last executing test programs: 47.102171139s ago: executing program 3 (id=457): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r0, r3, 0x0, 0x7ffff004) (fail_nth: 2) 46.467814221s ago: executing program 3 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000300)=@known='security.selinux\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x3880c4b, 0x0, 0x1, 0x0, 0x0) r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x610003d5) inotify_init1(0x180800) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x39) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r7}, 0x10) getegid() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000014) 45.073315619s ago: executing program 3 (id=468): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) dup(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000010c0)={[&(0x7f0000001000)='\x00\xbe\xc1\xb5\xf0T\xd0\f}\x8a\x10\xe4\x1cf\xf0~z?\x94\x97^$^]-\\\x00']}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000700000000000000000000050a0000000000000002000006040000000500000004000000040000008d000000002e305f5f2e"], &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x149a02, 0x0) 44.953096421s ago: executing program 3 (id=470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000006dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f00000000c0), 0x3, 0x24e, &(0x7f0000006ec0)="$eJzs3T9oJFUcB/DvzO5ezN0ipzaC+AdERAPh7ASbs1E4kOMQEVQ4EbFR7orzgthkrWwstFZJZRPEzmgpaYKNIlhFTREbQYOFwcZiZXeSEHdX0GzckZ3PB2bnzey8/b1h5vt2m2EDNNb5JBeTtJIsJekkKY4fcF+1nD/YXFvcupr0+0//WgyPq7Yrh/3OJekleTTJZlnk1XaysvH87u/bTz74zs3OAx9tPLc405M8sLe789T+h5ff/vTSIytff/vz5SIX0/3LeZ2+YsK+dpHc/l8U+58o2nWPgH/iyhuffDfI/R1J7h/mv5My1cV798aZzU4e/uDv+r73yzd3zXKswOnr9zuD78Bef8yZjO8D5kmZpJuiXE5Stctyebn6Df9962z52vUbry+9cv3mtZfrnqmA09JNdp74fOGzcyP5/6lV5R+YX4P8P3Nl/YdBe79V92iAmbi7Wg3yv/Ti6kORf2gc+Yfmkn9oLvmH5pJ/aC75h+aSf5hjncNGb+Lb8g/NJf8wD948US/5h+Y6nn8AoFn6C3U/gQzUpe75BwAAAAAAAAAAAAAAAAAAGLe2uHX1cJlVzS/fT/YeT9KeVL81/D/i5Jbh69nfisFhR4qq21ReuHfKD5jSxzU/fX3rj/XW/+qeOqouHLVWryW9t5JcaLfH77/i4P47udsm7Oscb780ZYF/qRjZfuzZ2dYf9cd6vfUvbSdfDOafC5PmnzJ3DteT55/uyLUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgvv0ZAAD//2XGavA=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44.298822684s ago: executing program 3 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 44.146418687s ago: executing program 3 (id=473): openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket(0x10, 0x2, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1020) 44.00334788s ago: executing program 32 (id=473): openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) socket(0x10, 0x2, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1020) 7.225541588s ago: executing program 2 (id=633): r0 = syz_open_dev$vcsa(0x0, 0x1, 0x20100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) dup3(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x34, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 4.603698379s ago: executing program 2 (id=647): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) (async) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000640)='./file2\x00', 0x11624fc, &(0x7f0000001680)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYBLOB="732b1c6811ddeb2fce2968b5018610ae02e598d90c660baa581f05004f6e44fa858525519f87f62eb05b6a526ab343bd5102f59a07747d55f03c74d6bd12ee07620437e5379437604d664c56e87f823150bdfd461a1b38d7b7ea1734bd045ec6963eb5160605bf7bbbc075a76263f582812eadc2c91c46b71bbe1443a3c572e8a3b445f5697c399b7a0add112c53a075e2a5d229349b08d422ea0b09dceb16f369b89f5b253d4d8d45b9ace98bbc85b19efac6b38b", @ANYRESDEC=0x0, @ANYRESHEX=r1], 0x1, 0x0, &(0x7f0000000000)) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101442, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x2c048010) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4) (async) sched_setscheduler(r2, 0x0, &(0x7f0000000100)=0x9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f0000008900)={0x27, 0x4e20, 0xd81, @local, 0x7}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) (async) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x2, 0x0, 0x4, 0xf, 0x9}, 0x20) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80f6}, {0x20, 0x0, 0x2, 0xfffff034}, {0x6, 0xfc, 0x5, 0xd}]}, 0x10) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 4.540539941s ago: executing program 2 (id=648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() pipe2$9p(0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x7}}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x34, 0x0, 0x1, 0x1, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'netpci0\x00', 0x8000}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 4.454866912s ago: executing program 1 (id=649): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000680)={[{@nodiscard}, {}, {@acl}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}]}, 0x5, 0x591, &(0x7f0000000f80)="$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") timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(0xffffffffffffffff) bind$can_raw(r2, &(0x7f0000000000), 0x10) read(r2, &(0x7f00000007c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) 3.968555642s ago: executing program 5 (id=651): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) connect$netlink(r2, &(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r8, r7}, 0xc) 3.503460071s ago: executing program 2 (id=654): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x301, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffea, 0x2a, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xca}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f00000014c0)={0x40, 0xd, 0xda, {0xda, 0x8, "940977459b33151f89f5150abac261425df5a398a5e0eea7e969d70c1cf59f6ddef63fea2bd56e94a63ea702e991c10dcb7c789731fac945cf16aae434dab6a902b3a6613732b7c350d29d0513bd53849f641d46e592b23f185c016b94f2ed45b00b6ab8965f1ab9b5032d82d4e476be14ba63adfdef400a768da0df48366fc299fe2ea94ac7589a92396d9022bf361df900000000882da12d9db07c77d8fa103f6b903cb48fee75c00c37c81262a35b75304692d596632a2f8fb76a830285c5d68650965450af02bffe1dc8296ba7e621c78df2798f6f27"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x101b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa7, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x56, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x160}}, {{{0x9, 0x5, 0x81, 0x3, 0x5cecba65c9b49a04, 0x8, 0x4, 0xc6}}}}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x300, 0x8, 0x6, 0x8, 0x10, 0x1}, 0x5, &(0x7f0000001100)={0x5, 0xf, 0x5}, 0x6, [{0xee, &(0x7f0000001140)=@string={0xee, 0x3, "4010db98db376ea1a571f1053e952c45861618bec11755bfa20e090d12e59eb91879caa692abc1e8b876f3be4ee182f494e22b79a0b09ca1da30115b2d439b4d7b0e88d68ddd313b9b80175c44f083bfb5c6638a62ad972e92d06078561c143fa9eb580fcf120faacaa15b944cc90a45d83eaab3597baca24c093cbb91924ac50eefc9c94d700b97e0df7085c6ba7eab11804729ecfb8c8b25e502fbfe748d677a8ea4cdf236227da9fc509b28160edf6d32266b9912e75b4b6081191cbe143ab2881d9802cdb6c6fa58c0320e531682387624afcad32dcd162cda11e6f7c562ecc1163493ca0b2e68604323"}}, {0x5a, &(0x7f0000001240)=@string={0x5a, 0x3, "522f518436468a95a8fb14ae95be618e878a97e7aaaae8e188edbcc84c894ed369fbb547eab14641d6ed28352b2c9ffcbff4b4885b99deabc7d99f648d0df901ba2753d77ae3dc3768bae33c67fc59403f04719093b16b66"}}, {0x8e, &(0x7f00000012c0)=@string={0x8e, 0x3, "88da57d8c392d89c975bbbc6c8ce1afd55458c7f5dccd6bfe2429a0cebdf30d70300dc4648affa9380ca1d0459c9640d26ff1d0446f8d4c05f0d144eb47837e6d248153d5b259e0886cc31454a08ab837b5a524bd4c7def804c9cba5195ba9699de8cb1af2692c16766d7e8078d41a19a969ac4c7f1f7634b6108793ea2b181e9dcdab257a172cc7e121241d"}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x459}}, {0x24, &(0x7f0000001400)=@string={0x24, 0x3, "58b9377f48f024247255c29576512316a03dad1c95a3d9f16e6a44cbeb4cca751ae7"}}]}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7fffffff}) (async) syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz79JREEUxeHf233rn8BOrEAQ7UGsxMjMRAuwDFMbsAI7sAxTRx5MDbrB98HAYbj3wI3/teviesbTZf7U9xbW6vOjuq3GGOPloa+rObxfGstT57W9x+bCWR12tTXdVHfr/nBS/axdbr3vvT6vs2Gt+7e/PxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjs9vAAAA///7WQ/y") 3.502984381s ago: executing program 1 (id=655): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000003c0)={[{@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@utf8no}, {@utf8}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@rodir}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@numtail}]}, 0x1, 0x36a, &(0x7f0000001840)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x8, &(0x7f0000000680)={[{@bh}, {@nodioread_nolock}]}, 0x0, 0x52d, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2443, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x20801, 0x0, 0x3, 0x5, 0xfffd, 0x3}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 3.344094024s ago: executing program 4 (id=657): r0 = syz_open_dev$vcsa(0x0, 0x1, 0x20100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) dup3(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x34, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 3.119749858s ago: executing program 5 (id=658): r0 = socket(0x10, 0x80003, 0x0) sendmsg$tipc(r0, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000280)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) 2.937395452s ago: executing program 5 (id=659): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x2fb64359ac422fb1, 0x3, 0x2c, {0x2c, 0xf, "f8021d62c3b7825eb2e215798bf6b112d2e377140d2f62401e96680e8bcff3c290b9dd1ff4043d6b3c5e"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003050000005b1623b60e"]}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 2.704200137s ago: executing program 2 (id=662): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a47ef470900be008300000000"], 0x0}, 0x0) syz_usb_connect(0x6, 0xa18, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x3f, 0x87, 0x68, 0x10, 0x2cb7, 0x10a, 0x72e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa06, 0x2, 0x9, 0xa, 0x0, 0xd, [{{0x9, 0x4, 0x97, 0x7f, 0xa, 0xff, 0x7e, 0x8c, 0xb, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0xa6f4, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0xf95, 0x7fff, 0x1, 0x6, 0x8001, 0xae}, @dmm={0x7, 0x24, 0x14, 0xa, 0x7ff}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xab}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x20}, @mdlm={0x15, 0x24, 0x12, 0x2}]}], [{{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xc}, @generic={0x3d, 0x11, "605754933b54423901ce3d195f7cfd6c63b0199861670408be6252c75eb8d51209faf47f9ab431d59710f12c8fd5c8b0a7290cdc8ca66dd9cfa441"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x6, 0xf4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x7}, @generic={0xac, 0x22, "9e486fa4a7bdef133d2f8292768188e5f3ea8a3ccd50700309e5bf7ba1041b169bf291ab8f65845780a48b6222f37497b47c006f156cfdd4a33242ce92ac8e074dac031411a136ecbb8d6753879fb857b40becccd436d0b7a8b7d7b432e0935d5e7b8d669e1a811d56e58ee236daf86ad410a2f4130de21a4b11606d21aa11e426b671dc06706b288aef17ed66f34eb3bc61fab1831c740f8faeaebbd23f54fdeb653c7db5b7c2191509"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x8, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x9}, @generic={0x100, 0x31, "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"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x1, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x400}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xe0, 0x83, 0x7f, [@generic={0x46, 0x10, "0cf00e5953b4649239eee233c4fd4d997e97c0409a435c6ad8fd0d74410b71d58bdaca7c06bb9b9ec31b5039d555ff5b8c93a7ab4e5691890ba75f07b381defdc9ae78e9"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x4, 0x6, 0x7, [@generic={0x6a, 0xc, "67ae20d9aa578df3169e479f9e5a93da7544793e0ed907ab212f8aaef422a6af208acece75531c9cd075d9d368dbf8f3c4135ddaa6280d7adec433b645f005b5a03cdf6673d44adac168133fffe4fae00d09e1f008d4daebcf5b98cb6175d9fe4147a31df7d8099d"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x51, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x9009}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x1, 0xb, 0xff, [@generic={0xbb, 0x3, "0475b62352896860819156d4b7f37434469922ce15054ca0422622500d1d22090bba84d8ec229d25ac133bb64f75fe4e9201666f6743db38e896447d0814719d0ce51d826c43a9b44ff07e4200c5dfe88656549fc5d8af4938d883959ac14d161ece6e72861646034efd1e54429dbc5d139408fd2ef63cd9e3af1b9c4004a0e467cacc7ce24e40a5dd13496e08be0e5142fa9045987481469b5563f5257d9cc30f8de75385d474bed6e8ea7983bd99a52aea6f190f22984515"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x208, 0x0, 0x4, 0x0, [@generic={0xee, 0x22, "5c4b1e1e6b869dcd3583493869f8eafdbf0666321642dc8d257bb355e2e4b8fdb9bc9d982261dcff11e9f72fc35ef33b4b0d5d905292384f96d3f8241561d933e9d171a69ea62eb16bc1375acb2067d425fd5ce195cce82912ff3de4b0cdb1fa835bc141964be1f9f9df5e7dfb2f3ddf686c1746195988a4a313bc4de6b159a0c5cb9933e161ec71b1a9e3b7ff5455dc55a83f83cd4cb17fba442888fdc4b12dff4cec121ad809bf5fbd90904028e7cdea8e27333c74534148b0308177daf51be530245d39bd9ca70a6df55c67c47d93b0d3b9d41c89fa1a03e9b161b33f901e1f4202009f87b3e186843274"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x2, 0x7, 0x5e, [@generic={0xc5, 0x31, "1a7dab4ba6d7071c573facbf8c0784becf24b8a9a6d079730e9f1ac636af710fa34a6a21b598598cb3d3e499f5ced2e61e133e849b37e0d6b5a1b9cdf055f3ec4790df879413207999c3b438d8d013e7a3ae0d84330f30186a94871e16c52dfdd921b845984f57b01c31e8e55cb1ce363c240aba4d9f21c67129c19986f480c215d9b756ea6ca7f58a950655240168170cf8b4821bdfb3e629ab6c6336ad47727c540083b8e4efdce22ad339f578d74c2d8eed1224fba995e7750830c012ce9e7acae6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0xbf, 0x6, 0xf, 0xec, 0xe7, 0x5b, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "a1"}, {0x5, 0x24, 0x0, 0x42}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x6, 0x33}, {0x6, 0x24, 0x1a, 0xab5, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x8, 0x1ff}]}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0x6, 0x1d, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x8, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x4, 0x2, 0xfa, [@generic={0x7c, 0x9, "bc785e849cd7692de46026bcf8266574ed8d816a44f1b2230e5c39153030a333bdeb4b65b2dece3b5f250377d4e0446373a8479ac99ebd51355cba8a61d89a38aeac4797c18d13fa34f360f8476822f189e3a343f957d34b89156c4eba218b25ce9de0aa434f3b3e93a8a99b9358be261bf73a1bb3285bc688dc"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x6, 0xc, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1}]}}, {{0x9, 0x5, 0x47, 0x8, 0x200, 0x1, 0x89, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x38}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x68, 0x9b, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0xa0, 0x7}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0xf3, 0x3, 0x1, [@generic={0x28, 0x10, "6449c808d22f483461cf2ed5c2d134a7c4145d7d7286311ddfb67059a8df937914d763fcd991"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x7, 0x7, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x72}]}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0xe4, 0x2, 0x4, [@generic={0x59, 0x22, "ae2ba4b28bdf78696dba49d8425a8e400e87e92d9fd8d2d382c746291bbd1703887d2bc97b0905251bfbfd0a47f56b1d19b1229feadf0a21931db14fa72536419d8c5d58aaeb4e89338ba8e5fc0a27451188c6d462a927"}]}}, {{0x9, 0x5, 0x8f, 0x2, 0x8, 0x3, 0xa, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xce3639fe9f8479ce, 0x4, 0x1}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x7, 0x2, 0x7f, [@generic={0x5f, 0x21, "50892f0d6c958a18d0cc8ac529d828e4b20833046b2f99ce433130272a349c316a2bd2e063b0638226bb3cae47a8cd4b20e789bb1d4fa3b3f597c3238f1c637f8d05199b5ba5d9b940d8f625dfc902e73787a4bea9104d7c0541110f3b"}, @generic={0x6e, 0xe, "f860693c81b495eb592c48d41442e8a2e828331f43f2adb60a9110a26a334baca05fce0f03b8a23f0f12972cdf80c897cd12723cf0def5070948c70b54afa744b2406beef7bf2e48fcd5c619431e15f152da56d56ab911a1d0f0aebb4fef45ab54ff4b5f500c736b9f6980d5"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x8, 0x7, 0x7, [@generic={0xba, 0x22, "74507741875f9cb554820c3923314c24581a8d8580a99e662c76816057c0bbeeaba2ecf2e29e46ed014f0f39a9f79e4f0402553c36bb0f0dbd2c43b1c24f293b8f1ba96b8393cb5a1c0cdd1d6b9e80c8ac9e199bc12ae413767993e9c542130719f1fe587f6a2851d972863b9f2119899d981ce2dbcd1c2662ac05196693fd7d95869463645865dff4b2399f6072fc6b70a30cc543cfbe807eceb356e3f082d8b1ba59be4016f3688e1094ff8cf554a58807896810331507"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x100}]}}, {{0x9, 0x5, 0xc, 0x2, 0x0, 0x4, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0xfffc}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9c3}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x3, 0x8, 0x4, [@generic={0x3e, 0x2, "d191c074a56b42d615cb4214868688704f37b217024aaf20512a4d8d09c7b5b01fff4d4d8de1a24ad1bfcf5ef836f7e68a13a28e3c5b07eb815a8627"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x7, 0x7, 0x7, [@generic={0x32, 0xc, "1575261780a019482aa6deaf9bd3ad5f79a198ee51d3a46913439742f38e275211f71a56a38ae9db8e18f80b830dd042"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x9}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x36, 0x9, 0x4, 0x20, 0x9}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x3a, &(0x7f0000000c80)=@string={0x3a, 0x3, "f09e8bdece7be013c33b9447bc3a5993e6b831719b485940344400db08f271b1dbd569cb9d0fc199efbad9940ed288c969341eb618be4685"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x426}}, {0xda, &(0x7f0000000d40)=@string={0xda, 0x3, "48c93ee9947ddeec0710214db3edc00235b4b03a86d28117424048ace88304a4d7d1aa190bd773a3f90b61daa68d16d4f7a5d89264243f31644120c60f0fd3d0bcca28a0ef08bbc302e897a9c494b4ecabe6538c61ab736a61f4f0086d055ec2d50b826f729a62dd11866a1ec0826779cdc5252b8d9514fad52fd453eacba7c4cacbe34ddc245835c512a44e8964b5bfe4d86c1506359b3be4c11967e7d2a62edcb672eca6422efd320b5d933583d421d0dfd0fadad51397b9cfd61fd60af5539068f55a1cf88b1c0d6e69cb65b677b91f0995b7ef8142f7"}}, {0x90, &(0x7f0000000e40)=@string={0x90, 0x3, "a175d55852f808dbe34a93c60c529ce5772c4a654014e27b50a98dd704a76994efb245bc5c69e4b776d761fa8c1f6c359bca044998e0acd2e686f4cad363cfa88a7a9356f17cb90eda212173b9bbdc87d0831c20615c1fbcaf58cec7dc3ba888a380fc5e33be95771e43f3ba1177045b5b57cb0d2a4fb0e0d260a3031c421ddba99f9ca65d5dc228f62d49832bfb"}}, {0xed, &(0x7f0000000f00)=@string={0xed, 0x3, "14314b9f74b68d29b2212396be2855b788297b5fc99c108e0e7d218c6c0d5511079b6b886c129dbf6a57a6853f60c81ba358b158e5bc010e9955c696a74a16522c6dd447007911e76be3d690573a8f6c7a847ab957e0884c3af2345aa29e7bebb46f0c90b610ec9c0c7fc10faa409f82507e6665b0d11b338079fc0e8744aec9670a6fb877bc16310365bc1de411ce8127b9409e7bab2eb4ebdbbf3af005afab5de934be22ab2abbffb9ee316da20c3ba1e338711f9341306fa8d79e17f3aa3d62781a341d101378db621884dd65474ce9a1eae4a1453cb51a96246602b0b7ddcf52047d78ad90583fcb35"}}, {0xfb, &(0x7f0000001000)=@string={0xfb, 0x3, "256314d66839445eb04cab133d90d0c96aa2d25b0e9848fa77458bc473a7cc2ee5a5ec03f5b87f8e00cdac2d857165b56b8c7fce53f12dc14fbf72be41537b1d28e2c36593295c1b59826d3f3d2e04f57c074f3f04e547677478fa4ab79e144f7515027856b6731474c57d6a41ae18bcf6e5474aa0e5e5769c470f2109ad8c6922af7f3aefde923445d1d192655e34a554423456d37bb706b66e643b15766e1755f843c0e1a51efe452e36701ab01a95a3a2f79811995581414ca5ab9559c60fa5feed512a193ea4b6d70d2757fdd25983f4c0ecce280e148327b8d58502b8697f96b471220f015ba63ee8b5b569549292b229b5cc5ff1eec9"}}, {0xea, &(0x7f0000001100)=ANY=[@ANYBLOB="ea03faf163fc9a2bbbe934ee85f152cbeaa2e27013fb6efcf5833b20cb527b200fe3e61a4a5cc0934f151d72691ceafe47a1fb77504b060749235dc7a9e8d60d15e5b1c9bf3d64cb0f70b409d1eac39daed2e8360c131674fbbcbe5d9eaf5d18d8a3922365ac012ddb74b1f8a3f52e637f1564a760a1ec0d449cc796e813286904cf451f61a7143cf573851a699b8d16029d71be1b08a7027c519f9c7757d1c6264f488bf38d3c8f7cc5a00c35fae2608cc143c2cd8bc05bb7066a2805c6c85440870f271db1f0f121a2bb3380ff4d34d4b2c4140b7e073a05dab036991cd1989d55aa025a269d"]}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x436}}]}) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile={0x8, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61, 0x61, 0x30, 0x30, 0x2e, 0x61, 0x61]}}, &(0x7f0000001700)=""/108, 0x2d, 0x6c, 0x1, 0x1f8, 0x10000}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@bloom_filter={0x1e, 0xfff, 0x6, 0xe8b0, 0x8000, 0x1, 0x5, '\x00', r2, r3, 0x5, 0x0, 0x1, 0x3, @value=r4}, 0x50) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000800)='\x00(\xef\x1e\xc2{\xb6Hr(O3<4gR\xd8\x06O\xf9\xda\"\xa1cN6\xd9\xd6|\x18\xd3\xb0\x06\x18y\xbd\x19?\x9bU\x00\x1d\xce\x85\x04\x00LJ;A\xef\xb2\x84\x1e)I\x18\x1b\xe3\xc1\x92\x99u\x18\v0#\xd9\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000780)='#@^\\-$^\x00', &(0x7f00000007c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000480)='fuseblk\x00', &(0x7f00000004c0)='\x1c@\\\x00', 0x0) read(r1, 0x0, 0x0) accept4$unix(r4, &(0x7f000001a240)=@abs, &(0x7f000001a2c0)=0x6e, 0x800) close(r1) 2.332545464s ago: executing program 0 (id=665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f0000000980)="381b", 0x2}], 0x2}}], 0x1, 0x40) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x5, 0x28040f7d, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000700)='\f', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000016c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/249, 0xf9, 0x1, 0x0}, &(0x7f0000001700)=0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4042, 0x0) 2.328805374s ago: executing program 0 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x10) (async) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) (async) r0 = syz_clone(0x80200000, 0x0, 0x7, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x55ba, &(0x7f0000000280)={0x0, 0xf0a9, 0x40, 0x3, 0x200}, &(0x7f0000000180), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000380)=[@ioring_restriction_sqe_flags_required={0x3, 0x5}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setpriority(0x3, r0, 0x8) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) (async) readv(r3, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x1) (async) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r4, &(0x7f0000000040)=""/245, 0xf5, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x324) sendto$inet6(r5, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6", 0x77, 0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x202, 0x12) (async) mkdirat$cgroup(r7, &(0x7f00000001c0)='syz0\x00', 0x1ff) 2.327195374s ago: executing program 0 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x737, '\x00', 0x0, r8, 0x0, 0x1}, 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) memfd_create(&(0x7f00000002c0)='+,\x00', 0x5) 2.205712657s ago: executing program 4 (id=668): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000800000000000018010000", @ANYRES32, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) 1.886799883s ago: executing program 1 (id=669): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000300)={0x0, 0x0, 0x5f22, 0x4000000, 0x0, 0x80000000}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x8, 0x9a0, 0x2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x8021, 0x1}}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x18) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x4, r5}, 0x14) (async) syz_emit_ethernet(0x13, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@llc={0x4, {@llc={0x42, 0x8e, "be", '\x00\x00'}}}}}, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) 1.656057778s ago: executing program 4 (id=670): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000800000000000018010000", @ANYRES32, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) (fail_nth: 1) 1.54453343s ago: executing program 1 (id=671): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x24, &(0x7f0000000280)={0x1, 0x2, 0x9, 0x5, r1}) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000800000000000018010000", @ANYRES32, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) 1.53849754s ago: executing program 4 (id=672): setfsgid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 1.500552971s ago: executing program 4 (id=673): setfsgid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) (fail_nth: 1) 1.331468564s ago: executing program 5 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1.331154834s ago: executing program 0 (id=675): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[], [{@hash}]}, 0x0, 0x624, &(0x7f0000000b40)="$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") (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a60, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000104, 0x0, 0x3}]}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) (async) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty=0xfdfdffff}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.316577284s ago: executing program 1 (id=676): setfsgid(0xee00) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r1}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001800000008000000ffffffff42000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000008000011488dbc6df47734"], 0x50) r2 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='syscall\x00') pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000100)={0xffff, 0xffffffffffffffff, 'id0\x00'}) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x40841) 1.158052207s ago: executing program 5 (id=677): getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) set_robust_list(&(0x7f0000000400), 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) 1.123744178s ago: executing program 0 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x34, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 905.638802ms ago: executing program 1 (id=679): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x1, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x1}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1100, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@flushpolicy={0x3d8, 0x1d, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@empty, 0x4e24, 0x0, 0x4e21, 0x8981, 0xa, 0x20, 0xa0, 0x3c, r3, r4}, {@in=@rand_addr=0x64010102, 0x4d5, 0xff}, @in=@broadcast, {0x9, 0x8, 0x3, 0x7, 0x1, 0x35, 0x101, 0x8}, {0x37, 0x8, 0xffff, 0x1}, {0x1771, 0x80, 0x9}, 0x70bd28, 0x3504, 0xa, 0x4, 0x6a, 0x18}}, @tfcpad={0x8}, @coaddr={0x14, 0xe, @in6=@remote}, @offload={0xc, 0x1c, {r6, 0x1}}, @algo_auth_trunc={0xee, 0x14, {{'sha224-avx2\x00'}, 0x510, 0x180, "2c23e7639546a24f055765cb7a8ce71f740f1c569cd31a4c55d5688afffdb41ef24658c0bfabebd6d9c3dc801218b9efd090f609dae91b0e92e407272ca42a199d749a8a1582a55a4cfcd2cc96e516ad51fddf39e1ca460587d99d3cfd087d9cf9ab52226ea3e5f60f47905fab3a909576ff6403754dae725c79dcc1e9074566b48edacd82149b083e4fe6c55d397c2d4d655254fda9881a1461a4ccc4cbdf48e37f"}}, @migrate={0x1cc, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x17}, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in6=@remote, 0xff, 0x1, 0x0, 0x3507, 0xa, 0x2}, {@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x33, 0x1, 0x0, 0x3503, 0x2, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0xff, 0x4, 0x0, 0x34ff, 0xa, 0x2}, {@in6=@private2, @in=@private=0xa010102, @in6=@local, @in6=@loopback, 0x33, 0x0, 0x0, 0x3501, 0xa, 0xa}, {@in=@local, @in6=@loopback, @in=@broadcast, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x34}, @in6=@loopback, @in=@loopback, @in=@local, 0x3c, 0x1, 0x0, 0x3502, 0xa, 0xa}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) fcntl$dupfd(r0, 0x0, r0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7fff}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x44}}, 0x20004002) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @multicast1, 0xd, 0x15}}) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x800000001fe, 0x2) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000200)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) 828.066284ms ago: executing program 4 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000091e68226077b9a21584b18242ff36b2da356d8ec12215c261ae2605419c11caf38c1228b75ec718ef60f88f3e63c096f"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) io_uring_setup(0x76a3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x80}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) (fail_nth: 1) syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[], 0x0) 27.59824ms ago: executing program 5 (id=681): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000010c0)=[{{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000091e68226077b9a21584b18242ff36b2da356d8ec12215c261ae2605419c11caf38c1228b75ec718ef60f88f3e63c096f"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) io_uring_setup(0x76a3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x80}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text64={0x40, &(0x7f0000000100)="420fba34cde7c00000000f20d835080000000f22d8650f35460f01ca0f01df3e0f07c74424001f010000c7442402d4c40000ff1c2466360f42f3b9800000c00f3235001000000f30672e430fc7a900000000", 0x52}], 0x1, 0x24, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") 4.13334ms ago: executing program 0 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 2 (id=683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x4c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) getresuid(&(0x7f0000000940), &(0x7f0000000200), &(0x7f0000000000)) (fail_nth: 1) kernel console output (not intermixed with test programs): no=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.501330][ T28] audit: type=1400 audit(1759021836.052:275): avc: denied { open } for pid=1264 comm="syz.2.267" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.743491][ T1268] loop1: detected capacity change from 0 to 512 [ 84.848666][ T28] audit: type=1400 audit(1759021836.532:276): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.882388][ T1268] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 84.903990][ T28] audit: type=1400 audit(1759021836.572:277): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.928213][ T28] audit: type=1400 audit(1759021836.582:278): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.952334][ T28] audit: type=1400 audit(1759021836.582:279): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.481267][ T1298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'. [ 86.485078][ T28] audit: type=1400 audit(1759021836.582:280): avc: denied { ioctl } for pid=1267 comm="syz.1.268" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.517756][ T28] audit: type=1400 audit(1759021836.702:281): avc: denied { read } for pid=1278 comm="syz.2.270" dev="nsfs" ino=4026532658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.539154][ T28] audit: type=1400 audit(1759021836.702:282): avc: denied { open } for pid=1278 comm="syz.2.270" path="net:[4026532658]" dev="nsfs" ino=4026532658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.559793][ T1300] bridge: RTM_NEWNEIGH with invalid ether address [ 86.592619][ T1309] loop4: detected capacity change from 0 to 512 [ 86.627279][ T28] audit: type=1400 audit(1759021836.712:283): avc: denied { create } for pid=1278 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.664182][ T1314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.283'. [ 86.679377][ T1317] loop3: detected capacity change from 0 to 512 [ 86.691908][ T1309] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.711558][ T1309] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.810500][ T284] EXT4-fs (loop4): unmounting filesystem. [ 86.909804][ T1329] syz.3.285[1329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.909884][ T1329] syz.3.285[1329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.018611][ T1332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 88.066502][ T1332] loop3: detected capacity change from 0 to 8192 [ 88.220779][ T1332] loop3: p1 p2 p3 p4[EZD] [ 88.225831][ T1332] loop3: p1 size 16128 extends beyond EOD, truncated [ 88.241878][ T1332] loop3: p3 start 458783 is beyond EOD, truncated [ 88.248506][ T1332] loop3: p4 size 65536 extends beyond EOD, truncated [ 88.481595][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.501249][ T1336] overlayfs: failed to clone upperpath [ 88.660121][ T24] usb 3-1: device descriptor read/64, error -71 [ 88.930154][ T24] usb 3-1: device descriptor read/64, error -71 [ 89.230243][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.390174][ T24] usb 3-1: device descriptor read/64, error -71 [ 89.444251][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 89.444277][ T28] audit: type=1400 audit(1759021841.332:331): avc: denied { read } for pid=1361 comm="syz.1.297" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.475172][ T28] audit: type=1400 audit(1759021841.372:332): avc: denied { open } for pid=1361 comm="syz.1.297" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.504741][ T28] audit: type=1400 audit(1759021841.372:333): avc: denied { ioctl } for pid=1361 comm="syz.1.297" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.529537][ T28] audit: type=1400 audit(1759021841.392:334): avc: denied { write } for pid=1361 comm="syz.1.297" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.629155][ T1365] loop1: detected capacity change from 0 to 1024 [ 89.653205][ T1365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.670255][ T24] usb 3-1: device descriptor read/64, error -71 [ 89.790198][ T24] usb usb3-port1: attempt power cycle [ 90.200135][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 90.231218][ T24] usb 3-1: device descriptor read/8, error -71 [ 90.381417][ T24] usb 3-1: device descriptor read/8, error -71 [ 90.498611][ T282] EXT4-fs (loop1): unmounting filesystem. [ 90.650170][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.671562][ T1373] loop3: detected capacity change from 0 to 512 [ 90.691566][ T1373] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 0 [ 90.703787][ T24] usb 3-1: device descriptor read/8, error -71 [ 90.739969][ T28] audit: type=1400 audit(1759021842.622:335): avc: denied { create } for pid=1372 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.759310][ T28] audit: type=1400 audit(1759021842.632:336): avc: denied { ioctl } for pid=1372 comm="syz.3.300" path="socket:[18963]" dev="sockfs" ino=18963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.784236][ T28] audit: type=1400 audit(1759021842.632:337): avc: denied { connect } for pid=1372 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.809559][ T28] audit: type=1400 audit(1759021842.702:338): avc: denied { read } for pid=1370 comm="syz.1.299" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.891192][ T24] usb 3-1: device descriptor read/8, error -71 [ 91.010111][ T293] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.017842][ T24] usb usb3-port1: unable to enumerate USB device [ 91.036166][ T28] audit: type=1400 audit(1759021842.922:339): avc: denied { read } for pid=1375 comm="syz.4.301" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.210201][ T293] usb 4-1: Using ep0 maxpacket: 8 [ 91.232586][ T293] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 91.262891][ T1381] loop2: detected capacity change from 0 to 8192 [ 91.271075][ T293] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.283077][ T28] audit: type=1400 audit(1759021843.172:340): avc: denied { mount } for pid=1380 comm="syz.2.303" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 91.308065][ T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.316616][ T293] usb 4-1: Product: syz [ 91.321587][ T293] usb 4-1: Manufacturer: syz [ 91.326351][ T293] usb 4-1: SerialNumber: syz [ 91.409431][ T1391] loop2: detected capacity change from 0 to 512 [ 91.422364][ T1391] EXT4-fs: Ignoring removed bh option [ 91.442691][ T1391] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.306: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 516(4), depth 0(0) [ 91.460733][ T1391] EXT4-fs error (device loop2): ext4_quota_enable:7014: comm syz.2.306: Bad quota inode: 4, type: 1 [ 91.479064][ T1391] EXT4-fs warning (device loop2): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.498353][ T1391] EXT4-fs (loop2): mount failed [ 91.506056][ T1399] loop1: detected capacity change from 0 to 256 [ 91.527342][ T1399] FAT-fs (loop1): Directory bread(block 64) failed [ 91.536796][ T1399] FAT-fs (loop1): Directory bread(block 65) failed [ 91.544193][ T1399] FAT-fs (loop1): Directory bread(block 66) failed [ 91.550978][ T1399] FAT-fs (loop1): Directory bread(block 67) failed [ 91.557618][ T1399] FAT-fs (loop1): Directory bread(block 68) failed [ 91.564706][ T1399] FAT-fs (loop1): Directory bread(block 69) failed [ 91.571520][ T1399] FAT-fs (loop1): Directory bread(block 70) failed [ 91.578133][ T1399] FAT-fs (loop1): Directory bread(block 71) failed [ 91.587243][ T1399] FAT-fs (loop1): Directory bread(block 72) failed [ 91.594723][ T1399] FAT-fs (loop1): Directory bread(block 73) failed [ 91.682395][ T1402] loop1: detected capacity change from 0 to 1024 [ 91.701595][ T1402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.120146][ T309] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 92.547849][ T282] EXT4-fs (loop1): unmounting filesystem. [ 92.548515][ T309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.563984][ T309] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.590339][ T309] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.599451][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.599897][ T1414] loop1: detected capacity change from 0 to 4096 [ 92.608058][ T309] usb 3-1: SerialNumber: syz [ 92.620031][ T1414] EXT4-fs (loop1): Test dummy encryption mode enabled [ 92.632160][ T1414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.645466][ T1414] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 92.659867][ T282] EXT4-fs (loop1): unmounting filesystem. [ 92.711120][ T293] cdc_ncm 4-1:1.0: bind() failure [ 92.716691][ T1419] loop1: detected capacity change from 0 to 4096 [ 92.718509][ T293] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 92.732572][ T293] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 92.733546][ T1419] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.742165][ T293] usb 4-1: USB disconnect, device number 3 [ 92.756790][ T1419] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.314: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 92.782132][ T1419] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.314: directory missing '..' [ 92.811720][ T282] EXT4-fs (loop1): unmounting filesystem. [ 92.835019][ T309] usb 3-1: 0:2 : does not exist [ 92.842124][ T309] usb 3-1: unit 5: unexpected type 0x03 [ 92.849176][ T1422] loop1: detected capacity change from 0 to 512 [ 92.862869][ T309] usb 3-1: USB disconnect, device number 9 [ 92.879540][ T1422] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.315: casefold flag without casefold feature [ 92.892820][ T1422] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.315: couldn't read orphan inode 15 (err -117) [ 92.904894][ T1422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.404875][ T282] EXT4-fs (loop1): unmounting filesystem. [ 94.512612][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 94.512629][ T28] audit: type=1400 audit(1759021846.402:371): avc: denied { bind } for pid=1446 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.538616][ T1447] 9pnet_fd: Insufficient options for proto=fd [ 94.566430][ T1456] loop1: detected capacity change from 0 to 1024 [ 94.897320][ T28] audit: type=1400 audit(1759021846.402:372): avc: denied { name_bind } for pid=1446 comm="syz.0.324" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 94.919693][ T28] audit: type=1400 audit(1759021846.402:373): avc: denied { node_bind } for pid=1446 comm="syz.0.324" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 94.941828][ T1456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.035690][ T1461] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 95.454941][ T282] EXT4-fs (loop1): unmounting filesystem. [ 95.480145][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.890182][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 95.896521][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.910817][ T28] audit: type=1400 audit(1759021847.802:374): avc: denied { mounton } for pid=1484 comm="syz.1.334" path="/proc/163/task" dev="proc" ino=19172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.945914][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.947179][ T28] audit: type=1400 audit(1759021847.802:375): avc: denied { mount } for pid=1484 comm="syz.1.334" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.980142][ T19] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.991506][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.041406][ T19] usb 5-1: config 0 descriptor?? [ 96.052840][ T1492] loop2: detected capacity change from 0 to 16 [ 96.054610][ T28] audit: type=1400 audit(1759021847.942:376): avc: denied { write } for pid=1491 comm="syz.2.336" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.082426][ T1492] erofs: (device loop2): mounted with root inode @ nid 36. [ 96.101242][ T1492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 96.114246][ T1492] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 96.117117][ T1485] loop1: detected capacity change from 0 to 8192 [ 96.130665][ T28] audit: type=1400 audit(1759021848.022:377): avc: denied { mounton } for pid=1491 comm="syz.2.336" path="/68/file0/file0" dev="loop2" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.445312][ T1489] device veth0 entered promiscuous mode [ 96.454798][ T1489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 96.607291][ T28] audit: type=1400 audit(1759021848.332:378): avc: denied { ioctl } for pid=1484 comm="syz.1.334" path="socket:[19185]" dev="sockfs" ino=19185 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.634587][ T28] audit: type=1400 audit(1759021848.342:379): avc: denied { bind } for pid=1484 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.656118][ T1485] loop1: p1 p2 p4 < > [ 96.667644][ T1485] loop1: partition table partially beyond EOD, truncated [ 96.676218][ T1485] loop1: p1 start 16777216 is beyond EOD, truncated [ 96.681532][ T1498] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 96.691008][ T1485] loop1: p2 size 515840 extends beyond EOD, truncated [ 96.699246][ T1485] loop1: p4 start 16777216 is beyond EOD, truncated [ 96.717196][ T19] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 96.736897][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.744483][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.752099][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.762628][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.770180][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.784756][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.792067][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.799385][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.806656][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.813992][ T19] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 96.826682][ T357] udevd[357]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 96.864937][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input10 [ 96.896477][ T28] audit: type=1400 audit(1759021848.782:380): avc: denied { remount } for pid=1504 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.971360][ T19] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 96.995821][ T19] usb 5-1: USB disconnect, device number 2 [ 97.761487][ T1516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 98.125013][ T1513] fido_id[1513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 98.180180][ T309] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.022923][ T309] usb 4-1: Using ep0 maxpacket: 16 [ 99.035724][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.056973][ T309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.082456][ T309] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 99.110286][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.130642][ T309] usb 4-1: config 0 descriptor?? [ 99.285090][ T1537] tipc: Started in network mode [ 99.300151][ T1537] tipc: Node identity 824f887121, cluster identity 4711 [ 99.307220][ T1537] tipc: Enabled bearer , priority 0 [ 99.349141][ T1537] device syzkaller0 entered promiscuous mode [ 99.360401][ T1537] tipc: Resetting bearer [ 99.370830][ T1535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'. [ 99.519882][ T1539] loop2: detected capacity change from 0 to 256 [ 99.558722][ T309] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 99.567450][ T1539] FAT-fs (loop2): Directory bread(block 64) failed [ 99.580140][ T1539] FAT-fs (loop2): Directory bread(block 65) failed [ 99.588884][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.596634][ T1539] FAT-fs (loop2): Directory bread(block 66) failed [ 99.605957][ T1539] FAT-fs (loop2): Directory bread(block 67) failed [ 99.610146][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.619715][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.621345][ T1539] FAT-fs (loop2): Directory bread(block 68) failed [ 99.634107][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 99.634121][ T28] audit: type=1400 audit(1759021851.522:388): avc: denied { write } for pid=1536 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.647337][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.667326][ T1539] FAT-fs (loop2): Directory bread(block 69) failed [ 99.674239][ T1536] tipc: Resetting bearer [ 99.681200][ T1539] FAT-fs (loop2): Directory bread(block 70) failed [ 99.687744][ T1539] FAT-fs (loop2): Directory bread(block 71) failed [ 99.700244][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.712622][ T1536] tipc: Disabling bearer [ 99.718439][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.728065][ T1539] FAT-fs (loop2): Directory bread(block 72) failed [ 99.734939][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.742398][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.749686][ T1539] FAT-fs (loop2): Directory bread(block 73) failed [ 99.756497][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.771212][ T309] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 99.820917][ T28] audit: type=1400 audit(1759021851.712:389): avc: denied { name_bind } for pid=1544 comm="syz.4.353" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 99.830277][ T309] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input11 [ 99.854246][ T1545] device veth1_macvtap left promiscuous mode [ 99.863061][ T1545] device macsec0 entered promiscuous mode [ 99.864300][ T1543] loop1: detected capacity change from 0 to 4096 [ 99.889526][ T1543] EXT4-fs (loop1): Test dummy encryption mode enabled [ 99.903046][ T1543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.941372][ T309] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 99.961560][ T28] audit: type=1400 audit(1759021851.852:390): avc: denied { relabelfrom } for pid=1553 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 99.984420][ T28] audit: type=1400 audit(1759021851.872:391): avc: denied { relabelto } for pid=1553 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 100.022188][ T309] usb 4-1: USB disconnect, device number 4 [ 100.040618][ T1543] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 100.084728][ T282] EXT4-fs (loop1): unmounting filesystem. [ 102.438327][ T1578] overlayfs: missing 'lowerdir' [ 102.647619][ T1582] loop1: detected capacity change from 0 to 256 [ 102.655273][ T28] audit: type=1400 audit(1759021854.542:392): avc: denied { read } for pid=1581 comm="syz.4.365" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.682961][ T1583] binder: BINDER_SET_CONTEXT_MGR already set [ 102.705297][ T1584] binder: 1581:1584 ioctl c0306201 200000000080 returned -14 [ 102.721462][ T1582] FAT-fs (loop1): Directory bread(block 64) failed [ 102.728612][ T1583] binder: 1581:1583 ioctl 4018620d 200000000280 returned -16 [ 102.732306][ T28] audit: type=1400 audit(1759021854.572:393): avc: denied { open } for pid=1581 comm="syz.4.365" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.760479][ T28] audit: type=1400 audit(1759021854.572:394): avc: denied { ioctl } for pid=1581 comm="syz.4.365" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.761628][ T1582] FAT-fs (loop1): Directory bread(block 65) failed [ 102.786509][ T28] audit: type=1400 audit(1759021854.572:395): avc: denied { set_context_mgr } for pid=1581 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.814515][ T1584] binder: BINDER_SET_CONTEXT_MGR already set [ 102.820999][ T1584] binder: 1581:1584 ioctl 4018620d 200000000040 returned -16 [ 102.829608][ T28] audit: type=1400 audit(1759021854.692:396): avc: denied { mount } for pid=1580 comm="syz.2.364" name="/" dev="ramfs" ino=19320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.868158][ T1582] FAT-fs (loop1): Directory bread(block 66) failed [ 102.875691][ T28] audit: type=1400 audit(1759021854.692:397): avc: denied { remount } for pid=1580 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.882548][ T1582] FAT-fs (loop1): Directory bread(block 67) failed [ 102.943051][ T1582] FAT-fs (loop1): Directory bread(block 68) failed [ 102.961789][ T1582] FAT-fs (loop1): Directory bread(block 69) failed [ 102.987361][ T1582] FAT-fs (loop1): Directory bread(block 70) failed [ 103.006523][ T1582] FAT-fs (loop1): Directory bread(block 71) failed [ 103.024696][ T1582] FAT-fs (loop1): Directory bread(block 72) failed [ 103.049996][ T1582] FAT-fs (loop1): Directory bread(block 73) failed [ 104.282842][ T1614] loop4: detected capacity change from 0 to 1024 [ 104.322490][ T1614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.644875][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 104.644891][ T28] audit: type=1400 audit(1759021856.532:430): avc: denied { write } for pid=1630 comm="syz.1.377" name="event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.676024][ T284] EXT4-fs (loop4): unmounting filesystem. [ 104.684554][ T1631] netlink: 'syz.1.377': attribute type 12 has an invalid length. [ 104.722720][ T1631] netlink: 'syz.1.377': attribute type 29 has an invalid length. [ 104.730955][ T1631] netlink: 148 bytes leftover after parsing attributes in process `syz.1.377'. [ 104.740004][ T28] audit: type=1400 audit(1759021856.572:431): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.806144][ T28] audit: type=1400 audit(1759021856.572:432): avc: denied { open } for pid=1630 comm="syz.1.377" path="/dev/input/event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.847794][ T1636] can0: slcan on ttyS3. [ 104.880150][ T28] audit: type=1400 audit(1759021856.572:433): avc: denied { create } for pid=1630 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.920132][ T28] audit: type=1400 audit(1759021856.572:434): avc: denied { mount } for pid=1630 comm="syz.1.377" name="/" dev="ramfs" ino=20153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 104.942698][ T28] audit: type=1400 audit(1759021856.572:435): avc: denied { ioctl } for pid=1630 comm="syz.1.377" path="socket:[20152]" dev="sockfs" ino=20152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.968578][ T28] audit: type=1400 audit(1759021856.652:436): avc: denied { ioctl } for pid=1630 comm="syz.1.377" path="/dev/input/event1" dev="devtmpfs" ino=261 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.000103][ T1636] can0 (unregistered): slcan off ttyS3. [ 105.363743][ T1642] loop1: detected capacity change from 0 to 40427 [ 105.373057][ T1642] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 105.380190][ T1642] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.388925][ T1642] F2FS-fs (loop1): fault_injection options not supported [ 105.396166][ T1642] F2FS-fs (loop1): fault_type options not supported [ 105.396308][ T28] audit: type=1400 audit(1759021856.682:437): avc: denied { accept } for pid=1634 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 105.423636][ T1642] F2FS-fs (loop1): invalid crc value [ 105.463556][ T1642] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.470124][ T28] audit: type=1400 audit(1759021856.682:438): avc: denied { mount } for pid=1634 comm="syz.4.378" name="/" dev="configfs" ino=13980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 105.493052][ T28] audit: type=1400 audit(1759021856.682:439): avc: denied { search } for pid=1634 comm="syz.4.378" name="/" dev="configfs" ino=13980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.526015][ T1642] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 105.533535][ T1642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.622921][ T1652] loop2: detected capacity change from 0 to 4096 [ 105.635215][ T1652] EXT4-fs (loop2): Test dummy encryption mode enabled [ 105.651829][ T1650] loop4: detected capacity change from 0 to 4096 [ 105.704819][ T1650] EXT4-fs (loop4): Test dummy encryption mode enabled [ 105.715406][ T282] syz-executor: attempt to access beyond end of device [ 105.715406][ T282] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.007728][ T1652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.019304][ T1650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.051742][ T1652] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 106.058596][ T1650] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 106.091677][ T286] EXT4-fs (loop2): unmounting filesystem. [ 106.097999][ T284] EXT4-fs (loop4): unmounting filesystem. [ 106.257690][ T1669] loop1: detected capacity change from 0 to 512 [ 106.279284][ T1669] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 106.287582][ T1669] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.385: bad orphan inode 15 [ 106.297755][ T1669] ext4_test_bit(bit=14, block=4) = 1 [ 106.303262][ T1669] is_bad_inode(inode)=0 [ 106.307436][ T1669] NEXT_ORPHAN(inode)=0 [ 106.311591][ T1669] max_ino=32 [ 106.314848][ T1669] i_nlink=1 [ 106.318019][ T1669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.457890][ T282] EXT4-fs (loop1): unmounting filesystem. [ 107.131588][ T1699] loop4: detected capacity change from 0 to 4096 [ 107.144345][ T1699] EXT4-fs (loop4): Test dummy encryption mode enabled [ 107.234935][ T1706] loop3: detected capacity change from 0 to 128 [ 110.869580][ T1707] loop1: detected capacity change from 0 to 40427 [ 110.915044][ T1707] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 110.922980][ T1707] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 111.708935][ T1699] EXT4-fs: error -4 creating inode table initialization thread [ 111.730209][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 111.730239][ T28] audit: type=1326 audit(1759021863.372:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c78eec9 code=0x7ffc0000 [ 112.164664][ T1707] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 112.218839][ T1699] EXT4-fs (loop4): mount failed [ 112.224080][ T28] audit: type=1326 audit(1759021863.372:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c78eec9 code=0x7ffc0000 [ 112.351461][ T28] audit: type=1326 audit(1759021863.372:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4e2c78eec9 code=0x7ffc0000 [ 112.711302][ T28] audit: type=1326 audit(1759021863.372:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c78eec9 code=0x7ffc0000 [ 112.758329][ T28] audit: type=1326 audit(1759021863.372:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c78eec9 code=0x7ffc0000 [ 112.842391][ T28] audit: type=1326 audit(1759021863.372:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e2c78eec9 code=0x7ffc0000 [ 112.880591][ T28] audit: type=1400 audit(1759021863.372:466): avc: denied { read write } for pid=1692 comm="syz.1.395" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 113.157149][ T1739] tun0: tun_chr_ioctl cmd 1074025684 [ 113.167740][ T28] audit: type=1400 audit(1759021863.372:467): avc: denied { open } for pid=1692 comm="syz.1.395" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 113.276026][ T28] audit: type=1326 audit(1759021863.372:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c78eec9 code=0x7ffc0000 [ 113.346619][ T28] audit: type=1326 audit(1759021863.372:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c78eec9 code=0x7ffc0000 [ 113.460091][ T1715] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.650124][ T1715] usb 4-1: Using ep0 maxpacket: 16 [ 113.656800][ T1715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.668574][ T1715] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.690096][ T1715] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.699363][ T1715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.728887][ T1715] usb 4-1: config 0 descriptor?? [ 114.426683][ T1715] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 114.460141][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.139049][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.146427][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.153760][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.161835][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.169146][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.176566][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.183873][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.213023][ T1785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.420'. [ 115.222005][ T1785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.420'. [ 115.275148][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.283191][ T1715] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 115.305811][ T1715] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input12 [ 115.415240][ T1788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 115.428614][ T1788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 115.667642][ T1792] loop2: detected capacity change from 0 to 512 [ 115.705636][ T1794] loop3: detected capacity change from 0 to 16 [ 115.750909][ T1794] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.170505][ T1798] syz.2.423[1798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.170582][ T1798] syz.2.423[1798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.466474][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 121.466491][ T28] audit: type=1400 audit(1759021868.472:499): avc: denied { connect } for pid=1791 comm="syz.2.423" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.509407][ T28] audit: type=1400 audit(1759021868.492:500): avc: denied { write } for pid=1791 comm="syz.2.423" laddr=172.20.20.170 lport=2 faddr=172.20.20.40 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.687306][ T1798] loop2: detected capacity change from 0 to 8192 [ 121.687624][ T1715] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 121.706382][ T1796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 121.757119][ T1715] usb 4-1: USB disconnect, device number 5 [ 121.767411][ T1810] syz.4.427[1810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.767489][ T1810] syz.4.427[1810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.832840][ T1810] syz.4.427[1810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.844289][ T1810] syz.4.427[1810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.983298][ T1819] fido_id[1819]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 122.019205][ T28] audit: type=1400 audit(1759021873.902:501): avc: denied { create } for pid=1823 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.037304][ T366] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.157930][ T28] audit: type=1400 audit(1759021873.962:502): avc: denied { ioctl } for pid=1823 comm="syz.1.434" path="socket:[20904]" dev="sockfs" ino=20904 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.161589][ T1829] loop1: detected capacity change from 0 to 256 [ 122.385678][ T1833] loop2: detected capacity change from 0 to 128 [ 122.456758][ T1829] FAT-fs (loop1): Directory bread(block 64) failed [ 122.473641][ T1833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 122.483792][ T1829] FAT-fs (loop1): Directory bread(block 65) failed [ 122.501028][ T1833] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.541122][ T1829] FAT-fs (loop1): Directory bread(block 66) failed [ 122.561613][ T28] audit: type=1400 audit(1759021874.452:503): avc: denied { create } for pid=1832 comm="syz.2.436" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 122.574097][ T1829] FAT-fs (loop1): Directory bread(block 67) failed [ 122.637955][ T1829] FAT-fs (loop1): Directory bread(block 68) failed [ 122.661571][ T1829] FAT-fs (loop1): Directory bread(block 69) failed [ 122.686185][ T1829] FAT-fs (loop1): Directory bread(block 70) failed [ 122.715019][ T1829] FAT-fs (loop1): Directory bread(block 71) failed [ 122.752975][ T1829] FAT-fs (loop1): Directory bread(block 72) failed [ 122.760243][ T1829] FAT-fs (loop1): Directory bread(block 73) failed [ 122.771156][ T286] EXT4-fs (loop2): unmounting filesystem. [ 122.840797][ T1838] loop2: detected capacity change from 0 to 1024 [ 122.858757][ T1838] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 123.089604][ T1818] loop4: detected capacity change from 0 to 40427 [ 123.126965][ T1818] F2FS-fs (loop4): fault_injection options not supported [ 123.154883][ T1818] F2FS-fs (loop4): invalid crc value [ 123.189226][ T1818] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.346286][ T1818] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.367801][ T28] audit: type=1400 audit(1759021875.252:504): avc: denied { relabelfrom } for pid=1845 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.410102][ T1174] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.437511][ T28] audit: type=1400 audit(1759021875.272:505): avc: denied { relabelto } for pid=1845 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.473784][ T284] syz-executor: attempt to access beyond end of device [ 123.473784][ T284] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.478596][ T28] audit: type=1400 audit(1759021875.352:506): avc: denied { ioctl } for pid=1816 comm="syz.4.431" path="/93/file1/file1" dev="loop4" ino=10 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.558140][ T28] audit: type=1400 audit(1759021875.442:507): avc: denied { execute } for pid=1860 comm="syz.0.445" name="file0" dev="tmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.601387][ T1863] netlink: 60 bytes leftover after parsing attributes in process `syz.3.446'. [ 123.610294][ T28] audit: type=1400 audit(1759021875.442:508): avc: denied { execute_no_trans } for pid=1860 comm="syz.0.445" path="/123/file0" dev="tmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.635238][ T1174] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.658822][ T1174] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.690856][ T1174] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.707745][ T1870] bridge: RTM_NEWNEIGH with invalid ether address [ 123.710165][ T1174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.752002][ T1174] usb 2-1: SerialNumber: syz [ 124.698714][ T1174] usb 2-1: 0:2 : does not exist [ 124.707913][ T1174] usb 2-1: USB disconnect, device number 4 [ 125.501673][ T1894] FAULT_INJECTION: forcing a failure. [ 125.501673][ T1894] name failslab, interval 1, probability 0, space 0, times 0 [ 125.517520][ T1895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.456'. [ 125.548076][ T1895] device sit0 entered promiscuous mode [ 125.566263][ T1894] CPU: 1 PID: 1894 Comm: syz.3.457 Not tainted syzkaller #0 [ 125.573603][ T1894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.583672][ T1894] Call Trace: [ 125.586957][ T1894] [ 125.589900][ T1894] __dump_stack+0x21/0x24 [ 125.594269][ T1894] dump_stack_lvl+0xee/0x150 [ 125.598898][ T1894] ? __cfi_dump_stack_lvl+0x8/0x8 [ 125.603944][ T1894] dump_stack+0x15/0x24 [ 125.608136][ T1894] should_fail_ex+0x3d4/0x520 [ 125.612843][ T1894] __should_failslab+0xac/0xf0 [ 125.617716][ T1894] ? alloc_pipe_info+0x1fc/0x4b0 [ 125.622688][ T1894] should_failslab+0x9/0x20 [ 125.627215][ T1894] __kmem_cache_alloc_node+0x3d/0x2c0 [ 125.632728][ T1894] ? alloc_pipe_info+0x1fc/0x4b0 [ 125.637698][ T1894] __kmalloc+0xa1/0x1e0 [ 125.641879][ T1894] alloc_pipe_info+0x1fc/0x4b0 [ 125.646666][ T1894] splice_direct_to_actor+0x956/0xb10 [ 125.652071][ T1894] ? __cfi_avc_has_perm+0x10/0x10 [ 125.657119][ T1894] ? kstrtouint+0x74/0xe0 [ 125.661478][ T1894] ? selinux_file_permission+0x3ef/0x510 [ 125.667136][ T1894] ? fsnotify_perm+0x67/0x5b0 [ 125.671823][ T1894] ? security_file_permission+0x8a/0xb0 [ 125.677378][ T1894] ? __cfi_direct_splice_actor+0x10/0x10 [ 125.683026][ T1894] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 125.688933][ T1894] ? security_file_permission+0x94/0xb0 [ 125.694501][ T1894] ? rw_verify_area+0xa7/0x1c0 [ 125.699297][ T1894] do_splice_direct+0x1b3/0x2c0 [ 125.704164][ T1894] ? __cfi_do_splice_direct+0x10/0x10 [ 125.709580][ T1894] ? security_file_permission+0x94/0xb0 [ 125.715138][ T1894] do_sendfile+0x5c6/0xeb0 [ 125.719570][ T1894] ? __cfi_vfs_write+0x10/0x10 [ 125.724402][ T1894] ? do_preadv+0x330/0x330 [ 125.728828][ T1894] ? __kasan_check_write+0x14/0x20 [ 125.733948][ T1894] ? fput+0x154/0x1a0 [ 125.737944][ T1894] __x64_sys_sendfile64+0x18f/0x1f0 [ 125.743154][ T1894] ? __cfi_ksys_write+0x10/0x10 [ 125.748049][ T1894] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 125.753782][ T1894] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 125.759867][ T1894] x64_sys_call+0x62c/0x9a0 [ 125.764393][ T1894] do_syscall_64+0x4c/0xa0 [ 125.768818][ T1894] ? clear_bhb_loop+0x30/0x80 [ 125.773511][ T1894] ? clear_bhb_loop+0x30/0x80 [ 125.778210][ T1894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.784162][ T1894] RIP: 0033:0x7f8c8b58eec9 [ 125.788594][ T1894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.808213][ T1894] RSP: 002b:00007f8c8c460038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 125.816678][ T1894] RAX: ffffffffffffffda RBX: 00007f8c8b7e5fa0 RCX: 00007f8c8b58eec9 [ 125.824668][ T1894] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 125.832656][ T1894] RBP: 00007f8c8c460090 R08: 0000000000000000 R09: 0000000000000000 [ 125.840639][ T1894] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 125.848623][ T1894] R13: 00007f8c8b7e6038 R14: 00007f8c8b7e5fa0 R15: 00007fff1590e718 [ 125.856620][ T1894] [ 126.746851][ T1906] bridge: RTM_NEWNEIGH with invalid ether address [ 126.826973][ T1908] FAULT_INJECTION: forcing a failure. [ 126.826973][ T1908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.840052][ T1908] CPU: 1 PID: 1908 Comm: syz.1.460 Not tainted syzkaller #0 [ 126.847365][ T1908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.857456][ T1908] Call Trace: [ 126.860764][ T1908] [ 126.863716][ T1908] __dump_stack+0x21/0x24 [ 126.868072][ T1908] dump_stack_lvl+0xee/0x150 [ 126.872688][ T1908] ? __cfi_dump_stack_lvl+0x8/0x8 [ 126.877741][ T1908] ? pick_next_pushable_task+0x210/0x210 [ 126.883405][ T1908] dump_stack+0x15/0x24 [ 126.887574][ T1908] should_fail_ex+0x3d4/0x520 [ 126.892252][ T1908] should_fail+0xb/0x10 [ 126.896404][ T1908] should_fail_usercopy+0x1a/0x20 [ 126.901515][ T1908] strncpy_from_user+0x24/0x2d0 [ 126.906368][ T1908] strncpy_from_user_nofault+0x73/0x150 [ 126.911902][ T1908] bpf_probe_read_compat_str+0xe6/0x180 [ 126.917466][ T1908] bpf_prog_c1796171ffc7efef+0x35/0x37 [ 126.922916][ T1908] bpf_trace_run4+0x11b/0x270 [ 126.927587][ T1908] ? __cfi_bpf_trace_run4+0x10/0x10 [ 126.932778][ T1908] ? __this_cpu_preempt_check+0x13/0x20 [ 126.938321][ T1908] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 126.944992][ T1908] ? probe_sched_switch+0x63/0x90 [ 126.950017][ T1908] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 126.956092][ T1908] __bpf_trace_sched_switch+0xe/0x10 [ 126.961375][ T1908] __traceiter_sched_switch+0xa0/0xd0 [ 126.966738][ T1908] __schedule+0x1263/0x14e0 [ 126.971234][ T1908] ? __kasan_check_read+0x11/0x20 [ 126.976271][ T1908] ? release_firmware_map_entry+0x194/0x194 [ 126.982153][ T1908] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 126.988213][ T1908] preempt_schedule_irq+0x9b/0x110 [ 126.993319][ T1908] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 126.999038][ T1908] ? __f_unlock_pos+0xd/0x20 [ 127.003631][ T1908] ? __kasan_check_write+0x14/0x20 [ 127.008815][ T1908] raw_irqentry_exit_cond_resched+0x29/0x30 [ 127.014714][ T1908] irqentry_exit+0x37/0x40 [ 127.019128][ T1908] sysvec_reschedule_ipi+0x78/0x80 [ 127.024254][ T1908] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 127.029707][ T1908] RIP: 0010:__x64_sys_mkdirat+0x0/0xa0 [ 127.035163][ T1908] Code: 0f 8c 08 ff ff ff 48 89 df e8 ec 1e f4 ff e9 fb fe ff ff e8 c2 b4 af ff 0f 0b 90 90 90 90 90 90 90 90 90 90 90 b8 d9 34 2b b0 <55> 48 89 e5 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc [ 127.054760][ T1908] RSP: 0018:ffffc90010a77f08 EFLAGS: 00000283 [ 127.060818][ T1908] RAX: 0000000000000102 RBX: ffffc90010a77f20 RCX: ffff888114148000 [ 127.068794][ T1908] RDX: 0000000000000000 RSI: 0000000000000102 RDI: ffffc90010a77f58 [ 127.076766][ T1908] RBP: ffffc90010a77f10 R08: 0000000000000000 R09: 0000000000000000 [ 127.084728][ T1908] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 127.092710][ T1908] R13: 0000000000000000 R14: ffffc90010a77f58 R15: 0000000000000102 [ 127.100676][ T1908] ? syscall_exit_to_user_mode+0x1f/0x30 [ 127.106305][ T1908] ? x64_sys_call+0x73d/0x9a0 [ 127.110975][ T1908] do_syscall_64+0x4c/0xa0 [ 127.115383][ T1908] ? clear_bhb_loop+0x30/0x80 [ 127.120055][ T1908] ? clear_bhb_loop+0x30/0x80 [ 127.124728][ T1908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.130615][ T1908] RIP: 0033:0x7f4e2c78eec9 [ 127.135023][ T1908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.154706][ T1908] RSP: 002b:00007f4e2b1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 127.163111][ T1908] RAX: ffffffffffffffda RBX: 00007f4e2c9e6180 RCX: 00007f4e2c78eec9 [ 127.171085][ T1908] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 127.179052][ T1908] RBP: 00007f4e2b1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.187021][ T1908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.195013][ T1908] R13: 00007f4e2c9e6218 R14: 00007f4e2c9e6180 R15: 00007ffffa0ebf58 [ 127.203005][ T1908] [ 127.389510][ T309] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 127.469369][ T28] audit: type=1400 audit(1759021879.352:509): avc: denied { load_policy } for pid=1918 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 127.534181][ T1919] SELinux: failed to load policy [ 127.550327][ T286] EXT4-fs (loop2): unmounting filesystem. [ 127.573296][ T1925] loop3: detected capacity change from 0 to 128 [ 127.598101][ T1925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.607029][ T1925] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.646956][ T1925] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.470: bg 0: bad block bitmap checksum [ 127.647120][ T309] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 127.669960][ T309] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.682438][ T309] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 127.698879][ T309] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.708084][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.716170][ T309] usb 5-1: SerialNumber: syz [ 127.720129][ T1174] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.920169][ T1174] usb 2-1: Using ep0 maxpacket: 16 [ 127.931068][ T1174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.956333][ T1174] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.120936][ T1174] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.130315][ T1174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.146367][ T1174] usb 2-1: config 0 descriptor?? [ 128.166683][ T283] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 128.200301][ T283] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 128.294400][ T309] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 128.301837][ T309] rndis_host: probe of 5-1:253.0 failed with error -71 [ 128.319615][ T309] usb 5-1: USB disconnect, device number 3 [ 128.342015][ T283] EXT4-fs (loop3): unmounting filesystem. [ 128.557062][ T1174] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 128.573508][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.592683][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.599956][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.632992][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.650165][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.657545][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.664976][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.672270][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.679548][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.686845][ T1174] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 128.715756][ T1174] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input13 [ 128.728203][ T28] audit: type=1400 audit(1759021880.612:510): avc: denied { mounton } for pid=1942 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 128.833633][ T1174] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 128.904790][ T1942] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.914290][ T1174] usb 2-1: USB disconnect, device number 5 [ 128.941521][ T1942] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.976064][ T1942] device bridge_slave_0 entered promiscuous mode [ 128.981296][ T1950] fido_id[1950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 129.003200][ T1942] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.010467][ T1942] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.018281][ T1942] device bridge_slave_1 entered promiscuous mode [ 129.050548][ T28] audit: type=1326 audit(1759021880.942:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2fd8eec9 code=0x7ffc0000 [ 129.093607][ T28] audit: type=1326 audit(1759021880.942:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2fd8eec9 code=0x7ffc0000 [ 129.168515][ T28] audit: type=1326 audit(1759021880.942:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7efe2fd8eec9 code=0x7ffc0000 [ 129.201747][ T1964] loop4: detected capacity change from 0 to 16 [ 129.223105][ T1942] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.230199][ T1942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.230361][ T28] audit: type=1326 audit(1759021880.942:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2fd8eec9 code=0x7ffc0000 [ 129.237532][ T1942] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.265832][ T1964] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 129.267680][ T1942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.286228][ T28] audit: type=1326 audit(1759021880.942:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2fd8eec9 code=0x7ffc0000 [ 129.325301][ T28] audit: type=1326 audit(1759021880.942:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe2fd8eec9 code=0x7ffc0000 [ 129.355882][ T28] audit: type=1326 audit(1759021880.942:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2fd8eec9 code=0x7ffc0000 [ 129.380197][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.409303][ T28] audit: type=1326 audit(1759021880.942:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1955 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2fd8eec9 code=0x7ffc0000 [ 129.409402][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.483680][ T1942] device veth0_vlan entered promiscuous mode [ 129.497695][ T1942] device veth1_macvtap entered promiscuous mode [ 129.504261][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.505869][ T1976] bridge: RTM_NEWNEIGH with invalid ether address [ 129.527835][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.541055][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.551789][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.560504][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.568827][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.575937][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.583556][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.593144][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.601873][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.608922][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.616856][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.626709][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.638266][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.648012][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.657981][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.668843][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.679379][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.689053][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.697025][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 129.704984][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.709256][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.725026][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.725121][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.746776][ T6] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.746904][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.764074][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.772908][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.774305][ T6] usb 3-1: config 0 descriptor?? [ 129.791929][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.823857][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.839081][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.852969][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.862693][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.075614][ T1991] FAULT_INJECTION: forcing a failure. [ 130.075614][ T1991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.095048][ T1991] CPU: 0 PID: 1991 Comm: syz.5.474 Not tainted syzkaller #0 [ 130.102387][ T1991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.112467][ T1991] Call Trace: [ 130.115764][ T1991] [ 130.118713][ T1991] __dump_stack+0x21/0x24 [ 130.123078][ T1991] dump_stack_lvl+0xee/0x150 [ 130.127690][ T1991] ? __cfi_dump_stack_lvl+0x8/0x8 [ 130.132731][ T1991] ? __kasan_check_write+0x14/0x20 [ 130.137885][ T1991] dump_stack+0x15/0x24 [ 130.142064][ T1991] should_fail_ex+0x3d4/0x520 [ 130.146800][ T1991] should_fail+0xb/0x10 [ 130.150985][ T1991] should_fail_usercopy+0x1a/0x20 [ 130.156038][ T1991] strncpy_from_user+0x24/0x2d0 [ 130.160919][ T1991] ? getname_flags+0xb9/0x500 [ 130.165622][ T1991] getname_flags+0xf4/0x500 [ 130.170156][ T1991] __x64_sys_linkat+0xcf/0x100 [ 130.174951][ T1991] x64_sys_call+0x4e3/0x9a0 [ 130.179479][ T1991] do_syscall_64+0x4c/0xa0 [ 130.183982][ T1991] ? clear_bhb_loop+0x30/0x80 [ 130.188712][ T1991] ? clear_bhb_loop+0x30/0x80 [ 130.193414][ T1991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.199330][ T1991] RIP: 0033:0x7f45de78eec9 [ 130.203757][ T1991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.223387][ T1991] RSP: 002b:00007f45df55a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 130.231836][ T1991] RAX: ffffffffffffffda RBX: 00007f45de9e5fa0 RCX: 00007f45de78eec9 [ 130.239824][ T1991] RDX: ffffffffffffff9c RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 130.247827][ T1991] RBP: 00007f45df55a090 R08: 0000000000001000 R09: 0000000000000000 [ 130.255826][ T1991] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 130.263821][ T1991] R13: 00007f45de9e6038 R14: 00007f45de9e5fa0 R15: 00007fff5e692228 [ 130.271834][ T1991] [ 130.318240][ T1995] overlayfs: failed to clone upperpath [ 130.862716][ T6] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 130.872659][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.880112][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.887397][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.895366][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.902836][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.910472][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.917725][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.925166][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.940163][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.950748][ T6] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 130.996657][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input14 [ 131.082534][ T6] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 131.110429][ T6] usb 3-1: USB disconnect, device number 10 [ 131.178712][ T2009] fido_id[2009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 131.419562][ T2014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 131.428658][ T2014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 131.460429][ T2014] device gretap0 entered promiscuous mode [ 131.466511][ T2014] device macsec0 entered promiscuous mode [ 131.838139][ T2018] bridge: RTM_NEWNEIGH with invalid ether address [ 132.165064][ T2031] loop2: detected capacity change from 0 to 512 [ 132.267348][ T458] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.412487][ T2033] syz.2.500[2033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.412939][ T2033] syz.2.500[2033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.480147][ T458] usb 2-1: Using ep0 maxpacket: 16 [ 132.521548][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 132.755318][ T2034] loop2: detected capacity change from 0 to 8192 [ 132.779798][ T458] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.820690][ T2034] loop2: p1 p2 p3 p4[EZD] [ 132.825957][ T2034] loop2: p1 size 16128 extends beyond EOD, truncated [ 132.843687][ T2034] loop2: p3 start 458783 is beyond EOD, truncated [ 132.850273][ T2034] loop2: p4 size 65536 extends beyond EOD, truncated [ 132.976969][ T458] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.446814][ T458] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.494679][ T458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.581028][ T458] usb 2-1: config 0 descriptor?? [ 133.614191][ T2043] netlink: 44 bytes leftover after parsing attributes in process `syz.0.505'. [ 133.624361][ T2045] loop4: detected capacity change from 0 to 256 [ 133.628485][ T357] udevd[357]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 133.641865][ T496] udevd[496]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 133.653307][ T366] udevd[366]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 133.684706][ T2045] FAT-fs (loop4): Directory bread(block 64) failed [ 133.700527][ T2045] FAT-fs (loop4): Directory bread(block 65) failed [ 133.708215][ T2045] FAT-fs (loop4): Directory bread(block 66) failed [ 133.715787][ T2045] FAT-fs (loop4): Directory bread(block 67) failed [ 133.722725][ T2045] FAT-fs (loop4): Directory bread(block 68) failed [ 133.727462][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 133.727480][ T28] audit: type=1400 audit(1759021885.612:549): avc: denied { write } for pid=2035 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.729668][ T2045] FAT-fs (loop4): Directory bread(block 69) failed [ 133.763082][ T2045] FAT-fs (loop4): Directory bread(block 70) failed [ 133.769711][ T2045] FAT-fs (loop4): Directory bread(block 71) failed [ 133.776332][ T2045] FAT-fs (loop4): Directory bread(block 72) failed [ 133.783017][ T2045] FAT-fs (loop4): Directory bread(block 73) failed [ 133.860358][ T1174] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 133.990663][ T458] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 134.000017][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.007387][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.014730][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.022080][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.029347][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.036645][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.043925][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.051197][ T1174] usb 6-1: Using ep0 maxpacket: 16 [ 134.056465][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.063828][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.071261][ T458] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 134.079104][ T1174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.095485][ T1174] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.117817][ T458] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input15 [ 134.129338][ T1174] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.138529][ T1174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.147725][ T1174] usb 6-1: config 0 descriptor?? [ 134.150073][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.208696][ T458] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 134.226774][ T458] usb 2-1: USB disconnect, device number 6 [ 134.251144][ T2049] fido_id[2049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 134.341228][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.358802][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.368741][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 134.378056][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.386738][ T6] usb 5-1: SerialNumber: syz [ 134.409627][ T2051] loop2: detected capacity change from 0 to 512 [ 134.432972][ T2051] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.442062][ T2051] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.474277][ T2051] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.506: iget: bad i_size value: 2533274857506816 [ 134.489584][ T2051] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.506: iget: bad i_size value: 2533274857506816 [ 134.552177][ T286] EXT4-fs (loop2): unmounting filesystem. [ 134.579970][ T1174] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 134.590326][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.597576][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.605031][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.609416][ T6] usb 5-1: 0:2 : does not exist [ 134.612476][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.624641][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.633593][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.644637][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.659243][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.708054][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.732870][ T2060] device wireguard0 entered promiscuous mode [ 134.824068][ T28] audit: type=1400 audit(1759021886.712:550): avc: denied { bind } for pid=2055 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.924500][ T6] usb 5-1: USB disconnect, device number 4 [ 134.930465][ T1174] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 134.933771][ T28] audit: type=1400 audit(1759021886.712:551): avc: denied { listen } for pid=2055 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.957738][ T28] audit: type=1400 audit(1759021886.712:552): avc: denied { write } for pid=2055 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.989748][ T2069] loop2: detected capacity change from 0 to 512 [ 134.997542][ T2069] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.004286][ T2069] EXT4-fs: Ignoring removed nobh option [ 135.009928][ T2069] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.016987][ T2069] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.023897][ T2069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.032156][ T1174] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input16 [ 135.040903][ T2069] EXT4-fs (loop2): 1 truncate cleaned up [ 135.050842][ T2069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.075227][ T28] audit: type=1400 audit(1759021886.962:553): avc: denied { append } for pid=2068 comm="syz.2.511" path="/95/bus/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 135.121394][ T28] audit: type=1400 audit(1759021887.002:554): avc: denied { map } for pid=2068 comm="syz.2.511" path="/95/bus/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 135.152359][ T1174] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 135.188834][ T1174] usb 6-1: USB disconnect, device number 2 [ 135.293786][ T2076] fido_id[2076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 135.366239][ T286] EXT4-fs (loop2): unmounting filesystem. [ 135.505095][ T2094] loop2: detected capacity change from 0 to 4096 [ 135.539572][ T2094] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.591034][ T2094] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.598138][ T2094] EXT4-fs (loop2): #clusters per group too big: 32768 [ 135.819966][ T28] audit: type=1400 audit(1759021887.702:555): avc: denied { read } for pid=2098 comm="syz.2.518" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.160173][ T28] audit: type=1400 audit(1759021889.042:556): avc: denied { mounton } for pid=2113 comm="syz.0.523" path="/143/file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.187131][ T2116] loop1: detected capacity change from 0 to 256 [ 137.379799][ T2116] FAT-fs (loop1): Directory bread(block 64) failed [ 137.393700][ T2116] FAT-fs (loop1): Directory bread(block 65) failed [ 137.400451][ T2116] FAT-fs (loop1): Directory bread(block 66) failed [ 137.407003][ T2116] FAT-fs (loop1): Directory bread(block 67) failed [ 137.413670][ T2116] FAT-fs (loop1): Directory bread(block 68) failed [ 137.420272][ T2116] FAT-fs (loop1): Directory bread(block 69) failed [ 137.426841][ T2116] FAT-fs (loop1): Directory bread(block 70) failed [ 137.433499][ T2116] FAT-fs (loop1): Directory bread(block 71) failed [ 137.440133][ T2116] FAT-fs (loop1): Directory bread(block 72) failed [ 137.446705][ T2116] FAT-fs (loop1): Directory bread(block 73) failed [ 137.807585][ T627] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.003601][ T627] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.037388][ T627] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.052703][ T2123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.526'. [ 138.070365][ T627] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.102487][ T627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.125962][ T627] usb 2-1: SerialNumber: syz [ 138.344959][ T627] usb 2-1: 0:2 : does not exist [ 138.354796][ T627] usb 2-1: USB disconnect, device number 7 [ 138.426308][ T28] audit: type=1400 audit(1759021890.312:557): avc: denied { create } for pid=2129 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.706630][ T2138] loop4: detected capacity change from 0 to 1024 [ 138.715848][ T2138] EXT4-fs: Ignoring removed bh option [ 138.931650][ T2138] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.025608][ T28] audit: type=1400 audit(1759021890.882:558): avc: denied { read write } for pid=2129 comm="syz.4.528" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.122594][ T2141] loop2: detected capacity change from 0 to 128 [ 139.689907][ T28] audit: type=1400 audit(1759021890.882:559): avc: denied { open } for pid=2129 comm="syz.4.528" path="/111/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.755038][ T28] audit: type=1400 audit(1759021890.892:560): avc: denied { lock } for pid=2129 comm="syz.4.528" path="/111/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.782075][ T284] EXT4-fs (loop4): unmounting filesystem. [ 139.816294][ T2141] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.829315][ T2152] loop4: detected capacity change from 0 to 512 [ 139.838320][ T2141] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.944781][ T28] audit: type=1400 audit(1759021891.832:561): avc: denied { execute } for pid=2137 comm="syz.2.530" name="file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.999453][ T286] EXT4-fs (loop2): unmounting filesystem. [ 141.005850][ T28] audit: type=1400 audit(1759021892.872:562): avc: denied { execute_no_trans } for pid=2137 comm="syz.2.530" path="/102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.105096][ T2160] syz.4.533[2160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.105442][ T2160] syz.4.533[2160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.207248][ T2161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 141.499578][ T2162] loop4: detected capacity change from 0 to 8192 [ 141.964834][ T2164] loop5: detected capacity change from 0 to 512 [ 142.161374][ T2168] loop2: detected capacity change from 0 to 256 [ 142.174861][ T2162] loop4: p1 p2 p3 p4[EZD] [ 142.179435][ T2162] loop4: p1 size 16128 extends beyond EOD, truncated [ 142.187609][ T2162] loop4: p3 start 458783 is beyond EOD, truncated [ 142.194281][ T2162] loop4: p4 size 65536 extends beyond EOD, truncated [ 142.258427][ T2164] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.376241][ T2164] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 143.400195][ T2164] Quota error (device loop5): write_blk: dquota write failed [ 144.535630][ T2164] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 144.535666][ T2164] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.536: Failed to acquire dquot type 0 [ 144.540555][ T2164] EXT4-fs (loop5): 1 truncate cleaned up [ 144.540581][ T2164] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 144.580069][ T2185] tty tty25: ldisc open failed (-12), clearing slot 24 [ 144.621846][ T6] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 144.631599][ T366] udevd[366]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 144.638481][ T365] udevd[365]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 144.643214][ T357] udevd[357]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 144.662344][ T1942] EXT4-fs (loop5): unmounting filesystem. [ 144.667767][ T2191] loop2: detected capacity change from 0 to 512 [ 144.885005][ T2197] syz.2.544[2197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.885379][ T2197] syz.2.544[2197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.364111][ T2197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 145.607810][ T2197] loop2: detected capacity change from 0 to 8192 [ 145.641350][ T2197] loop2: p1 p2 p3 p4[EZD] [ 145.646390][ T2197] loop2: p1 size 16128 extends beyond EOD, truncated [ 145.658363][ T2197] loop2: p3 start 458783 is beyond EOD, truncated [ 145.664902][ T2197] loop2: p4 size 65536 extends beyond EOD, truncated [ 145.939664][ T2200] loop5: detected capacity change from 0 to 1024 [ 145.960515][ T2200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.964263][ T6] usb 5-1: device descriptor read/all, error -71 [ 146.123893][ T2202] loop4: detected capacity change from 0 to 1024 [ 146.145933][ T2200] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 146.171264][ T357] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.197535][ T2202] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.218701][ T366] udevd[366]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 146.229843][ T365] udevd[365]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 146.260267][ T357] udevd[357]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 146.331176][ T365] udevd[365]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 146.376471][ T366] udevd[366]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 146.390711][ T357] udevd[357]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 146.411265][ T2217] loop2: detected capacity change from 0 to 512 [ 146.421043][ T28] audit: type=1400 audit(1759021898.312:563): avc: denied { create } for pid=2199 comm="syz.5.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.794600][ T28] audit: type=1400 audit(1759021898.522:564): avc: denied { bind } for pid=2199 comm="syz.5.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.814960][ T28] audit: type=1400 audit(1759021898.542:565): avc: denied { read } for pid=2199 comm="syz.5.547" path="socket:[22861]" dev="sockfs" ino=22861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.838041][ T28] audit: type=1400 audit(1759021898.712:566): avc: denied { setopt } for pid=2199 comm="syz.5.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.857425][ T28] audit: type=1400 audit(1759021898.712:567): avc: denied { write } for pid=2199 comm="syz.5.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.993522][ T284] EXT4-fs (loop4): unmounting filesystem. [ 147.010381][ T2223] syz.2.553[2223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.010728][ T2223] syz.2.553[2223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.392978][ T2224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 147.632675][ T2224] loop2: detected capacity change from 0 to 8192 [ 147.682212][ T2224] loop2: p1 p2 p3 p4[EZD] [ 147.687373][ T2224] loop2: p1 size 16128 extends beyond EOD, truncated [ 147.700102][ T2224] loop2: p3 start 458783 is beyond EOD, truncated [ 147.706612][ T2224] loop2: p4 size 65536 extends beyond EOD, truncated [ 148.106946][ T1942] EXT4-fs (loop5): unmounting filesystem. [ 148.200278][ T2235] loop4: detected capacity change from 0 to 4096 [ 148.208964][ T366] udevd[366]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 148.230405][ T2235] EXT4-fs (loop4): Test dummy encryption mode enabled [ 148.246715][ T2235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.281752][ T2242] loop5: detected capacity change from 0 to 256 [ 148.307546][ T28] audit: type=1400 audit(1759021900.192:568): avc: denied { ioctl } for pid=2236 comm="syz.0.560" path="socket:[22182]" dev="sockfs" ino=22182 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.331513][ T2235] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 148.333042][ T28] audit: type=1400 audit(1759021900.232:569): avc: denied { bind } for pid=2236 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.358778][ T28] audit: type=1400 audit(1759021900.232:570): avc: denied { write } for pid=2236 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.389818][ T284] EXT4-fs (loop4): unmounting filesystem. [ 148.396518][ T2243] overlayfs: failed to clone upperpath [ 148.406809][ T2242] FAT-fs (loop5): Directory bread(block 64) failed [ 148.419504][ T2242] FAT-fs (loop5): Directory bread(block 65) failed [ 148.426525][ T2242] FAT-fs (loop5): Directory bread(block 66) failed [ 148.430222][ T293] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 148.433868][ T2242] FAT-fs (loop5): Directory bread(block 67) failed [ 148.458044][ T2242] FAT-fs (loop5): Directory bread(block 68) failed [ 148.468133][ T2242] FAT-fs (loop5): Directory bread(block 69) failed [ 148.476836][ T2242] FAT-fs (loop5): Directory bread(block 70) failed [ 148.483672][ T2242] FAT-fs (loop5): Directory bread(block 71) failed [ 148.490473][ T2242] FAT-fs (loop5): Directory bread(block 72) failed [ 148.497232][ T2242] FAT-fs (loop5): Directory bread(block 73) failed [ 148.507525][ T28] audit: type=1400 audit(1759021900.402:571): avc: denied { setopt } for pid=2246 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.563551][ T2251] loop4: detected capacity change from 0 to 512 [ 148.620831][ T366] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.630152][ T293] usb 3-1: Using ep0 maxpacket: 16 [ 148.684275][ T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.695320][ T293] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.708289][ T293] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.717472][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.726270][ T293] usb 3-1: config 0 descriptor?? [ 148.832801][ T2254] syz.4.565[2254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.834297][ T2254] syz.4.565[2254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.936933][ T1174] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 149.024268][ T2256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.565'. [ 149.287023][ T2256] loop4: detected capacity change from 0 to 8192 [ 149.307961][ T293] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 149.330813][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 149.338904][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 149.348174][ T2256] loop4: p1 p2 p3 p4[EZD] [ 149.353291][ T2256] loop4: p1 size 16128 extends beyond EOD, truncated [ 149.367462][ T2256] loop4: p3 start 458783 is beyond EOD, truncated [ 149.374067][ T2256] loop4: p4 size 65536 extends beyond EOD, truncated [ 149.856149][ T1174] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.866850][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 149.874144][ T1174] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.893254][ T102] loop4: p1 p2 p3 p4[EZD] [ 149.898313][ T102] loop4: p1 size 16128 extends beyond EOD, truncated [ 149.906952][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 149.923576][ T102] loop4: p3 start 458783 is beyond EOD, truncated [ 149.932444][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 149.940262][ T1174] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.949949][ T102] loop4: p4 size 65536 extends beyond EOD, truncated [ 149.957405][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 149.964881][ T1174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.978316][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 149.986087][ T1174] usb 6-1: SerialNumber: syz [ 149.991309][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 149.998556][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 150.006352][ T293] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 150.020756][ T496] udevd[496]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 150.032216][ T343] udevd[343]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 150.033699][ T293] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input18 [ 150.046684][ T357] udevd[357]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 150.069482][ T496] udevd[496]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 150.069682][ T357] udevd[357]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 150.080566][ T343] udevd[343]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 150.145039][ T2266] SELinux: policydb string SE LiŽux does not match my string SE Linux [ 150.153640][ T2266] SELinux: failed to load policy [ 150.156226][ T293] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 150.173541][ T293] usb 3-1: USB disconnect, device number 11 [ 150.205877][ T2268] fido_id[2268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 150.223267][ T1174] usb 6-1: 0:2 : does not exist [ 150.233626][ T2267] device bridge0 entered promiscuous mode [ 150.243848][ T1174] usb 6-1: USB disconnect, device number 3 [ 150.450523][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.572125][ T2275] loop2: detected capacity change from 0 to 512 [ 150.589536][ T2275] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.600768][ T2270] loop4: detected capacity change from 0 to 40427 [ 150.603619][ T2275] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.614216][ T2275] EXT4-fs (loop2): Test dummy encryption mode enabled [ 150.619025][ T2270] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 150.622001][ T2275] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.630557][ T2270] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 150.647812][ T2275] EXT4-fs (loop2): 1 truncate cleaned up [ 150.654206][ T2275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.674279][ T2270] F2FS-fs (loop4): fault_injection options not supported [ 150.685488][ T2270] F2FS-fs (loop4): fault_type options not supported [ 150.696782][ T2270] F2FS-fs (loop4): invalid crc value [ 150.703505][ T2270] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.733268][ T2270] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 150.740453][ T2270] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 150.870519][ T2287] loop1: detected capacity change from 0 to 512 [ 150.878551][ T2287] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.885216][ T2287] EXT4-fs: Ignoring removed nobh option [ 150.890897][ T2287] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.911717][ T2287] EXT4-fs (loop1): Test dummy encryption mode enabled [ 150.928781][ T2287] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.992788][ T28] audit: type=1400 audit(1759021902.882:572): avc: denied { write } for pid=2269 comm="syz.4.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.017552][ T2294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 151.027893][ T2287] EXT4-fs (loop1): 1 truncate cleaned up [ 151.123818][ T2296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 151.257042][ T2287] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.416365][ T286] EXT4-fs (loop2): unmounting filesystem. [ 151.470794][ T282] EXT4-fs (loop1): unmounting filesystem. [ 151.813883][ T284] syz-executor: attempt to access beyond end of device [ 151.813883][ T284] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.288010][ T2314] syz.5.584[2314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.288090][ T2314] syz.5.584[2314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.306346][ T2316] loop2: detected capacity change from 0 to 256 [ 152.362566][ T2316] FAT-fs (loop2): Directory bread(block 64) failed [ 152.384076][ T2316] FAT-fs (loop2): Directory bread(block 65) failed [ 152.436575][ T2316] FAT-fs (loop2): Directory bread(block 66) failed [ 152.443460][ T2316] FAT-fs (loop2): Directory bread(block 67) failed [ 152.450517][ T2316] FAT-fs (loop2): Directory bread(block 68) failed [ 152.457169][ T2316] FAT-fs (loop2): Directory bread(block 69) failed [ 152.463936][ T2316] FAT-fs (loop2): Directory bread(block 70) failed [ 152.470733][ T2316] FAT-fs (loop2): Directory bread(block 71) failed [ 152.477337][ T2316] FAT-fs (loop2): Directory bread(block 72) failed [ 152.501999][ T2324] loop4: detected capacity change from 0 to 512 [ 152.508691][ T2316] FAT-fs (loop2): Directory bread(block 73) failed [ 152.529180][ T2324] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.766456][ T2324] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.787749][ T2324] EXT4-fs (loop4): Test dummy encryption mode enabled [ 152.804189][ T2324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.821645][ T2324] EXT4-fs (loop4): 1 truncate cleaned up [ 152.827414][ T2324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.862990][ T2329] loop1: detected capacity change from 0 to 512 [ 152.945794][ T357] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.984230][ T284] EXT4-fs (loop4): unmounting filesystem. [ 154.030304][ T1017] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 154.097012][ T2342] syz.1.588[2342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.097096][ T2342] syz.1.588[2342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.210985][ T2350] netlink: 96 bytes leftover after parsing attributes in process `syz.4.593'. [ 155.530473][ T2359] device pim6reg1 entered promiscuous mode [ 155.737981][ T28] audit: type=1400 audit(1759021907.372:573): avc: denied { read } for pid=2353 comm="syz.5.596" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.761234][ T28] audit: type=1400 audit(1759021907.372:574): avc: denied { open } for pid=2353 comm="syz.5.596" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.271141][ T28] audit: type=1400 audit(1759021907.372:575): avc: denied { ioctl } for pid=2353 comm="syz.5.596" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.369893][ T2371] loop2: detected capacity change from 0 to 512 [ 156.396978][ T2371] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.418276][ T2371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.434231][ T28] audit: type=1326 audit(1759021908.252:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 156.463119][ T28] audit: type=1326 audit(1759021908.252:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 156.486743][ T28] audit: type=1326 audit(1759021908.252:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 156.510640][ T28] audit: type=1326 audit(1759021908.252:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 156.564982][ T2371] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.600: corrupted in-inode xattr [ 156.592724][ T2371] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 156.609232][ T28] audit: type=1326 audit(1759021908.252:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 156.639734][ T28] audit: type=1326 audit(1759021908.252:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 156.640245][ T2371] EXT4-fs (loop2): 1 orphan inode deleted [ 156.670320][ T28] audit: type=1326 audit(1759021908.252:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 156.755131][ T2371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.762630][ T2380] loop4: detected capacity change from 0 to 8192 [ 156.766130][ T28] audit: type=1326 audit(1759021908.252:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 156.811069][ T28] audit: type=1326 audit(1759021908.252:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2368 comm="syz.5.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 156.900455][ T2388] loop1: detected capacity change from 0 to 512 [ 157.038645][ T2388] EXT4-fs (loop1): orphan cleanup on readonly fs [ 157.120608][ T2388] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.606: Failed to acquire dquot type 1 [ 157.136865][ T2388] EXT4-fs (loop1): 1 truncate cleaned up [ 157.147462][ T2388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.686984][ T2395] loop4: detected capacity change from 0 to 512 [ 158.568318][ T2381] loop5: detected capacity change from 0 to 40427 [ 158.700161][ T2399] syz.4.608[2399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.700261][ T2399] syz.4.608[2399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.791663][ T282] EXT4-fs (loop1): unmounting filesystem. [ 158.859035][ T2400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 159.086115][ T2400] loop4: detected capacity change from 0 to 8192 [ 159.128683][ T2381] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 159.141750][ T2400] loop4: p1 p2 p3 p4[EZD] [ 159.146940][ T2400] loop4: p1 size 16128 extends beyond EOD, truncated [ 159.162492][ T2400] loop4: p3 start 458783 is beyond EOD, truncated [ 159.169030][ T2400] loop4: p4 size 65536 extends beyond EOD, truncated [ 159.709736][ T286] EXT4-fs (loop2): unmounting filesystem. [ 159.721237][ T2381] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 159.780305][ T2381] F2FS-fs (loop5): invalid crc value [ 159.797293][ T2381] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 159.867540][ T2407] bridge: RTM_NEWNEIGH with invalid ether address [ 159.935286][ T357] udevd[357]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 159.949861][ T365] udevd[365]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 159.985711][ T366] udevd[366]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 160.016976][ T2421] loop1: detected capacity change from 0 to 512 [ 160.150718][ T2427] tipc: Started in network mode [ 160.155747][ T2427] tipc: Node identity 0eb4574c3ad4, cluster identity 4711 [ 160.163458][ T2427] tipc: Enabled bearer , priority 0 [ 160.171016][ T2427] device syzkaller0 entered promiscuous mode [ 160.181590][ T2427] tipc: Resetting bearer [ 160.241837][ T2429] syz.1.618[2429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.242202][ T2429] syz.1.618[2429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.298606][ T2426] tipc: Resetting bearer [ 160.638412][ T2432] loop1: detected capacity change from 0 to 8192 [ 160.671628][ T2432] loop1: p1 p2 p3 p4[EZD] [ 160.676989][ T2432] loop1: p1 size 16128 extends beyond EOD, truncated [ 160.690684][ T2432] loop1: p3 start 458783 is beyond EOD, truncated [ 160.697247][ T2432] loop1: p4 size 65536 extends beyond EOD, truncated [ 161.341244][ T6] tipc: Node number set to 878729036 [ 161.347946][ T2426] tipc: Disabling bearer [ 161.361067][ T2431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 161.424607][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 161.424624][ T28] audit: type=1400 audit(1759021913.312:604): avc: denied { create } for pid=2435 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.482338][ T28] audit: type=1400 audit(1759021913.342:605): avc: denied { bind } for pid=2435 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.514395][ T28] audit: type=1400 audit(1759021913.342:606): avc: denied { listen } for pid=2435 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.535692][ T28] audit: type=1400 audit(1759021913.342:607): avc: denied { connect } for pid=2435 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.545695][ T2448] loop2: detected capacity change from 0 to 512 [ 161.555972][ T28] audit: type=1400 audit(1759021913.352:608): avc: denied { write } for pid=2435 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.583419][ T28] audit: type=1400 audit(1759021913.432:609): avc: denied { write } for pid=2442 comm="syz.4.627" name="unix" dev="proc" ino=4026532553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 161.711465][ T2453] bridge: RTM_NEWNEIGH with invalid ether address [ 161.940496][ T2454] syz.1.625[2454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.940597][ T2454] syz.1.625[2454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.952492][ T496] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.938012][ T2457] loop5: detected capacity change from 0 to 256 [ 163.011852][ T2451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 163.050794][ T2451] loop1: detected capacity change from 0 to 8192 [ 163.062299][ T28] audit: type=1400 audit(1759021914.952:610): avc: denied { write } for pid=2456 comm="syz.5.629" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 163.599932][ T28] audit: type=1400 audit(1759021914.952:611): avc: denied { open } for pid=2456 comm="syz.5.629" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 163.985035][ T2463] syz.2.626[2463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.985119][ T2463] syz.2.626[2463] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.065480][ T102] loop1: p1 p2 p3 p4[EZD] [ 164.084352][ T102] loop1: p1 size 16128 extends beyond EOD, truncated [ 164.126941][ T2464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 164.934563][ T102] loop1: p3 start 458783 is beyond EOD, truncated [ 164.941080][ T102] loop1: p4 size 65536 extends beyond EOD, truncated [ 165.000649][ T2464] loop2: detected capacity change from 0 to 8192 [ 165.240234][ T366] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.314187][ T365] udevd[365]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 165.326875][ T496] udevd[496]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 165.329756][ T366] udevd[366]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 165.396732][ T2476] x_tables: unsorted underflow at hook 1 [ 165.407339][ T365] udevd[365]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 165.424624][ T366] udevd[366]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 165.603300][ T496] udevd[496]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 165.704283][ T2478] loop5: detected capacity change from 0 to 128 [ 165.840671][ T28] audit: type=1400 audit(1759021917.352:612): avc: denied { read } for pid=2469 comm="syz.5.634" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.968235][ T2478] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.977750][ T2478] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.286469][ T28] audit: type=1400 audit(1759021917.592:613): avc: denied { create } for pid=2469 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 166.343078][ T2490] loop1: detected capacity change from 0 to 256 [ 166.410486][ T2490] FAT-fs (loop1): Directory bread(block 64) failed [ 166.428496][ T2490] FAT-fs (loop1): Directory bread(block 65) failed [ 166.440401][ T2490] FAT-fs (loop1): Directory bread(block 66) failed [ 166.470149][ T2490] FAT-fs (loop1): Directory bread(block 67) failed [ 166.497093][ T2490] FAT-fs (loop1): Directory bread(block 68) failed [ 166.510875][ T1942] EXT4-fs (loop5): unmounting filesystem. [ 166.513537][ T2490] FAT-fs (loop1): Directory bread(block 69) failed [ 166.523446][ T2490] FAT-fs (loop1): Directory bread(block 70) failed [ 166.529991][ T2490] FAT-fs (loop1): Directory bread(block 71) failed [ 166.536694][ T2490] FAT-fs (loop1): Directory bread(block 72) failed [ 166.543388][ T2490] FAT-fs (loop1): Directory bread(block 73) failed [ 166.907474][ T2503] loop5: detected capacity change from 0 to 4096 [ 166.982243][ T2503] EXT4-fs (loop5): Test dummy encryption mode enabled [ 167.003189][ T2503] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 167.042672][ T2503] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 167.062229][ T334] kworker/u4:3: attempt to access beyond end of device [ 167.062229][ T334] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 167.078798][ T1942] EXT4-fs (loop5): unmounting filesystem. [ 167.084745][ T356] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.127661][ T2515] loop1: detected capacity change from 0 to 512 [ 167.233799][ T2522] loop5: detected capacity change from 0 to 256 [ 167.280088][ T356] usb 5-1: Using ep0 maxpacket: 16 [ 167.286415][ T356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.297790][ T356] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.311701][ T356] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 167.322062][ T2523] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 167.350183][ T2523] SELinux: failed to load policy [ 167.393551][ T356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.435479][ T356] usb 5-1: config 0 descriptor?? [ 167.890831][ T356] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 167.901112][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 167.911178][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 167.918534][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 167.925939][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 167.933281][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 167.940778][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 167.948227][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 168.007611][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 168.025497][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 168.037051][ T356] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 168.126243][ T356] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000F/input/input19 [ 168.246483][ T2537] loop1: detected capacity change from 0 to 1024 [ 168.286446][ T356] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 168.310420][ T2537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.363365][ T356] usb 5-1: USB disconnect, device number 7 [ 168.386673][ T2537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.448553][ T2540] fido_id[2540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.473001][ T2543] netlink: 'syz.5.650': attribute type 2 has an invalid length. [ 168.625261][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 168.625277][ T28] audit: type=1400 audit(1759021920.512:617): avc: denied { ioctl } for pid=2536 comm="syz.1.649" path="socket:[23347]" dev="sockfs" ino=23347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.004544][ T282] EXT4-fs (loop1): unmounting filesystem. [ 169.029083][ T2557] loop1: detected capacity change from 0 to 256 [ 169.054259][ T2557] FAT-fs (loop1): Directory bread(block 64) failed [ 169.062729][ T2557] FAT-fs (loop1): Directory bread(block 65) failed [ 169.069418][ T2557] FAT-fs (loop1): Directory bread(block 66) failed [ 169.076580][ T2557] FAT-fs (loop1): Directory bread(block 67) failed [ 169.083618][ T2557] FAT-fs (loop1): Directory bread(block 68) failed [ 169.088709][ T2559] loop4: detected capacity change from 0 to 4096 [ 169.090492][ T2557] FAT-fs (loop1): Directory bread(block 69) failed [ 169.103454][ T2557] FAT-fs (loop1): Directory bread(block 70) failed [ 169.104253][ T2559] EXT4-fs (loop4): Test dummy encryption mode enabled [ 169.111159][ T2557] FAT-fs (loop1): Directory bread(block 71) failed [ 169.119055][ T2559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.123995][ T2557] FAT-fs (loop1): Directory bread(block 72) failed [ 169.142226][ T2557] FAT-fs (loop1): Directory bread(block 73) failed [ 169.149453][ T2559] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 169.163250][ T284] EXT4-fs (loop4): unmounting filesystem. [ 169.260092][ T1017] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 169.401711][ T28] audit: type=1400 audit(1759021921.292:618): avc: denied { setopt } for pid=2565 comm="syz.5.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.440089][ T1017] usb 3-1: Using ep0 maxpacket: 8 [ 169.450796][ T1017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 169.462134][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.469670][ T1017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 169.483416][ T1017] usb 3-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 169.492750][ T1017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.504332][ T1017] usb 3-1: config 0 descriptor?? [ 169.661147][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.671373][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.690127][ T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.699222][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.707749][ T6] usb 2-1: SerialNumber: syz [ 169.755635][ T1017] usbhid 3-1:0.0: can't add hid device: -71 [ 169.770138][ T1017] usbhid: probe of 3-1:0.0 failed with error -71 [ 169.783837][ T1017] usb 3-1: USB disconnect, device number 14 [ 169.830144][ T19] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 169.928753][ T6] usb 2-1: 0:2 : does not exist [ 169.944418][ T6] usb 2-1: USB disconnect, device number 8 [ 170.010082][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 170.020881][ T19] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 170.039433][ T19] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.049949][ T19] usb 6-1: config 0 has no interface number 0 [ 170.057844][ T19] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 170.067206][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.075542][ T19] usb 6-1: Product: syz [ 170.079728][ T19] usb 6-1: Manufacturer: syz [ 170.084565][ T19] usb 6-1: SerialNumber: syz [ 170.090501][ T19] usb 6-1: config 0 descriptor?? [ 170.103164][ T2580] bridge: RTM_NEWNEIGH with invalid ether address [ 170.140160][ T1017] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 170.671136][ T1017] usb 3-1: Using ep0 maxpacket: 16 [ 170.676415][ T19] usb 6-1: Found UVC 0.00 device syz (046c:14e8) [ 170.683194][ T19] usb 6-1: No valid video chain found. [ 170.692148][ T1017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.704692][ T19] usb 6-1: USB disconnect, device number 4 [ 170.711125][ T1017] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.719433][ T28] audit: type=1400 audit(1759021922.602:619): avc: denied { read } for pid=2597 comm="syz.1.669" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.724860][ T1017] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 170.754501][ T28] audit: type=1400 audit(1759021922.642:620): avc: denied { open } for pid=2597 comm="syz.1.669" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.780071][ T1017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.781798][ T28] audit: type=1400 audit(1759021922.642:621): avc: denied { ioctl } for pid=2597 comm="syz.1.669" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 170.813454][ T1017] usb 3-1: config 0 descriptor?? [ 170.932987][ T28] audit: type=1400 audit(1759021922.822:622): avc: denied { lock } for pid=2606 comm="syz.1.671" path="socket:[23455]" dev="sockfs" ino=23455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 170.981293][ T28] audit: type=1400 audit(1759021922.862:623): avc: denied { mounton } for pid=2608 comm="syz.4.672" path="/proc/441/task" dev="proc" ino=23822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 171.019636][ T2612] FAULT_INJECTION: forcing a failure. [ 171.019636][ T2612] name failslab, interval 1, probability 0, space 0, times 0 [ 171.033363][ T2612] CPU: 0 PID: 2612 Comm: syz.4.673 Not tainted syzkaller #0 [ 171.040775][ T2612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.050871][ T2612] Call Trace: [ 171.054200][ T2612] [ 171.057151][ T2612] __dump_stack+0x21/0x24 [ 171.061540][ T2612] dump_stack_lvl+0xee/0x150 [ 171.066167][ T2612] ? __cfi_dump_stack_lvl+0x8/0x8 [ 171.071215][ T2612] dump_stack+0x15/0x24 [ 171.075395][ T2612] should_fail_ex+0x3d4/0x520 [ 171.080113][ T2612] __should_failslab+0xac/0xf0 [ 171.084908][ T2612] ? kvmalloc_node+0x294/0x480 [ 171.089730][ T2612] should_failslab+0x9/0x20 [ 171.094263][ T2612] __kmem_cache_alloc_node+0x3d/0x2c0 [ 171.099687][ T2612] ? arch_stack_walk+0xfc/0x150 [ 171.104575][ T2612] ? kvmalloc_node+0x294/0x480 [ 171.109354][ T2612] __kmalloc_node+0xa1/0x1e0 [ 171.113978][ T2612] kvmalloc_node+0x294/0x480 [ 171.118591][ T2612] ? __cfi_kvmalloc_node+0x10/0x10 [ 171.123719][ T2612] ? __stack_depot_save+0x36/0x480 [ 171.128856][ T2612] traverse+0xd6/0x560 [ 171.132967][ T2612] ? mutex_lock+0x8d/0x1a0 [ 171.137411][ T2612] ? _parse_integer+0x2a/0x40 [ 171.142128][ T2612] ? kstrtoull+0x137/0x1d0 [ 171.146576][ T2612] seq_read_iter+0xcf2/0xdd0 [ 171.151209][ T2612] ? kstrtouint_from_user+0xf7/0x150 [ 171.156630][ T2612] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 171.162381][ T2612] seq_read+0x159/0x1f0 [ 171.166566][ T2612] ? __cfi_seq_read+0x10/0x10 [ 171.171263][ T2612] ? proc_fail_nth_write+0x17a/0x1f0 [ 171.176575][ T2612] ? __kasan_check_read+0x11/0x20 [ 171.181633][ T2612] ? fsnotify_perm+0x269/0x5b0 [ 171.186422][ T2612] ? security_file_permission+0x94/0xb0 [ 171.192014][ T2612] ? __cfi_seq_read+0x10/0x10 [ 171.196715][ T2612] vfs_read+0x26e/0x8c0 [ 171.200922][ T2612] ? __cfi_vfs_read+0x10/0x10 [ 171.205645][ T2612] ? __kasan_check_write+0x14/0x20 [ 171.208075][ T2617] bridge: RTM_NEWNEIGH with invalid ether address [ 171.210774][ T2612] ? __fget_files+0x2d5/0x330 [ 171.210800][ T2612] ? __fdget+0x19c/0x220 [ 171.210819][ T2612] ? __x64_sys_pread64+0xec/0x220 [ 171.231171][ T2612] __x64_sys_pread64+0x191/0x220 [ 171.236141][ T2612] ? __cfi___x64_sys_pread64+0x10/0x10 [ 171.241628][ T2612] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 171.247781][ T2612] x64_sys_call+0x4c7/0x9a0 [ 171.252353][ T2612] do_syscall_64+0x4c/0xa0 [ 171.256805][ T2612] ? clear_bhb_loop+0x30/0x80 [ 171.261507][ T2612] ? clear_bhb_loop+0x30/0x80 [ 171.266219][ T2612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.272159][ T2612] RIP: 0033:0x7efe2fd8eec9 [ 171.276599][ T2612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.296228][ T2612] RSP: 002b:00007efe30c58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 171.304673][ T2612] RAX: ffffffffffffffda RBX: 00007efe2ffe5fa0 RCX: 00007efe2fd8eec9 [ 171.312676][ T2612] RDX: 000000000000001f RSI: 0000200000000500 RDI: 0000000000000004 [ 171.320708][ T2612] RBP: 00007efe30c58090 R08: 0000000000000000 R09: 0000000000000000 [ 171.328751][ T2612] R10: 0000040000000009 R11: 0000000000000246 R12: 0000000000000001 [ 171.336760][ T2612] R13: 00007efe2ffe6038 R14: 00007efe2ffe5fa0 R15: 00007fff599057a8 [ 171.344757][ T2612] [ 171.350564][ T28] audit: type=1326 audit(1759021923.132:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 171.375228][ T1017] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 171.385404][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.392736][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.399979][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.400102][ T28] audit: type=1326 audit(1759021923.132:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 171.430825][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.439559][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.447635][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.573765][ T28] audit: type=1326 audit(1759021923.132:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.5.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45de78eec9 code=0x7ffc0000 [ 171.601074][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.608623][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.616030][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.623680][ T1017] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 171.843768][ T2640] Bluetooth: hci0: sending frame failed (-49) [ 171.850976][ T2079] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 171.947218][ T2642] FAULT_INJECTION: forcing a failure. [ 171.947218][ T2642] name failslab, interval 1, probability 0, space 0, times 0 [ 172.005230][ T2642] CPU: 1 PID: 2642 Comm: syz.4.680 Not tainted syzkaller #0 [ 172.012572][ T2642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.022648][ T2642] Call Trace: [ 172.025944][ T2642] [ 172.028983][ T2642] __dump_stack+0x21/0x24 [ 172.033337][ T2642] dump_stack_lvl+0xee/0x150 [ 172.037975][ T2642] ? __cfi_dump_stack_lvl+0x8/0x8 [ 172.043100][ T2642] dump_stack+0x15/0x24 [ 172.047275][ T2642] should_fail_ex+0x3d4/0x520 [ 172.051977][ T2642] __should_failslab+0xac/0xf0 [ 172.056762][ T2642] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 172.062766][ T2642] should_failslab+0x9/0x20 [ 172.067285][ T2642] __kmem_cache_alloc_node+0x3d/0x2c0 [ 172.072680][ T2642] ? __cfi_mutex_lock+0x10/0x10 [ 172.077653][ T2642] ? delete_node+0x2b3/0xa60 [ 172.082282][ T2642] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 172.088287][ T2642] __kmalloc+0xa1/0x1e0 [ 172.092480][ T2642] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 172.098572][ T2642] tracepoint_probe_unregister+0x1e6/0x8b0 [ 172.104408][ T2642] bpf_probe_unregister+0x61/0x70 [ 172.109477][ T2642] bpf_raw_tp_link_release+0x63/0x90 [ 172.114798][ T2642] bpf_link_free+0x13a/0x390 [ 172.119438][ T2642] ? irqentry_exit+0x37/0x40 [ 172.124075][ T2642] ? sysvec_reschedule_ipi+0x78/0x80 [ 172.129405][ T2642] ? bpf_link_put_deferred+0x20/0x20 [ 172.134746][ T2642] ? __cfi_____fput+0x10/0x10 [ 172.139500][ T2642] bpf_link_release+0x15f/0x170 [ 172.144386][ T2642] ? __cfi_bpf_link_release+0x10/0x10 [ 172.149791][ T2642] __fput+0x1fc/0x8f0 [ 172.153810][ T2642] ____fput+0x15/0x20 [ 172.157836][ T2642] task_work_run+0x1db/0x240 [ 172.162469][ T2642] ? __cfi_task_work_run+0x10/0x10 [ 172.167613][ T2642] ? __cfi___close_range+0x10/0x10 [ 172.172752][ T2642] ? __kasan_check_read+0x11/0x20 [ 172.177812][ T2642] exit_to_user_mode_loop+0x9b/0xb0 [ 172.183034][ T2642] exit_to_user_mode_prepare+0x5a/0xa0 [ 172.188521][ T2642] syscall_exit_to_user_mode+0x1a/0x30 [ 172.194006][ T2642] do_syscall_64+0x58/0xa0 [ 172.198450][ T2642] ? clear_bhb_loop+0x30/0x80 [ 172.203149][ T2642] ? clear_bhb_loop+0x30/0x80 [ 172.207853][ T2642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.213790][ T2642] RIP: 0033:0x7efe2fd8eec9 [ 172.218322][ T2642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.237961][ T2642] RSP: 002b:00007efe30c16038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 172.246405][ T2642] RAX: 0000000000000000 RBX: 00007efe2ffe6180 RCX: 00007efe2fd8eec9 [ 172.254391][ T2642] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000009 [ 172.262387][ T2642] RBP: 00007efe30c16090 R08: 0000000000000000 R09: 0000000000000000 [ 172.270376][ T2642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.278358][ T2642] R13: 00007efe2ffe6218 R14: 00007efe2ffe6180 R15: 00007fff599057a8 [ 172.286346][ T2642] [ 172.490847][ T1017] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0010/input/input20 [ 172.517601][ T2642] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 172.520389][ T39] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 172.529417][ T2642] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 172.547184][ T2642] CPU: 0 PID: 2642 Comm: syz.4.680 Not tainted syzkaller #0 [ 172.554463][ T2642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.564599][ T2642] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 172.570787][ T2642] Code: 80 3c 30 00 74 05 e8 74 6f 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 172.590401][ T2642] RSP: 0018:ffffc90012db7830 EFLAGS: 00010096 [ 172.596483][ T2642] RAX: 1ffff11023ec69d6 RBX: ffff88811f634ea8 RCX: ffff88811d512880 [ 172.604469][ T2642] RDX: ffff88811dc26540 RSI: 0000000000000000 RDI: ffffc90012dd9000 [ 172.612464][ T2642] RBP: ffffc90012db7870 R08: 0000000000000080 R09: fffffbfff0ee4dae [ 172.620434][ T2642] R10: 00000000b720eca3 R11: 1ffffffff0ee4dad R12: 0000000000000000 [ 172.628415][ T2642] R13: ffff88811f634ea8 R14: dffffc0000000000 R15: ffffffff81713a50 [ 172.636448][ T2642] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 172.645370][ T2642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.651957][ T2642] CR2: 00007f2c2bde7dac CR3: 0000000120815000 CR4: 00000000003506b0 [ 172.659920][ T2642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.667884][ T2642] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.675854][ T2642] Call Trace: [ 172.679127][ T2642] [ 172.682054][ T2642] __schedule+0x1263/0x14e0 [ 172.686564][ T2642] ? release_firmware_map_entry+0x194/0x194 [ 172.692464][ T2642] ? memcpy+0x56/0x70 [ 172.696448][ T2642] ? __kasan_check_write+0x14/0x20 [ 172.701549][ T2642] do_task_dead+0x9c/0xa0 [ 172.705884][ T2642] do_exit+0x1baa/0x2650 [ 172.710130][ T2642] ? do_syscall_64+0x58/0xa0 [ 172.714723][ T2642] ? __cfi_do_exit+0x10/0x10 [ 172.719316][ T2642] ? __kasan_check_write+0x14/0x20 [ 172.724422][ T2642] ? _raw_spin_lock_irq+0x8f/0xe0 [ 172.729475][ T2642] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 172.735028][ T2642] do_group_exit+0x210/0x2d0 [ 172.739625][ T2642] ? __kasan_check_write+0x14/0x20 [ 172.744741][ T2642] get_signal+0x13b5/0x1520 [ 172.749267][ T2642] arch_do_signal_or_restart+0xb0/0x1030 [ 172.754925][ T2642] ? percpu_counter_add_batch+0x13c/0x160 [ 172.760656][ T2642] ? __fput+0x66a/0x8f0 [ 172.764815][ T2642] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 172.770968][ T2642] ? blkcg_maybe_throttle_current+0x1df/0x9f0 [ 172.777034][ T2642] ? __cfi___close_range+0x10/0x10 [ 172.782154][ T2642] exit_to_user_mode_loop+0x7a/0xb0 [ 172.787346][ T2642] exit_to_user_mode_prepare+0x5a/0xa0 [ 172.792808][ T2642] syscall_exit_to_user_mode+0x1a/0x30 [ 172.798283][ T2642] do_syscall_64+0x58/0xa0 [ 172.802720][ T2642] ? clear_bhb_loop+0x30/0x80 [ 172.807424][ T2642] ? clear_bhb_loop+0x30/0x80 [ 172.812104][ T2642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.818002][ T2642] RIP: 0033:0x7efe2fd8eec9 [ 172.822502][ T2642] Code: Unable to access opcode bytes at 0x7efe2fd8ee9f. [ 172.829508][ T2642] RSP: 002b:00007efe30c16038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 172.837917][ T2642] RAX: 0000000000000000 RBX: 00007efe2ffe6180 RCX: 00007efe2fd8eec9 [ 172.845884][ T2642] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000009 [ 172.853872][ T2642] RBP: 00007efe30c16090 R08: 0000000000000000 R09: 0000000000000000 [ 172.861831][ T2642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.869816][ T2642] R13: 00007efe2ffe6218 R14: 00007efe2ffe6180 R15: 00007fff599057a8 [ 172.877786][ T2642] [ 172.880795][ T2642] Modules linked in: [ 172.884716][ T2642] ---[ end trace 0000000000000000 ]--- [ 172.884741][ T39] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 172.890185][ T2642] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 172.896248][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G D syzkaller #0 [ 172.902386][ T2642] Code: 80 3c 30 00 74 05 e8 74 6f 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 172.911125][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.930805][ T2642] RSP: 0018:ffffc90012db7830 EFLAGS: 00010096 [ 172.940897][ T39] Workqueue: rcu_gp process_srcu [ 172.946956][ T2642] RAX: 1ffff11023ec69d6 RBX: ffff88811f634ea8 RCX: ffff88811d512880 [ 172.951883][ T39] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 172.959844][ T2642] RDX: ffff88811dc26540 RSI: 0000000000000000 RDI: ffffc90012dd9000 [ 172.966001][ T39] Code: 80 3c 30 00 74 05 e8 74 6f 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 172.973963][ T2642] RBP: ffffc90012db7870 R08: 0000000000000080 R09: fffffbfff0ee4dae [ 172.993558][ T39] RSP: 0018:ffffc9000028fa90 EFLAGS: 00010096 [ 173.001521][ T2642] R10: 00000000b720eca3 R11: 1ffffffff0ee4dad R12: 0000000000000000 [ 173.007583][ T39] RAX: 1ffff11023ec69d6 RBX: ffff88811f634ea8 RCX: ffff8881003ba880 [ 173.015540][ T2642] R13: ffff88811f634ea8 R14: dffffc0000000000 R15: ffffffff81713a50 [ 173.023503][ T39] RDX: ffff888100828000 RSI: 0000000000000001 RDI: ffffc90012dd9000 [ 173.031464][ T2642] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 173.039423][ T39] RBP: ffffc9000028fad0 R08: 0000000000000000 R09: fffffbfff0ee4dae [ 173.048423][ T2642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.056384][ T39] R10: 00000000b720eca3 R11: 1ffffffff0ee4dad R12: 0000000000000001 [ 173.063044][ T2642] CR2: 00007f2c2bde7dac CR3: 0000000120815000 CR4: 00000000003506b0 [ 173.071043][ T39] R13: ffff88811f634ea8 R14: dffffc0000000000 R15: ffffffff81713a50 [ 173.079010][ T2642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.086996][ T39] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 173.094962][ T2642] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.103882][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.111850][ T2642] Kernel panic - not syncing: Fatal exception [ 173.118423][ T39] CR2: 00007ffe63dcbff8 CR3: 000000012ddc5000 CR4: 00000000003506a0 [ 173.118440][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.118450][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.118461][ T39] Call Trace: [ 173.118467][ T39] [ 173.118477][ T39] __schedule+0x1263/0x14e0 [ 173.118505][ T39] ? release_firmware_map_entry+0x194/0x194 [ 173.118524][ T39] ? mutex_unlock+0x89/0x220 [ 173.118544][ T39] ? __cfi_mutex_unlock+0x10/0x10 [ 173.118565][ T39] ? preempt_schedule+0xa7/0xb0 [ 173.118585][ T39] preempt_schedule_common+0x9b/0xf0 [ 173.118604][ T39] preempt_schedule+0xa7/0xb0 [ 173.118622][ T39] ? __cfi_preempt_schedule+0x10/0x10 [ 173.118641][ T39] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 173.118666][ T39] preempt_schedule_thunk+0x16/0x18 [ 173.118691][ T39] _raw_spin_unlock_irq+0x60/0x70 [ 173.118709][ T39] process_one_work+0x6e6/0xc40 [ 173.118748][ T39] worker_thread+0xa29/0x11f0 [ 173.118773][ T39] kthread+0x281/0x320 [ 173.118791][ T39] ? __cfi_worker_thread+0x10/0x10 [ 173.118813][ T39] ? __cfi_kthread+0x10/0x10 [ 173.118832][ T39] ret_from_fork+0x1f/0x30 [ 173.118856][ T39] [ 173.118861][ T39] Modules linked in: [ 173.124920][ T39] ---[ end trace 0000000000000000 ]--- [ 173.124928][ T39] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 173.124950][ T39] Code: 80 3c 30 00 74 05 e8 74 6f 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 173.124965][ T39] RSP: 0018:ffffc90012db7830 EFLAGS: 00010096 [ 173.124979][ T39] RAX: 1ffff11023ec69d6 RBX: ffff88811f634ea8 RCX: ffff88811d512880 [ 173.124993][ T39] RDX: ffff88811dc26540 RSI: 0000000000000000 RDI: ffffc90012dd9000 [ 173.125006][ T39] RBP: ffffc90012db7870 R08: 0000000000000080 R09: fffffbfff0ee4dae [ 173.125019][ T39] R10: 00000000b720eca3 R11: 1ffffffff0ee4dad R12: 0000000000000000 [ 173.125031][ T39] R13: ffff88811f634ea8 R14: dffffc0000000000 R15: ffffffff81713a50 [ 173.125045][ T39] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 173.125060][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.125072][ T39] CR2: 00007ffe63dcbff8 CR3: 000000012ddc5000 CR4: 00000000003506a0 [ 173.125087][ T39] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.125098][ T39] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.303311][ T2642] Shutting down cpus with NMI [ 174.546097][ T2642] Kernel Offset: disabled [ 174.550429][ T2642] Rebooting in 86400 seconds..