323: inode has both inline data and extents flags [ 333.890480][ T5473] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1323: couldn't read orphan inode 15 (err -117) [ 333.923015][ T5473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 333.971839][ T5473] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 333.982365][ T5473] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 334.234705][ T5495] loop4: detected capacity change from 0 to 128 [ 334.250332][ T5495] attempt to access beyond end of device [ 334.250332][ T5495] loop4: rw=2049, want=250, limit=128 [ 334.360457][ T5498] loop6: detected capacity change from 0 to 256 [ 334.387348][ T5498] FAT-fs (loop6): Unrecognized mount option "shortname=ortname=win95" or missing value [ 334.456509][ T5494] attempt to access beyond end of device [ 334.456509][ T5494] loop4: rw=2049, want=146, limit=128 [ 334.679503][ T5507] binder: 5506:5507 ioctl 40046205 0 returned -22 [ 334.695093][ T5507] binder: 5506:5507 ioctl c0306201 0 returned -14 [ 334.704172][ T5509] loop4: detected capacity change from 0 to 256 [ 334.719041][ T5509] exfat: Deprecated parameter 'utf8' [ 334.724536][ T5509] exfat: Deprecated parameter 'namecase' [ 334.731471][ T5509] exfat: Deprecated parameter 'utf8' [ 334.752426][ T5512] netlink: 'syz.6.1336': attribute type 5 has an invalid length. [ 334.769920][ T5509] exFAT-fs (loop4): failed to load upcase table (idx : 0x000100a8, chksum : 0x1ce34f33, utbl_chksum : 0xe619d30d) [ 334.819552][ T5519] loop5: detected capacity change from 0 to 512 [ 334.865715][ T5521] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.877977][ T5519] EXT4-fs (loop5): Ignoring removed orlov option [ 334.890366][ T5519] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2229: inode #15: comm syz.5.1338: corrupted in-inode xattr [ 334.913513][ T5519] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1338: couldn't read orphan inode 15 (err -117) [ 334.933235][ T5519] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,noblock_validity,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,orlov,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 335.162397][ T5540] loop6: detected capacity change from 0 to 512 [ 335.192786][ T5540] EXT4-fs (loop6): Ignoring removed bh option [ 335.218637][ T5540] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 335.406122][ T366] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 335.666358][ T366] usb 6-1: Using ep0 maxpacket: 16 [ 335.815066][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 335.815083][ T30] audit: type=1400 audit(335.783:3081): avc: denied { read } for pid=5557 comm="syz.0.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 335.856154][ T366] usb 6-1: unable to get BOS descriptor or descriptor too short [ 335.956256][ T366] usb 6-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 335.966788][ T366] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.976064][ T366] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 336.207342][ T5567] loop6: detected capacity change from 0 to 512 [ 336.369317][ T5567] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 336.404610][ T5567] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 336.448139][ T5567] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1350'. [ 336.606197][ T366] usb 6-1: string descriptor 0 read error: -22 [ 336.619838][ T366] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.632405][ T366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.816845][ T366] usb 6-1: 0:2 : does not exist [ 337.070061][ T5610] input: syz1 as /devices/virtual/input/input22 [ 337.322262][ T5622] tipc: Started in network mode [ 337.342793][ T5622] tipc: Node identity ff, cluster identity 4711 [ 337.354190][ T5622] tipc: Enabling of bearer rejected, failed to enable media [ 337.442000][ T5608] loop6: detected capacity change from 0 to 40427 [ 337.457949][ T30] audit: type=1400 audit(337.433:3082): avc: denied { mount } for pid=5627 comm="syz.0.1366" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 337.540544][ T5608] F2FS-fs (loop6): invalid crc value [ 337.545888][ T5608] F2FS-fs (loop6): Wrong cp_pack_start_sum: 1 [ 337.561334][ T5608] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 337.570254][ T5529] loop5: detected capacity change from 0 to 40427 [ 337.596187][ T5529] F2FS-fs (loop5): fault_injection options not supported [ 337.606238][ T5529] F2FS-fs (loop5): fault_type options not supported [ 337.624104][ T5529] F2FS-fs (loop5): invalid crc value [ 337.626157][ T42] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 337.631760][ T5529] F2FS-fs (loop5): Found nat_bits in checkpoint [ 337.714663][ T5529] F2FS-fs (loop5): Start checkpoint disabled! [ 337.746604][ T5529] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 337.786825][ T3412] usb 6-1: USB disconnect, device number 17 [ 337.903125][ T30] audit: type=1400 audit(337.873:3083): avc: denied { write } for pid=5635 comm="syz.6.1368" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 337.961033][ T30] audit: type=1400 audit(337.903:3084): avc: denied { ioctl } for pid=5635 comm="syz.6.1368" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 338.096181][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.134342][ T30] audit: type=1400 audit(338.103:3085): avc: denied { ioctl } for pid=5645 comm="syz.4.1370" path="socket:[34873]" dev="sockfs" ino=34873 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.159038][ T42] usb 3-1: not running at top speed; connect to a high speed hub [ 338.213475][ T30] audit: type=1400 audit(338.183:3086): avc: denied { getopt } for pid=5632 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.246319][ T42] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 338.280331][ T42] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 338.391230][ T42] usb 3-1: config 17 has no interface number 0 [ 338.425093][ T42] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 338.435489][ T1036] attempt to access beyond end of device [ 338.435489][ T1036] loop5: rw=2049, want=40976, limit=40427 [ 338.449301][ T42] usb 3-1: config 17 interface 8 has no altsetting 0 [ 338.459041][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1372'. [ 338.563581][ T5646] loop4: detected capacity change from 0 to 40427 [ 338.582963][ T5646] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 338.599049][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1375'. [ 338.599582][ T5646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 338.608449][ T42] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 338.637647][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.650743][ T42] usb 3-1: Product: ф [ 338.657882][ T42] usb 3-1: Manufacturer: 䗷鄠恏ൔ橤牉ꈙ杈ꡇ驔㥝緵ꉬ灑련즤෋Ò뒒端衄閐곫￉캤⹧馦䗴♣Ფ吆ꤻ姩ﻋ쨚ꩉ䁿䮈絏ꍷ懋먭ﴱ犂溢餳Ԉ♽屰쒾換嫋폈 [ 338.680371][ T42] usb 3-1: SerialNumber: ࡡ [ 338.753989][ T5678] netlink: 'syz.6.1377': attribute type 16 has an invalid length. [ 338.761883][ T5678] netlink: 'syz.6.1377': attribute type 17 has an invalid length. [ 338.939551][ T1034] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 338.991735][ T1034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.000986][ T1034] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 339.009229][ T1034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.017671][ T1034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.025946][ T1034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.047844][ T1034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.056687][ T1034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.073554][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 339.086858][ T42] usb 3-1: selecting invalid altsetting 0 [ 339.102998][ T42] usb 3-1: USB disconnect, device number 40 [ 339.115296][ T5684] loop4: detected capacity change from 0 to 256 [ 339.125629][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1379'. [ 339.134829][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.142648][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.198495][ T5687] loop5: detected capacity change from 0 to 128 [ 339.211686][ T5687] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.262305][ T5688] xt_CT: No such helper "pptp" [ 339.672279][ T30] audit: type=1400 audit(339.643:3087): avc: denied { write } for pid=5737 comm="syz.6.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 339.706565][ T5738] device bridge2 entered promiscuous mode [ 339.750310][ T5738] loop6: detected capacity change from 0 to 4096 [ 339.788896][ T5738] EXT4-fs (loop6): Test dummy encryption mode enabled [ 339.813419][ T5738] EXT4-fs (loop6): Ignoring removed orlov option [ 339.835407][ T5738] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #4: comm syz.6.1393: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 339.855497][ T5617] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 339.873302][ T5738] EXT4-fs (loop6): Remounting filesystem read-only [ 339.880055][ T5738] EXT4-fs error (device loop6): ext4_quota_enable:6411: comm syz.6.1393: Bad quota inode: 4, type: 1 [ 339.891098][ T5738] EXT4-fs (loop6): Remounting filesystem read-only [ 339.897780][ T5738] EXT4-fs warning (device loop6): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 339.912942][ T5738] EXT4-fs (loop6): mount failed [ 339.973982][ T5748] loop5: detected capacity change from 0 to 512 [ 339.983051][ T30] audit: type=1400 audit(339.953:3088): avc: denied { mounton } for pid=5747 comm="syz.5.1395" path="/bus" dev="ramfs" ino=33762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 339.998878][ T5748] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 340.037710][ T5752] loop6: detected capacity change from 0 to 512 [ 340.057976][ T5752] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 340.126826][ T5752] EXT4-fs (loop6): invalid first ino: 0 [ 340.155155][ T30] audit: type=1400 audit(340.113:3089): avc: denied { read } for pid=5751 comm="syz.6.1396" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 340.185327][ T30] audit: type=1400 audit(340.113:3090): avc: denied { open } for pid=5751 comm="syz.6.1396" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 340.576254][ T42] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 340.636289][ T5617] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 340.649329][ T5617] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 340.660262][ T5617] usb 3-1: config 1 interface 0 has no altsetting 0 [ 340.723181][ T5792] 9pnet: p9_errstr2errno: server reported unknown error [ 340.796113][ T3405] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 340.818167][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 340.824445][ T5809] loop5: detected capacity change from 0 to 512 [ 340.836210][ T5617] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 340.845272][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.853346][ T5617] usb 3-1: Product: syz [ 340.857585][ T5617] usb 3-1: Manufacturer: syz [ 340.862174][ T5617] usb 3-1: SerialNumber: syz [ 340.880526][ T5809] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1412: inode has both inline data and extents flags [ 340.893812][ T5730] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.894145][ T5809] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1412: couldn't read orphan inode 15 (err -117) [ 340.901069][ T5730] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.913213][ T5809] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 341.166941][ T3405] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 341.176763][ T3405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.192276][ T3405] usb 7-1: config 0 descriptor?? [ 341.226429][ T42] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 341.235632][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.243654][ T42] usb 5-1: Product: syz [ 341.248597][ T42] usb 5-1: Manufacturer: syz [ 341.253190][ T42] usb 5-1: SerialNumber: syz [ 341.258424][ T42] r8152-cfgselector 5-1: config 0 descriptor?? [ 341.576196][ T42] r8152-cfgselector 5-1: Unknown version 0x0000 [ 341.686876][ T3405] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 341.697190][ T3405] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0015/input/input23 [ 341.744563][ T5823] loop5: detected capacity change from 0 to 512 [ 341.777976][ T3405] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 341.791409][ T5823] EXT4-fs (loop5): Ignoring removed bh option [ 341.797715][ T1034] usb 5-1: config 0 descriptor?? [ 341.817844][ T5823] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 341.818217][ T340] usb 5-1: USB disconnect, device number 26 [ 341.836636][ T1034] usb 5-1: can't set config #0, error -71 [ 341.860701][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 341.860714][ T30] audit: type=1400 audit(341.833:3094): avc: denied { append } for pid=5822 comm="syz.5.1415" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 341.941654][ T5833] loop5: detected capacity change from 0 to 8192 [ 341.978745][ T1254] loop5: p4 < > [ 341.984532][ T5833] loop5: p4 < > [ 342.060676][ T1254] udevd[1254]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 342.072814][ T5617] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 342.085750][ T1254] udevd[1254]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 342.102514][ T5837] device wg2 left promiscuous mode [ 342.112546][ T5837] device wg2 entered promiscuous mode [ 342.112574][ T30] audit: type=1400 audit(342.083:3095): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 342.145494][ T5837] loop5: detected capacity change from 0 to 1024 [ 342.145927][ T30] audit: type=1400 audit(342.113:3096): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.174333][ T5837] EXT4-fs (loop5): INFO: recovery required on readonly filesystem [ 342.182969][ T5837] EXT4-fs (loop5): write access will be enabled during recovery [ 342.187279][ T30] audit: type=1400 audit(342.113:3097): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=10002 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.202366][ T5837] EXT4-fs (loop5): barriers disabled [ 342.219802][ T30] audit: type=1400 audit(342.113:3098): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=10002 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.224981][ T5837] JBD2: no valid journal superblock found [ 342.245677][ T30] audit: type=1400 audit(342.113:3099): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=10002 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 342.256649][ T5837] EXT4-fs (loop5): error loading journal [ 342.279003][ T5845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1419'. [ 342.284661][ T5843] loop6: detected capacity change from 0 to 512 [ 342.294536][ T30] audit: type=1400 audit(342.193:3100): avc: denied { read } for pid=5840 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.317332][ T5846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1419'. [ 342.326703][ T30] audit: type=1400 audit(342.193:3101): avc: denied { open } for pid=5840 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.352464][ T3405] usb 3-1: USB disconnect, device number 41 [ 342.361730][ T5845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=5845 comm=syz.0.1419 [ 342.375905][ T30] audit: type=1400 audit(342.193:3102): avc: denied { getattr } for pid=5840 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.446345][ T30] audit: type=1400 audit(342.413:3103): avc: denied { write } for pid=5839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.488357][ T5843] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.508935][ T5843] EXT4-fs error (device loop6): ext4_do_update_inode:5249: inode #2: comm syz.6.1404: corrupted inode contents [ 342.534774][ T5843] EXT4-fs error (device loop6): ext4_dirty_inode:6085: inode #2: comm syz.6.1404: mark_inode_dirty error [ 342.556623][ T5843] EXT4-fs error (device loop6): ext4_do_update_inode:5249: inode #2: comm syz.6.1404: corrupted inode contents [ 342.570635][ T5871] EXT4-fs error (device loop6): ext4_do_update_inode:5249: inode #2: comm syz.6.1404: corrupted inode contents [ 342.654248][ T5871] EXT4-fs error (device loop6): ext4_dirty_inode:6085: inode #2: comm syz.6.1404: mark_inode_dirty error [ 342.667965][ T5871] EXT4-fs error (device loop6): ext4_do_update_inode:5249: inode #2: comm syz.6.1404: corrupted inode contents [ 342.680114][ T5871] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.1404: mark_inode_dirty error [ 342.694231][ T5871] EXT4-fs error (device loop6): ext4_do_update_inode:5249: inode #2: comm syz.6.1404: corrupted inode contents [ 342.716189][ T3417] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 342.807501][ T5871] EXT4-fs error (device loop6): ext4_dirty_inode:6085: inode #2: comm syz.6.1404: mark_inode_dirty error [ 342.876959][ T3405] usb 7-1: USB disconnect, device number 2 [ 343.153732][ T3417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.164990][ T3417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.175150][ T3417] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.188220][ T3417] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.197484][ T3417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.209624][ T3417] usb 5-1: config 0 descriptor?? [ 343.471123][ T5901] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 343.482262][ T5901] FAT-fs (loop11): unable to read boot sector [ 343.656491][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 343.687361][ T3417] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 343.697303][ T3417] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 343.746152][ T5617] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 343.954412][ T5915] loop2: detected capacity change from 0 to 128 [ 344.006141][ T5617] usb 7-1: Using ep0 maxpacket: 8 [ 344.136297][ T5617] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 344.145135][ T5617] usb 7-1: config 179 has no interface number 0 [ 344.151501][ T5617] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 344.162903][ T5617] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 344.174471][ T5617] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 344.185815][ T5617] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 344.196028][ T5617] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 344.209534][ T5617] usb 7-1: config 179 interface 65 has no altsetting 0 [ 344.216578][ T5617] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 344.225839][ T5617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.272948][ T42] usb 5-1: USB disconnect, device number 27 [ 344.277954][ T5617] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input24 [ 344.416637][ T5971] loop5: detected capacity change from 0 to 256 [ 344.441060][ T5971] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.452971][ T5971] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 344.461774][ T5971] FAT-fs (loop5): Filesystem has been set read-only [ 344.478532][ T3405] usb 7-1: USB disconnect, device number 3 [ 344.483534][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1452'. [ 344.496364][ T3405] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 344.923858][ T5999] loop4: detected capacity change from 0 to 512 [ 344.937766][ T6003] ================================================================== [ 344.945885][ T6003] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 344.947744][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'. [ 344.954066][ T6003] Read of size 8 at addr ffff88810fcea5c0 by task syz.5.1468/6003 [ 344.954087][ T6003] [ 344.954103][ T6003] CPU: 0 PID: 6003 Comm: syz.5.1468 Tainted: G W syzkaller #0 [ 344.982768][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.992846][ T6003] Call Trace: [ 344.996133][ T6003] [ 344.999078][ T6003] __dump_stack+0x21/0x30 [ 345.003415][ T6003] dump_stack_lvl+0xee/0x150 [ 345.008118][ T6003] ? show_regs_print_info+0x20/0x20 [ 345.013321][ T6003] ? load_image+0x3a0/0x3a0 [ 345.017855][ T6003] print_address_description+0x7f/0x2c0 [ 345.023524][ T6003] ? tc_setup_flow_action+0x870/0x3240 [ 345.029072][ T6003] kasan_report+0xf1/0x140 [ 345.033494][ T6003] ? tc_setup_flow_action+0x870/0x3240 [ 345.039044][ T6003] __asan_report_load8_noabort+0x14/0x20 [ 345.044702][ T6003] tc_setup_flow_action+0x870/0x3240 [ 345.049987][ T6003] mall_replace_hw_filter+0x293/0x820 [ 345.055363][ T6003] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 345.061442][ T6003] ? mall_set_parms+0x520/0x520 [ 345.066838][ T6003] ? tcf_exts_destroy+0xb0/0xb0 [ 345.072152][ T6003] ? mall_set_parms+0x1e8/0x520 [ 345.077966][ T6003] mall_change+0x526/0x740 [ 345.084486][ T6003] ? __kasan_check_write+0x14/0x20 [ 345.090206][ T6003] ? mall_get+0xa0/0xa0 [ 345.094874][ T6003] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 345.101609][ T6003] tc_new_tfilter+0x12a2/0x1870 [ 345.106484][ T6003] ? tcf_gate_entry_destructor+0x20/0x20 [ 345.112137][ T6003] ? security_capable+0x87/0xb0 [ 345.117006][ T6003] ? ns_capable+0x8c/0xf0 [ 345.121345][ T6003] ? netlink_net_capable+0x125/0x160 [ 345.126637][ T6003] ? tcf_gate_entry_destructor+0x20/0x20 [ 345.132269][ T6003] rtnetlink_rcv_msg+0x81b/0xb90 [ 345.137211][ T6003] ? rtnetlink_bind+0x80/0x80 [ 345.141887][ T6003] ? memcpy+0x56/0x70 [ 345.145858][ T6003] ? avc_has_perm_noaudit+0x2f4/0x460 [ 345.151220][ T6003] ? arch_stack_walk+0xee/0x140 [ 345.156069][ T6003] ? avc_denied+0x1b0/0x1b0 [ 345.160588][ T6003] ? stack_trace_save+0x98/0xe0 [ 345.165439][ T6003] ? avc_has_perm+0x158/0x240 [ 345.170112][ T6003] ? avc_has_perm_noaudit+0x460/0x460 [ 345.175482][ T6003] ? x64_sys_call+0x4b/0x9a0 [ 345.180070][ T6003] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 345.185441][ T6003] netlink_rcv_skb+0x1e0/0x430 [ 345.190243][ T6003] ? rtnetlink_bind+0x80/0x80 [ 345.194927][ T6003] ? netlink_ack+0xb60/0xb60 [ 345.199513][ T6003] ? __netlink_lookup+0x387/0x3b0 [ 345.204553][ T6003] rtnetlink_rcv+0x1c/0x20 [ 345.208988][ T6003] netlink_unicast+0x876/0xa40 [ 345.213769][ T6003] netlink_sendmsg+0x86a/0xb70 [ 345.218559][ T6003] ? netlink_getsockopt+0x530/0x530 [ 345.223777][ T6003] ? sock_alloc_file+0xba/0x260 [ 345.228630][ T6003] ? security_socket_sendmsg+0x82/0xa0 [ 345.234084][ T6003] ? netlink_getsockopt+0x530/0x530 [ 345.239279][ T6003] ____sys_sendmsg+0x5a2/0x8c0 [ 345.244042][ T6003] ? __sys_sendmsg_sock+0x40/0x40 [ 345.249068][ T6003] ? import_iovec+0x7c/0xb0 [ 345.253567][ T6003] ___sys_sendmsg+0x1f0/0x260 [ 345.258247][ T6003] ? __sys_sendmsg+0x250/0x250 [ 345.263021][ T6003] ? __fdget+0x1a1/0x230 [ 345.267278][ T6003] __x64_sys_sendmsg+0x1e2/0x2a0 [ 345.272217][ T6003] ? ___sys_sendmsg+0x260/0x260 [ 345.277071][ T6003] ? __kasan_check_write+0x14/0x20 [ 345.282182][ T6003] ? switch_fpu_return+0x15d/0x2c0 [ 345.287315][ T6003] x64_sys_call+0x4b/0x9a0 [ 345.291759][ T6003] do_syscall_64+0x4c/0xa0 [ 345.296199][ T6003] ? clear_bhb_loop+0x50/0xa0 [ 345.300958][ T6003] ? clear_bhb_loop+0x50/0xa0 [ 345.305647][ T6003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.311566][ T6003] RIP: 0033:0x7f8c4e1a8749 [ 345.315986][ T6003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.335600][ T6003] RSP: 002b:00007f8c4cc10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.344043][ T6003] RAX: ffffffffffffffda RBX: 00007f8c4e3fefa0 RCX: 00007f8c4e1a8749 [ 345.352124][ T6003] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 345.360271][ T6003] RBP: 00007f8c4e22cf91 R08: 0000000000000000 R09: 0000000000000000 [ 345.368243][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.376209][ T6003] R13: 00007f8c4e3ff038 R14: 00007f8c4e3fefa0 R15: 00007ffe48abe6f8 [ 345.384186][ T6003] [ 345.387205][ T6003] [ 345.389523][ T6003] Allocated by task 6003: [ 345.393936][ T6003] __kasan_kmalloc+0xda/0x110 [ 345.398611][ T6003] __kmalloc+0x13d/0x2c0 [ 345.402855][ T6003] tcf_idr_create+0x5f/0x790 [ 345.407451][ T6003] tcf_idr_create_from_flags+0x61/0x70 [ 345.412907][ T6003] tcf_gact_init+0x346/0x580 [ 345.417512][ T6003] tcf_action_init_1+0x3f7/0x6a0 [ 345.422531][ T6003] tcf_action_init+0x1e9/0x710 [ 345.427287][ T6003] tcf_exts_validate+0x217/0x520 [ 345.432222][ T6003] mall_set_parms+0x48/0x520 [ 345.436973][ T6003] mall_change+0x45a/0x740 [ 345.441389][ T6003] tc_new_tfilter+0x12a2/0x1870 [ 345.446235][ T6003] rtnetlink_rcv_msg+0x81b/0xb90 [ 345.451300][ T6003] netlink_rcv_skb+0x1e0/0x430 [ 345.456060][ T6003] rtnetlink_rcv+0x1c/0x20 [ 345.460513][ T6003] netlink_unicast+0x876/0xa40 [ 345.465283][ T6003] netlink_sendmsg+0x86a/0xb70 [ 345.470041][ T6003] ____sys_sendmsg+0x5a2/0x8c0 [ 345.474807][ T6003] ___sys_sendmsg+0x1f0/0x260 [ 345.479501][ T6003] __x64_sys_sendmsg+0x1e2/0x2a0 [ 345.484491][ T6003] x64_sys_call+0x4b/0x9a0 [ 345.488923][ T6003] do_syscall_64+0x4c/0xa0 [ 345.493341][ T6003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.499238][ T6003] [ 345.501559][ T6003] Last potentially related work creation: [ 345.507261][ T6003] kasan_save_stack+0x3a/0x60 [ 345.511933][ T6003] __kasan_record_aux_stack+0xd2/0x100 [ 345.517385][ T6003] kasan_record_aux_stack_noalloc+0xb/0x10 [ 345.523201][ T6003] call_rcu+0x105/0xfe0 [ 345.527442][ T6003] neigh_parms_release+0x1e0/0x220 [ 345.532554][ T6003] addrconf_ifdown+0x15e3/0x1880 [ 345.537483][ T6003] addrconf_notify+0x3bd/0xde0 [ 345.542252][ T6003] raw_notifier_call_chain+0x90/0x100 [ 345.547626][ T6003] unregister_netdevice_many+0xfb8/0x1990 [ 345.553340][ T6003] ip_tunnel_delete_nets+0x343/0x390 [ 345.558621][ T6003] erspan_exit_batch_net+0x22/0x30 [ 345.563728][ T6003] cleanup_net+0x602/0xad0 [ 345.568135][ T6003] process_one_work+0x6be/0xba0 [ 345.572981][ T6003] worker_thread+0xa59/0x1200 [ 345.577652][ T6003] kthread+0x411/0x500 [ 345.581719][ T6003] ret_from_fork+0x1f/0x30 [ 345.586143][ T6003] [ 345.588476][ T6003] The buggy address belongs to the object at ffff88810fcea500 [ 345.588476][ T6003] which belongs to the cache kmalloc-192 of size 192 [ 345.602542][ T6003] The buggy address is located 0 bytes to the right of [ 345.602542][ T6003] 192-byte region [ffff88810fcea500, ffff88810fcea5c0) [ 345.616176][ T6003] The buggy address belongs to the page: [ 345.621802][ T6003] page:ffffea00043f3a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fcea [ 345.632037][ T6003] flags: 0x4000000000000200(slab|zone=1) [ 345.637678][ T6003] raw: 4000000000000200 ffffea0004475ec0 0000000200000002 ffff888100042c00 [ 345.646258][ T6003] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 345.654852][ T6003] page dumped because: kasan: bad access detected [ 345.661269][ T6003] page_owner tracks the page as allocated [ 345.666985][ T6003] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 3889, ts 278742460643, free_ts 278264980597 [ 345.683235][ T6003] post_alloc_hook+0x192/0x1b0 [ 345.688023][ T6003] prep_new_page+0x1c/0x110 [ 345.692540][ T6003] get_page_from_freelist+0x2cc5/0x2d50 [ 345.698086][ T6003] __alloc_pages+0x18f/0x440 [ 345.702676][ T6003] new_slab+0xa1/0x4d0 [ 345.706746][ T6003] ___slab_alloc+0x381/0x810 [ 345.711338][ T6003] __slab_alloc+0x49/0x90 [ 345.715671][ T6003] kmem_cache_alloc_trace+0x146/0x270 [ 345.721042][ T6003] push_stack+0x91/0x4f0 [ 345.725292][ T6003] do_check+0xc3f1/0xea60 [ 345.729615][ T6003] do_check_common+0xff5/0x19a0 [ 345.734551][ T6003] bpf_check+0x32a0/0xf280 [ 345.738989][ T6003] bpf_prog_load+0x1042/0x1550 [ 345.743756][ T6003] __sys_bpf+0x4c3/0x730 [ 345.747999][ T6003] __x64_sys_bpf+0x7c/0x90 [ 345.752422][ T6003] x64_sys_call+0x4b9/0x9a0 [ 345.756948][ T6003] page last free stack trace: [ 345.761624][ T6003] free_unref_page_prepare+0x542/0x550 [ 345.767083][ T6003] free_unref_page_list+0x134/0x9d0 [ 345.772289][ T6003] release_pages+0xfda/0x1030 [ 345.776966][ T6003] free_pages_and_swap_cache+0x86/0xa0 [ 345.782423][ T6003] tlb_finish_mmu+0x175/0x300 [ 345.787101][ T6003] exit_mmap+0x40f/0x860 [ 345.791341][ T6003] __mmput+0x93/0x320 [ 345.795319][ T6003] mmput+0x50/0x150 [ 345.799218][ T6003] do_exit+0x9d2/0x27a0 [ 345.803368][ T6003] do_group_exit+0x141/0x310 [ 345.807958][ T6003] get_signal+0x66a/0x1480 [ 345.812372][ T6003] arch_do_signal_or_restart+0xc1/0x10f0 [ 345.818008][ T6003] exit_to_user_mode_loop+0xa7/0xe0 [ 345.823207][ T6003] exit_to_user_mode_prepare+0x87/0xd0 [ 345.828663][ T6003] syscall_exit_to_user_mode+0x1a/0x30 [ 345.834121][ T6003] ret_from_fork+0x15/0x30 [ 345.838536][ T6003] [ 345.840864][ T6003] Memory state around the buggy address: [ 345.846481][ T6003] ffff88810fcea480: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 345.854544][ T6003] ffff88810fcea500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.862624][ T6003] >ffff88810fcea580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 345.870679][ T6003] ^ [ 345.876826][ T6003] ffff88810fcea600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 345.884881][ T6003] ffff88810fcea680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 345.892929][ T6003] ================================================================== [ 345.900987][ T6003] Disabling lock debugging due to kernel taint [ 348.136413][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!