last executing test programs: 1m22.552696796s ago: executing program 0 (id=718): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0x9, 0x16, 0x100, 0xa84}, 0x50) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1m22.42676216s ago: executing program 0 (id=719): socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 1m20.587137725s ago: executing program 0 (id=730): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0xa003, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020}, 0x729) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4bfb, &(0x7f0000000600)=""/171) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@noload}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r4 = open(&(0x7f0000000300)='./file1\x00', 0x8937e, 0xc1) fallocate(r4, 0x0, 0x0, 0x1001f0) (fail_nth: 1) sendfile(r4, r4, 0x0, 0x10000006) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@nobh}, {@errors_continue}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@noload}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") openat(0xffffffffffffff9c, 0x0, 0x183042, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20742, 0x0) 1m19.42918145s ago: executing program 0 (id=734): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x8840) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1204480, &(0x7f00000004c0)={[{@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x453, &(0x7f0000000ec0)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0), 0x2204010, 0x0) copy_file_range(r0, &(0x7f0000000100)=0x2, r0, &(0x7f0000000180)=0x5d, 0x5, 0x0) chdir(&(0x7f0000000140)='./file0\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x7b90091186bb3665, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, 0x0, 0x8840) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1204480, &(0x7f00000004c0)={[{@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x453, &(0x7f0000000ec0)="$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") (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0), 0x2204010, 0x0) (async) copy_file_range(r0, &(0x7f0000000100)=0x2, r0, &(0x7f0000000180)=0x5d, 0x5, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x7b90091186bb3665, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) (async) 1m19.161268478s ago: executing program 0 (id=736): syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000203512028040000102030109026e000301ff0010080b0002010130070904000000010130000a2401050a00120d000009040100000102300009040101010102300009050109000240d2010a252506000000010400090402000001023000090402011fb4023000090582090002080a010a252500000000050b00"], 0x0) 1m18.960163585s ago: executing program 0 (id=741): socket$xdp(0x2c, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 1m18.514876668s ago: executing program 32 (id=741): socket$xdp(0x2c, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 41.809111572s ago: executing program 4 (id=984): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 41.56082927s ago: executing program 4 (id=988): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") symlinkat(0x0, 0xffffffffffffff9c, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x8040, 0x0) mknod$loop(&(0x7f0000000100)='./bus\x00', 0x80, 0x0) (fail_nth: 1) 40.793218043s ago: executing program 4 (id=990): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") symlinkat(0x0, 0xffffffffffffff9c, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x8040, 0x0) mknod$loop(&(0x7f0000000100)='./bus\x00', 0x80, 0x0) 40.055512175s ago: executing program 4 (id=992): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000c40)=r0, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@inlinecrypt}, {@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@bh}, {@errors_continue}, {@init_itable}, {@errors_remount}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@lazytime}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x100005}}, {@debug}]}, 0xfc, 0x575, &(0x7f0000000380)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000a5a000/0x4000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1400408ff7065ecbcd9f", @ANYRES16=r4, @ANYBLOB="000125bd7000fedbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x200008e4}, 0x4044050) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@generic={0x6, 0x6, 0x8, 0xf3, 0xffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0x7f, 0xfa, &(0x7f0000000900)=""/250, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x4, 0xe0, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe01}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r5, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000c40), 0x0, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) 39.747624564s ago: executing program 4 (id=997): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10014, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f646f59c4fcfddb41f0467865632c646f74732c7569643d", @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64, @ANYRES32], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002840), 0x1, 0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000009c0)='\x00', 0x1}], 0x1) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="441f08ded64ccde8c94ef56491ee54be0e1c2095ed27c1c6fe76cef3e2", 0x1d) syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000003080)='.\x00', 0xa0000, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, 0x0) pipe2(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') unlink(&(0x7f0000000100)='./file0/file0\x00') 37.170928492s ago: executing program 4 (id=1003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x369, &(0x7f0000000700)="$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") lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f00000002c0)={0x0, "f19b0e6fe0ac93dadb8ffcb8a50d416fb3cd738cf7b0db95975f1e504f503006013aba37263b8b47da94eaa0b4055f0fc0d5129e7853725114099643c354b7af", 0x3f}, 0x48, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xd9417000) ioctl$KVM_TDX_GET_CPUID(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000380)={0x3, 0x0, [{0x80000008, 0x6, 0x3, 0x3, 0x68b, 0x3, 0x6}, {0x6, 0x6, 0x3, 0x9, 0x6, 0xdbe, 0x1d6}, {0xd, 0x4, 0x4, 0x1, 0x81, 0x8, 0x8000}]}}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x1}, 0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) 37.170750402s ago: executing program 33 (id=1003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x369, &(0x7f0000000700)="$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") lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f00000002c0)={0x0, "f19b0e6fe0ac93dadb8ffcb8a50d416fb3cd738cf7b0db95975f1e504f503006013aba37263b8b47da94eaa0b4055f0fc0d5129e7853725114099643c354b7af", 0x3f}, 0x48, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xd9417000) ioctl$KVM_TDX_GET_CPUID(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000380)={0x3, 0x0, [{0x80000008, 0x6, 0x3, 0x3, 0x68b, 0x3, 0x6}, {0x6, 0x6, 0x3, 0x9, 0x6, 0xdbe, 0x1d6}, {0xd, 0x4, 0x4, 0x1, 0x81, 0x8, 0x8000}]}}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x1}, 0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) 21.075725616s ago: executing program 1 (id=1085): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = dup2(r0, r0) bind$802154_raw(r1, &(0x7f00000010c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) 21.031384518s ago: executing program 1 (id=1087): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x800f, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1, 0x555c, &(0x7f000000b3c0)="$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") socket(0xa, 0x3, 0xff) (async) r0 = socket(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7cd}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7cd}, 0x1c) socket$inet6(0x10, 0x6, 0x761) (async) r1 = socket$inet6(0x10, 0x6, 0x761) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x82) (async) r2 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x82) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001a00010024bd7080fddbdf251ebbf60392579b100002000008000300", @ANYRES32=r5, @ANYBLOB="08000100ac1e0101080002000a010100"], 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0xea5bc50b619917ee) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4080, 0xff0}], 0x1, 0x300, 0x0) rename(0x0, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000200)={0x0, 0x7, 0x1000, 0x0, 0x0, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000001f0f0000000000009ed0000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000087000000bf090000000000005509010000000000950000000000000018460000faffffff0000000000180000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0xffd, &(0x7f0000001840)=""/4093, 0x0, 0xd4}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000002000010025bd7000000000000200000008001600", @ANYRES32=0x0, @ANYBLOB="180017"], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000002000010025bd7000000000000200000008001600", @ANYRES32=0x0, @ANYBLOB="180017"], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) 20.866563822s ago: executing program 1 (id=1094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000240)={"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"}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="87001066b97b0b000066b80a00000066ba000000000f300f01b59b00660f3881916177ba610066edf20f7c4fc2b84f000f00d8f2aa0f00927e8566b8007000000f23d00f21f86635200000050f23f8"}], 0x1, 0x61, 0x0, 0xffffffffffffffac) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.866203242s ago: executing program 1 (id=1095): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x5) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) getdents64(r0, &(0x7f00000001c0)=""/232, 0xe8) 20.865115702s ago: executing program 1 (id=1096): setresuid(0xee01, 0xee01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="f5", 0x1}], 0x1, 0x0, 0x0, 0x4044040}}], 0x1, 0x40015) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendto$inet(r3, &(0x7f0000000180)="67949b61949477df5b23737c768467e515df291d5e4e02beae0ea319b7135a33e3802a09fa0b418b7d4ad63ee62a3058f3864a99089f2532ca0a26833e5b5c6350381f2223332d242610f26e467706c13ed839b5a565e4d8e24accb24bcb590aecbaf3fb5e4380852abea08b6134aa28c584b61745f50431dc793d954897385c2b07b22c8ddffa79b9ee4b946aebecbf92a8360383409725e0ea8633bbb7b7e7aec27ee7ebafb4f38fcc", 0xaa, 0x10, &(0x7f0000000240)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 20.789087985s ago: executing program 1 (id=1097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8cc, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x1, 0x7}}}]}}]}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x844, 0x2, [@TCA_FLOW_POLICE={0x820, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x21}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xff, 0x435, 0x4, 0x7fffffff, 0x9, 0x100, 0x4, 0xfffffffb, 0x26c, 0xa00, 0x7, 0xfc, 0x5, 0xc, 0xa, 0x9, 0x10000, 0xa, 0x9be, 0x4, 0x6, 0x8, 0x5, 0x828, 0xffffffff, 0xfffffff5, 0x5, 0xd, 0x2, 0xff, 0xb, 0x4f, 0x5eb5, 0x1, 0x7, 0x7, 0x8, 0x0, 0x80, 0xed, 0x0, 0x10001, 0x5, 0x10001, 0x2, 0x2, 0x9, 0xffff, 0xffff, 0x5, 0x1, 0x7, 0x22630000, 0x3, 0x8001, 0x7ff, 0x1, 0xaf, 0x6, 0x1cfb971, 0x6, 0x8, 0x40, 0x1, 0x4, 0x2, 0x3ff, 0x7f8ee9d0, 0x7fffffff, 0x62, 0x80000001, 0x3, 0x3, 0xd, 0xbea3, 0x5, 0x37, 0x8, 0x9, 0x3ff, 0x2, 0x1ff, 0x4, 0x96, 0x6832, 0x5, 0x0, 0x6, 0x42fb, 0x1, 0x1, 0x69ab, 0x3, 0x8001, 0x6, 0x8, 0x7, 0xd4, 0x1, 0xfffffff7, 0x0, 0x1, 0x7, 0x5, 0x6, 0x3, 0x0, 0xc3, 0x81, 0x6, 0x141, 0x5d, 0x7, 0xf, 0x4, 0x101, 0x8, 0x2, 0x8, 0x80000001, 0x4, 0x5, 0x1000, 0xa, 0x6, 0x9, 0x8, 0x4, 0x1, 0x1, 0x80, 0xa, 0x9, 0x101, 0x5, 0x8, 0x5, 0x4, 0x3ab4, 0x9, 0xd, 0xf1f1, 0x380000, 0x9, 0x3, 0xfffeffff, 0x2, 0x1, 0x4, 0x80, 0x7, 0x2, 0x2, 0x4, 0x9, 0xd5a, 0x8, 0xf2cf, 0x7, 0x3ff, 0x40, 0x80, 0x0, 0x10, 0x3, 0x8, 0x1b, 0x401, 0x10000, 0x3, 0xf9, 0x7, 0x7, 0x4, 0x2, 0x18, 0xb, 0x7, 0x1, 0x101, 0x9, 0x9, 0x1, 0xa6a6, 0x16, 0x6, 0xffffffff, 0xe, 0x10000, 0x50000000, 0x4, 0x7fffffff, 0x7, 0x9, 0x4, 0x200, 0x9, 0x6, 0x7f, 0x5, 0xfff, 0xfffffff9, 0x0, 0x2, 0x100, 0x10001, 0x7fff, 0x3, 0xb, 0x4, 0xd, 0x81, 0xa, 0x3, 0x0, 0x2, 0x200, 0x0, 0x7, 0x4, 0x8, 0x1, 0x6, 0x100, 0x5, 0x6, 0x7b34, 0x9, 0x0, 0x6, 0x6, 0x4, 0xf6e, 0x8, 0xffffa9e9, 0xffffffff, 0xbf, 0xd, 0x0, 0x4, 0x6, 0x698d, 0x0, 0x6, 0x7f, 0x7, 0x1, 0x7f, 0x8, 0x2, 0x5, 0x3, 0x7d6c, 0xfffffff8, 0x20c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x81, 0xa5, 0x6, 0x0, 0x5, 0xa, 0x9, 0xd3, 0x1, 0x1000, 0xf9d, 0x81, 0x3b, 0x18000, 0x5, 0x100, 0x3, 0x5, 0x8, 0xac1, 0x20d19332, 0x5, 0xfffffffc, 0xfffffff9, 0x0, 0x3, 0x9, 0xfffffffd, 0xff, 0x80, 0x2, 0x2, 0x5, 0x0, 0x101, 0x1, 0xfffff801, 0x1, 0x3ff, 0xb612, 0x3, 0x3, 0x3, 0x4882, 0x7, 0x9, 0x3, 0x1, 0xffffffff, 0x8, 0x26, 0x7, 0x1c0, 0x5, 0x2, 0x3e1, 0x6, 0x5, 0x6, 0x4, 0xf27, 0xb17a, 0x10, 0x4, 0x1, 0x1, 0x1, 0x2, 0x7, 0x6, 0x0, 0xc, 0x0, 0x7, 0x80, 0x80000000, 0x800, 0x0, 0x7, 0x6, 0x10, 0x7, 0x7, 0x7, 0x8, 0x7f, 0x3, 0x2, 0x1, 0x68, 0x80, 0x751, 0x100, 0x200, 0x9, 0x9, 0x6, 0xc, 0x4, 0x4, 0x2, 0x1ff, 0x5, 0x0, 0x80, 0x4, 0x2, 0xd1e, 0x7, 0xa6bb, 0x10000, 0x6, 0x1, 0x6, 0x9, 0x56f, 0x4, 0x3b2, 0x5bd6, 0x80000001, 0x400000, 0x6, 0x8, 0x4, 0x9, 0x9, 0x7, 0x4, 0x6, 0xfffffe01, 0x3, 0xd, 0xfff, 0xffff, 0x8, 0x0, 0x57ebc992, 0x6, 0x3, 0x4, 0xfe000000, 0x77, 0x2, 0xffffffff, 0xfc, 0x3, 0x3dc, 0x8, 0x4, 0x2, 0x7, 0x200, 0x8, 0x9, 0x9, 0x6, 0x1, 0xff, 0x7, 0x5, 0x6, 0x452a75a, 0xc, 0x1, 0x8, 0x100, 0x9, 0xfffffff8, 0x5, 0x401, 0x8, 0xb18, 0x1ff, 0x7, 0x6, 0x6, 0x2, 0x1, 0x6, 0x9, 0x3, 0x8, 0x0, 0x6, 0x1, 0x3, 0x9, 0x2, 0x200, 0x3400000, 0xfffffffa, 0x6, 0x4, 0x5, 0x7, 0x800, 0x80000001, 0x6, 0xa, 0x1ff, 0x3, 0x9, 0x6, 0x400, 0x4, 0x7, 0x7df0, 0x3ff, 0x2, 0x9, 0x9, 0xfffffff7, 0x10000, 0x7, 0x0, 0x6, 0x46d6891c, 0xfffffffd, 0x6, 0x12000000, 0x6, 0x90e, 0x275, 0x6, 0x2, 0xe501, 0x3, 0x2, 0x3ff, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffff9, 0x1, 0x2, 0x0, 0x7, 0x10001, 0x134, 0xa7a8, 0x0, 0x6, 0x4, 0xff, 0x2, 0xffffffff, 0x3, 0x5b, 0x81, 0x7fffffff, 0x2, 0x3]}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x2}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0x8}}, @TCA_FLOW_MASK={0x8, 0x6, 0x7f}]}}, @TCA_CHAIN={0x8, 0xb, 0x3f5}, @TCA_RATE={0x6, 0x5, {0x32, 0x7f}}, @TCA_CHAIN={0x8, 0xb, 0xb53c}, @TCA_CHAIN={0x8, 0xb, 0x400}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 20.785917725s ago: executing program 34 (id=1097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8cc, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x1, 0x7}}}]}}]}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x844, 0x2, [@TCA_FLOW_POLICE={0x820, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x21}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xff, 0x435, 0x4, 0x7fffffff, 0x9, 0x100, 0x4, 0xfffffffb, 0x26c, 0xa00, 0x7, 0xfc, 0x5, 0xc, 0xa, 0x9, 0x10000, 0xa, 0x9be, 0x4, 0x6, 0x8, 0x5, 0x828, 0xffffffff, 0xfffffff5, 0x5, 0xd, 0x2, 0xff, 0xb, 0x4f, 0x5eb5, 0x1, 0x7, 0x7, 0x8, 0x0, 0x80, 0xed, 0x0, 0x10001, 0x5, 0x10001, 0x2, 0x2, 0x9, 0xffff, 0xffff, 0x5, 0x1, 0x7, 0x22630000, 0x3, 0x8001, 0x7ff, 0x1, 0xaf, 0x6, 0x1cfb971, 0x6, 0x8, 0x40, 0x1, 0x4, 0x2, 0x3ff, 0x7f8ee9d0, 0x7fffffff, 0x62, 0x80000001, 0x3, 0x3, 0xd, 0xbea3, 0x5, 0x37, 0x8, 0x9, 0x3ff, 0x2, 0x1ff, 0x4, 0x96, 0x6832, 0x5, 0x0, 0x6, 0x42fb, 0x1, 0x1, 0x69ab, 0x3, 0x8001, 0x6, 0x8, 0x7, 0xd4, 0x1, 0xfffffff7, 0x0, 0x1, 0x7, 0x5, 0x6, 0x3, 0x0, 0xc3, 0x81, 0x6, 0x141, 0x5d, 0x7, 0xf, 0x4, 0x101, 0x8, 0x2, 0x8, 0x80000001, 0x4, 0x5, 0x1000, 0xa, 0x6, 0x9, 0x8, 0x4, 0x1, 0x1, 0x80, 0xa, 0x9, 0x101, 0x5, 0x8, 0x5, 0x4, 0x3ab4, 0x9, 0xd, 0xf1f1, 0x380000, 0x9, 0x3, 0xfffeffff, 0x2, 0x1, 0x4, 0x80, 0x7, 0x2, 0x2, 0x4, 0x9, 0xd5a, 0x8, 0xf2cf, 0x7, 0x3ff, 0x40, 0x80, 0x0, 0x10, 0x3, 0x8, 0x1b, 0x401, 0x10000, 0x3, 0xf9, 0x7, 0x7, 0x4, 0x2, 0x18, 0xb, 0x7, 0x1, 0x101, 0x9, 0x9, 0x1, 0xa6a6, 0x16, 0x6, 0xffffffff, 0xe, 0x10000, 0x50000000, 0x4, 0x7fffffff, 0x7, 0x9, 0x4, 0x200, 0x9, 0x6, 0x7f, 0x5, 0xfff, 0xfffffff9, 0x0, 0x2, 0x100, 0x10001, 0x7fff, 0x3, 0xb, 0x4, 0xd, 0x81, 0xa, 0x3, 0x0, 0x2, 0x200, 0x0, 0x7, 0x4, 0x8, 0x1, 0x6, 0x100, 0x5, 0x6, 0x7b34, 0x9, 0x0, 0x6, 0x6, 0x4, 0xf6e, 0x8, 0xffffa9e9, 0xffffffff, 0xbf, 0xd, 0x0, 0x4, 0x6, 0x698d, 0x0, 0x6, 0x7f, 0x7, 0x1, 0x7f, 0x8, 0x2, 0x5, 0x3, 0x7d6c, 0xfffffff8, 0x20c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x81, 0xa5, 0x6, 0x0, 0x5, 0xa, 0x9, 0xd3, 0x1, 0x1000, 0xf9d, 0x81, 0x3b, 0x18000, 0x5, 0x100, 0x3, 0x5, 0x8, 0xac1, 0x20d19332, 0x5, 0xfffffffc, 0xfffffff9, 0x0, 0x3, 0x9, 0xfffffffd, 0xff, 0x80, 0x2, 0x2, 0x5, 0x0, 0x101, 0x1, 0xfffff801, 0x1, 0x3ff, 0xb612, 0x3, 0x3, 0x3, 0x4882, 0x7, 0x9, 0x3, 0x1, 0xffffffff, 0x8, 0x26, 0x7, 0x1c0, 0x5, 0x2, 0x3e1, 0x6, 0x5, 0x6, 0x4, 0xf27, 0xb17a, 0x10, 0x4, 0x1, 0x1, 0x1, 0x2, 0x7, 0x6, 0x0, 0xc, 0x0, 0x7, 0x80, 0x80000000, 0x800, 0x0, 0x7, 0x6, 0x10, 0x7, 0x7, 0x7, 0x8, 0x7f, 0x3, 0x2, 0x1, 0x68, 0x80, 0x751, 0x100, 0x200, 0x9, 0x9, 0x6, 0xc, 0x4, 0x4, 0x2, 0x1ff, 0x5, 0x0, 0x80, 0x4, 0x2, 0xd1e, 0x7, 0xa6bb, 0x10000, 0x6, 0x1, 0x6, 0x9, 0x56f, 0x4, 0x3b2, 0x5bd6, 0x80000001, 0x400000, 0x6, 0x8, 0x4, 0x9, 0x9, 0x7, 0x4, 0x6, 0xfffffe01, 0x3, 0xd, 0xfff, 0xffff, 0x8, 0x0, 0x57ebc992, 0x6, 0x3, 0x4, 0xfe000000, 0x77, 0x2, 0xffffffff, 0xfc, 0x3, 0x3dc, 0x8, 0x4, 0x2, 0x7, 0x200, 0x8, 0x9, 0x9, 0x6, 0x1, 0xff, 0x7, 0x5, 0x6, 0x452a75a, 0xc, 0x1, 0x8, 0x100, 0x9, 0xfffffff8, 0x5, 0x401, 0x8, 0xb18, 0x1ff, 0x7, 0x6, 0x6, 0x2, 0x1, 0x6, 0x9, 0x3, 0x8, 0x0, 0x6, 0x1, 0x3, 0x9, 0x2, 0x200, 0x3400000, 0xfffffffa, 0x6, 0x4, 0x5, 0x7, 0x800, 0x80000001, 0x6, 0xa, 0x1ff, 0x3, 0x9, 0x6, 0x400, 0x4, 0x7, 0x7df0, 0x3ff, 0x2, 0x9, 0x9, 0xfffffff7, 0x10000, 0x7, 0x0, 0x6, 0x46d6891c, 0xfffffffd, 0x6, 0x12000000, 0x6, 0x90e, 0x275, 0x6, 0x2, 0xe501, 0x3, 0x2, 0x3ff, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffff9, 0x1, 0x2, 0x0, 0x7, 0x10001, 0x134, 0xa7a8, 0x0, 0x6, 0x4, 0xff, 0x2, 0xffffffff, 0x3, 0x5b, 0x81, 0x7fffffff, 0x2, 0x3]}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x2}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0x8}}, @TCA_FLOW_MASK={0x8, 0x6, 0x7f}]}}, @TCA_CHAIN={0x8, 0xb, 0x3f5}, @TCA_RATE={0x6, 0x5, {0x32, 0x7f}}, @TCA_CHAIN={0x8, 0xb, 0xb53c}, @TCA_CHAIN={0x8, 0xb, 0x400}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 9.148188725s ago: executing program 5 (id=1136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffffffffffffa0f96bdc960986dd69ee052000092bfffc020000000400000000000000000001ff020000000000000000000000000001426411d5a4c6229bf7"], 0x43) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000400)="1300000043001f00036ffd2ca83b48ad131747", 0x13) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)="4c79fd4570a9ceaadec2a77838cd8f9edbcbdee4139dfecfa6ae5612a87b9278afcf596917ccf067216c84f234ab60612f2d58561c9db66d12595eb441e6b39b83fe775bfba61d7d801aa96119cadea45fcaa17d34f98ef037119c61f3005ca31bf95491ac6ce1acc64f2ffb24d49abbb0e11fbdbfb49ec481e9e6ad0d6b78b0047de5132468784ba0cceb7e", 0x8c, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) r8 = eventfd2(0xfffffffe, 0x1) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000040)={0x0, r8}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) r10 = getpid() kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r5, &(0x7f0000000280)={r6, r5, 0xfffffffc}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x162, &(0x7f0000000180)=ANY=[], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '('}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, 'veth0_macvtap\x00'}, {0x20, '/*'}, {0x20, 'helper\x00'}, {0x20, '$+'}, {0x20, '.{'}, {0x20, '.8'}], 0xa, "f680a396fd2347ac3639c2b6af3353edb186922fd982e0e84c6440c1b6a76661e2ca268233a1fb4624a1b6a47cef84eb5c4ed012e6a7d013818c94278400df8d20776a7c89a2dd1075aafa8beebc2220e7ebdc6844afdd3b8c8b4800ffcb1d3bbb2718deeef7ba266cd1c3a36d436122f5e01b97c8dc31bd3ddbf1397635bdc3c5fe08d95b72b2da564c435c57120967611aae618e6c25831da63822aaf57b0616e1fb734cbd69425f1bc697ed85ea0f1e46ba9cc0e21e32dfe614e3a15648b06e9955dceda24dc6517d28bd82140890136d7adc42032d5868c290881ab6e24b8ccb0d2dfeb8285178b795384f85"}, 0x124) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 9.147119445s ago: executing program 2 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e71d92540000000000000000000000000000160000000000000004ffbdd81c325ed2dc1bd4ab22771470a1fafd2d0d2e59f80e0000a3e3641c1d8e97fad1909efa6f2dbc60e65b02e2907ba2b2e030c6ff3caf8cba60a9066bb726149e1a7823114c4077e54540290338c515243e2d652e9b73e1e51bc14c3afdccdd0167ef1c04"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000083372d1b85000000860000008500000005000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000010080)=@known='security.selinux\x00', &(0x7f0000010000)=""/15, 0xf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.146746105s ago: executing program 3 (id=1138): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) socket$inet(0x2, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x61, 0x71, 0xb6, 0x10, 0x424, 0xcf30, 0x3527, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x8, 0x0, 0xf, "", [{{0x9, 0x4, 0xf6, 0xff, 0x1, 0x52, 0xe1, 0xef, 0xb, [], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0xb, 0x7, 0x8}}]}}]}}]}}, 0x0) 9.146601005s ago: executing program 6 (id=1139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000c0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'bond_slave_1\x00', @random="14fb810b3c6f"}) (async) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100207010310b8bdfff3c2fff802030109021b000101001009090400000007"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0xc) 7.521748404s ago: executing program 5 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 7.521323214s ago: executing program 2 (id=1141): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000500)="4f964ab823", 0x5, 0x40000, &(0x7f00000000c0)={0x11, 0xf5, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) 7.520613244s ago: executing program 6 (id=1142): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001c00)={{r1}, "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"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) write$tun(r1, &(0x7f0000000c00)={@void, @val={0x3, 0x83, 0x8, 0xe053, 0x15, 0xf}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0xf98, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x2, 0x1f2, "34ab4c47230f66a890cbd005e94359729ebc3c96689607e6fb37c2be89e2c75489d2e064d916f27c969fec5101f3a918eea925326d095cd27d405cfddb6cf6e93f8e1217928ebc8d3f91c779f073a50f4ef75c509b784431578e03d8053c4fd5d7c7ecf6dc8c3d6aacbc5dc186e2f6b85ebd07f0ea8c7ee3631ca0bcc570ff0b53f7dae4570c4337b57732a94c1568f7ac73453bf95a9d4d70060ac5ea14c543e20c30fddfc80192d6c7936aa122c0866ee67f5aa4b7db9ecbb2f8c0c7eff26817ae8c9f5e32b18d695f02b699f7d22c7cff767d200c21eeb100456cf58ca2872abb4e19bd2b0999f18a60cc4914f0c75170ee8da17cfb24d39ef0e2a1f8abafef84f95c06a18e2ea57b472a4fff1796d7f88f0cf23f5ce972640aeee278f74f290c815efc3d34a62ca79e20fca6637af1e71c542132ddd30ac43b02eb8e73df8743ab2c11c37ba7291fe1ffdcd5eccd7954b1154fa593ccedef76aea2649c984d1c7d5f099ad1562e94f236f66c79e7fcdb838b908f209ad0a7391c8ec5089208baa3327e7ea996a8cd88244e1fcb338d720e799e7ae1b2b6102700163ae9463831f07831af0ce03efb4955af71e036895984f19d452513ffd157c3e64551d3a3fb099e1617aade95d2ff855e73e872a3634268deec2632e21c7301164b3e21fefbefbe15a31eed76b552b092012df3334e042d69631d1a9ebcb9a8f34b5b176506a78c7bd303779b83dc255bbaf9870344f6b565756648f2f2401ff723dde722a8450500c1b6e52f4af65a64e0d3cccf9996707b23abbe74e06feb1457eda23fbf770edcc793013cd2e8bdb8f5101b771cc54b3a39012c2c53ce359607c22178c59bd525b54d2398bdf460f1fbd73b548ab3e6f51181cc8ef1537b18bec102b9dd3f5da2820bb739bcf83b1037ddf73c2eed113cdb5026d604cb639044080bc29f8aa0075b0720447e891774bb49373d95828bf076e0636f41d44e92ff47b8fd754f617ddbafd2cf5d93dea6ddfeaf90aaebf32b94fa0dfb368ec5f65d7f3c697d489a752123dba915c6c0177e42ea954336e819b3f18ff4817a3dc4574410ff644ce4f56bf6f4e232265bcab3d1cafee5614b445672ce299344a3154e2210368fe355e81603cfa8f5a9d917c9505ae79926651121b068e675b6ebe70668fd871eb2539b84bc9c49d5acb9ff041f3e132d4d198bd7eb66a02db489b664a4ff9f7179cbedc968a7a8737d1e35ae9e9a1907d18e14819fc088a2acd6d8e84b0047d6e9af232ab8ae732c1150227c38b3e9d531618f7f56167b74bee4c98317653ae75afed4b7837a45b803a7397c11826074b5d9459b28f40fba2c2c7c11549753bbf48b26c1cc0ef86177cbbb0ce644948001dff09d757f79097a21a4ae70066a34dd6a72d52ba2db835adce4c1910caf77f6e71556d3daecd116dcfa00c57b1b86bb689825942f8a3dd72aaea58dce698455ea291b7ff6c539f50da11b8775c607847763ee3507a12819a317fec0c57479f8c1420f48e6ec1bf7bf2555eb4e55d6573c09300f261e392648ec14fa9c4c8c4b1cb7b99f5b59037d9f045b1c8545babac8ec8e4e86ea7c521044afeca7439627de4153115a99e89375421396c0435e0dd250cb67cf0a7efd10b7acb41b9add4664d2cfe92d8ee31725a80f1e777360e40d28238192e9643277d9d99f8e82ff329538d5e4afcd14ed9aaffc9e8a47fb49da8f93bec1b2031b1d28534ca92206a1ea9da88d5bff4bdd90897d0e9f21d4dea362fc55ae3c72448a5882a5ac3557451a45c2fb02a6a7e7eb21edcd54ac3917fe421c76175875e98b97443702109d12abde788903715f8c692af65e8a44b9e5d2c5d8ed4e5358189bea9fcb1720b1fbaf0c5dfc303e2fed0f00963a2943bc136de266ebf2fcb2dc0e3d673f81928cbf70effabf04a89976eba03125f90099704187adad818d7f5e4853d6251b6aa606fe1f5e5d781a2f1f675e66c0223627eb0ff54523b95042c2aa3f926d7d5a69c41ef400344d44c16ae4171faa3c394c31e2e98e6b32023a9c172ac74e31a5c07a6fe5138a21c09eede9db7ed93ffffccb205ea07c8c234b3223484e96b791198a5e5c2e5346635edaf3067454937f0bb5c51455560187119cff0cc231f87553356d22b812d123fb560e0e6fe7df938f5619d1c83d41baaa4e206833702dc861125d9a6b1186d284a2659cecdc8bbe0429396dab868164e82a4875103af20b4598d6703a586758cd79bc4a5ba6364bfe1c6d8437ffd7b4980cd2d192a3eaa13aa428c4b640d7c3138ed60e02e25b074df45795842a4a427fc425902e008e7e55839a5d07a473ba838dff63da4ceb23ee1e69ec5465fea033d237651e2c349b2fe82d1e3e2b10d54701e7ff2ae1c354b1a6cd4f042752866a0a57f911bbf6c98569e89b88e9c43580d9a173474d94ec5f8966fe349a749d12ae3198c8251dd526da0d7370fb1675b6c17436de0fda169febda2ac3fd5ec5616f919fbb8fee71c5708894fe82e4e49f37440f2b3aa45959615d90a34afb35557230e8adfe69dfc6258fefb6780b55a844fe1c06bdb728123ca2f0582cc38aeda1cab9e895fe925feec7e1fb0686cd4179b4c584b05cc6e9e9fbd2c6e995d99c57d23eef07db8d911861308039a67e9b842dc09ee65023b839e6453bce984dac9e261b4605f3f919f9d2d01f879baacee8ee1befb84448642848734b55f7cbd31f789f2ff26c9d1e9e2bc7e985a42e8e43d3cda04870f1af9ccb930a3027c2b1553f4f3fab734f142196c80f08cfebfd55aa891e0bbc8f39c7f096490a774494c82d789863b73bf35da9c45cacb4a3bd7a0c9858ea5c44c136d052972a4b5838610007a45c6943dabedfdb5e104220304686b149f7c93ba2a85a17ff30851f81b7610c5d5cdf65d3c947701ac50b99233f4eaec1edfe66aae6842f6c439b5688cb8d4cb3bd4fd1b27098d0449f902265e1a73f0e7c140a4825031d37fc8e9869418677f67d25b0fb570cb3e5970c9030ab654226cf9b6be4abea296dc1f350cdbbec6130cbafb23616d35256c1a01cef123b13f7d2c4f82352677e57a1ec84d4175efe55e2c48ae13a9983cbb2aec4458f69d345653e6ab98c2362c6c1393c3a611465718ae9aa95d86181d3e1f43b51886442329bb3c1446bb71af2594a4eaf22e6d889ad8a1213d424f73abcc5fad1942c08c48486a6595d4afd2a5a4ce876f4df2bc58d868b2def550e7da7ff935a20612be968b01aeaa80de302b097ac2a873f986d40c14fa48b44e301c46606f9232aa959f1493fef3ac87b0a8f621d4754d716d4dfc22540b75af42a82b95217fd026c5b8dd4eebc8d9b5ccea365f191f78163cefcedda7bd0b901a01ce12dcfae50b1b19bd77f1159e8b0fee0cc62036193134190ae6190739aa0a278169c95ccd8f21ee8f4c1eed8072c7e1a4c8ebdbacc24a8f56423e6ea336284dd6e2efd89dde3aeb2a8ae74dc0d5f6c618c4b1c18cd58da20f2cf821bbca39c6d40d5c16821b34cc1ada2e47c1d9c506c2ea1d978a3ab482595ccbb163cd7a18e0419379d3dd691cef5ee3b5c47704d3288981949335bfa3022a54485243483ce88db2c49c28074357e3528f9835f3fa56ab1e9996fa1d75db8c43c80711cecd29c9402d5115ea329d0fb1694218ded7808face269bc30d112c3c9d98fe2427bf331f9754ed30013023845c1009f21e76daf1b31804a7c8c4d1aeac9c68f96d10c3953718a8cb5a97379082d5e7b932253b63e531baae0e9000aa4958c903750979efa1521054003ff6584814a206e43dcf9f6723188bb06db9a73287a94ccb0f3db17065f9daa0bdffac48ea076b5e1375d86f8400d460d462a405808ff2f678f1bdf6815af427768bd77b6d452a6590be0e91adc9527efc73e3b8b7ce745ef0881eb4148b9b7d0c1db81f229593788e12d931969c93b85659d629d4df1322fcf6ce27831d79c0399bdc3168e8ebf5bd0bc33c40af330b5de0140e897b574133e1bb394edca23c8a1ffc30f49a647637214bb7e9ae9a0b2e3ce3cf3b8c5c4ab273da8efa2e5f4893b7869ae896297f74a8a9137780b3bd87bb5174b11f87991e0a34111543ee0f78dfbb57b9806baa04bdee1d77b0160b1ce7db1bc6b8e87d982b34860fda13a057d0efe411d3d492d827c1447968e434c2653710a308cd889d8fe69c6a8f7418845b7534cde377ef3101cea8f1c8c8d78e977a7d02eba88840414586bf35b16f385373fdee308ed2c3dbf41e89949c84d6d81c4a150de7a27c2c53da699fe83a72bd62bcc0e44d8faa7f46d981393390e23004a353841a71e6bc10620e794a456104cdb236344b74af4713e6f5dbf89ab3091df7ee0b84583593cc2c5ef3fcf5b800c4912c25cbc36fd5ba33ddf924c8d257da126ccb3cf27a5058e9f4bf4068011c773f16abda8ed24a8d24c256298f6a38fc0bbe1c19f7084fd4f3d5f8f4e83cbde34bf7115e2d03cff3ce81b61a4cc73c1c3bc8d66c3e4799c0c32ed55440db17fe703d54a6618692fa5b21d2e725cd946d88e336fb94c6f7be1632a96a145747c1481a952744638f43fea0115739e93307129dc75088b3c639e651bc23600f1f195065bb1ecdc4a32676406e444270e39cccc7f1a6974cb27c462ede94db7a2e2030ed1cf224721b9477f2f55055f419f0ea650caf5ccc5befacd35cd9f0908f78eeabbfe32de7bf2b9463e2da1ea7060a4d42282ac4656c3d9541e9036e258b848a3c18711516432479f6b172f8689cb97c60a184bc4b8e89cfbf787730e68a76fca8ff44ca045381ef85887796c2d7454b1e29ced685a17210413b17632a466a65f3a911d702cc8c15a2090352c951cc6cc64e52920ebf0941aa23f3a46bc36d11d62c4da35f9350a971c9e1827cbfe639fd999e58d46121f58a801a7bdd542e551e0cb66f3c700b3697e567f2d0a9bb7367a22e464e98a158428f21cf18a48bc19209725546a1e4b09767c83f47ea3ae0094d39b6f9f82a3551540e9b1260c8aea09c847ebe0ef7f5af13125740b13fc339bba590b459b7fe06670dd5b16a4ebecdddfbe05e9b03e0759b3368880b0c7ada5347236e2c45ebca155212721b04f87ed0fbeea05a8bc629dd6ed94642d5999823bbed416a1d8e19deebe5b6cb587961ad302e3b92670b08f3095960ea2ec980c2712b8715b69069d0cdd99b8f8a7c7f6a9d7d1e988767ec39d5cb6c483e59707802476acff8eb099ffebc538ee2f8929112c268c9f3e63acfecc5fc45d6d9dd131ec8f4b87c4569b232e29ff3fefce5d82771a26285e34bb31085b4da60ed723804bebf1164e12f8ccea4b0b3f4b385c6d032154166220f5cdbe90c35e05398ff47baef06641286eba7a357455b7834afafbf49f3544b08397adc3080e8abe59b314a757d25299f1a276a9f02f9595960ff081ff75758105ea0f708b97ceb861e65afa79782549d98fb4287a15b7136f8210bc794a2865a0e57c2f50ee7cbea246748a11ca1b9a5beb9e8086672c3b68b482d08d5e110836a34e0fea6b5be86100afd8a2a3e3a67e2e399e8d9d9d98863ef58eab2a91a7243ee75dfa6dccca5aa2f02ea5b2dc951efa7fb56f0d37a71e28d188b8e49ef9c7b9767"}]}}}}, 0xfca) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000100)={0x40, 0x30, 0x18, {0x18, 0xe, "1f2db55f340dab1adbe2245434be2a343a39c37ec40a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, &(0x7f0000000180)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x9, "5dc33907"}, @global=@item_4={0x3, 0x1, 0x4, "e7659baa"}, @local=@item_012={0x2, 0x2, 0x7, '1W'}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0xa23}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x30, 0x61, "470325be0dc08b9a59fe351297e3ad71eed66c37d846f4671503ae97d35c4b939c28962811a9caf7c7daa38b8ec76db8fbe54e73dae501d51899e8aa70beaa48a17b5470e89c932da59ffb46d759477d5fb19776329a226060e2db0f8f68421e96"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x1, 0x5a, "cf7d1fe1b437e7b403c28fc92c61fa30d411c5e1e1efb9a198614611f196b02c9ec8a8729d68a260da6f8b4afcb78495ab1eb8edc6468e293e557c3c5188ec7d18455b2b666eed422166f5d5e77094f89b96de1cb1cc64f0b937"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x4009, 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0xfb, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@0\''], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x81, 0x50, 0xac}, {0x1000, 0x0, 0x1, 0xb}, {0x5, 0x74}, {0x3000, 0xf, 0x8a, 0x4}, {0x1, 0x81, 0x6, 0x3}]}) 5.774003557s ago: executing program 5 (id=1143): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x440000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000100)="2e1221b23bb601c4", 0x8}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb74971020000080000001823853ec30ea0d718bac44dfc140aa4f130acebac780553db765ab04c0b1d3af2248965c162865d88d2de4ea0f627bb3e0bec4c7bb65a09589899a4f9e2e60beaf7fea57a76b42b55d449479f44b58aaa613c4c028b7c6343b03b69fc3c71060c6b20cd834dde87f4338cb6ec5947746bc99b4d916af03eebed4d8dfefd602f60e05bc02d93d8bd50e23da26733c9d674cb9846ba", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x7, 0x1e, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000000979d000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000607b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000060000000000000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0xba0, 0x1000, &(0x7f00000015c0)=""/4096, 0x41100, 0x23, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002800)={'sit0\x00', @random="265c5cc6984b"}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002840), 0x100, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) syz_open_dev$usbfs(&(0x7f0000002ac0), 0x29, 0x20001) mount_setattr(0xffffffffffffffff, &(0x7f0000002b00)='./file1\x00', 0x0, &(0x7f0000002b40)={0x1f0, 0x10003f, 0x100000}, 0x20) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000002b80)={0x35, 0x9, 0x3, 0x8e3, 0x7fffffff, 0x9e3e}) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000200)={0x8, 0xffffffffffffffff, 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x140, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xba4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x49}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc1d}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40080}, 0x8004) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000) sendto$packet(r5, &(0x7f0000000500)="4f964ab823", 0x5, 0x40000, &(0x7f00000000c0)={0x11, 0xf5, r6, 0x1, 0x8, 0x6, @broadcast}, 0x14) 5.773677147s ago: executing program 2 (id=1144): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x240}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x4, 0x62}) 5.773127637s ago: executing program 3 (id=1145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x321c01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x8000203d}) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mount(0x0, 0x0, 0x0, 0x5000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) fdatasync(r4) ftruncate(r4, 0x5) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@cgroup, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000001c0)="b9f79c6596a25aa5b8b495b617c3f069766dc35538e9f08cdcaaae4226de634b0187492f98185a2a55ecfdcc760322a18e19e6415818c55366c5fed0298c82ec241d17d9a75ea5000a72900e1c0de387521c97a125746cdc6a3abb94a77ab3a61875deacab7ccb0fbf28e820aa19d2b4bbea33c33e43500f82c174e23adf88f3e52ecef5832c3c0e975aa1e60c39e577b3defbfebc231a50ed462837cef9e0a455af19a4f4114bfadd6130fc83ffdcba6cc25a306c122b8e0910105f90eb93137400196379cf5b358690557fb5153602b254aa3ecf539844e1523b2bbddfeafc", &(0x7f00000002c0)="b32e2ad551f1dfe21e80a0", 0xe0, 0xb}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x35) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)) 5.772792177s ago: executing program 6 (id=1146): openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) r1 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x51, 0x10}, {0x9, 0x5, 0x80, 0x2, 0x3ff, 0x5, 0x0, 0x7}, {0x9, 0x5, 0x6, 0x3, 0x20, 0x3e, 0x1, 0xff}}}}}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f0000000340)={0x20, 0xd, 0xfd, {0xfd, 0x21, "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"}}, &(0x7f0000000480)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "0a9d2b9e47c7457899e2b1d1a8824b8748ea5d29298405f146c8db0e49042e50cd286ad29c91d554dfc796fc2980816ee30866a089da3e7bf2d60707b25701d4ca1eae598d90a4265f65ddb7e79393c978ea44d3737bfdc06f3f4c15bbca3771fcc504700d723b4cb95e9b008f959b1db57f4fe82f469ab8a39baaa17f1b035ae2614dd1493812c793cde0866dbe4266045e73993dc1665ddad1500aeeb9e59fa97729e5466ab9ebe610bcc5ff30b6037ac81a"}}, &(0x7f0000000540)={0x0, 0xf, 0x4c, {0x5, 0xf, 0x4c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x9, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x2, 0xff00, 0x2d, [0xffc000, 0x3f00, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xff, 0x6, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "0eb75574e34adf3f9817413e3296494c"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x2, 0x7}, @ptm_cap={0x3}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x10, 0xf9, 0x5, "bc335dbc", "54e03bc7"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0x6, 0x7f, 0x8, 0x0, 0x8001}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x15, 0xc0, "6faafe32e208eea6f80791bf0e8de6d00416fa102bb5b35794ed4467df99022f475453fff8f131dd853e4693ea5f2d1f44faec5a3c4b1b11efce4b5ea2184699c3f21887df1713fd56bc81805fc459d322823de646c759c138b94911df14d31a012d0136dda04793a1a325ddd4ce4a85046376ce149a07a73b13f365db3a5f119b02f4c70f6765a05a16a30015bbc967e018adc5d65e661de51d2b92d9005af1d4019be1cd17f4b2ec49cd1c8822b6bfc19d21d632e38cc3e554099ab9efab25"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x140, 0x40}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f00000008c0)={0x40, 0x9, 0x1}, &(0x7f0000000900)={0x40, 0xb, 0x2, "3980"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x13, 0x6, @random="c576d167913d"}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, 'P,'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x769}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x98}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x7}}) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x323b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0xf0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0x2, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x8, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x4, 0xb, {0x8, 0x25, 0x1, 0x2, 0x6, 0xdc, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x5, 0x8, {0x8, 0x25, 0x1, 0x40, 0x33, 0x1, 0x7}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x81, 0x5, 0x1, 0xff, 0xc}, 0xec, &(0x7f00000000c0)={0x5, 0xf, 0xec, 0x4, [@ptm_cap={0x3}, @generic={0xb8, 0x10, 0x2, "62b6683ed8426b471e8d01604f891d24b6fc8ab66062a91afe70f9b973be39095e131d612146ff1630808f2f1e6b42bc8436c1e1917d37e96a18c68ec8c0b890db265d9c6b6724a5d41a13c5b42740e1d333551c29010c52bd11e07de12dabadb5155f01b9a334c1f24557a3df496de45fb7eccf15083821c58624cbda24e72ed99d4a9913c810e3926e8fd8548302478dd7215b9843260637ddc1d6933692ad35a0b642372d4886b1d1402f876f4bd4a6d8930a16"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f920e73e914c52692cb458cd24b1cded"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x719, 0x7800, 0x1, [0x0, 0xffc05f, 0x30]}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x16, &(0x7f0000000200)=@string={0x16, 0x3, "8c0b7086f2e5d6557dede8e4d423d1cfc72a08e0"}}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.958696281s ago: executing program 5 (id=1147): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") getcwd(&(0x7f0000000340)=""/202, 0xca) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = inotify_init1(0x800) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000001480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x22, 0x0, 0x1, {0x7, 0x25, 0x1, 0xc, 0xd, 0x7ddf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x81, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0xfb89}}}}}}}}]}}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0xc0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) 3.956143202s ago: executing program 2 (id=1148): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) shutdown(r0, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000040)='nv\x00', 0x3) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r3, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r3, r1, 0x0, 0x40001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.955744451s ago: executing program 3 (id=1149): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x22, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x7, 0x1, 0xb, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x55}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000580)='syzkaller\x00', 0x10001, 0x26, &(0x7f00000005c0)=""/38, 0x41100, 0x49, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) 3.955544311s ago: executing program 6 (id=1150): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x4, 0x0, &(0x7f0000048000)=0x80, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) (async) futex(&(0x7f000000cffc), 0x3, 0x4, 0x0, &(0x7f0000048000)=0x80, 0x2) (async) 2.034771929s ago: executing program 5 (id=1151): pipe2(&(0x7f0000000000), 0x800) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.03444192s ago: executing program 2 (id=1152): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f645000000003", 0x2c}], 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.03328898s ago: executing program 3 (id=1153): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socket$packet(0x11, 0x2, 0x300) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_emit_ethernet(0x273, &(0x7f00000008c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x8, 0x265, 0x68, 0x1000, 0x6, 0x2f, 0x0, @local, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa, 0x2, [0x2, 0x7], "f8e507738555f00f2bb6"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3], "999b987574bb7d6300222ab6a274cc4a502cb1cb01d0d6b56f23c1528abf075ce3e981bfb0b075712a1b40b9942acaa02b1e2e0223d0a28e8b47d8f8cb5ac74ebd6a62383b4e98240901a91497ce3e02aabb85d471cdbc0bd6db5a089e0723bf486e764d69beee8477599d9a6d256aec7c97eae90262b36bdf0c21b8d868fdc43ce66c57a4f1496c617eced312a4a50184f022f805"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x80, 0x6], "71cf0002c622e7eccda9afbb41ecaa3a4b21a17380155c4aaf84200a2812cde4d25ea3aaab8fca829fb61482587996b5fdb72d9d03c25430f64de6f05953813d49ef7a6c2215fccbf61da77ae38a6407900a956a28301612bac3d1740582e56ec0851c86e4cdb3ba4a7647e1880a50c0ec1551a5dec0b4f544689a5a0ab556862d9d5c20400763a502c53cc66149ef00f35718a3d85cffd90ca9f1ed7833b095d7661b851fbd3c79dc1d172fdb1492dba8"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x4, 0x2}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x6, 0x2, 0x0, 0x3, 0x3, 0x4d}, 0x2, {0x9, 0x6, 0x3, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "d46bf15b797ef85b0b514b59ff36d57a96577a22ba9c75b03c185f22ef662db4f9885604d34d7499ec5ebc51cbfead67364d3da64147ace3b631abc0cf7687bdb45296cd9727947f1fae0030b6d9a70ea75505477ae9faf3d4687c914b4b4287902b7254f741cb0dfacfc17a19452f72fe91fada3ba079fe47cdd250e1dc2bd5a6f03882df24883ddaec260dc84a6a44b6fa6103ad9e3deca77ac5ef68ca4e619a703c1226ca9929aaaa351e2e0c4e72649632"}}}}}}, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') dup(0xffffffffffffffff) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = openat$kvm(0x0, &(0x7f00000001c0), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000957000/0x400000)=nil) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000200)={0x0, &(0x7f0000000840)=[@code={0xa, 0x5d, {"0f01f0660f701000b8010000000f01c166baf80cb8c0c52989ef66bafc0c66ed430f1b54330d66b8fa008ee8450f01c4c461e55701c744240073000000c74424020e000000ff1c24460f01c1"}}], 0x5d}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) 2.032895129s ago: executing program 6 (id=1154): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x1, 0x8ffff) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0x7, 0x1, 0xb, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x55}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000580)='syzkaller\x00', 0x10001, 0x26, &(0x7f00000005c0)=""/38, 0x41100, 0x49, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r5, 0x0) 1.956416762s ago: executing program 3 (id=1155): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) socket$inet(0x2, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x61, 0x71, 0xb6, 0x10, 0x424, 0xcf30, 0x3527, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x8, 0x0, 0xf, "", [{{0x9, 0x4, 0xf6, 0xff, 0x1, 0x52, 0xe1, 0xef, 0xb, [], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0xb, 0x7, 0x8}}]}}]}}]}}, 0x0) 958.04µs ago: executing program 5 (id=1156): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x1f6) r0 = io_uring_setup(0x654e, &(0x7f0000000200)={0x0, 0xca4a, 0x40, 0x0, 0x3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff850000007b000000952cade37d000000"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x8000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x6, 0x2, r4}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r4, 0x5, 0x2, r4}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010003b0c00000000fedbdf2500000000", @ANYRES32=0x0, @ANYRES32=r4], 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) fcntl$lock(r5, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000018c0)={0x0, 0xffffffffffffff6c, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18, 0xc1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r10, &(0x7f0000000400)=""/4096, 0xc00) 620.77µs ago: executing program 2 (id=1157): socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0) 363.61µs ago: executing program 3 (id=1158): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000000c0)={[{}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@test_dummy_encryption}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@bh}, {@data_journal}]}, 0x1, 0x45d, &(0x7f0000000740)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000900)=""/212, 0xd4}], 0x1, 0xa2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r1, &(0x7f0000000200)=""/189, 0xbd) 0s ago: executing program 6 (id=1159): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000000c0)={[{}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@test_dummy_encryption}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@bh}, {@data_journal}]}, 0x1, 0x45d, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r0, &(0x7f0000000200)=""/189, 0xbd) kernel console output (not intermixed with test programs): T3379] device bridge_slave_0 entered promiscuous mode [ 252.601494][ T30] audit: type=1400 audit(1779889757.063:234): avc: denied { read } for pid=3383 comm="syz.2.743" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.644244][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.662480][ T26] usb 4-1: USB disconnect, device number 32 [ 252.680148][ T3379] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.687610][ T3379] device bridge_slave_1 entered promiscuous mode [ 252.694163][ T30] audit: type=1400 audit(1779889757.093:235): avc: denied { open } for pid=3383 comm="syz.2.743" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.727225][ T30] audit: type=1400 audit(1779889757.093:236): avc: denied { ioctl } for pid=3383 comm="syz.2.743" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 252.805117][ T3395] loop2: detected capacity change from 0 to 1024 [ 252.826233][ T3395] EXT4-fs (loop2): Ignoring removed bh option [ 252.841601][ T3395] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,nodioread_nolock,nolazytime,inode_readahead_blks=0x0000000000000100,nodioread_nolock,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 252.860593][ T3348] UDC core: couldn't find an available UDC or it's busy: -16 [ 252.880099][ T3348] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 252.888788][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.897351][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.926911][ T3401] loop3: detected capacity change from 0 to 1024 [ 252.959446][ T1513] device bridge_slave_1 left promiscuous mode [ 252.966217][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.049349][ T1513] device bridge_slave_0 left promiscuous mode [ 253.101515][ T30] audit: type=1400 audit(1779889757.563:237): avc: denied { ioctl } for pid=3393 comm="syz.2.746" path="socket:[29882]" dev="sockfs" ino=29882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.131810][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.150816][ T3401] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 253.180864][ T3401] FAULT_INJECTION: forcing a failure. [ 253.180864][ T3401] name failslab, interval 1, probability 0, space 0, times 0 [ 253.193531][ T3401] CPU: 1 PID: 3401 Comm: syz.3.745 Not tainted syzkaller #0 [ 253.200816][ T3401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.210858][ T3401] Call Trace: [ 253.214139][ T3401] [ 253.217062][ T3401] __dump_stack+0x21/0x30 [ 253.221392][ T3401] dump_stack_lvl+0x110/0x170 [ 253.226064][ T3401] ? show_regs_print_info+0x20/0x20 [ 253.231255][ T3401] dump_stack+0x15/0x20 [ 253.235401][ T3401] should_fail+0x3c1/0x510 [ 253.239809][ T3401] __should_failslab+0xa4/0xe0 [ 253.244566][ T3401] should_failslab+0x9/0x20 [ 253.249061][ T3401] slab_pre_alloc_hook+0x3b/0xe0 [ 253.253993][ T3401] kmem_cache_alloc_trace+0x48/0x270 [ 253.259268][ T3401] ? alloc_pipe_info+0xe7/0x4b0 [ 253.264110][ T3401] alloc_pipe_info+0xe7/0x4b0 [ 253.268775][ T3401] splice_direct_to_actor+0x991/0xb50 [ 253.274128][ T3401] ? do_splice_direct+0x2d0/0x2d0 [ 253.279130][ T3401] ? selinux_file_permission+0x2aa/0x510 [ 253.284743][ T3401] ? fsnotify_perm+0x67/0x5b0 [ 253.289397][ T3401] ? security_file_permission+0x79/0xa0 [ 253.294921][ T3401] ? pipe_to_sendpage+0x320/0x320 [ 253.299924][ T3401] ? security_file_permission+0x83/0xa0 [ 253.305448][ T3401] ? rw_verify_area+0xa7/0x1c0 [ 253.310195][ T3401] do_splice_direct+0x1c2/0x2d0 [ 253.315025][ T3401] ? splice_direct_to_actor+0xb50/0xb50 [ 253.320549][ T3401] do_sendfile+0x5ed/0xea0 [ 253.324944][ T3401] ? _raw_spin_unlock+0x4d/0x70 [ 253.329772][ T3401] ? do_preadv+0x390/0x390 [ 253.334165][ T3401] ? release_firmware_map_entry+0x190/0x190 [ 253.340038][ T3401] __x64_sys_sendfile64+0x199/0x1f0 [ 253.345212][ T3401] ? __ia32_sys_sendfile+0x190/0x190 [ 253.350491][ T3401] ? __kasan_check_write+0x14/0x20 [ 253.355579][ T3401] ? switch_fpu_return+0x15d/0x2c0 [ 253.360672][ T3401] x64_sys_call+0x88d/0x9a0 [ 253.365151][ T3401] do_syscall_64+0x4c/0xa0 [ 253.369545][ T3401] ? clear_bhb_loop+0x50/0xa0 [ 253.374195][ T3401] ? clear_bhb_loop+0x50/0xa0 [ 253.378850][ T3401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.384724][ T3401] RIP: 0033:0x7f7637c72e59 [ 253.389116][ T3401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.408698][ T3401] RSP: 002b:00007f763668b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 253.417087][ T3401] RAX: ffffffffffffffda RBX: 00007f7637eec180 RCX: 00007f7637c72e59 [ 253.425036][ T3401] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 253.432982][ T3401] RBP: 00007f763668b090 R08: 0000000000000000 R09: 0000000000000000 [ 253.440931][ T3401] R10: 0000000010000006 R11: 0000000000000246 R12: 0000000000000001 [ 253.448878][ T3401] R13: 00007f7637eec218 R14: 00007f7637eec180 R15: 00007fffc48503e8 [ 253.456828][ T3401] [ 253.563565][ T1513] device veth1_macvtap left promiscuous mode [ 253.586311][ T1513] device veth0_vlan left promiscuous mode [ 253.592184][ T30] audit: type=1400 audit(1779889757.943:238): avc: denied { append } for pid=3391 comm="syz.3.745" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 253.682369][ T3406] FAULT_INJECTION: forcing a failure. [ 253.682369][ T3406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.703877][ T3406] CPU: 0 PID: 3406 Comm: syz.4.749 Not tainted syzkaller #0 [ 253.711186][ T3406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.721236][ T3406] Call Trace: [ 253.724492][ T3406] [ 253.727403][ T3406] __dump_stack+0x21/0x30 [ 253.731716][ T3406] dump_stack_lvl+0x110/0x170 [ 253.736375][ T3406] ? show_regs_print_info+0x20/0x20 [ 253.741553][ T3406] dump_stack+0x15/0x20 [ 253.745697][ T3406] should_fail+0x3c1/0x510 [ 253.750091][ T3406] should_fail_usercopy+0x1a/0x20 [ 253.755089][ T3406] _copy_to_user+0x20/0x90 [ 253.759484][ T3406] simple_read_from_buffer+0xe9/0x160 [ 253.764836][ T3406] proc_fail_nth_read+0x1a6/0x220 [ 253.769837][ T3406] ? proc_fault_inject_write+0x310/0x310 [ 253.775444][ T3406] ? security_file_permission+0x83/0xa0 [ 253.780966][ T3406] ? proc_fault_inject_write+0x310/0x310 [ 253.786575][ T3406] vfs_read+0x28d/0xc40 [ 253.790705][ T3406] ? kernel_read+0x1f0/0x1f0 [ 253.795270][ T3406] ? __kasan_check_write+0x14/0x20 [ 253.800358][ T3406] ? mutex_lock+0x9b/0x1c0 [ 253.804751][ T3406] ? wait_for_completion_killable_timeout+0x10/0x10 [ 253.811312][ T3406] ? __fget_files+0x2c4/0x320 [ 253.815967][ T3406] ? __fdget_pos+0x2d2/0x380 [ 253.820532][ T3406] ? ksys_read+0x71/0x250 [ 253.824839][ T3406] ksys_read+0x149/0x250 [ 253.829058][ T3406] ? vfs_write+0xfd0/0xfd0 [ 253.833449][ T3406] ? __sys_getsockopt+0x295/0x410 [ 253.838458][ T3406] ? debug_smp_processor_id+0x17/0x20 [ 253.843809][ T3406] __x64_sys_read+0x7b/0x90 [ 253.848287][ T3406] x64_sys_call+0x96d/0x9a0 [ 253.852776][ T3406] do_syscall_64+0x4c/0xa0 [ 253.857178][ T3406] ? clear_bhb_loop+0x50/0xa0 [ 253.861833][ T3406] ? clear_bhb_loop+0x50/0xa0 [ 253.866485][ T3406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.872354][ T3406] RIP: 0033:0x7f8dd639b68e [ 253.876748][ T3406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.896329][ T3406] RSP: 002b:00007f8dd4e34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.904716][ T3406] RAX: ffffffffffffffda RBX: 00007f8dd4e356c0 RCX: 00007f8dd639b68e [ 253.912666][ T3406] RDX: 000000000000000f RSI: 00007f8dd4e350a0 RDI: 0000000000000003 [ 253.920617][ T3406] RBP: 00007f8dd4e35090 R08: 0000000000000000 R09: 0000000000000000 [ 253.928564][ T3406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.936513][ T3406] R13: 00007f8dd6654038 R14: 00007f8dd6653fa0 R15: 00007ffcb563a778 [ 253.944467][ T3406] [ 253.959718][ T30] audit: type=1400 audit(1779889758.413:239): avc: denied { setopt } for pid=3407 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.020171][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.054616][ T3408] loop4: detected capacity change from 0 to 256 [ 254.064018][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.072457][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.079621][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.095159][ T3408] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 254.129691][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.139333][ T3424] FAULT_INJECTION: forcing a failure. [ 254.139333][ T3424] name failslab, interval 1, probability 0, space 0, times 0 [ 254.148323][ T30] audit: type=1400 audit(1779889758.603:240): avc: denied { write } for pid=3407 comm="syz.4.751" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.151995][ T3424] CPU: 1 PID: 3424 Comm: syz.1.754 Not tainted syzkaller #0 [ 254.173543][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 254.180643][ T3424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.180655][ T3424] Call Trace: [ 254.180660][ T3424] [ 254.180666][ T3424] __dump_stack+0x21/0x30 [ 254.190871][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.198314][ T3424] dump_stack_lvl+0x110/0x170 [ 254.198340][ T3424] ? show_regs_print_info+0x20/0x20 [ 254.226563][ T3424] ? flush_workqueue_prep_pwqs+0x408/0x480 [ 254.232358][ T3424] dump_stack+0x15/0x20 [ 254.236493][ T3424] should_fail+0x3c1/0x510 [ 254.240892][ T3424] __should_failslab+0xa4/0xe0 [ 254.245634][ T3424] should_failslab+0x9/0x20 [ 254.250112][ T3424] slab_pre_alloc_hook+0x3b/0xe0 [ 254.255030][ T3424] kmem_cache_alloc_trace+0x48/0x270 [ 254.260291][ T3424] ? kvm_uevent_notify_change+0xcb/0x3b0 [ 254.265901][ T3424] kvm_uevent_notify_change+0xcb/0x3b0 [ 254.271335][ T3424] kvm_put_kvm+0xa1/0x11c0 [ 254.275729][ T3424] ? kvm_irqfd_release+0x1ac/0x1d0 [ 254.280818][ T3424] ? percpu_counter_add_batch+0x13c/0x160 [ 254.286517][ T3424] kvm_vm_release+0x46/0x50 [ 254.290994][ T3424] ? kvm_vm_compat_ioctl+0x390/0x390 [ 254.296255][ T3424] __fput+0x20b/0x8b0 [ 254.300213][ T3424] ____fput+0x15/0x20 [ 254.304170][ T3424] task_work_run+0x127/0x190 [ 254.308736][ T3424] exit_to_user_mode_loop+0xd0/0xe0 [ 254.313910][ T3424] exit_to_user_mode_prepare+0x87/0xd0 [ 254.319345][ T3424] syscall_exit_to_user_mode+0x1a/0x30 [ 254.324778][ T3424] do_syscall_64+0x58/0xa0 [ 254.329170][ T3424] ? clear_bhb_loop+0x50/0xa0 [ 254.333835][ T3424] ? clear_bhb_loop+0x50/0xa0 [ 254.338487][ T3424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.344359][ T3424] RIP: 0033:0x7f537365be59 [ 254.348752][ T3424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.368337][ T3424] RSP: 002b:00007f53720b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 254.376727][ T3424] RAX: 0000000000000000 RBX: 00007f53738d4fa0 RCX: 00007f537365be59 [ 254.384677][ T3424] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 254.392629][ T3424] RBP: 00007f53720b6090 R08: 0000000000000000 R09: 0000000000000000 [ 254.400577][ T3424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.408527][ T3424] R13: 00007f53738d5038 R14: 00007f53738d4fa0 R15: 00007ffd81bb2538 [ 254.416477][ T3424] [ 254.423449][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.430509][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.438631][ T30] audit: type=1400 audit(1779889758.643:241): avc: denied { add_name } for pid=3407 comm="syz.4.751" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.438681][ T3427] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 254.459457][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.476674][ T30] audit: type=1400 audit(1779889758.643:242): avc: denied { associate } for pid=3407 comm="syz.4.751" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 254.480082][ T6] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 254.508807][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.516677][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.526722][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.528603][ T3430] loop3: detected capacity change from 0 to 1024 [ 254.535119][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.549549][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.550829][ T6] usb 2-1: can't read configurations, error -71 [ 254.560695][ T3379] device veth0_vlan entered promiscuous mode [ 254.574118][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.585276][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.603243][ T3427] SELinux: failed to load policy [ 254.603673][ T3379] device veth1_macvtap entered promiscuous mode [ 254.629139][ T3430] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 254.647238][ T3436] 9pnet: p9_errstr2errno: server reported unknown error @hQI [ 254.688115][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.708373][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.831994][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.840462][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.848660][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.860624][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.870752][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.888800][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.917509][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.967927][ T3439] loop2: detected capacity change from 0 to 40427 [ 254.999537][ T3438] loop4: detected capacity change from 0 to 40427 [ 255.007669][ T3439] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 255.025212][ T3439] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 255.038366][ T3439] F2FS-fs (loop2): invalid crc value [ 255.045046][ T3439] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 255.071022][ T3439] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 255.077705][ T3439] F2FS-fs (loop2): Start checkpoint disabled! [ 255.084860][ T3439] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 255.114488][ T3439] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 255.163747][ T3449] tmpfs: Unknown parameter 'quota' [ 255.354359][ T3451] loop3: detected capacity change from 0 to 512 [ 255.371048][ T3451] EXT4-fs (loop3): Ignoring removed nobh option [ 255.386846][ T3451] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 255.400098][ T6] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 255.401658][ T3451] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.760: attempt to clear invalid blocks 1 len 1 [ 255.420761][ T3451] EXT4-fs (loop3): Remounting filesystem read-only [ 255.431131][ T3454] loop4: detected capacity change from 0 to 512 [ 255.437471][ T3451] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 255.456942][ T3451] EXT4-fs (loop3): Remounting filesystem read-only [ 255.464168][ T3451] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.760: invalid indirect mapped block 1819239214 (level 0) [ 255.478262][ T3451] EXT4-fs (loop3): Remounting filesystem read-only [ 255.484839][ T3451] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.760: invalid indirect mapped block 1819239214 (level 1) [ 255.502389][ T3451] EXT4-fs (loop3): Remounting filesystem read-only [ 255.502587][ T3454] EXT4-fs (loop4): Ignoring removed nobh option [ 255.510406][ T3451] EXT4-fs (loop3): 1 truncate cleaned up [ 255.517893][ T3454] EXT4-fs (loop4): Unrecognized mount option "subj_user=urjquota=" or missing value [ 255.535692][ T3451] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 255.563355][ T3458] FAULT_INJECTION: forcing a failure. [ 255.563355][ T3458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.572817][ T3451] EXT4-fs (loop3): shut down requested (0) [ 255.582291][ T3458] CPU: 0 PID: 3458 Comm: syz.2.763 Not tainted syzkaller #0 [ 255.589574][ T3458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.599609][ T3458] Call Trace: [ 255.602867][ T3458] [ 255.605779][ T3458] __dump_stack+0x21/0x30 [ 255.610091][ T3458] dump_stack_lvl+0x110/0x170 [ 255.614745][ T3458] ? show_regs_print_info+0x20/0x20 [ 255.619920][ T3458] ? vfs_write+0xc72/0xfd0 [ 255.624316][ T3458] dump_stack+0x15/0x20 [ 255.628452][ T3458] should_fail+0x3c1/0x510 [ 255.632846][ T3458] should_fail_usercopy+0x1a/0x20 [ 255.637848][ T3458] _copy_from_user+0x20/0xd0 [ 255.642415][ T3458] __sys_bpf+0x258/0x7d0 [ 255.646633][ T3458] ? bpf_link_show_fdinfo+0x330/0x330 [ 255.652072][ T3458] ? debug_smp_processor_id+0x17/0x20 [ 255.657420][ T3458] __x64_sys_bpf+0x7c/0x90 [ 255.661823][ T3458] x64_sys_call+0x4b9/0x9a0 [ 255.666303][ T3458] do_syscall_64+0x4c/0xa0 [ 255.670701][ T3458] ? clear_bhb_loop+0x50/0xa0 [ 255.675352][ T3458] ? clear_bhb_loop+0x50/0xa0 [ 255.680006][ T3458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.685876][ T3458] RIP: 0033:0x7fe1e8f12e59 [ 255.690269][ T3458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.709856][ T3458] RSP: 002b:00007fe1e796d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.718255][ T3458] RAX: ffffffffffffffda RBX: 00007fe1e918bfa0 RCX: 00007fe1e8f12e59 [ 255.726213][ T3458] RDX: 000000000000006d RSI: 00002000000000c0 RDI: 0000000000000005 [ 255.734166][ T3458] RBP: 00007fe1e796d090 R08: 0000000000000000 R09: 0000000000000000 [ 255.742122][ T3458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.750074][ T3458] R13: 00007fe1e918c038 R14: 00007fe1e918bfa0 R15: 00007fff14360048 [ 255.758029][ T3458] [ 255.772282][ T3461] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 255.783299][ T3461] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 255.794460][ T3461] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 255.803946][ T3461] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 255.813079][ T3461] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 255.861354][ T3461] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 255.870442][ T3461] incfs: Can't find or create .index dir in ./file0 [ 255.877136][ T3461] incfs: mount failed -5 [ 255.904935][ T3471] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 255.914764][ T3471] SELinux: failed to load policy [ 255.942323][ T3474] loop3: detected capacity change from 0 to 512 [ 255.944349][ T3475] loop5: detected capacity change from 0 to 128 [ 255.950190][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.966314][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.001475][ T3474] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 256.049261][ T3474] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.060177][ T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.068592][ T3474] FAULT_INJECTION: forcing a failure. [ 256.068592][ T3474] name failslab, interval 1, probability 0, space 0, times 0 [ 256.079231][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.082351][ T3474] CPU: 1 PID: 3474 Comm: syz.3.768 Not tainted syzkaller #0 [ 256.097004][ T3474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.107054][ T3474] Call Trace: [ 256.110327][ T3474] [ 256.113265][ T3474] __dump_stack+0x21/0x30 [ 256.117594][ T3474] dump_stack_lvl+0x110/0x170 [ 256.122264][ T3474] ? show_regs_print_info+0x20/0x20 [ 256.127455][ T3474] dump_stack+0x15/0x20 [ 256.131608][ T3474] should_fail+0x3c1/0x510 [ 256.136023][ T3474] __should_failslab+0xa4/0xe0 [ 256.140345][ T6] usb 2-1: SerialNumber: syz [ 256.145345][ T3474] should_failslab+0x9/0x20 [ 256.149846][ T3474] slab_pre_alloc_hook+0x3b/0xe0 [ 256.154788][ T3474] ? getname_flags+0xb9/0x500 [ 256.159463][ T3474] kmem_cache_alloc+0x44/0x260 [ 256.164224][ T3474] getname_flags+0xb9/0x500 [ 256.168720][ T3474] getname+0x19/0x20 [ 256.172610][ T3474] do_sys_openat2+0xeb/0x7f0 [ 256.177198][ T3474] ? fput_many+0x15a/0x1a0 [ 256.181616][ T3474] ? do_sys_open+0xe0/0xe0 [ 256.186032][ T3474] ? fput+0x1a/0x20 [ 256.189842][ T3474] ? ksys_write+0x1f4/0x250 [ 256.194349][ T3474] ? __ia32_sys_read+0x90/0x90 [ 256.199108][ T3474] __x64_sys_openat+0x136/0x160 [ 256.203959][ T3474] x64_sys_call+0x219/0x9a0 [ 256.208458][ T3474] do_syscall_64+0x4c/0xa0 [ 256.212871][ T3474] ? clear_bhb_loop+0x50/0xa0 [ 256.217545][ T3474] ? clear_bhb_loop+0x50/0xa0 [ 256.222218][ T3474] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.228105][ T3474] RIP: 0033:0x7f7637c72e59 [ 256.232515][ T3474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.252118][ T3474] RSP: 002b:00007f76366cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.260547][ T3474] RAX: ffffffffffffffda RBX: 00007f7637eebfa0 RCX: 00007f7637c72e59 [ 256.268520][ T3474] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 256.276491][ T3474] RBP: 00007f76366cd090 R08: 0000000000000000 R09: 0000000000000000 [ 256.284457][ T3474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.292421][ T3474] R13: 00007f7637eec038 R14: 00007f7637eebfa0 R15: 00007fffc48503e8 [ 256.300402][ T3474] [ 256.343863][ T3483] netlink: 104 bytes leftover after parsing attributes in process `syz.4.772'. [ 256.372774][ T3483] fuse: Unknown parameter '"R' [ 256.563091][ T6] usb 2-1: 0:2 : does not exist [ 256.684391][ T6] usb 2-1: USB disconnect, device number 34 [ 256.723573][ T3488] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 256.879090][ T3493] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 256.940100][ T763] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 257.138090][ T3506] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 257.147814][ T3506] SELinux: failed to load policy [ 257.240079][ T763] usb 4-1: Using ep0 maxpacket: 16 [ 257.370079][ T6] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 257.380352][ T763] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.390530][ T763] usb 4-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.00 [ 257.399842][ T763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.410216][ T763] usb 4-1: config 0 descriptor?? [ 257.580081][ T1512] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 257.760125][ T6] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 257.770465][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.830094][ T1512] usb 3-1: Using ep0 maxpacket: 16 [ 257.850138][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.859262][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.867288][ T6] usb 5-1: SerialNumber: syz [ 257.880428][ T3486] FAULT_INJECTION: forcing a failure. [ 257.880428][ T3486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.893651][ T3486] CPU: 1 PID: 3486 Comm: syz.3.771 Not tainted syzkaller #0 [ 257.900937][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.910973][ T3486] Call Trace: [ 257.914238][ T3486] [ 257.917143][ T3486] __dump_stack+0x21/0x30 [ 257.921452][ T3486] dump_stack_lvl+0x110/0x170 [ 257.926103][ T3486] ? show_regs_print_info+0x20/0x20 [ 257.931274][ T3486] ? __ia32_compat_sys_ioctl+0x900/0x900 [ 257.936883][ T3486] dump_stack+0x15/0x20 [ 257.941010][ T3486] should_fail+0x3c1/0x510 [ 257.945397][ T3486] should_fail_usercopy+0x1a/0x20 [ 257.950392][ T3486] _copy_from_user+0x20/0xd0 [ 257.954952][ T3486] raw_ioctl+0x687/0x3040 [ 257.959255][ T3486] ? ioctl_has_perm+0x1b8/0x4f0 [ 257.964076][ T3486] ? ioctl_has_perm+0x3ab/0x4f0 [ 257.968898][ T3486] ? audio_source_pcm_show+0xe0/0xe0 [ 257.974154][ T3486] ? has_cap_mac_admin+0x370/0x370 [ 257.979291][ T3486] ? vfs_write+0xc72/0xfd0 [ 257.983694][ T3486] ? selinux_file_ioctl+0x3a0/0x4d0 [ 257.988871][ T3486] ? selinux_file_alloc_security+0x120/0x120 [ 257.994836][ T3486] ? mutex_unlock+0x8f/0x230 [ 257.999519][ T3486] ? __mutex_lock_slowpath+0x10/0x10 [ 258.004788][ T3486] ? __fget_files+0x2c4/0x320 [ 258.009445][ T3486] ? security_file_ioctl+0x84/0xa0 [ 258.014540][ T3486] ? audio_source_pcm_show+0xe0/0xe0 [ 258.019801][ T3486] __se_sys_ioctl+0x121/0x1a0 [ 258.024453][ T3486] __x64_sys_ioctl+0x7b/0x90 [ 258.029018][ T3486] x64_sys_call+0x2f/0x9a0 [ 258.033410][ T3486] do_syscall_64+0x4c/0xa0 [ 258.037801][ T3486] ? clear_bhb_loop+0x50/0xa0 [ 258.042449][ T3486] ? clear_bhb_loop+0x50/0xa0 [ 258.047097][ T3486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.052957][ T3486] RIP: 0033:0x7f7637c72aeb [ 258.057347][ T3486] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 258.076922][ T3486] RSP: 002b:00007f76366cbf60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.085305][ T3486] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7637c72aeb [ 258.093249][ T3486] RDX: 00007f76366cbfe0 RSI: 00000000c0085508 RDI: 0000000000000003 [ 258.101201][ T3486] RBP: 0000000000000003 R08: 00007f7638016320 R09: 0000000000000000 [ 258.109149][ T3486] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 258.117098][ T3486] R13: 0000000000000000 R14: 00007f7637eebfa0 R15: 00007fffc48503e8 [ 258.125054][ T3486] [ 258.150723][ T6] usb 5-1: 0:2 : does not exist [ 258.155852][ T6] usb 5-1: unit 255 not found! [ 258.163089][ T6] usb 5-1: USB disconnect, device number 31 [ 258.210822][ T1512] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 258.219017][ T1512] usb 3-1: config 0 has no interface number 0 [ 258.225244][ T1512] usb 3-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 258.236419][ T1512] usb 3-1: config 0 interface 246 has no altsetting 0 [ 258.247706][ T3521] FAULT_INJECTION: forcing a failure. [ 258.247706][ T3521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.260200][ T763] usbhid 4-1:0.0: can't add hid device: -71 [ 258.260826][ T3521] CPU: 0 PID: 3521 Comm: syz.5.783 Not tainted syzkaller #0 [ 258.266645][ T763] usbhid: probe of 4-1:0.0 failed with error -71 [ 258.273838][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.273850][ T3521] Call Trace: [ 258.273856][ T3521] [ 258.273862][ T3521] __dump_stack+0x21/0x30 [ 258.281780][ T763] usb 4-1: USB disconnect, device number 33 [ 258.290197][ T3521] dump_stack_lvl+0x110/0x170 [ 258.290224][ T3521] ? show_regs_print_info+0x20/0x20 [ 258.316363][ T3521] ? vfs_write+0xc72/0xfd0 [ 258.320767][ T3521] dump_stack+0x15/0x20 [ 258.324921][ T3521] should_fail+0x3c1/0x510 [ 258.329317][ T3521] should_fail_usercopy+0x1a/0x20 [ 258.334312][ T3521] _copy_from_user+0x20/0xd0 [ 258.338900][ T3521] __sys_bpf+0x258/0x7d0 [ 258.343118][ T3521] ? bpf_link_show_fdinfo+0x330/0x330 [ 258.348460][ T3521] ? debug_smp_processor_id+0x17/0x20 [ 258.353805][ T3521] __x64_sys_bpf+0x7c/0x90 [ 258.358193][ T3521] x64_sys_call+0x4b9/0x9a0 [ 258.362671][ T3521] do_syscall_64+0x4c/0xa0 [ 258.367070][ T3521] ? clear_bhb_loop+0x50/0xa0 [ 258.371720][ T3521] ? clear_bhb_loop+0x50/0xa0 [ 258.376368][ T3521] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.382231][ T3521] RIP: 0033:0x7fa38c8bce59 [ 258.386617][ T3521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.406197][ T3521] RSP: 002b:00007fa38b317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.414587][ T3521] RAX: ffffffffffffffda RBX: 00007fa38cb35fa0 RCX: 00007fa38c8bce59 [ 258.422538][ T3521] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000001 [ 258.430484][ T3521] RBP: 00007fa38b317090 R08: 0000000000000000 R09: 0000000000000000 [ 258.438430][ T3521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.446375][ T3521] R13: 00007fa38cb36038 R14: 00007fa38cb35fa0 R15: 00007ffe7c04f1e8 [ 258.454327][ T3521] [ 258.560438][ T3523] tmpfs: Unknown parameter 'quota' [ 258.670391][ T1512] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 258.698989][ T3527] set_capacity_and_notify: 2 callbacks suppressed [ 258.699005][ T3527] loop5: detected capacity change from 0 to 256 [ 258.717399][ T1512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.725462][ T1512] usb 3-1: Product: syz [ 258.729634][ T1512] usb 3-1: Manufacturer: syz [ 258.734353][ T1512] usb 3-1: SerialNumber: syz [ 258.739353][ T1512] usb 3-1: config 0 descriptor?? [ 258.790605][ T780] udevd[780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 258.792327][ T3530] loop4: detected capacity change from 0 to 256 [ 258.844417][ T3530] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 259.134545][ T3534] loop3: detected capacity change from 0 to 40427 [ 259.170465][ T3542] loop1: detected capacity change from 0 to 512 [ 259.177190][ T3534] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 259.183632][ T3534] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 259.192666][ T3534] F2FS-fs (loop3): invalid crc value [ 259.196296][ T3548] tipc: Started in network mode [ 259.199114][ T3534] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 259.203103][ T3548] tipc: Node identity ea4fe46b935f, cluster identity 4711 [ 259.288340][ T3553] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 259.350583][ T3548] tipc: Enabled bearer , priority 0 [ 259.355923][ T3542] incfs: Can't find or create .incomplete dir in . [ 259.368998][ T3542] incfs: mount failed -22 [ 259.372220][ T3534] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 259.382322][ T3554] device syzkaller0 entered promiscuous mode [ 259.385589][ T3534] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 259.401474][ T3531] attempt to access beyond end of device [ 259.401474][ T3531] loop3: rw=2049, want=53256, limit=40427 [ 259.426539][ T285] attempt to access beyond end of device [ 259.426539][ T285] loop3: rw=2049, want=45104, limit=40427 [ 259.438941][ T3547] tipc: Resetting bearer [ 259.471952][ T3547] tipc: Disabling bearer [ 259.568614][ T3561] loop3: detected capacity change from 0 to 1024 [ 259.618116][ T3563] tmpfs: Unknown parameter 'quota' [ 259.651370][ T3561] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 259.662942][ T3561] EXT4-fs (loop3): orphan cleanup on readonly fs [ 259.670999][ T3561] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.794: Freeing blocks not in datazone - block = 0, count = 4096 [ 259.685443][ T3561] EXT4-fs (loop3): 1 orphan inode deleted [ 259.692380][ T3561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.800061][ T1388] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 259.969825][ T3567] netlink: 80 bytes leftover after parsing attributes in process `syz.4.796'. [ 260.025030][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 260.025043][ T30] audit: type=1400 audit(1779889764.483:258): avc: denied { remount } for pid=3560 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 260.050738][ T1388] usb 6-1: Using ep0 maxpacket: 16 [ 260.055931][ T3565] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 260.117068][ T3577] loop4: detected capacity change from 0 to 256 [ 260.153330][ T3577] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 260.170145][ T1388] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.185754][ T1388] usb 6-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.00 [ 260.195365][ T1388] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.228070][ T1388] usb 6-1: config 0 descriptor?? [ 260.246759][ T1512] usb 3-1: USB disconnect, device number 30 [ 260.419005][ T3587] loop1: detected capacity change from 0 to 4096 [ 260.450280][ T3587] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 260.466968][ T3587] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 260.483898][ T3587] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 260.493258][ T3587] EXT4-fs (loop1): Test dummy encryption mode enabled [ 260.500394][ T3587] EXT4-fs (loop1): Mount option "delalloc" incompatible with ext3 [ 260.540152][ T26] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 260.732224][ T3598] loop1: detected capacity change from 0 to 256 [ 260.750711][ T3598] FAT-fs (loop1): Unrecognized mount option "nodoYAFxec" or missing value [ 260.770057][ T1512] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 260.780182][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 260.800895][ T3598] loop1: detected capacity change from 0 to 512 [ 260.810460][ T3598] EXT4-fs (loop1): orphan cleanup on readonly fs [ 260.816999][ T3598] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 260.825949][ T3598] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 260.840488][ T3598] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.806: attempt to clear invalid blocks 2 len 1 [ 260.853953][ T3598] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.806: invalid indirect mapped block 1819239214 (level 0) [ 260.860257][ T1388] usbhid 6-1:0.0: can't add hid device: -71 [ 260.868346][ T3598] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.806: invalid indirect mapped block 1819239214 (level 1) [ 260.874067][ T1388] usbhid: probe of 6-1:0.0 failed with error -71 [ 260.888280][ T3598] EXT4-fs (loop1): 1 truncate cleaned up [ 260.900040][ T3598] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 260.901813][ T1388] usb 6-1: USB disconnect, device number 2 [ 261.080095][ T26] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 261.089218][ T26] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 261.097412][ T26] usb 5-1: Product: syz [ 261.101612][ T26] usb 5-1: Manufacturer: syz [ 261.106204][ T26] usb 5-1: SerialNumber: syz [ 261.130235][ T1512] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.140451][ T1512] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.220196][ T1512] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 261.229356][ T1512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.237417][ T1512] usb 3-1: SerialNumber: syz [ 261.562598][ T3609] FAULT_INJECTION: forcing a failure. [ 261.562598][ T3609] name failslab, interval 1, probability 0, space 0, times 0 [ 261.575244][ T3609] CPU: 0 PID: 3609 Comm: syz.3.808 Not tainted syzkaller #0 [ 261.582526][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.592575][ T3609] Call Trace: [ 261.595873][ T3609] [ 261.598798][ T3609] __dump_stack+0x21/0x30 [ 261.603130][ T3609] dump_stack_lvl+0x110/0x170 [ 261.607800][ T3609] ? show_regs_print_info+0x20/0x20 [ 261.613000][ T3609] ? avc_has_perm+0x163/0x250 [ 261.617658][ T3609] dump_stack+0x15/0x20 [ 261.621819][ T3609] should_fail+0x3c1/0x510 [ 261.626225][ T3609] __should_failslab+0xa4/0xe0 [ 261.630974][ T3609] should_failslab+0x9/0x20 [ 261.635461][ T3609] slab_pre_alloc_hook+0x3b/0xe0 [ 261.640380][ T3609] __kmalloc+0x6d/0x2c0 [ 261.644516][ T3609] ? ip_options_get+0x4d/0x460 [ 261.649265][ T3609] ip_options_get+0x4d/0x460 [ 261.653840][ T3609] ? __kernel_text_address+0xa0/0x100 [ 261.659195][ T3609] ip_setsockopt+0x1a4b/0x37c0 [ 261.663948][ T3609] ? arch_stack_walk+0xee/0x140 [ 261.668787][ T3609] ? ipv4_pktinfo_prepare+0x580/0x580 [ 261.674146][ T3609] ? stack_trace_save+0xa6/0xf0 [ 261.678975][ T3609] ? __stack_depot_save+0x34/0x480 [ 261.684066][ T3609] ? path_openat+0x280e/0x2f20 [ 261.688813][ T3609] ? avc_has_perm_noaudit+0x391/0x490 [ 261.694169][ T3609] ? memcpy+0x56/0x70 [ 261.698134][ T3609] ? avc_has_perm_noaudit+0x30b/0x490 [ 261.703492][ T3609] ? avc_denied+0x1b0/0x1b0 [ 261.707985][ T3609] ? kstrtouint_from_user+0x1c4/0x220 [ 261.713337][ T3609] ? avc_has_perm+0x163/0x250 [ 261.717994][ T3609] ? avc_has_perm_noaudit+0x490/0x490 [ 261.723346][ T3609] ? proc_fail_nth_write+0x180/0x200 [ 261.728615][ T3609] ? proc_fail_nth_read+0x220/0x220 [ 261.733796][ T3609] ? selinux_socket_setsockopt+0x282/0x360 [ 261.739585][ T3609] ? selinux_socket_getsockopt+0x340/0x340 [ 261.745373][ T3609] ? vfs_write+0xc72/0xfd0 [ 261.749769][ T3609] raw_setsockopt+0xf0/0x190 [ 261.754342][ T3609] sock_common_setsockopt+0xa0/0xb0 [ 261.759527][ T3609] ? sock_common_recvmsg+0x1c0/0x1c0 [ 261.764805][ T3609] __sys_setsockopt+0x2e9/0x470 [ 261.769647][ T3609] ? __kasan_check_write+0x14/0x20 [ 261.774752][ T3609] ? __ia32_sys_recv+0xb0/0xb0 [ 261.779501][ T3609] ? ksys_write+0x1f4/0x250 [ 261.783985][ T3609] ? __ia32_sys_read+0x90/0x90 [ 261.788729][ T3609] __x64_sys_setsockopt+0xbf/0xd0 [ 261.793735][ T3609] x64_sys_call+0x982/0x9a0 [ 261.798217][ T3609] do_syscall_64+0x4c/0xa0 [ 261.802616][ T3609] ? clear_bhb_loop+0x50/0xa0 [ 261.807269][ T3609] ? clear_bhb_loop+0x50/0xa0 [ 261.811924][ T3609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.817793][ T3609] RIP: 0033:0x7f7637c72e59 [ 261.822198][ T3609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.841779][ T3609] RSP: 002b:00007f763668b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 261.850174][ T3609] RAX: ffffffffffffffda RBX: 00007f7637eec180 RCX: 00007f7637c72e59 [ 261.858126][ T3609] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 261.866074][ T3609] RBP: 00007f763668b090 R08: 0000000000000004 R09: 0000000000000000 [ 261.874021][ T3609] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.881973][ T3609] R13: 00007f7637eec218 R14: 00007f7637eec180 R15: 00007fffc48503e8 [ 261.889927][ T3609] [ 261.893649][ T1512] usb 3-1: 0:2 : does not exist [ 261.900628][ T30] audit: type=1400 audit(1779889766.353:259): avc: denied { connect } for pid=3580 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.930229][ T30] audit: type=1400 audit(1779889766.353:260): avc: denied { bind } for pid=3580 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.952381][ T1512] usb 3-1: USB disconnect, device number 31 [ 262.161247][ T780] udevd[780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 262.623578][ T3620] tmpfs: Unknown parameter 'quota' [ 262.832673][ T26] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 262.851945][ T26] usb 5-1: USB disconnect, device number 32 [ 262.868761][ T3627] mmap: syz.3.813 (3627): VmData 167485440 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 262.886744][ T3627] process 'syz.3.813' launched './file1' with NULL argv: empty string added [ 262.976204][ T3630] tmpfs: Unknown parameter 'quota' [ 263.212565][ T3637] loop2: detected capacity change from 0 to 512 [ 263.264932][ T3637] EXT4-fs (loop2): Test dummy encryption mode enabled [ 263.273217][ T3637] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.815: inode has both inline data and extents flags [ 263.286451][ T3637] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.815: couldn't read orphan inode 15 (err -117) [ 263.298895][ T3637] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 263.323640][ T3637] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 263.333061][ T3637] FAULT_INJECTION: forcing a failure. [ 263.333061][ T3637] name failslab, interval 1, probability 0, space 0, times 0 [ 263.345835][ T3637] CPU: 1 PID: 3637 Comm: syz.2.815 Not tainted syzkaller #0 [ 263.353121][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.363171][ T3637] Call Trace: [ 263.366443][ T3637] [ 263.369366][ T3637] __dump_stack+0x21/0x30 [ 263.373704][ T3637] dump_stack_lvl+0x110/0x170 [ 263.378381][ T3637] ? show_regs_print_info+0x20/0x20 [ 263.383585][ T3637] ? file_end_write+0x1b0/0x1b0 [ 263.388433][ T3637] dump_stack+0x15/0x20 [ 263.392592][ T3637] should_fail+0x3c1/0x510 [ 263.397011][ T3637] __should_failslab+0xa4/0xe0 [ 263.401776][ T3637] should_failslab+0x9/0x20 [ 263.406277][ T3637] slab_pre_alloc_hook+0x3b/0xe0 [ 263.411213][ T3637] ? getname_flags+0xb9/0x500 [ 263.415887][ T3637] kmem_cache_alloc+0x44/0x260 [ 263.420654][ T3637] getname_flags+0xb9/0x500 [ 263.425152][ T3637] __x64_sys_renameat2+0xb4/0xf0 [ 263.430090][ T3637] x64_sys_call+0x258/0x9a0 [ 263.434695][ T3637] do_syscall_64+0x4c/0xa0 [ 263.439108][ T3637] ? clear_bhb_loop+0x50/0xa0 [ 263.443776][ T3637] ? clear_bhb_loop+0x50/0xa0 [ 263.448450][ T3637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.454338][ T3637] RIP: 0033:0x7fe1e8f12e59 [ 263.458748][ T3637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.478349][ T3637] RSP: 002b:00007fe1e796d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 263.486759][ T3637] RAX: ffffffffffffffda RBX: 00007fe1e918bfa0 RCX: 00007fe1e8f12e59 [ 263.494727][ T3637] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 263.502697][ T3637] RBP: 00007fe1e796d090 R08: 0000000000000000 R09: 0000000000000000 [ 263.510665][ T3637] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 263.518643][ T3637] R13: 00007fe1e918c038 R14: 00007fe1e918bfa0 R15: 00007fff14360048 [ 263.526616][ T3637] [ 263.545351][ T3646] FAULT_INJECTION: forcing a failure. [ 263.545351][ T3646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.560155][ T3646] CPU: 1 PID: 3646 Comm: syz.3.817 Not tainted syzkaller #0 [ 263.567452][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.577500][ T3646] Call Trace: [ 263.580777][ T3646] [ 263.583721][ T3646] __dump_stack+0x21/0x30 [ 263.588058][ T3646] dump_stack_lvl+0x110/0x170 [ 263.592732][ T3646] ? show_regs_print_info+0x20/0x20 [ 263.597929][ T3646] ? __stack_depot_save+0x34/0x480 [ 263.603046][ T3646] ? path_openat+0x280e/0x2f20 [ 263.607807][ T3646] dump_stack+0x15/0x20 [ 263.611974][ T3646] should_fail+0x3c1/0x510 [ 263.616393][ T3646] should_fail_usercopy+0x1a/0x20 [ 263.621415][ T3646] _copy_from_user+0x20/0xd0 [ 263.626002][ T3646] __copy_msghdr_from_user+0xc9/0x630 [ 263.631373][ T3646] ? _kstrtoull+0x3c0/0x4d0 [ 263.635876][ T3646] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 263.641155][ T3646] ? kstrtouint_from_user+0x1c4/0x220 [ 263.646531][ T3646] ___sys_sendmsg+0x19a/0x2e0 [ 263.651205][ T3646] ? __sys_sendmsg+0x280/0x280 [ 263.655974][ T3646] ? __fdget+0x1a1/0x230 [ 263.660257][ T3646] __x64_sys_sendmsg+0x206/0x2f0 [ 263.665189][ T3646] ? ___sys_sendmsg+0x2e0/0x2e0 [ 263.670032][ T3646] ? ksys_write+0x1f4/0x250 [ 263.674533][ T3646] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 263.680599][ T3646] x64_sys_call+0x4b/0x9a0 [ 263.685015][ T3646] do_syscall_64+0x4c/0xa0 [ 263.689428][ T3646] ? clear_bhb_loop+0x50/0xa0 [ 263.694111][ T3646] ? clear_bhb_loop+0x50/0xa0 [ 263.698794][ T3646] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.704685][ T3646] RIP: 0033:0x7f7637c72e59 [ 263.709097][ T3646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.728701][ T3646] RSP: 002b:00007f76366cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.737117][ T3646] RAX: ffffffffffffffda RBX: 00007f7637eebfa0 RCX: 00007f7637c72e59 [ 263.745087][ T3646] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 263.753056][ T3646] RBP: 00007f76366cd090 R08: 0000000000000000 R09: 0000000000000000 [ 263.761031][ T3646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.768999][ T3646] R13: 00007f7637eec038 R14: 00007f7637eebfa0 R15: 00007fffc48503e8 [ 263.776978][ T3646] [ 263.862561][ T30] audit: type=1400 audit(1779889768.323:261): avc: denied { view } for pid=3648 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 263.863040][ T3649] netlink: 64 bytes leftover after parsing attributes in process `syz.4.819'. [ 263.892716][ T3652] FAULT_INJECTION: forcing a failure. [ 263.892716][ T3652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.898622][ T30] audit: type=1400 audit(1779889768.353:262): avc: denied { bind } for pid=3651 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.920226][ T3652] CPU: 1 PID: 3652 Comm: syz.3.820 Not tainted syzkaller #0 [ 263.927841][ T3649] loop4: detected capacity change from 0 to 512 [ 263.932317][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.932331][ T3652] Call Trace: [ 263.932337][ T3652] [ 263.932344][ T3652] __dump_stack+0x21/0x30 [ 263.959063][ T3652] dump_stack_lvl+0x110/0x170 [ 263.963554][ T30] audit: type=1400 audit(1779889768.353:263): avc: denied { connect } for pid=3651 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.963738][ T3652] ? show_regs_print_info+0x20/0x20 [ 263.983715][ T30] audit: type=1400 audit(1779889768.353:264): avc: denied { write } for pid=3651 comm="syz.3.820" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 263.988318][ T3652] dump_stack+0x15/0x20 [ 264.015005][ T3652] should_fail+0x3c1/0x510 [ 264.015026][ T3652] should_fail_usercopy+0x1a/0x20 [ 264.015039][ T3652] _copy_to_user+0x20/0x90 [ 264.015050][ T3652] simple_read_from_buffer+0xe9/0x160 [ 264.015064][ T3652] proc_fail_nth_read+0x1a6/0x220 [ 264.015078][ T3652] ? proc_fault_inject_write+0x310/0x310 [ 264.015092][ T3652] ? security_file_permission+0x83/0xa0 [ 264.015106][ T3652] ? proc_fault_inject_write+0x310/0x310 [ 264.015120][ T3652] vfs_read+0x28d/0xc40 [ 264.015132][ T3652] ? kernel_read+0x1f0/0x1f0 [ 264.015143][ T3652] ? __kasan_check_write+0x14/0x20 [ 264.015156][ T3652] ? mutex_lock+0x9b/0x1c0 [ 264.015169][ T3652] ? wait_for_completion_killable_timeout+0x10/0x10 [ 264.015182][ T3652] ? __fget_files+0x2c4/0x320 [ 264.015197][ T3652] ? __fdget_pos+0x2d2/0x380 [ 264.015207][ T3652] ? ksys_read+0x71/0x250 [ 264.015218][ T3652] ksys_read+0x149/0x250 [ 264.015228][ T3652] ? vfs_write+0xfd0/0xfd0 [ 264.015239][ T3652] ? __kasan_check_write+0x14/0x20 [ 264.015251][ T3652] ? switch_fpu_return+0x15d/0x2c0 [ 264.015265][ T3652] __x64_sys_read+0x7b/0x90 [ 264.015276][ T3652] x64_sys_call+0x96d/0x9a0 [ 264.015288][ T3652] do_syscall_64+0x4c/0xa0 [ 264.015301][ T3652] ? clear_bhb_loop+0x50/0xa0 [ 264.015314][ T3652] ? clear_bhb_loop+0x50/0xa0 [ 264.015325][ T3652] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.015337][ T3652] RIP: 0033:0x7f7637c3368e [ 264.015350][ T3652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.015361][ T3652] RSP: 002b:00007f76366ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.015376][ T3652] RAX: ffffffffffffffda RBX: 00007f76366cd6c0 RCX: 00007f7637c3368e [ 264.015385][ T3652] RDX: 000000000000000f RSI: 00007f76366cd0a0 RDI: 0000000000000005 [ 264.015394][ T3652] RBP: 00007f76366cd090 R08: 0000000000000000 R09: 0000000000000000 [ 264.015401][ T3652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.015409][ T3652] R13: 00007f7637eec038 R14: 00007f7637eebfa0 R15: 00007fffc48503e8 [ 264.015420][ T3652] [ 264.233939][ T3653] loop2: detected capacity change from 0 to 1024 [ 264.386704][ T3659] loop1: detected capacity change from 0 to 256 [ 264.548343][ T3653] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,noload,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 265.114299][ T3665] netlink: 44 bytes leftover after parsing attributes in process `syz.4.823'. [ 265.123283][ T3666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.823'. [ 265.181488][ T3668] loop5: detected capacity change from 0 to 8192 [ 265.247653][ T30] audit: type=1400 audit(1779889769.703:265): avc: denied { append } for pid=3667 comm="syz.5.824" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.374068][ T30] audit: type=1400 audit(1779889769.703:266): avc: denied { map } for pid=3667 comm="syz.5.824" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.390758][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 265.540614][ T3683] FAULT_INJECTION: forcing a failure. [ 265.540614][ T3683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.556184][ T3683] CPU: 1 PID: 3683 Comm: syz.4.828 Not tainted syzkaller #0 [ 265.563481][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.573531][ T3683] Call Trace: [ 265.576885][ T3683] [ 265.579808][ T3683] __dump_stack+0x21/0x30 [ 265.584136][ T3683] dump_stack_lvl+0x110/0x170 [ 265.588805][ T3683] ? show_regs_print_info+0x20/0x20 [ 265.594001][ T3683] ? __stack_depot_save+0x34/0x480 [ 265.599106][ T3683] ? path_openat+0x280e/0x2f20 [ 265.603862][ T3683] dump_stack+0x15/0x20 [ 265.608011][ T3683] should_fail+0x3c1/0x510 [ 265.612427][ T3683] should_fail_usercopy+0x1a/0x20 [ 265.617455][ T3683] _copy_from_user+0x20/0xd0 [ 265.622046][ T3683] __copy_msghdr_from_user+0xc9/0x630 [ 265.627416][ T3683] ? _kstrtoull+0x3c0/0x4d0 [ 265.631914][ T3683] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 265.637195][ T3683] ? kstrtouint_from_user+0x1c4/0x220 [ 265.642573][ T3683] ___sys_sendmsg+0x19a/0x2e0 [ 265.647246][ T3683] ? __sys_sendmsg+0x280/0x280 [ 265.652013][ T3683] ? __fdget+0x1a1/0x230 [ 265.656337][ T3683] __x64_sys_sendmsg+0x206/0x2f0 [ 265.661269][ T3683] ? ___sys_sendmsg+0x2e0/0x2e0 [ 265.666124][ T3683] ? ksys_write+0x1f4/0x250 [ 265.670622][ T3683] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 265.676688][ T3683] x64_sys_call+0x4b/0x9a0 [ 265.681097][ T3683] do_syscall_64+0x4c/0xa0 [ 265.685512][ T3683] ? clear_bhb_loop+0x50/0xa0 [ 265.690185][ T3683] ? clear_bhb_loop+0x50/0xa0 [ 265.694854][ T3683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.700743][ T3683] RIP: 0033:0x7f8dd63dae59 [ 265.705154][ T3683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.724753][ T3683] RSP: 002b:00007f8dd4e35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.733165][ T3683] RAX: ffffffffffffffda RBX: 00007f8dd6653fa0 RCX: 00007f8dd63dae59 [ 265.741137][ T3683] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 265.749107][ T3683] RBP: 00007f8dd4e35090 R08: 0000000000000000 R09: 0000000000000000 [ 265.757074][ T3683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.765058][ T3683] R13: 00007f8dd6654038 R14: 00007f8dd6653fa0 R15: 00007ffcb563a778 [ 265.773034][ T3683] [ 266.225027][ T3663] loop3: detected capacity change from 0 to 131072 [ 266.231654][ T3052] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 266.317782][ T3663] F2FS-fs (loop3): Test dummy encryption mode enabled [ 266.329540][ T3663] F2FS-fs (loop3): invalid crc value [ 266.390924][ T3663] F2FS-fs (loop3): Found nat_bits in checkpoint [ 266.470180][ T3663] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 266.518513][ T3687] loop4: detected capacity change from 0 to 40427 [ 266.532361][ T3663] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 266.543967][ T30] audit: type=1400 audit(1779889771.003:267): avc: denied { mounton } for pid=3662 comm="syz.3.822" path="/151/file0/bus" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 266.570279][ T30] audit: type=1400 audit(1779889771.003:268): avc: denied { write } for pid=3662 comm="syz.3.822" name="bus" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 266.600546][ T3687] F2FS-fs (loop4): invalid crc value [ 266.618520][ T30] audit: type=1400 audit(1779889771.003:269): avc: denied { add_name } for pid=3662 comm="syz.3.822" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 266.638996][ T30] audit: type=1400 audit(1779889771.003:270): avc: denied { setattr } for pid=3662 comm="syz.3.822" name="work" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 266.644496][ T3687] F2FS-fs (loop4): Found nat_bits in checkpoint [ 266.661062][ T30] audit: type=1400 audit(1779889771.003:271): avc: denied { remove_name } for pid=3662 comm="syz.3.822" name="#10f" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 266.695898][ T30] audit: type=1400 audit(1779889771.003:272): avc: denied { rename } for pid=3662 comm="syz.3.822" name="#10f" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 266.706864][ T3687] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 266.719194][ T3052] usb 6-1: unable to get BOS descriptor or descriptor too short [ 266.736559][ T3696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 266.746567][ T30] audit: type=1400 audit(1779889771.003:273): avc: denied { unlink } for pid=3662 comm="syz.3.822" name="#10f" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 266.746834][ T3701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 266.769760][ T30] audit: type=1400 audit(1779889771.003:274): avc: denied { unlink } for pid=3662 comm="syz.3.822" name="#110" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 266.814397][ T3696] syz.2.831 (3696) used greatest stack depth: 21696 bytes left [ 266.850528][ T3052] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.930236][ T287] attempt to access beyond end of device [ 266.930236][ T287] loop4: rw=2049, want=45112, limit=40427 [ 267.050121][ T3052] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 267.065198][ T3052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.074877][ T3052] usb 6-1: Product: syz [ 267.079142][ T3052] usb 6-1: Manufacturer: syz [ 267.095025][ T3052] usb 6-1: SerialNumber: syz [ 267.309888][ T3715] tmpfs: Unknown parameter 'quota' [ 267.387810][ T6] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 267.540136][ T3052] usb 6-1: MIDIStreaming interface descriptor not found [ 267.549231][ T3052] usb 6-1: USB disconnect, device number 3 [ 267.630059][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 267.720070][ T2989] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 267.750668][ T780] udevd[780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 267.933332][ T6] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 267.947895][ T6] usb 2-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 267.956291][ T6] usb 2-1: Product: syz [ 267.968024][ T6] usb 2-1: Manufacturer: syz [ 267.978316][ T6] usb 2-1: SerialNumber: syz [ 267.986678][ T3726] loop4: detected capacity change from 0 to 1024 [ 267.994178][ T6] usb 2-1: config 0 descriptor?? [ 268.020496][ T3726] EXT4-fs (loop4): Ignoring removed bh option [ 268.030694][ T6] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 268.031816][ T3726] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,nodioread_nolock,nolazytime,inode_readahead_blks=0x0000000000000100,nodioread_nolock,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 268.038500][ T6] usb 2-1: Detected FT8U232AM [ 268.105483][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.113698][ T6] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 268.122457][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.129844][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.140081][ T2989] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.154381][ T2989] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.184184][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.207994][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.219239][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.239738][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.251610][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.264722][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.280139][ T2989] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.285550][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.309425][ T2989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.319507][ T2989] usb 3-1: SerialNumber: syz [ 268.323435][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.342604][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.358418][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.369299][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.378346][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.411983][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.419514][ T3052] hid-generic 0006:0008:0001.0001: unknown main item tag 0x0 [ 268.453208][ T3052] hid-generic 0006:0008:0001.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 268.548282][ T3744] fido_id[3744]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 268.626068][ T3749] binder: 3748:3749 ioctl c0306201 200000000080 returned -14 [ 268.626562][ T812] usb 2-1: USB disconnect, device number 35 [ 268.641544][ T812] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 268.651784][ T812] ftdi_sio 2-1:0.0: device disconnected [ 268.656372][ T3749] binder: 3748:3749 ioctl c0306201 2000000003c0 returned -14 [ 268.670664][ T2989] usb 3-1: 0:2 : does not exist [ 268.680899][ T2989] usb 3-1: USB disconnect, device number 32 [ 268.831959][ T3752] loop3: detected capacity change from 0 to 512 [ 268.912471][ T3752] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 268.927123][ T3752] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.846: bad orphan inode 15 [ 268.937441][ T3752] ext4_test_bit(bit=14, block=18) = 1 [ 268.950104][ T3752] is_bad_inode(inode)=0 [ 268.954650][ T3752] NEXT_ORPHAN(inode)=1023 [ 268.959003][ T3752] max_ino=32 [ 268.962221][ T3752] i_nlink=0 [ 268.965603][ T3752] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.846: bg 0: block 161: padding at end of block bitmap is not set [ 268.980410][ T3752] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 268.989321][ T3752] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,init_itable,,errors=continue. Quota mode: none. [ 269.002026][ T3752] ext2 filesystem being mounted at /155/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 269.030470][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 269.064831][ T3752] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.846: path /155/qY3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 269.118559][ T3743] loop4: detected capacity change from 0 to 131072 [ 269.129988][ T3759] netlink: 104 bytes leftover after parsing attributes in process `syz.3.847'. [ 269.190601][ T3743] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 269.210097][ T3743] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 269.254231][ T3743] F2FS-fs (loop4): invalid crc value [ 269.327512][ T3764] loop2: detected capacity change from 0 to 128 [ 269.340703][ T3743] F2FS-fs (loop4): Found nat_bits in checkpoint [ 269.379520][ T3743] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 269.393202][ T3743] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 269.649591][ T3784] FAULT_INJECTION: forcing a failure. [ 269.649591][ T3784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.662876][ T3784] CPU: 0 PID: 3784 Comm: syz.5.855 Not tainted syzkaller #0 [ 269.670162][ T3784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.680208][ T3784] Call Trace: [ 269.683482][ T3784] [ 269.686409][ T3784] __dump_stack+0x21/0x30 [ 269.690747][ T3784] dump_stack_lvl+0x110/0x170 [ 269.695423][ T3784] ? show_regs_print_info+0x20/0x20 [ 269.700617][ T3784] ? hrtimer_start_range_ns+0xac6/0xc00 [ 269.706164][ T3784] dump_stack+0x15/0x20 [ 269.710318][ T3784] should_fail+0x3c1/0x510 [ 269.714731][ T3784] should_fail_usercopy+0x1a/0x20 [ 269.719752][ T3784] copy_fpstate_to_sigframe+0x723/0xa30 [ 269.725298][ T3784] ? fpregs_set+0x5a0/0x5a0 [ 269.729795][ T3784] ? get_signal+0x13da/0x1480 [ 269.734467][ T3784] ? fpu__alloc_mathframe+0x88/0x150 [ 269.739746][ T3784] arch_do_signal_or_restart+0x613/0x11c0 [ 269.745466][ T3784] ? get_sigframe_size+0x10/0x10 [ 269.750483][ T3784] ? __schedule+0xb76/0x14c0 [ 269.755073][ T3784] ? do_sys_poll+0x1240/0x1240 [ 269.759830][ T3784] exit_to_user_mode_loop+0xa7/0xe0 [ 269.765019][ T3784] exit_to_user_mode_prepare+0x87/0xd0 [ 269.770472][ T3784] syscall_exit_to_user_mode+0x1a/0x30 [ 269.775923][ T3784] do_syscall_64+0x58/0xa0 [ 269.780336][ T3784] ? clear_bhb_loop+0x50/0xa0 [ 269.785008][ T3784] ? clear_bhb_loop+0x50/0xa0 [ 269.789679][ T3784] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.795566][ T3784] RIP: 0033:0x7fa38c8bce59 [ 269.799972][ T3784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.819569][ T3784] RSP: 002b:00007fa38b2f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 269.827984][ T3784] RAX: fffffffffffffffc RBX: 00007fa38cb36090 RCX: 00007fa38c8bce59 [ 269.835958][ T3784] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.843926][ T3784] RBP: 00007fa38b2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 269.851892][ T3784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.859856][ T3784] R13: 00007fa38cb36128 R14: 00007fa38cb36090 R15: 00007ffe7c04f1e8 [ 269.867828][ T3784] [ 270.616465][ T3793] tmpfs: Unknown parameter 'quota' [ 270.698983][ T3799] tmpfs: Unknown parameter 'quota' [ 270.857977][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 270.857992][ T30] audit: type=1400 audit(1779889775.313:332): avc: denied { mount } for pid=3804 comm="syz.1.863" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 270.886611][ T30] audit: type=1400 audit(1779889775.313:333): avc: denied { remount } for pid=3804 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 270.906415][ T30] audit: type=1400 audit(1779889775.333:334): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 270.944714][ T3811] FAULT_INJECTION: forcing a failure. [ 270.944714][ T3811] name failslab, interval 1, probability 0, space 0, times 0 [ 270.957583][ T3811] CPU: 0 PID: 3811 Comm: syz.1.864 Not tainted syzkaller #0 [ 270.964879][ T3811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.974926][ T3811] Call Trace: [ 270.978196][ T3811] [ 270.981109][ T3811] __dump_stack+0x21/0x30 [ 270.985429][ T3811] dump_stack_lvl+0x110/0x170 [ 270.990090][ T3811] ? show_regs_print_info+0x20/0x20 [ 270.995272][ T3811] dump_stack+0x15/0x20 [ 270.999408][ T3811] should_fail+0x3c1/0x510 [ 271.003806][ T3811] __should_failslab+0xa4/0xe0 [ 271.008551][ T3811] should_failslab+0x9/0x20 [ 271.013033][ T3811] slab_pre_alloc_hook+0x3b/0xe0 [ 271.017952][ T3811] kmem_cache_alloc_trace+0x48/0x270 [ 271.023224][ T3811] ? __se_sys_mount+0x153/0x390 [ 271.028055][ T3811] __se_sys_mount+0x153/0x390 [ 271.032709][ T3811] ? __x64_sys_mount+0xd0/0xd0 [ 271.037449][ T3811] ? __ia32_sys_read+0x90/0x90 [ 271.042191][ T3811] __x64_sys_mount+0xbf/0xd0 [ 271.046760][ T3811] x64_sys_call+0x6bf/0x9a0 [ 271.051240][ T3811] do_syscall_64+0x4c/0xa0 [ 271.055635][ T3811] ? clear_bhb_loop+0x50/0xa0 [ 271.060290][ T3811] ? clear_bhb_loop+0x50/0xa0 [ 271.064943][ T3811] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.070818][ T3811] RIP: 0033:0x7f537365be59 [ 271.075212][ T3811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.094803][ T3811] RSP: 002b:00007f53720b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.103284][ T3811] RAX: ffffffffffffffda RBX: 00007f53738d4fa0 RCX: 00007f537365be59 [ 271.111244][ T3811] RDX: 0000000000000000 RSI: 00002000000023c0 RDI: 0000000000000000 [ 271.119203][ T3811] RBP: 00007f53720b6090 R08: 00002000000002c0 R09: 0000000000000000 [ 271.127158][ T3811] R10: 0000000000958028 R11: 0000000000000246 R12: 0000000000000001 [ 271.135111][ T3811] R13: 00007f53738d5038 R14: 00007f53738d4fa0 R15: 00007ffd81bb2538 [ 271.143064][ T3811] [ 271.360108][ T635] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 271.490038][ T810] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 271.743356][ T810] usb 5-1: Using ep0 maxpacket: 32 [ 271.748251][ T30] audit: type=1401 audit(1779889776.203:335): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000FF030000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 271.800093][ T635] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.915762][ T3817] loop1: detected capacity change from 0 to 131072 [ 271.922416][ T810] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 271.934898][ T810] usb 5-1: config 0 has no interface number 0 [ 271.951761][ T3817] F2FS-fs (loop1): Test dummy encryption mode enabled [ 271.960035][ T2989] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 271.965070][ T810] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 271.989848][ T3817] F2FS-fs (loop1): invalid crc value [ 271.998010][ T635] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.017520][ T3817] F2FS-fs (loop1): Found nat_bits in checkpoint [ 272.088742][ T3817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 272.090107][ T635] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 272.115425][ T635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.125673][ T30] audit: type=1400 audit(1779889776.593:336): avc: denied { create } for pid=3816 comm="syz.1.866" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.145880][ T635] usb 4-1: SerialNumber: syz [ 272.151650][ T30] audit: type=1400 audit(1779889776.593:337): avc: denied { read write open } for pid=3816 comm="syz.1.866" path="/157/file0/file1" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.180261][ T810] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 272.185303][ T30] audit: type=1400 audit(1779889776.643:338): avc: denied { rename } for pid=3816 comm="syz.1.866" name="#121" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.194471][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.211308][ T2989] usb 3-1: Using ep0 maxpacket: 8 [ 272.224815][ T3817] FAULT_INJECTION: forcing a failure. [ 272.224815][ T3817] name failslab, interval 1, probability 0, space 0, times 0 [ 272.240045][ T3817] CPU: 1 PID: 3817 Comm: syz.1.866 Not tainted syzkaller #0 [ 272.247338][ T3817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.247623][ T810] usb 5-1: Product: syz [ 272.257379][ T3817] Call Trace: [ 272.257388][ T3817] [ 272.257393][ T3817] __dump_stack+0x21/0x30 [ 272.257419][ T3817] dump_stack_lvl+0x110/0x170 [ 272.276665][ T3817] ? show_regs_print_info+0x20/0x20 [ 272.277352][ T810] usb 5-1: Manufacturer: syz [ 272.281860][ T3817] dump_stack+0x15/0x20 [ 272.281879][ T3817] should_fail+0x3c1/0x510 [ 272.294962][ T3817] __should_failslab+0xa4/0xe0 [ 272.295841][ T810] usb 5-1: SerialNumber: syz [ 272.299722][ T3817] should_failslab+0x9/0x20 [ 272.299741][ T3817] slab_pre_alloc_hook+0x3b/0xe0 [ 272.313696][ T3817] ? getname_flags+0xb9/0x500 [ 272.318367][ T3817] kmem_cache_alloc+0x44/0x260 [ 272.323129][ T3817] getname_flags+0xb9/0x500 [ 272.327625][ T3817] getname+0x19/0x20 [ 272.331510][ T3817] do_sys_openat2+0xeb/0x7f0 [ 272.336094][ T3817] ? fput_many+0x15a/0x1a0 [ 272.340500][ T3817] ? do_sys_open+0xe0/0xe0 [ 272.344914][ T3817] ? fput+0x1a/0x20 [ 272.348885][ T3817] ? ksys_write+0x1f4/0x250 [ 272.353377][ T3817] ? __ia32_sys_read+0x90/0x90 [ 272.358141][ T3817] __x64_sys_openat+0x136/0x160 [ 272.362996][ T3817] x64_sys_call+0x219/0x9a0 [ 272.367487][ T3817] do_syscall_64+0x4c/0xa0 [ 272.371896][ T3817] ? clear_bhb_loop+0x50/0xa0 [ 272.376560][ T3817] ? clear_bhb_loop+0x50/0xa0 [ 272.381228][ T3817] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.387111][ T3817] RIP: 0033:0x7f537365be59 [ 272.391513][ T3817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.400407][ T810] usb 5-1: config 0 descriptor?? [ 272.411104][ T3817] RSP: 002b:00007f53720b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.411126][ T3817] RAX: ffffffffffffffda RBX: 00007f53738d4fa0 RCX: 00007f537365be59 [ 272.411138][ T3817] RDX: 0000000000143042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 272.440332][ T3817] RBP: 00007f53720b6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.448297][ T3817] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 272.450147][ T3800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 272.456254][ T3817] R13: 00007f53738d5038 R14: 00007f53738d4fa0 R15: 00007ffd81bb2538 [ 272.471118][ T3817] [ 272.480060][ T30] audit: type=1400 audit(1779889776.643:339): avc: denied { unlink } for pid=3816 comm="syz.1.866" name="#122" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.502619][ T635] usb 4-1: 0:2 : does not exist [ 272.518353][ T635] usb 4-1: USB disconnect, device number 34 [ 272.576013][ T3823] loop5: detected capacity change from 0 to 131072 [ 272.594613][ T30] audit: type=1400 audit(1779889777.053:340): avc: denied { sys_module } for pid=3828 comm="syz.5.870" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 272.650139][ T2989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.676123][ T3831] FAULT_INJECTION: forcing a failure. [ 272.676123][ T3831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.707560][ T3800] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 272.726107][ T3831] CPU: 0 PID: 3831 Comm: syz.5.871 Not tainted syzkaller #0 [ 272.730137][ T2989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 272.733403][ T3831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.733416][ T3831] Call Trace: [ 272.733421][ T3831] [ 272.733427][ T3831] __dump_stack+0x21/0x30 [ 272.754417][ T2989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 272.757536][ T3831] dump_stack_lvl+0x110/0x170 [ 272.770056][ T2989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 272.774356][ T3831] ? show_regs_print_info+0x20/0x20 [ 272.789171][ T2989] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 272.790001][ T3831] dump_stack+0x15/0x20 [ 272.790023][ T3831] should_fail+0x3c1/0x510 [ 272.795390][ T2989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 272.805055][ T3831] should_fail_usercopy+0x1a/0x20 [ 272.805076][ T3831] _copy_to_user+0x20/0x90 [ 272.805091][ T3831] simple_read_from_buffer+0xe9/0x160 [ 272.819368][ T2989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 272.823215][ T3831] proc_fail_nth_read+0x1a6/0x220 [ 272.823238][ T3831] ? proc_fault_inject_write+0x310/0x310 [ 272.858167][ T3831] ? security_file_permission+0x83/0xa0 [ 272.863713][ T3831] ? proc_fault_inject_write+0x310/0x310 [ 272.869339][ T3831] vfs_read+0x28d/0xc40 [ 272.873487][ T3831] ? kernel_read+0x1f0/0x1f0 [ 272.878084][ T3831] ? __kasan_check_write+0x14/0x20 [ 272.883189][ T3831] ? mutex_lock+0x9b/0x1c0 [ 272.887600][ T3831] ? wait_for_completion_killable_timeout+0x10/0x10 [ 272.894179][ T3831] ? __fget_files+0x2c4/0x320 [ 272.898856][ T3831] ? __fdget_pos+0x2d2/0x380 [ 272.903435][ T3831] ? ksys_read+0x71/0x250 [ 272.907758][ T3831] ksys_read+0x149/0x250 [ 272.911990][ T3831] ? vfs_write+0xfd0/0xfd0 [ 272.916401][ T3831] ? debug_smp_processor_id+0x17/0x20 [ 272.921767][ T3831] __x64_sys_read+0x7b/0x90 [ 272.926261][ T3831] x64_sys_call+0x96d/0x9a0 [ 272.930752][ T3831] do_syscall_64+0x4c/0xa0 [ 272.935170][ T3831] ? clear_bhb_loop+0x50/0xa0 [ 272.939840][ T3831] ? clear_bhb_loop+0x50/0xa0 [ 272.944491][ T3831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.950357][ T3831] RIP: 0033:0x7fa38c87d68e [ 272.954874][ T3831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.974458][ T3831] RSP: 002b:00007fa38b316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.980125][ T2989] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 272.982848][ T3831] RAX: ffffffffffffffda RBX: 00007fa38b3176c0 RCX: 00007fa38c87d68e [ 272.982864][ T3831] RDX: 000000000000000f RSI: 00007fa38b3170a0 RDI: 0000000000000004 [ 272.982875][ T3831] RBP: 00007fa38b317090 R08: 0000000000000000 R09: 0000000000000000 [ 272.991991][ T2989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.999817][ T3831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.008997][ T2989] usb 3-1: Product: syz [ 273.015808][ T3831] R13: 00007fa38cb36038 R14: 00007fa38cb35fa0 R15: 00007ffe7c04f1e8 [ 273.015825][ T3831] [ 273.082348][ T2989] usb 3-1: Manufacturer: syz [ 273.087061][ T2989] usb 3-1: SerialNumber: syz [ 273.092555][ T2989] usb 3-1: config 0 descriptor?? [ 273.110118][ T3819] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 273.383850][ T3845] tmpfs: Unknown parameter 'quota' [ 273.500140][ T810] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 273.511373][ T30] audit: type=1400 audit(1779889777.973:341): avc: denied { block_suspend } for pid=3814 comm="syz.2.865" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 273.644301][ T3843] loop3: detected capacity change from 0 to 131072 [ 273.702521][ T3843] F2FS-fs (loop3): Test dummy encryption mode enabled [ 273.710408][ T3843] F2FS-fs (loop3): invalid crc value [ 273.717320][ T3843] F2FS-fs (loop3): Found nat_bits in checkpoint [ 273.723756][ T810] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 194 [ 273.750988][ T3843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 273.814462][ T3843] overlayfs: './bus' not a directory [ 273.844958][ T3854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3854 comm=syz.1.876 [ 274.211239][ T3800] device gretap1 entered promiscuous mode [ 274.255205][ T3800] loop4: detected capacity change from 0 to 4096 [ 274.272555][ T3800] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 274.282157][ T3800] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 274.291925][ T3800] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 274.291925][ T3800] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 274.291925][ T3800] [ 274.310895][ T3800] EXT4-fs (loop4): Test dummy encryption mode enabled [ 274.311552][ T3863] FAULT_INJECTION: forcing a failure. [ 274.311552][ T3863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.317717][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 274.339174][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.348234][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 274.355279][ T3863] CPU: 0 PID: 3863 Comm: syz.5.880 Not tainted syzkaller #0 [ 274.357032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.363291][ T3863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.363303][ T3863] Call Trace: [ 274.363308][ T3863] [ 274.363314][ T3863] __dump_stack+0x21/0x30 [ 274.371706][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.381207][ T3863] dump_stack_lvl+0x110/0x170 [ 274.381231][ T3863] ? show_regs_print_info+0x20/0x20 [ 274.388815][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.391696][ T3863] ? __stack_depot_save+0x34/0x480 [ 274.391719][ T3863] ? path_openat+0x280e/0x2f20 [ 274.399943][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.404135][ T3863] dump_stack+0x15/0x20 [ 274.404157][ T3863] should_fail+0x3c1/0x510 [ 274.404173][ T3863] should_fail_usercopy+0x1a/0x20 [ 274.404188][ T3863] _copy_from_user+0x20/0xd0 [ 274.404203][ T3863] __copy_msghdr_from_user+0xc9/0x630 [ 274.410229][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.417225][ T3863] ? _kstrtoull+0x3c0/0x4d0 [ 274.417246][ T3863] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 274.439544][ T3800] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv0,inlinecrypt,nouser_xattr,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,data_err=ignore,,errors=continue. Quota mode: writeback. [ 274.443346][ T3863] ? kstrtouint_from_user+0x1c4/0x220 [ 274.443371][ T3863] ___sys_sendmsg+0x19a/0x2e0 [ 274.443389][ T3863] ? __sys_sendmsg+0x280/0x280 [ 274.511758][ T3863] ? __fdget+0x1a1/0x230 [ 274.515983][ T3863] __x64_sys_sendmsg+0x206/0x2f0 [ 274.520921][ T3863] ? ___sys_sendmsg+0x2e0/0x2e0 [ 274.525749][ T3863] ? ksys_write+0x1f4/0x250 [ 274.530229][ T3863] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 274.536275][ T3863] x64_sys_call+0x4b/0x9a0 [ 274.540666][ T3863] do_syscall_64+0x4c/0xa0 [ 274.545060][ T3863] ? clear_bhb_loop+0x50/0xa0 [ 274.549806][ T3863] ? clear_bhb_loop+0x50/0xa0 [ 274.554474][ T3863] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.560350][ T3863] RIP: 0033:0x7fa38c8bce59 [ 274.564743][ T3863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.584323][ T3863] RSP: 002b:00007fa38b317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.592714][ T3863] RAX: ffffffffffffffda RBX: 00007fa38cb35fa0 RCX: 00007fa38c8bce59 [ 274.600672][ T3863] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 274.608618][ T3863] RBP: 00007fa38b317090 R08: 0000000000000000 R09: 0000000000000000 [ 274.616569][ T3863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.624518][ T3863] R13: 00007fa38cb36038 R14: 00007fa38cb35fa0 R15: 00007ffe7c04f1e8 [ 274.632467][ T3863] [ 274.726157][ T810] usb 5-1: USB disconnect, device number 33 [ 274.822544][ T994] usb 3-1: USB disconnect, device number 33 [ 275.324624][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 275.335163][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.348378][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 275.371994][ T3885] loop2: detected capacity change from 0 to 256 [ 275.380411][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.392940][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.432159][ T3885] FAT-fs (loop2): Directory bread(block 64) failed [ 275.438699][ T3885] FAT-fs (loop2): Directory bread(block 65) failed [ 275.445271][ T3885] FAT-fs (loop2): Directory bread(block 66) failed [ 275.451821][ T3885] FAT-fs (loop2): Directory bread(block 67) failed [ 275.452452][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.458342][ T3885] FAT-fs (loop2): Directory bread(block 68) failed [ 275.472747][ T3885] FAT-fs (loop2): Directory bread(block 69) failed [ 275.479300][ T3885] FAT-fs (loop2): Directory bread(block 70) failed [ 275.485836][ T3885] FAT-fs (loop2): Directory bread(block 71) failed [ 275.492069][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.492395][ T3885] FAT-fs (loop2): Directory bread(block 72) failed [ 275.506633][ T3885] FAT-fs (loop2): Directory bread(block 73) failed [ 275.550291][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.198249][ T3887] loop5: detected capacity change from 0 to 131072 [ 276.209790][ T3887] F2FS-fs (loop5): Invalid segment/section count (31, 24 x 150994945) [ 276.257616][ T3887] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 276.277216][ T3887] F2FS-fs (loop5): invalid crc value [ 276.313516][ T3887] F2FS-fs (loop5): Found nat_bits in checkpoint [ 276.402593][ T3887] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 276.418885][ T3887] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 276.450056][ T1388] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 276.465143][ T3879] loop3: detected capacity change from 0 to 131072 [ 276.540391][ T3879] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 276.548587][ T3879] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 276.580532][ T3879] F2FS-fs (loop3): invalid crc value [ 276.680316][ T3879] F2FS-fs (loop3): Found nat_bits in checkpoint [ 276.700043][ T1388] usb 2-1: Using ep0 maxpacket: 16 [ 276.710670][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 276.710683][ T30] audit: type=1400 audit(1779889781.173:347): avc: denied { write } for pid=3923 comm="syz.4.896" name="mcfilter" dev="proc" ino=4026532649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 276.866433][ T3879] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 276.873680][ T3879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 276.891117][ T1388] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 276.897246][ T3879] FAULT_INJECTION: forcing a failure. [ 276.897246][ T3879] name failslab, interval 1, probability 0, space 0, times 0 [ 276.899292][ T1388] usb 2-1: config 0 has no interface number 0 [ 276.980308][ T3929] loop4: detected capacity change from 0 to 512 [ 276.999276][ T1388] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 277.040741][ T3879] CPU: 1 PID: 3879 Comm: syz.3.885 Not tainted syzkaller #0 [ 277.048052][ T3879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.058278][ T3879] Call Trace: [ 277.061553][ T3879] [ 277.064479][ T3879] __dump_stack+0x21/0x30 [ 277.068805][ T3879] dump_stack_lvl+0x110/0x170 [ 277.073474][ T3879] ? show_regs_print_info+0x20/0x20 [ 277.078666][ T3879] dump_stack+0x15/0x20 [ 277.082811][ T3879] should_fail+0x3c1/0x510 [ 277.087217][ T3879] __should_failslab+0xa4/0xe0 [ 277.091971][ T3879] should_failslab+0x9/0x20 [ 277.096466][ T3879] slab_pre_alloc_hook+0x3b/0xe0 [ 277.101411][ T3879] __kmalloc+0x6d/0x2c0 [ 277.105558][ T3879] ? kernfs_fop_write_iter+0x156/0x400 [ 277.111009][ T3879] kernfs_fop_write_iter+0x156/0x400 [ 277.116290][ T3879] ? iov_iter_init+0xbc/0x180 [ 277.120960][ T3879] vfs_write+0x835/0xfd0 [ 277.125196][ T3879] ? file_end_write+0x1b0/0x1b0 [ 277.130035][ T3879] ? wait_for_completion_killable_timeout+0x10/0x10 [ 277.136700][ T3879] ? __fget_files+0x2c4/0x320 [ 277.141374][ T3879] ? __fdget_pos+0x2d2/0x380 [ 277.145956][ T3879] ? ksys_write+0x71/0x250 [ 277.150359][ T3879] ksys_write+0x149/0x250 [ 277.154681][ T3879] ? __ia32_sys_read+0x90/0x90 [ 277.159436][ T3879] ? debug_smp_processor_id+0x17/0x20 [ 277.164797][ T3879] __x64_sys_write+0x7b/0x90 [ 277.169383][ T3879] x64_sys_call+0x8ef/0x9a0 [ 277.173888][ T3879] do_syscall_64+0x4c/0xa0 [ 277.178298][ T3879] ? clear_bhb_loop+0x50/0xa0 [ 277.182966][ T3879] ? clear_bhb_loop+0x50/0xa0 [ 277.187631][ T3879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.193512][ T3879] RIP: 0033:0x7f7637c72e59 [ 277.197916][ T3879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.217511][ T3879] RSP: 002b:00007f76366cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.225915][ T3879] RAX: ffffffffffffffda RBX: 00007f7637eebfa0 RCX: 00007f7637c72e59 [ 277.233877][ T3879] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000005 [ 277.241838][ T3879] RBP: 00007f76366cd090 R08: 0000000000000000 R09: 0000000000000000 [ 277.249796][ T3879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.257756][ T3879] R13: 00007f7637eec038 R14: 00007f7637eebfa0 R15: 00007fffc48503e8 [ 277.265729][ T3879] [ 277.335783][ T3929] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.897: invalid indirect mapped block 10 (level 1) [ 277.349525][ T3929] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.897: invalid indirect mapped block 8 (level 1) [ 277.363908][ T3929] EXT4-fs (loop4): 1 truncate cleaned up [ 277.369576][ T3929] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 277.444113][ T1388] usb 2-1: config 0 interface 246 has no altsetting 0 [ 277.480191][ T30] audit: type=1400 audit(1779889781.873:348): avc: denied { write } for pid=3925 comm="syz.4.897" path="socket:[32444]" dev="sockfs" ino=32444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.610769][ T3935] FAULT_INJECTION: forcing a failure. [ 277.610769][ T3935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.625779][ T3935] CPU: 0 PID: 3935 Comm: syz.5.898 Not tainted syzkaller #0 [ 277.632208][ T30] audit: type=1400 audit(1779889782.093:349): avc: denied { create } for pid=3936 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 277.633076][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.662878][ T3935] Call Trace: [ 277.666156][ T3935] [ 277.669080][ T3935] __dump_stack+0x21/0x30 [ 277.673405][ T3935] dump_stack_lvl+0x110/0x170 [ 277.678078][ T3935] ? show_regs_print_info+0x20/0x20 [ 277.679304][ T30] audit: type=1400 audit(1779889782.093:350): avc: denied { ioctl } for pid=3936 comm="syz.2.900" path="socket:[32457]" dev="sockfs" ino=32457 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 277.683275][ T3935] dump_stack+0x15/0x20 [ 277.683302][ T3935] should_fail+0x3c1/0x510 [ 277.716858][ T3935] should_fail_usercopy+0x1a/0x20 [ 277.721866][ T3935] _copy_from_iter+0x21e/0x1070 [ 277.726695][ T3935] ? stack_trace_save+0xf0/0xf0 [ 277.731526][ T3935] ? copy_mc_pipe_to_iter+0x770/0x770 [ 277.736876][ T3935] ? stack_trace_save+0xa6/0xf0 [ 277.741706][ T3935] tun_get_user+0x415/0x3400 [ 277.746275][ T3935] ? ____kasan_slab_free+0x125/0x160 [ 277.751551][ T3935] ? kmem_cache_free+0xd0/0x320 [ 277.756402][ T3935] ? putname+0x111/0x160 [ 277.760626][ T3935] ? do_sys_openat2+0x6df/0x7f0 [ 277.765463][ T3935] ? do_syscall_64+0x4c/0xa0 [ 277.770038][ T3935] ? tun_do_read+0x1d30/0x1d30 [ 277.774789][ T3935] ? kstrtouint_from_user+0x1c4/0x220 [ 277.780159][ T3935] ? kstrtol_from_user+0x2a0/0x2a0 [ 277.785257][ T3935] ? avc_policy_seqno+0x1b/0x70 [ 277.790093][ T3935] ? selinux_file_permission+0x2aa/0x510 [ 277.795709][ T3935] tun_chr_write_iter+0x1eb/0x2e0 [ 277.800715][ T3935] vfs_write+0x835/0xfd0 [ 277.804940][ T3935] ? file_end_write+0x1b0/0x1b0 [ 277.809770][ T3935] ? __fget_files+0x2c4/0x320 [ 277.814430][ T3935] ? __fdget_pos+0x1f7/0x380 [ 277.819001][ T3935] ? ksys_write+0x71/0x250 [ 277.823409][ T3935] ksys_write+0x149/0x250 [ 277.827726][ T3935] ? __ia32_sys_read+0x90/0x90 [ 277.832472][ T3935] ? debug_smp_processor_id+0x17/0x20 [ 277.837825][ T3935] __x64_sys_write+0x7b/0x90 [ 277.842400][ T3935] x64_sys_call+0x8ef/0x9a0 [ 277.846891][ T3935] do_syscall_64+0x4c/0xa0 [ 277.851294][ T3935] ? clear_bhb_loop+0x50/0xa0 [ 277.855953][ T3935] ? clear_bhb_loop+0x50/0xa0 [ 277.860612][ T3935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.866488][ T3935] RIP: 0033:0x7fa38c8bce59 [ 277.870884][ T3935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.890466][ T3935] RSP: 002b:00007fa38b317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.898859][ T3935] RAX: ffffffffffffffda RBX: 00007fa38cb35fa0 RCX: 00007fa38c8bce59 [ 277.906811][ T3935] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000003 [ 277.914760][ T3935] RBP: 00007fa38b317090 R08: 0000000000000000 R09: 0000000000000000 [ 277.922716][ T3935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.930677][ T3935] R13: 00007fa38cb36038 R14: 00007fa38cb35fa0 R15: 00007ffe7c04f1e8 [ 277.938638][ T3935] [ 277.947118][ T30] audit: type=1400 audit(1779889782.093:351): avc: denied { setopt } for pid=3936 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 277.967339][ T1388] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 277.978850][ T1388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.000035][ T1388] usb 2-1: Product: syz [ 278.004246][ T1388] usb 2-1: Manufacturer: syz [ 278.008834][ T1388] usb 2-1: SerialNumber: syz [ 278.047361][ T1388] usb 2-1: config 0 descriptor?? [ 278.053015][ T3944] FAULT_INJECTION: forcing a failure. [ 278.053015][ T3944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.060676][ T3948] loop2: detected capacity change from 0 to 128 [ 278.091394][ T3944] CPU: 1 PID: 3944 Comm: syz.4.905 Not tainted syzkaller #0 [ 278.098703][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.108763][ T3944] Call Trace: [ 278.112037][ T3944] [ 278.114971][ T3944] __dump_stack+0x21/0x30 [ 278.119306][ T3944] dump_stack_lvl+0x110/0x170 [ 278.123987][ T3944] ? show_regs_print_info+0x20/0x20 [ 278.129191][ T3944] ? vfs_write+0xc72/0xfd0 [ 278.133619][ T3944] dump_stack+0x15/0x20 [ 278.137777][ T3944] should_fail+0x3c1/0x510 [ 278.142195][ T3944] should_fail_usercopy+0x1a/0x20 [ 278.147218][ T3944] _copy_from_user+0x20/0xd0 [ 278.151804][ T3944] __sys_connect+0x16d/0x450 [ 278.156394][ T3944] ? __sys_connect_file+0x170/0x170 [ 278.161591][ T3944] ? debug_smp_processor_id+0x17/0x20 [ 278.166963][ T3944] __x64_sys_connect+0x7a/0x90 [ 278.171732][ T3944] x64_sys_call+0x7c/0x9a0 [ 278.176143][ T3944] do_syscall_64+0x4c/0xa0 [ 278.180546][ T3944] ? clear_bhb_loop+0x50/0xa0 [ 278.185293][ T3944] ? clear_bhb_loop+0x50/0xa0 [ 278.189951][ T3944] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 278.195830][ T3944] RIP: 0033:0x7f8dd63dae59 [ 278.200228][ T3944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.219814][ T3944] RSP: 002b:00007f8dd4e35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 278.228208][ T3944] RAX: ffffffffffffffda RBX: 00007f8dd6653fa0 RCX: 00007f8dd63dae59 [ 278.236163][ T3944] RDX: 0000000000000026 RSI: 0000200000000180 RDI: 0000000000000006 [ 278.244281][ T3944] RBP: 00007f8dd4e35090 R08: 0000000000000000 R09: 0000000000000000 [ 278.252240][ T3944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.260193][ T3944] R13: 00007f8dd6654038 R14: 00007f8dd6653fa0 R15: 00007ffcb563a778 [ 278.268151][ T3944] [ 278.497179][ T3961] FAULT_INJECTION: forcing a failure. [ 278.497179][ T3961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.511781][ T3961] CPU: 0 PID: 3961 Comm: syz.2.910 Not tainted syzkaller #0 [ 278.519076][ T3961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.529120][ T3961] Call Trace: [ 278.532392][ T3961] [ 278.535317][ T3961] __dump_stack+0x21/0x30 [ 278.539644][ T3961] dump_stack_lvl+0x110/0x170 [ 278.544318][ T3961] ? show_regs_print_info+0x20/0x20 [ 278.549514][ T3961] ? __kasan_check_write+0x14/0x20 [ 278.554623][ T3961] ? kvm_arch_vcpu_load+0x58d/0x770 [ 278.559819][ T3961] dump_stack+0x15/0x20 [ 278.563972][ T3961] should_fail+0x3c1/0x510 [ 278.568390][ T3961] should_fail_usercopy+0x1a/0x20 [ 278.573417][ T3961] _copy_from_user+0x20/0xd0 [ 278.578004][ T3961] kvm_arch_vcpu_ioctl+0x978/0x1b50 [ 278.583200][ T3961] ? kvm_arch_vcpu_put+0x570/0x570 [ 278.588310][ T3961] ? 0xffffffffa002a000 [ 278.592548][ T3961] ? is_bpf_text_address+0x177/0x190 [ 278.597843][ T3961] ? __kernel_text_address+0xa0/0x100 [ 278.603208][ T3961] ? unwind_get_return_address+0x4d/0x90 [ 278.607335][ T3959] loop5: detected capacity change from 0 to 40427 [ 278.608834][ T3961] ? stack_trace_save+0xf0/0xf0 [ 278.608854][ T3961] ? arch_stack_walk+0xee/0x140 [ 278.624892][ T3961] ? stack_trace_save+0xa6/0xf0 [ 278.629744][ T3961] ? __stack_depot_save+0x34/0x480 [ 278.634857][ T3961] ? path_openat+0x280e/0x2f20 [ 278.639619][ T3961] ? kasan_set_track+0x5b/0x70 [ 278.644376][ T3961] ? kasan_set_track+0x4a/0x70 [ 278.649132][ T3961] ? kasan_set_free_info+0x23/0x40 [ 278.654240][ T3961] ? ____kasan_slab_free+0x125/0x160 [ 278.659519][ T3961] ? __kasan_slab_free+0x11/0x20 [ 278.664447][ T3961] ? slab_free_freelist_hook+0xc2/0x190 [ 278.669993][ T3961] ? kmem_cache_free+0x100/0x320 [ 278.674921][ T3961] ? __asan_set_shadow_00+0xe/0x10 [ 278.680026][ T3961] ? do_vfs_ioctl+0x1c19/0x1d80 [ 278.684876][ T3961] ? __ia32_compat_sys_ioctl+0x900/0x900 [ 278.690509][ T3961] ? kstrtouint_from_user+0x1c4/0x220 [ 278.695960][ T3961] ? kstrtol_from_user+0x2a0/0x2a0 [ 278.701070][ T3961] ? ioctl_has_perm+0x1b8/0x4f0 [ 278.705914][ T3961] ? memcpy+0x56/0x70 [ 278.709900][ T3961] ? __kasan_check_write+0x14/0x20 [ 278.715005][ T3961] ? mutex_lock_killable+0x9b/0x1c0 [ 278.720198][ T3961] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 278.726694][ T3961] ? vfs_write+0xc72/0xfd0 [ 278.731104][ T3961] kvm_vcpu_ioctl+0x6fb/0xc00 [ 278.735778][ T3961] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 278.741402][ T3961] ? selinux_file_ioctl+0x3a0/0x4d0 [ 278.746593][ T3961] ? selinux_file_alloc_security+0x120/0x120 [ 278.752568][ T3961] ? mutex_unlock+0x8f/0x230 [ 278.757154][ T3961] ? __mutex_lock_slowpath+0x10/0x10 [ 278.762431][ T3961] ? __fget_files+0x2c4/0x320 [ 278.767114][ T3961] ? security_file_ioctl+0x84/0xa0 [ 278.772223][ T3961] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 278.777863][ T3961] __se_sys_ioctl+0x121/0x1a0 [ 278.782536][ T3961] __x64_sys_ioctl+0x7b/0x90 [ 278.787126][ T3961] x64_sys_call+0x2f/0x9a0 [ 278.791543][ T3961] do_syscall_64+0x4c/0xa0 [ 278.795959][ T3961] ? clear_bhb_loop+0x50/0xa0 [ 278.800630][ T3961] ? clear_bhb_loop+0x50/0xa0 [ 278.805303][ T3961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 278.811194][ T3961] RIP: 0033:0x7fe1e8f12e59 [ 278.815726][ T3961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.835325][ T3961] RSP: 002b:00007fe1e796d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.843736][ T3961] RAX: ffffffffffffffda RBX: 00007fe1e918bfa0 RCX: 00007fe1e8f12e59 [ 278.851704][ T3961] RDX: 0000200000000000 RSI: 000000004008ae90 RDI: 0000000000000006 [ 278.857334][ T3967] loop4: detected capacity change from 0 to 8192 [ 278.859667][ T3961] RBP: 00007fe1e796d090 R08: 0000000000000000 R09: 0000000000000000 [ 278.859681][ T3961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.859692][ T3961] R13: 00007fe1e918c038 R14: 00007fe1e918bfa0 R15: 00007fff14360048 [ 278.889853][ T3961] [ 278.905532][ T3959] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 278.936650][ T3967] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 278.958319][ T3959] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 278.988159][ T3971] loop2: detected capacity change from 0 to 512 [ 279.019831][ T3959] F2FS-fs (loop5): Found nat_bits in checkpoint [ 279.032771][ T3971] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 279.052473][ T3971] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 279.085338][ T3971] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 279.110077][ T3959] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 279.117123][ T3959] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 279.128217][ T3978] loop4: detected capacity change from 0 to 512 [ 279.134574][ T3971] EXT4-fs (loop2): 1 truncate cleaned up [ 279.156212][ T3971] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noinit_itable,sb=0x000000000000ffff,debug_want_extra_isize=0x0000000000000080,block_validity,noload,,errors=continue. Quota mode: none. [ 279.163030][ T3959] overlayfs: missing 'workdir' [ 279.203883][ T3959] attempt to access beyond end of device [ 279.203883][ T3959] loop5: rw=2049, want=45104, limit=40427 [ 279.231645][ T3978] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.242775][ T3978] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.257264][ T3978] EXT4-fs warning (device loop4): ext4_group_extend:1823: can't shrink FS - resize aborted [ 279.261854][ T30] audit: type=1400 audit(1779889783.723:352): avc: denied { mount } for pid=3983 comm="syz.3.914" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 279.362982][ T3989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.370232][ T3989] IPv6: NLM_F_CREATE should be set when creating new route [ 279.377443][ T3989] IPv6: NLM_F_CREATE should be set when creating new route [ 279.398500][ T3991] loop4: detected capacity change from 0 to 4096 [ 279.408344][ T3991] EXT4-fs (loop4): Test dummy encryption mode enabled [ 279.431205][ T3991] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 279.444705][ T3991] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 279.453840][ T3991] System zones: 0-5 [ 279.458385][ T3991] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,jqfmt=vfsv1,lazytime,barrier,,errors=continue. Quota mode: writeback. [ 279.459758][ T3996] loop5: detected capacity change from 0 to 256 [ 279.477756][ T2989] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 279.543149][ T3996] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 279.601825][ T1388] usb 2-1: USB disconnect, device number 36 [ 279.612685][ T4001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 279.622064][ T4001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 279.631408][ T4001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 279.641167][ T30] audit: type=1400 audit(1779889784.103:353): avc: denied { create } for pid=3990 comm="syz.4.918" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 279.663302][ T30] audit: type=1400 audit(1779889784.123:354): avc: denied { write } for pid=3990 comm="syz.4.918" name=E91F7189591E9233614B dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 279.670072][ T812] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 279.860062][ T994] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.870124][ T2989] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 279.881194][ T2989] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.892331][ T2989] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 280.000197][ T1388] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 280.007933][ T2989] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.017164][ T2989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.025278][ T2989] usb 3-1: SerialNumber: syz [ 280.060133][ T812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.070578][ T812] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.110038][ T994] usb 6-1: Using ep0 maxpacket: 32 [ 280.240147][ T812] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 280.249241][ T812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.257437][ T812] usb 4-1: Product: syz [ 280.261646][ T812] usb 4-1: Manufacturer: syz [ 280.266226][ T812] usb 4-1: SerialNumber: syz [ 280.270916][ T1388] usb 2-1: Using ep0 maxpacket: 16 [ 280.288793][ T4003] FAULT_INJECTION: forcing a failure. [ 280.288793][ T4003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.301909][ T4003] CPU: 1 PID: 4003 Comm: syz.4.922 Not tainted syzkaller #0 [ 280.309192][ T4003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.319220][ T4003] Call Trace: [ 280.322477][ T4003] [ 280.325385][ T4003] __dump_stack+0x21/0x30 [ 280.329689][ T4003] dump_stack_lvl+0x110/0x170 [ 280.334338][ T4003] ? show_regs_print_info+0x20/0x20 [ 280.339511][ T4003] ? __stack_depot_save+0x34/0x480 [ 280.344596][ T4003] ? path_openat+0x280e/0x2f20 [ 280.349333][ T4003] dump_stack+0x15/0x20 [ 280.353461][ T4003] should_fail+0x3c1/0x510 [ 280.357851][ T4003] should_fail_usercopy+0x1a/0x20 [ 280.362844][ T4003] _copy_from_user+0x20/0xd0 [ 280.367406][ T4003] __copy_msghdr_from_user+0xc9/0x630 [ 280.372751][ T4003] ? _kstrtoull+0x3c0/0x4d0 [ 280.377232][ T4003] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 280.382490][ T4003] ? kstrtouint_from_user+0x1c4/0x220 [ 280.387834][ T4003] ___sys_sendmsg+0x19a/0x2e0 [ 280.392483][ T4003] ? __sys_sendmsg+0x280/0x280 [ 280.397219][ T4003] ? __fdget+0x1a1/0x230 [ 280.401434][ T4003] __x64_sys_sendmsg+0x206/0x2f0 [ 280.406344][ T4003] ? ___sys_sendmsg+0x2e0/0x2e0 [ 280.411166][ T4003] ? ksys_write+0x1f4/0x250 [ 280.415641][ T4003] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 280.421680][ T4003] x64_sys_call+0x4b/0x9a0 [ 280.426068][ T4003] do_syscall_64+0x4c/0xa0 [ 280.430456][ T4003] ? clear_bhb_loop+0x50/0xa0 [ 280.435104][ T4003] ? clear_bhb_loop+0x50/0xa0 [ 280.439758][ T4003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.445635][ T4003] RIP: 0033:0x7f8dd63dae59 [ 280.450033][ T4003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.469622][ T4003] RSP: 002b:00007f8dd4e35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.478010][ T4003] RAX: ffffffffffffffda RBX: 00007f8dd6653fa0 RCX: 00007f8dd63dae59 [ 280.485961][ T4003] RDX: 0000000000004880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 280.493922][ T4003] RBP: 00007f8dd4e35090 R08: 0000000000000000 R09: 0000000000000000 [ 280.501867][ T4003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.509813][ T4003] R13: 00007f8dd6654038 R14: 00007f8dd6653fa0 R15: 00007ffcb563a778 [ 280.510129][ T994] usb 6-1: config 1 interface 0 altsetting 247 bulk endpoint 0x82 has invalid maxpacket 64 [ 280.517768][ T4003] [ 280.530957][ T2989] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 280.531466][ T994] usb 6-1: config 1 interface 0 altsetting 247 bulk endpoint 0x3 has invalid maxpacket 1024 [ 280.537161][ T2989] rndis_host: probe of 3-1:253.0 failed with error -71 [ 280.547176][ T994] usb 6-1: config 1 interface 0 has no altsetting 0 [ 280.565461][ T2989] usb 3-1: USB disconnect, device number 34 [ 280.600171][ T1388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.615273][ T1388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.625351][ T1388] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.638294][ T1388] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 280.647485][ T1388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.656654][ T1388] usb 2-1: config 0 descriptor?? [ 280.720523][ T994] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.730149][ T4007] futex_wake_op: syz.4.923 tries to shift op by 36; fix this program [ 280.738246][ T994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.746611][ T994] usb 6-1: Product: syz [ 280.751769][ T994] usb 6-1: Manufacturer: syz [ 280.756400][ T994] usb 6-1: SerialNumber: syz [ 280.780085][ T4000] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 280.780398][ T812] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 280.792091][ T4000] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 280.803367][ T812] usb 4-1: USB disconnect, device number 35 [ 281.181178][ T1388] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 281.198971][ T1388] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 281.210392][ T1388] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 281.231969][ T1388] microsoft 0003:045E:07DA.0002: no inputs found [ 281.252011][ T1388] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 281.782026][ T1388] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 282.180356][ T1388] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.237191][ T1388] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.433957][ T1388] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 282.476666][ T1388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 282.533971][ T1388] usb 4-1: SerialNumber: syz [ 282.850090][ T994] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 282.860733][ T1388] usb 4-1: 0:2 : does not exist [ 282.867606][ T994] usb 6-1: USB disconnect, device number 4 [ 282.880969][ T1388] usb 4-1: USB disconnect, device number 36 [ 283.137873][ T4038] tmpfs: Unknown parameter 'quota' [ 283.280088][ T810] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 283.372951][ T4044] FAULT_INJECTION: forcing a failure. [ 283.372951][ T4044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.386292][ T4044] CPU: 1 PID: 4044 Comm: syz.4.934 Not tainted syzkaller #0 [ 283.393574][ T4044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.403710][ T4044] Call Trace: [ 283.406972][ T4044] [ 283.409882][ T4044] __dump_stack+0x21/0x30 [ 283.414196][ T4044] dump_stack_lvl+0x110/0x170 [ 283.418855][ T4044] ? show_regs_print_info+0x20/0x20 [ 283.424034][ T4044] ? preempt_schedule_irq+0xca/0x120 [ 283.429321][ T4044] dump_stack+0x15/0x20 [ 283.433468][ T4044] should_fail+0x3c1/0x510 [ 283.437875][ T4044] should_fail_usercopy+0x1a/0x20 [ 283.442884][ T4044] _copy_from_user+0x20/0xd0 [ 283.447458][ T4044] __copy_msghdr_from_user+0xc9/0x630 [ 283.452810][ T4044] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 283.458077][ T4044] ? __switch_to_asm+0x3a/0x60 [ 283.462820][ T4044] ___sys_sendmsg+0x19a/0x2e0 [ 283.467477][ T4044] ? __sys_sendmsg+0x280/0x280 [ 283.472224][ T4044] ? __fdget+0x1a1/0x230 [ 283.476443][ T4044] __x64_sys_sendmsg+0x206/0x2f0 [ 283.481360][ T4044] ? release_firmware_map_entry+0x190/0x190 [ 283.487235][ T4044] ? ___sys_sendmsg+0x2e0/0x2e0 [ 283.492062][ T4044] ? ksys_write+0x1f4/0x250 [ 283.496542][ T4044] ? __kasan_check_write+0x14/0x20 [ 283.501634][ T4044] ? switch_fpu_return+0x15d/0x2c0 [ 283.506724][ T4044] x64_sys_call+0x4b/0x9a0 [ 283.511118][ T4044] do_syscall_64+0x4c/0xa0 [ 283.515514][ T4044] ? clear_bhb_loop+0x50/0xa0 [ 283.520166][ T4044] ? clear_bhb_loop+0x50/0xa0 [ 283.524820][ T4044] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.530692][ T4044] RIP: 0033:0x7f8dd63dae59 [ 283.535083][ T4044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.554667][ T4044] RSP: 002b:00007f8dd4df3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.563057][ T4044] RAX: ffffffffffffffda RBX: 00007f8dd6654180 RCX: 00007f8dd63dae59 [ 283.571008][ T4044] RDX: 0000000004000880 RSI: 0000200000000140 RDI: 0000000000000003 [ 283.578960][ T4044] RBP: 00007f8dd4df3090 R08: 0000000000000000 R09: 0000000000000000 [ 283.586907][ T4044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.594854][ T4044] R13: 00007f8dd6654218 R14: 00007f8dd6654180 R15: 00007ffcb563a778 [ 283.602808][ T4044] [ 283.666055][ T1388] usb 2-1: USB disconnect, device number 37 [ 283.770048][ T810] usb 3-1: Using ep0 maxpacket: 16 [ 283.890133][ T810] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 283.904503][ T810] usb 3-1: config 0 has no interface number 0 [ 283.920759][ T810] usb 3-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 283.956666][ T810] usb 3-1: config 0 interface 246 has no altsetting 0 [ 284.130124][ T810] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 284.145439][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.164368][ T810] usb 3-1: Product: syz [ 284.173687][ T810] usb 3-1: Manufacturer: syz [ 284.183503][ T810] usb 3-1: SerialNumber: syz [ 284.194939][ T810] usb 3-1: config 0 descriptor?? [ 284.480100][ T26] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 284.768850][ T4083] FAULT_INJECTION: forcing a failure. [ 284.768850][ T4083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.781944][ T4083] CPU: 1 PID: 4083 Comm: syz.1.946 Not tainted syzkaller #0 [ 284.789225][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.799374][ T4083] Call Trace: [ 284.802653][ T4083] [ 284.805594][ T4083] __dump_stack+0x21/0x30 [ 284.809919][ T4083] dump_stack_lvl+0x110/0x170 [ 284.814592][ T4083] ? show_regs_print_info+0x20/0x20 [ 284.819789][ T4083] dump_stack+0x15/0x20 [ 284.823942][ T4083] should_fail+0x3c1/0x510 [ 284.828352][ T4083] should_fail_usercopy+0x1a/0x20 [ 284.833366][ T4083] _copy_from_user+0x20/0xd0 [ 284.837946][ T4083] __copy_msghdr_from_user+0xc9/0x630 [ 284.843311][ T4083] ? update_rt_migration+0x3a0/0x3a0 [ 284.848592][ T4083] ? _raw_spin_unlock+0x4d/0x70 [ 284.853426][ T4083] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 284.858690][ T4083] ? __switch_to_asm+0x3a/0x60 [ 284.863433][ T4083] ? __schedule+0xb76/0x14c0 [ 284.868005][ T4083] ___sys_sendmsg+0x19a/0x2e0 [ 284.872662][ T4083] ? __sys_sendmsg+0x280/0x280 [ 284.877402][ T4083] ? preempt_schedule_irq+0xca/0x120 [ 284.882668][ T4083] ? irqentry_exit_cond_resched+0x29/0x30 [ 284.888368][ T4083] __sys_sendmmsg+0x2ba/0x4e0 [ 284.893023][ T4083] ? __ia32_sys_sendmsg+0x2f0/0x2f0 [ 284.898197][ T4083] ? finish_task_switch+0x16b/0x780 [ 284.903381][ T4083] ? __kasan_check_write+0x14/0x20 [ 284.908471][ T4083] ? switch_fpu_return+0x15d/0x2c0 [ 284.913562][ T4083] __x64_sys_sendmmsg+0xa0/0xb0 [ 284.918389][ T4083] x64_sys_call+0x6c6/0x9a0 [ 284.922879][ T4083] do_syscall_64+0x4c/0xa0 [ 284.927288][ T4083] ? clear_bhb_loop+0x50/0xa0 [ 284.931945][ T4083] ? clear_bhb_loop+0x50/0xa0 [ 284.936604][ T4083] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.942481][ T4083] RIP: 0033:0x7f537365be59 [ 284.946880][ T4083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.966467][ T4083] RSP: 002b:00007f5372074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 284.974867][ T4083] RAX: ffffffffffffffda RBX: 00007f53738d5180 RCX: 00007f537365be59 [ 284.982823][ T4083] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000005 [ 284.990775][ T4083] RBP: 00007f5372074090 R08: 0000000000000000 R09: 0000000000000000 [ 284.998732][ T4083] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 285.006683][ T4083] R13: 00007f53738d5218 R14: 00007f53738d5180 R15: 00007ffd81bb2538 [ 285.014636][ T4083] [ 285.133939][ T4087] tmpfs: Unknown parameter 'quota' [ 285.410147][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.420776][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.504948][ T4092] loop5: detected capacity change from 0 to 2048 [ 285.540091][ T26] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 285.549264][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 285.557461][ T26] usb 5-1: SerialNumber: syz [ 285.580746][ T4092] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 2660630532)! [ 285.600361][ T4092] EXT4-fs (loop5): group descriptors corrupted! [ 285.613616][ T4098] netlink: 'syz.1.952': attribute type 4 has an invalid length. [ 285.626922][ T4098] netlink: 'syz.1.952': attribute type 4 has an invalid length. [ 285.636260][ T4098] netlink: 'syz.1.952': attribute type 4 has an invalid length. [ 285.645467][ T4098] syz.1.952 (4098) used greatest stack depth: 20664 bytes left [ 285.663917][ T810] usb 3-1: USB disconnect, device number 35 [ 285.683751][ T4103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.954'. [ 285.713363][ T4104] netlink: 'syz.2.953': attribute type 25 has an invalid length. [ 285.721300][ T4104] netlink: 'syz.2.953': attribute type 21 has an invalid length. [ 285.728844][ T4113] loop5: detected capacity change from 0 to 128 [ 285.771345][ T4113] EXT4-fs (loop5): Test dummy encryption mode enabled [ 285.779345][ T4113] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 285.795249][ T4113] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.920261][ T26] usb 5-1: 0:2 : does not exist [ 285.938104][ T26] usb 5-1: USB disconnect, device number 34 [ 285.954677][ T4121] xt_l2tp: invalid flags combination: c [ 285.960719][ T30] audit: type=1400 audit(1779889790.423:355): avc: denied { name_bind } for pid=4120 comm="syz.3.959" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 285.983491][ T6] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 286.381726][ T30] audit: type=1400 audit(1779889790.843:356): avc: denied { nlmsg_read } for pid=4131 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.402643][ T4132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.962'. [ 286.438806][ T4134] loop4: detected capacity change from 0 to 256 [ 286.445278][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 286.454893][ T4134] FAT-fs (loop4): Unrecognized mount option "nodoYAFxec" or missing value [ 286.497747][ T30] audit: type=1400 audit(1779889790.953:357): avc: denied { create } for pid=4112 comm="syz.5.957" dev="anon_inodefs" ino=34210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 286.524176][ T30] audit: type=1400 audit(1779889790.953:358): avc: denied { ioctl } for pid=4112 comm="syz.5.957" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34210 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 286.555838][ T4136] FAULT_INJECTION: forcing a failure. [ 286.555838][ T4136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.568874][ T4136] CPU: 0 PID: 4136 Comm: syz.3.965 Not tainted syzkaller #0 [ 286.576134][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.586165][ T4136] Call Trace: [ 286.589418][ T4136] [ 286.592324][ T4136] __dump_stack+0x21/0x30 [ 286.596638][ T4136] dump_stack_lvl+0x110/0x170 [ 286.601318][ T4136] ? show_regs_print_info+0x20/0x20 [ 286.606513][ T4136] ? vfs_write+0xc72/0xfd0 [ 286.610923][ T4136] dump_stack+0x15/0x20 [ 286.615070][ T4136] should_fail+0x3c1/0x510 [ 286.619477][ T4136] should_fail_usercopy+0x1a/0x20 [ 286.624499][ T4136] _copy_from_user+0x20/0xd0 [ 286.629084][ T4136] __sys_bpf+0x258/0x7d0 [ 286.633329][ T4136] ? bpf_link_show_fdinfo+0x330/0x330 [ 286.638690][ T4136] ? debug_smp_processor_id+0x17/0x20 [ 286.644045][ T4136] __x64_sys_bpf+0x7c/0x90 [ 286.648434][ T4136] x64_sys_call+0x4b9/0x9a0 [ 286.652911][ T4136] do_syscall_64+0x4c/0xa0 [ 286.657306][ T4136] ? clear_bhb_loop+0x50/0xa0 [ 286.661958][ T4136] ? clear_bhb_loop+0x50/0xa0 [ 286.666613][ T4136] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.672479][ T4136] RIP: 0033:0x7f7637c72e59 [ 286.676878][ T4136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.696463][ T4136] RSP: 002b:00007f76366cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.704851][ T4136] RAX: ffffffffffffffda RBX: 00007f7637eebfa0 RCX: 00007f7637c72e59 [ 286.712807][ T4136] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 286.720763][ T4136] RBP: 00007f76366cd090 R08: 0000000000000000 R09: 0000000000000000 [ 286.728713][ T4136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.736661][ T4136] R13: 00007f7637eec038 R14: 00007f7637eebfa0 R15: 00007fffc48503e8 [ 286.744614][ T4136] [ 286.760095][ T6] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 286.768334][ T6] usb 2-1: config 0 has no interface number 0 [ 286.774462][ T6] usb 2-1: config 0 interface 239 has no altsetting 0 [ 286.819571][ T4147] loop5: detected capacity change from 0 to 256 [ 286.856236][ T4134] loop4: detected capacity change from 0 to 512 [ 286.866575][ T4147] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 286.890237][ T4134] EXT4-fs (loop4): orphan cleanup on readonly fs [ 286.896577][ T4134] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 286.904724][ T810] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 286.912718][ T4134] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 286.928203][ T4134] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.963: attempt to clear invalid blocks 2 len 1 [ 286.941187][ T4134] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.963: invalid indirect mapped block 1819239214 (level 0) [ 286.955217][ T4134] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.963: invalid indirect mapped block 1819239214 (level 1) [ 286.969170][ T6] usb 2-1: New USB device found, idVendor=0403, idProduct=f06f, bcdDevice=4a.1e [ 286.978635][ T4134] EXT4-fs (loop4): 1 truncate cleaned up [ 286.984403][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.990054][ T4134] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 286.992422][ T6] usb 2-1: Product: syz [ 287.012157][ T6] usb 2-1: Manufacturer: syz [ 287.017162][ T6] usb 2-1: SerialNumber: syz [ 287.022848][ T6] usb 2-1: config 0 descriptor?? [ 287.146359][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.153625][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.170029][ T810] usb 3-1: Using ep0 maxpacket: 16 [ 287.290099][ T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.302187][ T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.320099][ T810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.343336][ T6] usb-storage 2-1:0.239: USB Mass Storage device detected [ 287.354238][ T4159] loop5: detected capacity change from 0 to 40427 [ 287.360111][ T810] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.369722][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.381477][ T810] usb 3-1: config 0 descriptor?? [ 287.418202][ T4168] loop3: detected capacity change from 0 to 4096 [ 287.426083][ T4159] F2FS-fs (loop5): fault_injection options not supported [ 287.431339][ T6] ftdi_sio 2-1:0.239: FTDI USB Serial Device converter detected [ 287.441275][ T6] usb 2-1: Detected FT-X [ 287.445003][ T4159] F2FS-fs (loop5): invalid crc value [ 287.451691][ T4159] F2FS-fs (loop5): Found nat_bits in checkpoint [ 287.460114][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 287.472919][ T4168] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 287.489311][ T4159] F2FS-fs (loop5): Start checkpoint disabled! [ 287.489555][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 287.495571][ T4168] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 287.509601][ T4159] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 287.512414][ T4168] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 287.512414][ T4168] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 287.512414][ T4168] [ 287.520191][ T6] ftdi_sio 2-1:0.239: GPIO initialisation failed: -71 [ 287.546873][ T4168] EXT4-fs (loop3): Test dummy encryption mode enabled [ 287.554417][ T6] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 287.565243][ T6] usb 2-1: USB disconnect, device number 38 [ 287.576194][ T4168] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv0,inlinecrypt,nouser_xattr,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,data_err=ignore,,errors=continue. Quota mode: writeback. [ 287.595513][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 287.607313][ T30] audit: type=1400 audit(1779889792.073:359): avc: denied { ioctl } for pid=4158 comm="syz.5.970" path="/54/file2/file2" dev="loop5" ino=14 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 287.608006][ T6] ftdi_sio 2-1:0.239: device disconnected [ 287.651351][ T8] attempt to access beyond end of device [ 287.651351][ T8] loop5: rw=2049, want=40984, limit=40427 [ 287.713130][ T4168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.973'. [ 287.750075][ T810] usbhid 3-1:0.0: can't add hid device: -71 [ 287.756028][ T810] usbhid: probe of 3-1:0.0 failed with error -71 [ 287.772724][ T4180] netlink: 104 bytes leftover after parsing attributes in process `syz.2.976'. [ 287.789530][ T810] usb 3-1: USB disconnect, device number 36 [ 287.836416][ T30] audit: type=1400 audit(1779889792.293:360): avc: denied { setopt } for pid=4183 comm="syz.1.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.867383][ T30] audit: type=1400 audit(1779889792.593:361): avc: denied { mounton } for pid=4181 comm="syz.5.977" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 288.921887][ T4192] loop3: detected capacity change from 0 to 512 [ 288.969604][ T4192] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.000088][ T4192] EXT4-fs (loop3): orphan cleanup on readonly fs [ 289.051639][ T4192] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 289.119051][ T4192] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #12: comm syz.3.979: corrupted inode contents [ 289.136103][ T4209] loop1: detected capacity change from 0 to 256 [ 289.154093][ T4192] EXT4-fs error (device loop3): ext4_dirty_inode:6108: inode #12: comm syz.3.979: mark_inode_dirty error [ 289.169379][ T4192] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #12: comm syz.3.979: corrupted inode contents [ 289.182749][ T4192] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.979: mark_inode_dirty error [ 289.194940][ T4209] FAT-fs (loop1): Unrecognized mount option "nodoYAFxec" or missing value [ 289.210656][ T4192] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #12: comm syz.3.979: corrupted inode contents [ 289.226207][ T4192] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 289.253171][ T4192] EXT4-fs error (device loop3): ext4_do_update_inode:5260: inode #12: comm syz.3.979: corrupted inode contents [ 289.286234][ T4192] EXT4-fs error (device loop3): ext4_truncate:4317: inode #12: comm syz.3.979: mark_inode_dirty error [ 289.320478][ T4192] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 289.349812][ T4192] EXT4-fs (loop3): 1 truncate cleaned up [ 289.355525][ T30] audit: type=1400 audit(1779889793.803:362): avc: denied { create } for pid=4210 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 289.380242][ T4192] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,inlinecrypt,auto_da_alloc=0x0000000000000005,minixdf,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback. [ 289.523895][ T4217] loop4: detected capacity change from 0 to 40427 [ 289.548350][ T4222] F2FS-fs (loop5): invalid crc value [ 289.569491][ T4222] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 289.583531][ T1388] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 289.592309][ T4217] F2FS-fs (loop4): invalid crc value [ 289.614621][ T4217] F2FS-fs (loop4): Found nat_bits in checkpoint [ 289.675173][ T4222] F2FS-fs (loop5): recover fsync data on readonly fs [ 289.683250][ T4222] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 289.703670][ T4217] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 289.725342][ T4217] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 289.754129][ T4217] FAULT_INJECTION: forcing a failure. [ 289.754129][ T4217] name failslab, interval 1, probability 0, space 0, times 0 [ 289.768095][ T4217] CPU: 1 PID: 4217 Comm: syz.4.988 Not tainted syzkaller #0 [ 289.775395][ T4217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.785451][ T4217] Call Trace: [ 289.788722][ T4217] [ 289.791645][ T4217] __dump_stack+0x21/0x30 [ 289.796064][ T4217] dump_stack_lvl+0x110/0x170 [ 289.800744][ T4217] ? show_regs_print_info+0x20/0x20 [ 289.805943][ T4217] ? file_end_write+0x1b0/0x1b0 [ 289.810792][ T4217] dump_stack+0x15/0x20 [ 289.814947][ T4217] should_fail+0x3c1/0x510 [ 289.819363][ T4217] __should_failslab+0xa4/0xe0 [ 289.824127][ T4217] should_failslab+0x9/0x20 [ 289.828626][ T4217] slab_pre_alloc_hook+0x3b/0xe0 [ 289.833601][ T4217] ? getname_flags+0xb9/0x500 [ 289.838274][ T4217] kmem_cache_alloc+0x44/0x260 [ 289.843041][ T4217] getname_flags+0xb9/0x500 [ 289.847540][ T4217] ? debug_smp_processor_id+0x17/0x20 [ 289.853007][ T4217] __x64_sys_mknod+0x7b/0xa0 [ 289.857613][ T4217] x64_sys_call+0x886/0x9a0 [ 289.862114][ T4217] do_syscall_64+0x4c/0xa0 [ 289.866528][ T4217] ? clear_bhb_loop+0x50/0xa0 [ 289.871200][ T4217] ? clear_bhb_loop+0x50/0xa0 [ 289.875874][ T4217] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 289.881763][ T4217] RIP: 0033:0x7f8dd63dae59 [ 289.886170][ T4217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.905770][ T4217] RSP: 002b:00007f8dd4e35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 289.914185][ T4217] RAX: ffffffffffffffda RBX: 00007f8dd6653fa0 RCX: 00007f8dd63dae59 [ 289.922152][ T4217] RDX: 0000000000000708 RSI: 0000000000000080 RDI: 0000200000000100 [ 289.930114][ T4217] RBP: 00007f8dd4e35090 R08: 0000000000000000 R09: 0000000000000000 [ 289.938077][ T4217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.946042][ T4217] R13: 00007f8dd6654038 R14: 00007f8dd6653fa0 R15: 00007ffcb563a778 [ 289.954010][ T4217] [ 290.225086][ T4232] overlayfs: failed to resolve './file0': -2 [ 290.350111][ T1388] usb 2-1: Using ep0 maxpacket: 16 [ 290.500088][ T1388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.516141][ T1388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.536180][ T1388] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.562292][ T1388] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 290.581882][ T1388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.588460][ T4234] set_capacity_and_notify: 1 callbacks suppressed [ 290.588474][ T4234] loop4: detected capacity change from 0 to 40427 [ 290.606331][ T1388] usb 2-1: config 0 descriptor?? [ 290.610285][ T4192] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.979: iget: bad i_size value: 360287970189639690 [ 290.637211][ T4234] F2FS-fs (loop4): invalid crc value [ 290.649686][ T4234] F2FS-fs (loop4): Found nat_bits in checkpoint [ 290.680888][ T577] Bluetooth: hci0: Frame reassembly failed (-84) [ 290.695356][ T4234] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 290.702410][ T4234] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 290.747589][ T287] attempt to access beyond end of device [ 290.747589][ T287] loop4: rw=2049, want=45104, limit=40427 [ 290.867545][ T4243] loop4: detected capacity change from 0 to 1024 [ 290.879635][ T4243] EXT4-fs (loop4): Ignoring removed bh option [ 290.889177][ T4243] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.938866][ T4243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8842c028, mo2=0002] [ 290.962578][ T4243] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,dioread_nolock,barrier=0x0000000000000004,bh,errors=continue,init_itable,errors=remount-ro,noblock_validity,max_batch_time=0x0000000000000005,lazytime,noblock_validity,journal_dev=0x0000000000100005,debug,. Quota mode: none. [ 291.069693][ T287] EXT4-fs error (device loop4): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /212/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 291.100974][ T1388] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 291.109008][ T1388] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 291.119848][ T4258] loop5: detected capacity change from 0 to 512 [ 291.127399][ T1388] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 291.139520][ T1388] microsoft 0003:045E:07DA.0003: no inputs found [ 291.147223][ T4258] EXT4-fs (loop5): Ignoring removed orlov option [ 291.148492][ T1388] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 291.162823][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 291.170153][ T287] EXT4-fs error (device loop4): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /212/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 291.192970][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 291.199841][ T287] EXT4-fs error (device loop4): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 291.212024][ T4258] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,orlov,. Quota mode: writeback. [ 291.229423][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 291.233586][ T4258] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.238519][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 291.262207][ T287] EXT4-fs error (device loop4): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /212/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 291.284384][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 291.300449][ T287] EXT4-fs error (device loop4): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /212/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 291.329355][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 291.342933][ T287] EXT4-fs error (device loop4): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 291.377199][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 291.387068][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 291.412776][ T287] EXT4-fs error (device loop4): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /212/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 292.228024][ T30] audit: type=1400 audit(1779889795.963:363): avc: denied { associate } for pid=4257 comm="syz.5.998" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 292.251439][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 292.299759][ T287] EXT4-fs error (device loop4): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /212/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 292.441591][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 292.480726][ T287] EXT4-fs error (device loop4): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 292.591241][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 292.606291][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 292.780551][ T287] EXT4-fs error (device loop4): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /212/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 292.976557][ T810] Bluetooth: hci0: command 0x1003 tx timeout [ 292.982659][ T4239] Bluetooth: hci0: sending frame failed (-49) [ 292.991402][ T287] EXT4-fs (loop4): Remounting filesystem read-only [ 293.000423][ T4273] loop2: detected capacity change from 0 to 4096 [ 293.010137][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 293.025198][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 293.040696][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 293.055794][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 293.071804][ T4273] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 293.081747][ T4273] EXT4-fs (loop2): Test dummy encryption mode enabled [ 293.088753][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 293.091725][ T4273] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 293.103977][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 293.174558][ T287] EXT4-fs warning (device loop4): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 293.194093][ T4278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1002'. [ 293.235560][ T4278] loop5: detected capacity change from 0 to 512 [ 293.311834][ T4278] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 293.365881][ T4278] EXT4-fs (loop5): orphan cleanup on readonly fs [ 293.372511][ T4278] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #11: comm syz.5.1002: iget: bad extended attribute block 7 [ 293.386867][ T4278] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1002: couldn't read orphan inode 11 (err -117) [ 293.399497][ T4278] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.691344][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.698415][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.706003][ T4281] device bridge_slave_0 entered promiscuous mode [ 293.715147][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.722212][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.729526][ T4281] device bridge_slave_1 entered promiscuous mode [ 293.740073][ T810] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 293.770535][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.777568][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.784858][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.791882][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.811241][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.818875][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.826170][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.836193][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.844382][ T1513] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.851414][ T1513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.879589][ T4281] device veth0_vlan entered promiscuous mode [ 293.890855][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.900262][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.908396][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.916184][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.923992][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.932297][ T1513] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.939332][ T1513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.946898][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.955006][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.969540][ T4281] device veth1_macvtap entered promiscuous mode [ 293.976761][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.030559][ T1388] usb 2-1: USB disconnect, device number 39 [ 294.051917][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.063676][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.064957][ T4291] FAULT_INJECTION: forcing a failure. [ 294.064957][ T4291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.088986][ T4291] CPU: 0 PID: 4291 Comm: syz.1.1007 Not tainted syzkaller #0 [ 294.096810][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.106862][ T4291] Call Trace: [ 294.110135][ T4291] [ 294.113060][ T4291] __dump_stack+0x21/0x30 [ 294.117389][ T4291] dump_stack_lvl+0x110/0x170 [ 294.122062][ T4291] ? show_regs_print_info+0x20/0x20 [ 294.127257][ T4291] ? __kasan_slab_free+0x11/0x20 [ 294.132278][ T4291] ? kmem_cache_free+0x100/0x320 [ 294.137214][ T4291] ? __asan_set_shadow_00+0xe/0x10 [ 294.142325][ T4291] dump_stack+0x15/0x20 [ 294.146491][ T4291] should_fail+0x3c1/0x510 [ 294.150907][ T4291] should_fail_usercopy+0x1a/0x20 [ 294.155935][ T4291] _copy_from_user+0x20/0xd0 [ 294.160519][ T4291] kvm_vm_ioctl+0x525/0xb30 [ 294.165020][ T4291] ? kvm_device_release+0x220/0x220 [ 294.170219][ T4291] ? ioctl_has_perm+0x1b8/0x4f0 [ 294.175066][ T4291] ? memcpy+0x56/0x70 [ 294.179043][ T4291] ? ioctl_has_perm+0x414/0x4f0 [ 294.183908][ T4291] ? security_file_permission+0x79/0xa0 [ 294.189456][ T4291] ? has_cap_mac_admin+0x370/0x370 [ 294.194565][ T4291] ? vfs_write+0xc72/0xfd0 [ 294.198976][ T4291] ? selinux_file_ioctl+0x3a0/0x4d0 [ 294.204171][ T4291] ? selinux_file_alloc_security+0x120/0x120 [ 294.210150][ T4291] ? mutex_unlock+0x8f/0x230 [ 294.214739][ T4291] ? __mutex_lock_slowpath+0x10/0x10 [ 294.220023][ T4291] ? __fget_files+0x2c4/0x320 [ 294.224708][ T4291] ? security_file_ioctl+0x84/0xa0 [ 294.229822][ T4291] ? kvm_device_release+0x220/0x220 [ 294.235014][ T4291] __se_sys_ioctl+0x121/0x1a0 [ 294.239696][ T4291] __x64_sys_ioctl+0x7b/0x90 [ 294.244284][ T4291] x64_sys_call+0x2f/0x9a0 [ 294.248695][ T4291] do_syscall_64+0x4c/0xa0 [ 294.253104][ T4291] ? clear_bhb_loop+0x50/0xa0 [ 294.257778][ T4291] ? clear_bhb_loop+0x50/0xa0 [ 294.262448][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.268339][ T4291] RIP: 0033:0x7f537365be59 [ 294.272751][ T4291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.292354][ T4291] RSP: 002b:00007f53720b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.301551][ T4291] RAX: ffffffffffffffda RBX: 00007f53738d4fa0 RCX: 00007f537365be59 [ 294.309522][ T4291] RDX: 0000000000000000 RSI: 000000004008ae6a RDI: 0000000000000005 [ 294.317485][ T4291] RBP: 00007f53720b6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.325449][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.333399][ T4291] R13: 00007f53738d5038 R14: 00007f53738d4fa0 R15: 00007ffd81bb2538 [ 294.341351][ T4291] [ 294.459306][ T4301] overlayfs: failed to resolve './file0': -2 [ 294.522430][ T45] device bridge_slave_1 left promiscuous mode [ 294.534992][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.609777][ T45] device bridge_slave_0 left promiscuous mode [ 294.628398][ T810] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.636798][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.670093][ T810] usb 3-1: not running at top speed; connect to a high speed hub [ 294.683200][ T4303] loop1: detected capacity change from 0 to 256 [ 294.750085][ T810] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 34, changing to 4 [ 294.765270][ T30] audit: type=1400 audit(1779889799.223:364): avc: denied { mount } for pid=4302 comm="syz.1.1009" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 294.806617][ T30] audit: type=1400 audit(1779889799.253:365): avc: denied { bind } for pid=4302 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.842561][ T30] audit: type=1400 audit(1779889799.303:366): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 294.960089][ T810] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 295.223909][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.232111][ T810] usb 3-1: Product: syz [ 295.236273][ T810] usb 3-1: Manufacturer: syz [ 295.264486][ T810] usb 3-1: SerialNumber: syz [ 295.284333][ T3052] Bluetooth: hci0: command 0x1001 tx timeout [ 295.290408][ T4239] Bluetooth: hci0: sending frame failed (-49) [ 295.325490][ T4317] loop5: detected capacity change from 0 to 256 [ 295.402878][ T4317] FAT-fs (loop5): Unrecognized mount option "nodoYAFxec" or missing value [ 295.489706][ T4317] loop5: detected capacity change from 0 to 512 [ 295.521588][ T30] audit: type=1400 audit(1779889799.983:367): avc: denied { watch } for pid=4272 comm="syz.2.1001" path=2F3139372F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.576756][ T4317] EXT4-fs (loop5): orphan cleanup on readonly fs [ 295.590048][ T4317] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 295.593491][ T30] audit: type=1400 audit(1779889799.983:368): avc: denied { setattr } for pid=4272 comm="syz.2.1001" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.608554][ T4317] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 295.644796][ T4317] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1013: attempt to clear invalid blocks 2 len 1 [ 295.664952][ T30] audit: type=1400 audit(1779889800.033:369): avc: denied { append } for pid=4272 comm="syz.2.1001" path=2F3139372F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F637075616363742E75736167655F7065726370755F75736572 dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 295.705662][ T4317] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1013: invalid indirect mapped block 1819239214 (level 0) [ 295.708498][ T4310] loop1: detected capacity change from 0 to 131072 [ 295.729165][ T4317] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1013: invalid indirect mapped block 1819239214 (level 1) [ 295.741445][ T4310] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 295.751555][ T4310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 295.760635][ T4310] F2FS-fs (loop1): invalid crc value [ 295.767233][ T4317] EXT4-fs (loop5): 1 truncate cleaned up [ 295.767255][ T4324] loop6: detected capacity change from 0 to 512 [ 295.779792][ T4317] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 295.789609][ T4310] F2FS-fs (loop1): Found nat_bits in checkpoint [ 295.814514][ T4324] EXT4-fs (loop6): Test dummy encryption mode enabled [ 295.827477][ T4324] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1015: inode has both inline data and extents flags [ 295.828239][ T4310] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 295.841186][ T4324] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1015: couldn't read orphan inode 15 (err -117) [ 295.847940][ T4310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 295.860283][ T4324] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 295.922331][ T30] audit: type=1400 audit(1779889800.383:370): avc: denied { rename } for pid=4323 comm="syz.6.1015" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.946847][ T4324] EXT4-fs error (device loop6): ext4_check_dx_root:2266: inode #2: comm syz.6.1015: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 296.002563][ T30] audit: type=1400 audit(1779889800.463:371): avc: denied { link } for pid=4333 comm="syz.6.1018" name="file1" dev="incremental-fs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 296.280498][ T4281] ------------[ cut here ]------------ [ 296.301974][ T4281] WARNING: CPU: 1 PID: 4281 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0 [ 296.312186][ T4281] Modules linked in: [ 296.316192][ T4281] CPU: 1 PID: 4281 Comm: syz-executor Not tainted syzkaller #0 [ 296.324520][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.335452][ T4281] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 296.341514][ T4281] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8e 8a a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 0c 68 ff <0f> 0b e9 17 ff ff ff e8 6b 0c 68 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 296.428749][ T4281] RSP: 0018:ffffc90000d7fb80 EFLAGS: 00010293 [ 296.466549][ T4281] RAX: ffffffff8201d4e9 RBX: 1ffff110261e395a RCX: ffff888119fa2780 [ 296.508387][ T4281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.549879][ T4281] RBP: ffffc90000d7fbb0 R08: ffff88812918c0c7 R09: 1ffff11025231818 [ 296.592118][ T4281] R10: dffffc0000000000 R11: ffffed1025231819 R12: ffff888130f1caa0 [ 296.630534][ T4281] R13: 0000000000000000 R14: ffff88812918c020 R15: ffff888130f1cad0 [ 296.668648][ T4281] FS: 000055556a606500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 296.711473][ T4281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.790100][ T4281] CR2: 00007fff1435ec60 CR3: 000000010f0b4000 CR4: 00000000003506a0 [ 296.808248][ T4281] Call Trace: [ 296.818324][ T4281] [ 296.821400][ T4281] ovl_do_remove+0x5f6/0x9a0 [ 296.825993][ T4281] ? ovl_getattr+0xf80/0xf80 [ 296.840031][ T4281] ? ovl_set_redirect+0x670/0x670 [ 296.850146][ T4281] ? selinux_inode_rmdir+0x22/0x30 [ 296.860131][ T4281] ovl_rmdir+0x1a/0x20 [ 296.864201][ T4281] vfs_rmdir+0x313/0x460 [ 296.871611][ T4281] incfs_kill_sb+0x105/0x220 [ 296.876360][ T4281] deactivate_locked_super+0xa0/0x100 [ 296.883108][ T4281] deactivate_super+0xaf/0xe0 [ 296.885112][ T4338] loop5: detected capacity change from 0 to 512 [ 296.887799][ T4281] cleanup_mnt+0x45b/0x510 [ 296.899101][ T4281] __cleanup_mnt+0x19/0x20 [ 296.903577][ T4281] task_work_run+0x127/0x190 [ 296.908160][ T4281] exit_to_user_mode_loop+0xd0/0xe0 [ 296.913830][ T4281] exit_to_user_mode_prepare+0x87/0xd0 [ 296.919294][ T4281] syscall_exit_to_user_mode+0x1a/0x30 [ 296.924786][ T4281] do_syscall_64+0x58/0xa0 [ 296.929199][ T4281] ? clear_bhb_loop+0x50/0xa0 [ 296.933983][ T4281] ? clear_bhb_loop+0x50/0xa0 [ 296.939903][ T4281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.945969][ T4281] RIP: 0033:0x7fa85f0de097 [ 296.951189][ T4281] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 296.971216][ T810] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 296.973713][ T4281] RSP: 002b:00007ffe4fe60c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 296.986832][ T4281] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa85f0de097 [ 296.994844][ T4281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4fe60cd0 [ 296.995081][ T810] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 297.005241][ T4338] EXT4-fs (loop5): error: journal path ./bus is not a block device [ 297.009688][ T4281] RBP: 00007ffe4fe60cd0 R08: 00007ffe4fe61cd0 R09: 00000000ffffffff [ 297.025837][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4fe61d60 [ 297.034013][ T4281] R13: 00007fa85f1721ca R14: 0000000000048462 R15: 00007ffe4fe61da0 [ 297.042157][ T810] usb 3-1: unable to issue vendor read request (ret = -71) [ 297.049452][ T4281] [ 297.052661][ T4281] ---[ end trace 2280031891fedce1 ]--- [ 297.058306][ T4281] ------------[ cut here ]------------ [ 297.063995][ T810] usb 3-1: unable to issue vendor read request (ret = -71) [ 297.075316][ T4281] WARNING: CPU: 1 PID: 4281 at fs/overlayfs/util.c:475 ovl_dir_modified+0x189/0x1c0 [ 297.084794][ T4281] Modules linked in: [ 297.088736][ T4281] CPU: 1 PID: 4281 Comm: syz-executor Tainted: G W syzkaller #0 [ 297.097968][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.100080][ T810] usb 3-1: unable to issue vendor read request (ret = -71) [ 297.108116][ T4281] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 297.121169][ T4281] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8e 8a a7 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 0c 68 ff <0f> 0b e9 17 ff ff ff e8 6b 0c 68 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 297.140098][ T810] usb 3-1: unable to issue vendor read request (ret = -71) [ 297.140848][ T4281] RSP: 0018:ffffc90000d7fb80 EFLAGS: 00010293 [ 297.151708][ T810] usb 3-1: USB disconnect, device number 37 [ 297.168094][ T4281] RAX: ffffffff8201d4e9 RBX: 1ffff110261e395a RCX: ffff888119fa2780 [ 297.171664][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 297.176866][ T4281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.199770][ T4281] RBP: ffffc90000d7fbb0 R08: ffff88812918c0c7 R09: 1ffff11025231818 [ 297.208807][ T4281] R10: dffffc0000000000 R11: ffffed1025231819 R12: ffff888130f1caa0 [ 297.224795][ T4343] overlayfs: failed to resolve './file1': -2 [ 297.231663][ T4281] R13: 0000000000000000 R14: ffff88812918c020 R15: ffff888130f1cad0 [ 297.239667][ T4281] FS: 000055556a606500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 297.248906][ T4281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.255712][ T4281] CR2: 00007fe1e8f60540 CR3: 000000010f0b4000 CR4: 00000000003506b0 [ 297.263906][ T4281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 297.266594][ T314] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 297.276744][ T4281] DR3: 00000000fda3b69a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 297.287565][ T4281] Call Trace: [ 297.291111][ T4281] [ 297.294079][ T4281] ovl_do_remove+0x5f6/0x9a0 [ 297.298714][ T4281] ? ovl_getattr+0xf80/0xf80 [ 297.303624][ T4281] ? ovl_set_redirect+0x670/0x670 [ 297.308687][ T4281] ? selinux_inode_rmdir+0x22/0x30 [ 297.314316][ T4281] ovl_rmdir+0x1a/0x20 [ 297.318425][ T4281] vfs_rmdir+0x313/0x460 [ 297.322791][ T4281] incfs_kill_sb+0x198/0x220 [ 297.327396][ T4281] deactivate_locked_super+0xa0/0x100 [ 297.333185][ T4281] deactivate_super+0xaf/0xe0 [ 297.337848][ T4281] cleanup_mnt+0x45b/0x510 [ 297.342258][ T4281] __cleanup_mnt+0x19/0x20 [ 297.346664][ T4281] task_work_run+0x127/0x190 [ 297.351256][ T4281] exit_to_user_mode_loop+0xd0/0xe0 [ 297.356443][ T4281] exit_to_user_mode_prepare+0x87/0xd0 [ 297.361986][ T4281] syscall_exit_to_user_mode+0x1a/0x30 [ 297.367433][ T4281] do_syscall_64+0x58/0xa0 [ 297.371865][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 297.372017][ T4281] ? clear_bhb_loop+0x50/0xa0 [ 297.382542][ T4281] ? clear_bhb_loop+0x50/0xa0 [ 297.387268][ T4281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.393213][ T4281] RIP: 0033:0x7fa85f0de097 [ 297.397673][ T4281] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 297.417334][ T4281] RSP: 002b:00007ffe4fe60c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 297.425980][ T4281] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa85f0de097 [ 297.434009][ T4281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4fe60cd0 [ 297.442022][ T4281] RBP: 00007ffe4fe60cd0 R08: 00007ffe4fe61cd0 R09: 00000000ffffffff [ 297.450062][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4fe61d60 [ 297.458067][ T4281] R13: 00007fa85f1721ca R14: 0000000000048462 R15: 00007ffe4fe61da0 [ 297.470008][ T4281] [ 297.473052][ T4281] ---[ end trace 2280031891fedce2 ]--- [ 297.540573][ T4345] loop5: detected capacity change from 0 to 512 [ 297.547120][ T314] usb 2-1: Using ep0 maxpacket: 16 [ 297.700457][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.181317][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.210160][ T314] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 298.253345][ T314] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.282682][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.315399][ T4353] FAULT_INJECTION: forcing a failure. [ 298.315399][ T4353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.328552][ T4353] CPU: 0 PID: 4353 Comm: syz.5.1023 Tainted: G W syzkaller #0 [ 298.337316][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.347368][ T4353] Call Trace: [ 298.350639][ T4353] [ 298.353559][ T4353] __dump_stack+0x21/0x30 [ 298.357891][ T4353] dump_stack_lvl+0x110/0x170 [ 298.362577][ T4353] ? show_regs_print_info+0x20/0x20 [ 298.367772][ T4353] ? x64_sys_call+0x219/0x9a0 [ 298.372431][ T4353] dump_stack+0x15/0x20 [ 298.376567][ T4353] should_fail+0x3c1/0x510 [ 298.380961][ T4353] should_fail_usercopy+0x1a/0x20 [ 298.385964][ T4353] _copy_from_user+0x20/0xd0 [ 298.390531][ T4353] do_ipt_set_ctl+0x625/0xd70 [ 298.395274][ T4353] ? ipt_unregister_table_exit+0x220/0x220 [ 298.401057][ T4353] ? avc_has_perm+0x163/0x250 [ 298.405711][ T4353] ? ip4_datagram_release_cb+0x581/0x770 [ 298.411418][ T4353] ? __kasan_check_write+0x14/0x20 [ 298.416511][ T4353] ? mutex_unlock+0x8f/0x230 [ 298.421076][ T4353] ? __mutex_lock_slowpath+0x10/0x10 [ 298.426339][ T4353] ? 0xffffffffa002a000 [ 298.430555][ T4353] ? is_bpf_text_address+0x177/0x190 [ 298.435819][ T4353] nf_setsockopt+0x272/0x2a0 [ 298.440383][ T4353] ip_setsockopt+0x2b72/0x37c0 [ 298.445124][ T4353] ? ipv4_pktinfo_prepare+0x580/0x580 [ 298.450474][ T4353] ? stack_trace_save+0xa6/0xf0 [ 298.455306][ T4353] ? __stack_depot_save+0x34/0x480 [ 298.460395][ T4353] ? path_openat+0x280e/0x2f20 [ 298.465137][ T4353] ? avc_has_perm_noaudit+0x391/0x490 [ 298.470488][ T4353] ? memcpy+0x56/0x70 [ 298.474451][ T4353] ? avc_has_perm_noaudit+0x30b/0x490 [ 298.479801][ T4353] ? avc_denied+0x1b0/0x1b0 [ 298.484283][ T4353] ? kstrtouint_from_user+0x1c4/0x220 [ 298.489635][ T4353] ? avc_has_perm+0x163/0x250 [ 298.494289][ T4353] ? avc_has_perm_noaudit+0x490/0x490 [ 298.499644][ T4353] ? proc_fail_nth_write+0x180/0x200 [ 298.504911][ T4353] ? proc_fail_nth_read+0x220/0x220 [ 298.510090][ T4353] ? selinux_socket_setsockopt+0x282/0x360 [ 298.515874][ T4353] ? selinux_socket_getsockopt+0x340/0x340 [ 298.521656][ T4353] ? vfs_write+0xc72/0xfd0 [ 298.526059][ T4353] ? __fget_files+0x2c4/0x320 [ 298.530717][ T4353] udp_setsockopt+0x8a/0xa0 [ 298.535198][ T4353] sock_common_setsockopt+0xa0/0xb0 [ 298.540374][ T4353] ? sock_common_recvmsg+0x1c0/0x1c0 [ 298.545635][ T4353] __sys_setsockopt+0x2e9/0x470 [ 298.550464][ T4353] ? __kasan_check_write+0x14/0x20 [ 298.555555][ T4353] ? __ia32_sys_recv+0xb0/0xb0 [ 298.560296][ T4353] ? ksys_write+0x1f4/0x250 [ 298.564774][ T4353] ? __ia32_sys_read+0x90/0x90 [ 298.569514][ T4353] __x64_sys_setsockopt+0xbf/0xd0 [ 298.574517][ T4353] x64_sys_call+0x982/0x9a0 [ 298.578998][ T4353] do_syscall_64+0x4c/0xa0 [ 298.583401][ T4353] ? clear_bhb_loop+0x50/0xa0 [ 298.588054][ T4353] ? clear_bhb_loop+0x50/0xa0 [ 298.592707][ T4353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.598576][ T4353] RIP: 0033:0x7fa38c8bce59 [ 298.602969][ T4353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.622552][ T4353] RSP: 002b:00007fa38b317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.630949][ T4353] RAX: ffffffffffffffda RBX: 00007fa38cb35fa0 RCX: 00007fa38c8bce59 [ 298.638899][ T4353] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 298.646848][ T4353] RBP: 00007fa38b317090 R08: 0000000000000428 R09: 0000000000000000 [ 298.654798][ T4353] R10: 0000200000000ac0 R11: 0000000000000246 R12: 0000000000000001 [ 298.662747][ T4353] R13: 00007fa38cb36038 R14: 00007fa38cb35fa0 R15: 00007ffe7c04f1e8 [ 298.670698][ T4353] [ 298.679002][ T314] usb 2-1: config 0 descriptor?? [ 298.796509][ T4360] overlayfs: failed to resolve './file0': -2 [ 298.999635][ T4364] loop6: detected capacity change from 0 to 256 [ 299.072621][ T4364] FAT-fs (loop6): Unrecognized mount option "nodoYAFxec" or missing value [ 299.160818][ T314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 299.168882][ T314] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 299.201264][ T314] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 299.205628][ T4364] loop6: detected capacity change from 0 to 512 [ 299.212788][ T314] microsoft 0003:045E:07DA.0004: no inputs found [ 299.229297][ T314] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 299.297188][ T4364] EXT4-fs (loop6): orphan cleanup on readonly fs [ 299.304324][ T4364] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 299.312985][ T4364] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 299.327949][ T4364] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1026: attempt to clear invalid blocks 2 len 1 [ 299.341489][ T4364] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1026: invalid indirect mapped block 1819239214 (level 0) [ 299.356047][ T4364] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1026: invalid indirect mapped block 1819239214 (level 1) [ 299.389015][ T4364] EXT4-fs (loop6): 1 truncate cleaned up [ 299.394826][ T4364] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 300.401997][ T4379] tmpfs: Unknown parameter 'quota' [ 300.421383][ T4377] futex_wake_op: syz.6.1028 tries to shift op by 36; fix this program [ 300.525215][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 300.525550][ T4383] FAULT_INJECTION: forcing a failure. [ 300.525550][ T4383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.533474][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.548744][ T4383] CPU: 0 PID: 4383 Comm: syz.2.1030 Tainted: G W syzkaller #0 [ 300.554768][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 300.562771][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.562782][ T4383] Call Trace: [ 300.562787][ T4383] [ 300.562793][ T4383] __dump_stack+0x21/0x30 [ 300.571147][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.580598][ T4383] dump_stack_lvl+0x110/0x170 [ 300.580622][ T4383] ? show_regs_print_info+0x20/0x20 [ 300.608792][ T4383] ? __stack_depot_save+0x34/0x480 [ 300.612120][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.613902][ T4383] ? path_openat+0x280e/0x2f20 [ 300.622215][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.626411][ T4383] dump_stack+0x15/0x20 [ 300.634802][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.638396][ T4383] should_fail+0x3c1/0x510 [ 300.646924][ T1513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.650554][ T4383] should_fail_usercopy+0x1a/0x20 [ 300.650576][ T4383] _copy_from_user+0x20/0xd0 [ 300.668003][ T4383] __copy_msghdr_from_user+0xc9/0x630 [ 300.673378][ T4383] ? _kstrtoull+0x3c0/0x4d0 [ 300.677870][ T4383] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 300.683140][ T4383] ? kstrtouint_from_user+0x1c4/0x220 [ 300.688514][ T4383] ___sys_sendmsg+0x19a/0x2e0 [ 300.693195][ T4383] ? __sys_sendmsg+0x280/0x280 [ 300.698049][ T4383] ? __fdget+0x1a1/0x230 [ 300.702287][ T4383] __x64_sys_sendmsg+0x206/0x2f0 [ 300.707219][ T4383] ? ___sys_sendmsg+0x2e0/0x2e0 [ 300.712063][ T4383] ? ksys_write+0x1f4/0x250 [ 300.716562][ T4383] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 300.722623][ T4383] x64_sys_call+0x4b/0x9a0 [ 300.727032][ T4383] do_syscall_64+0x4c/0xa0 [ 300.731441][ T4383] ? clear_bhb_loop+0x50/0xa0 [ 300.736112][ T4383] ? clear_bhb_loop+0x50/0xa0 [ 300.740783][ T4383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.746669][ T4383] RIP: 0033:0x7fe1e8f12e59 [ 300.751082][ T4383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.770680][ T4383] RSP: 002b:00007fe1e796d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.779069][ T4383] RAX: ffffffffffffffda RBX: 00007fe1e918bfa0 RCX: 00007fe1e8f12e59 [ 300.787014][ T4383] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 300.794961][ T4383] RBP: 00007fe1e796d090 R08: 0000000000000000 R09: 0000000000000000 [ 300.802905][ T4383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.810850][ T4383] R13: 00007fe1e918c038 R14: 00007fe1e918bfa0 R15: 00007fff14360048 [ 300.818798][ T4383] [ 300.912584][ T4383] syz.2.1030 (4383) used greatest stack depth: 20480 bytes left [ 300.928051][ T30] audit: type=1400 audit(1779889805.383:372): avc: denied { getopt } for pid=4389 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 300.991810][ T4393] loop2: detected capacity change from 0 to 512 [ 301.010528][ T30] audit: type=1400 audit(1779889805.423:373): avc: denied { bind } for pid=4389 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 301.031165][ T4395] tipc: Started in network mode [ 301.036133][ T4395] tipc: Node identity ac14140f, cluster identity 4711 [ 301.043418][ T4395] tipc: New replicast peer: 255.255.255.255 [ 301.049894][ T4395] tipc: Enabled bearer , priority 10 [ 301.059810][ T4395] loop3: detected capacity change from 0 to 512 [ 301.085652][ T4395] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 301.096028][ T4393] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 301.096054][ T4395] EXT4-fs (loop3): invalid journal inode [ 301.113071][ T4395] EXT4-fs (loop3): can't get journal size [ 301.118993][ T4393] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.131401][ T4395] EXT4-fs (loop3): 1 truncate cleaned up [ 301.150033][ T4381] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 301.157896][ T4395] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 301.200035][ T773] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 301.396636][ T4381] usb 7-1: Using ep0 maxpacket: 16 [ 301.490287][ T4407] overlayfs: failed to resolve './file1': -2 [ 301.638401][ T4409] loop1: detected capacity change from 0 to 256 [ 301.680453][ T4409] FAT-fs (loop1): Unrecognized mount option "nodoYAFxec" or missing value [ 301.698185][ T329] usb 2-1: USB disconnect, device number 40 [ 301.769503][ T4409] loop1: detected capacity change from 0 to 512 [ 301.780096][ T4381] usb 7-1: config 0 has an invalid interface number: 246 but max is 0 [ 301.788254][ T4381] usb 7-1: config 0 has no interface number 0 [ 301.794359][ T4381] usb 7-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 301.805718][ T4381] usb 7-1: config 0 interface 246 has no altsetting 0 [ 301.809558][ T4409] EXT4-fs (loop1): orphan cleanup on readonly fs [ 301.819015][ T4409] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 301.827200][ T4409] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 301.840079][ T773] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.841724][ T4409] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1038: attempt to clear invalid blocks 2 len 1 [ 301.851934][ T773] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.868677][ T4409] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1038: invalid indirect mapped block 1819239214 (level 0) [ 301.887384][ T4409] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1038: invalid indirect mapped block 1819239214 (level 1) [ 301.901940][ T4409] EXT4-fs (loop1): 1 truncate cleaned up [ 301.907558][ T4409] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 301.996766][ T773] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 302.006034][ T4381] usb 7-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 302.015116][ T773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.023361][ T4381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.031391][ T4381] usb 7-1: Product: syz [ 302.081678][ T773] usb 6-1: SerialNumber: syz [ 302.175518][ T4381] usb 7-1: Manufacturer: syz [ 302.292037][ T4381] usb 7-1: SerialNumber: syz [ 302.299845][ T4381] usb 7-1: config 0 descriptor?? [ 302.304926][ T329] tipc: Node number set to 2886997007 [ 302.570925][ T773] usb 6-1: 0:2 : does not exist [ 302.581175][ T773] usb 6-1: USB disconnect, device number 5 [ 302.819027][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 302.872550][ T4427] loop1: detected capacity change from 0 to 256 [ 302.896668][ T4427] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 303.093616][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.100965][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.135836][ T4436] loop5: detected capacity change from 0 to 2048 [ 303.190389][ T4436] FAT-fs (loop5): Unrecognized mount option "obj_type=msdos" or missing value [ 303.390100][ T773] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 303.640589][ T773] usb 2-1: Using ep0 maxpacket: 16 [ 303.801204][ T773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 303.812263][ T4381] usb 7-1: USB disconnect, device number 2 [ 303.900099][ T773] usb 2-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 303.910462][ T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 304.020038][ T329] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 304.070108][ T773] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 304.079240][ T773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.087469][ T773] usb 2-1: Product: syz [ 304.091796][ T773] usb 2-1: Manufacturer: syz [ 304.096416][ T773] usb 2-1: SerialNumber: syz [ 304.150041][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 304.170062][ T4381] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 304.259835][ T4449] loop2: detected capacity change from 0 to 256 [ 304.270170][ T6] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 304.278385][ T6] usb 6-1: config 0 has no interface number 0 [ 304.284735][ T6] usb 6-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 304.294801][ T4449] FAT-fs (loop2): Unrecognized mount option "nodoYAFxec" or missing value [ 304.297956][ T6] usb 6-1: config 0 interface 246 has no altsetting 0 [ 304.362474][ T4432] UDC core: couldn't find an available UDC or it's busy: -16 [ 304.369918][ T4432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 304.390101][ T329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.400385][ T329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.480329][ T6] usb 6-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 304.534949][ T4454] overlayfs: failed to resolve './file1': -2 [ 304.663120][ T329] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.672193][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.680217][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.688190][ T329] usb 4-1: SerialNumber: syz [ 304.692786][ T6] usb 6-1: Product: syz [ 304.696928][ T6] usb 6-1: Manufacturer: syz [ 304.701588][ T4381] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.711905][ T6] usb 6-1: SerialNumber: syz [ 304.716963][ T4381] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.726289][ T6] usb 6-1: config 0 descriptor?? [ 304.810236][ T4381] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.819303][ T4381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.827303][ T4381] usb 7-1: SerialNumber: syz [ 305.462432][ T4459] loop3: detected capacity change from 0 to 256 [ 305.492818][ T30] audit: type=1400 audit(1779889809.953:374): avc: denied { watch watch_reads } for pid=4458 comm="syz.3.1053" path="/dev/snd/timer" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 305.551905][ T4461] tipc: Enabled bearer , priority 0 [ 305.567742][ T4461] device syzkaller0 entered promiscuous mode [ 305.593906][ T4463] loop6: detected capacity change from 0 to 2048 [ 305.640816][ T4463] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.651954][ T4463] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.761199][ T4470] binder: 4469:4470 ioctl c0306201 200000004a40 returned -22 [ 305.771207][ T4470] loop6: detected capacity change from 0 to 512 [ 305.797197][ T4470] EXT4-fs (loop6): old and new quota format mixing [ 305.879756][ T30] audit: type=1400 audit(1779889810.333:375): avc: denied { remount } for pid=4469 comm="syz.6.1057" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.957906][ T4461] F2FS-fs (loop3): Found nat_bits in checkpoint [ 306.063921][ T4461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 306.300758][ T4460] tipc: Resetting bearer [ 306.326317][ T4460] tipc: Disabling bearer [ 306.355679][ T6] usb 6-1: USB disconnect, device number 6 [ 306.540758][ T4486] set_capacity_and_notify: 1 callbacks suppressed [ 306.540775][ T4486] loop3: detected capacity change from 0 to 256 [ 306.590352][ T4486] FAT-fs (loop3): Unrecognized mount option "nodoYAFxec" or missing value [ 306.720016][ T6] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 306.971754][ T4496] loop6: detected capacity change from 0 to 256 [ 306.978339][ T30] audit: type=1400 audit(1779889811.423:376): avc: denied { execute } for pid=4493 comm="syz.6.1064" name="file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.000519][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 307.005954][ T30] audit: type=1400 audit(1779889811.423:377): avc: denied { execute_no_trans } for pid=4493 comm="syz.6.1064" path="/16/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.072933][ T4496] FAT-fs (loop6): Directory bread(block 64) failed [ 307.079487][ T4496] FAT-fs (loop6): Directory bread(block 65) failed [ 307.086037][ T4496] FAT-fs (loop6): Directory bread(block 66) failed [ 307.092559][ T4496] FAT-fs (loop6): Directory bread(block 67) failed [ 307.099082][ T4496] FAT-fs (loop6): Directory bread(block 68) failed [ 307.105599][ T4496] FAT-fs (loop6): Directory bread(block 69) failed [ 307.112154][ T4496] FAT-fs (loop6): Directory bread(block 70) failed [ 307.118656][ T4496] FAT-fs (loop6): Directory bread(block 71) failed [ 307.125194][ T4496] FAT-fs (loop6): Directory bread(block 72) failed [ 307.131703][ T4496] FAT-fs (loop6): Directory bread(block 73) failed [ 307.180112][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.191247][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.201121][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.214387][ T6] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 307.223603][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.233669][ T6] usb 6-1: config 0 descriptor?? [ 307.300031][ T1388] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 307.670085][ T1388] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.680271][ T1388] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.713128][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0005/input/input31 [ 307.725565][ T6] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 307.788263][ T1388] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.797692][ T1388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.805915][ T1388] usb 3-1: SerialNumber: syz [ 307.999970][ T30] audit: type=1404 audit(1779889812.383:378): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 308.082221][ T30] audit: type=1400 audit(1779889812.433:379): avc: denied { create } for pid=4499 comm="syz.6.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 308.204264][ T30] audit: type=1400 audit(1779889812.443:380): avc: denied { read write } for pid=4499 comm="syz.6.1066" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 308.260433][ T30] audit: type=1400 audit(1779889812.513:381): avc: denied { read write } for pid=4483 comm="syz.5.1060" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 308.289324][ T30] audit: type=1400 audit(1779889812.653:382): avc: denied { write } for pid=4483 comm="syz.5.1060" name="raw" dev="proc" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 308.322063][ T314] usb 6-1: USB disconnect, device number 7 [ 308.334818][ T30] audit: type=1400 audit(1779889812.663:383): avc: denied { create } for pid=4483 comm="syz.5.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 308.403099][ T30] audit: type=1400 audit(1779889812.693:384): avc: denied { create } for pid=4483 comm="syz.5.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 308.599398][ T30] audit: type=1400 audit(1779889813.053:385): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 308.722107][ T4521] netlink: 'syz.2.1074': attribute type 13 has an invalid length. [ 308.759395][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.766538][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.410128][ T773] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 309.417504][ T773] usb 2-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 309.425003][ T773] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 309.450155][ T773] usb 2-1: unit 3 not found! [ 309.461355][ T329] usb 4-1: 0:2 : does not exist [ 309.480386][ T4381] usb 7-1: 0:2 : does not exist [ 309.487844][ T1388] usb 3-1: 0:2 : does not exist [ 309.491065][ T329] usb 4-1: USB disconnect, device number 37 [ 309.501058][ T4381] usb 7-1: USB disconnect, device number 3 [ 309.513769][ T1388] usb 3-1: USB disconnect, device number 38 [ 309.527056][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.543944][ T773] usb 2-1: USB disconnect, device number 41 [ 309.700576][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 310.330943][ T1513] device bridge_slave_1 left promiscuous mode [ 310.337169][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.345638][ T1513] device bridge_slave_0 left promiscuous mode [ 310.352011][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.013235][ T4587] FAULT_INJECTION: forcing a failure. [ 311.013235][ T4587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.026508][ T4587] CPU: 1 PID: 4587 Comm: syz.5.1101 Tainted: G W syzkaller #0 [ 311.035278][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.045329][ T4587] Call Trace: [ 311.048588][ T4587] [ 311.051492][ T4587] __dump_stack+0x21/0x30 [ 311.055808][ T4587] dump_stack_lvl+0x110/0x170 [ 311.060461][ T4587] ? show_regs_print_info+0x20/0x20 [ 311.065652][ T4587] dump_stack+0x15/0x20 [ 311.069789][ T4587] should_fail+0x3c1/0x510 [ 311.074196][ T4587] should_fail_usercopy+0x1a/0x20 [ 311.079196][ T4587] _copy_to_user+0x20/0x90 [ 311.083584][ T4587] simple_read_from_buffer+0xe9/0x160 [ 311.088930][ T4587] proc_fail_nth_read+0x1a6/0x220 [ 311.093929][ T4587] ? proc_fault_inject_write+0x310/0x310 [ 311.099541][ T4587] ? security_file_permission+0x83/0xa0 [ 311.105069][ T4587] ? proc_fault_inject_write+0x310/0x310 [ 311.110678][ T4587] vfs_read+0x28d/0xc40 [ 311.114807][ T4587] ? kernel_read+0x1f0/0x1f0 [ 311.119368][ T4587] ? __kasan_check_write+0x14/0x20 [ 311.124456][ T4587] ? mutex_lock+0x9b/0x1c0 [ 311.128847][ T4587] ? wait_for_completion_killable_timeout+0x10/0x10 [ 311.135414][ T4587] ? __fget_files+0x2c4/0x320 [ 311.140083][ T4587] ? __fdget_pos+0x2d2/0x380 [ 311.144660][ T4587] ? ksys_read+0x71/0x250 [ 311.148967][ T4587] ksys_read+0x149/0x250 [ 311.153190][ T4587] ? vfs_write+0xfd0/0xfd0 [ 311.157579][ T4587] ? debug_smp_processor_id+0x17/0x20 [ 311.162926][ T4587] __x64_sys_read+0x7b/0x90 [ 311.167428][ T4587] x64_sys_call+0x96d/0x9a0 [ 311.171905][ T4587] do_syscall_64+0x4c/0xa0 [ 311.176296][ T4587] ? clear_bhb_loop+0x50/0xa0 [ 311.180947][ T4587] ? clear_bhb_loop+0x50/0xa0 [ 311.185597][ T4587] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 311.191469][ T4587] RIP: 0033:0x7fa38c87d68e [ 311.195865][ T4587] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.215542][ T4587] RSP: 002b:00007fa38b316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.223932][ T4587] RAX: ffffffffffffffda RBX: 00007fa38b3176c0 RCX: 00007fa38c87d68e [ 311.231879][ T4587] RDX: 000000000000000f RSI: 00007fa38b3170a0 RDI: 0000000000000003 [ 311.239823][ T4587] RBP: 00007fa38b317090 R08: 0000000000000000 R09: 0000000000000000 [ 311.247768][ T4587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.255711][ T4587] R13: 00007fa38cb36038 R14: 00007fa38cb35fa0 R15: 00007ffe7c04f1e8 [ 311.263659][ T4587] [ 312.340351][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 312.340366][ T30] audit: type=1400 audit(1779889816.803:517): avc: denied { execmem } for pid=4608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 312.367476][ T30] audit: type=1400 audit(1779889816.803:518): avc: denied { create } for pid=4612 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 312.387102][ T30] audit: type=1400 audit(1779889816.803:519): avc: denied { create } for pid=4612 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 312.406816][ T30] audit: type=1326 audit(1779889816.803:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.3.1111" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7637c72e59 code=0x0 [ 312.431061][ T30] audit: type=1400 audit(1779889816.823:521): avc: denied { create } for pid=4611 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 312.450955][ T30] audit: type=1400 audit(1779889816.823:522): avc: denied { create } for pid=4611 comm="syz.2.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 312.470571][ T30] audit: type=1400 audit(1779889816.823:523): avc: denied { execmem } for pid=4609 comm="syz.5.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 312.489722][ T30] audit: type=1400 audit(1779889816.823:524): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 312.513764][ T30] audit: type=1400 audit(1779889816.873:525): avc: denied { read write } for pid=4612 comm="syz.3.1111" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 312.537173][ T30] audit: type=1400 audit(1779889816.983:526): avc: denied { read write } for pid=4281 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 314.102443][ T4635] FAULT_INJECTION: forcing a failure. [ 314.102443][ T4635] name failslab, interval 1, probability 0, space 0, times 0 [ 314.115114][ T4635] CPU: 0 PID: 4635 Comm: syz.2.1116 Tainted: G W syzkaller #0 [ 314.123872][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.133927][ T4635] Call Trace: [ 314.137198][ T4635] [ 314.140107][ T4635] __dump_stack+0x21/0x30 [ 314.144419][ T4635] dump_stack_lvl+0x110/0x170 [ 314.149068][ T4635] ? show_regs_print_info+0x20/0x20 [ 314.154242][ T4635] dump_stack+0x15/0x20 [ 314.158372][ T4635] should_fail+0x3c1/0x510 [ 314.162759][ T4635] __should_failslab+0xa4/0xe0 [ 314.167497][ T4635] should_failslab+0x9/0x20 [ 314.171974][ T4635] slab_pre_alloc_hook+0x3b/0xe0 [ 314.176893][ T4635] ? dup_task_struct+0x57/0xc10 [ 314.181722][ T4635] kmem_cache_alloc+0x44/0x260 [ 314.186471][ T4635] ? _raw_spin_lock_irq+0x95/0xf0 [ 314.191487][ T4635] dup_task_struct+0x57/0xc10 [ 314.196167][ T4635] ? __kasan_check_write+0x14/0x20 [ 314.201270][ T4635] copy_process+0x5c4/0x3250 [ 314.205853][ T4635] ? kstrtol_from_user+0x2a0/0x2a0 [ 314.210950][ T4635] ? __kasan_check_write+0x14/0x20 [ 314.216045][ T4635] ? proc_fail_nth_write+0x180/0x200 [ 314.221309][ T4635] ? proc_fail_nth_read+0x220/0x220 [ 314.226485][ T4635] ? __pidfd_prepare+0x150/0x150 [ 314.231405][ T4635] kernel_clone+0x233/0x960 [ 314.235890][ T4635] ? create_io_thread+0x170/0x170 [ 314.240893][ T4635] ? __kasan_check_write+0x14/0x20 [ 314.245982][ T4635] ? mutex_unlock+0x8f/0x230 [ 314.250550][ T4635] __x64_sys_clone+0x198/0x210 [ 314.255294][ T4635] ? __kasan_check_write+0x14/0x20 [ 314.260382][ T4635] ? __ia32_sys_vfork+0x130/0x130 [ 314.265388][ T4635] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 314.271437][ T4635] x64_sys_call+0x41f/0x9a0 [ 314.275919][ T4635] do_syscall_64+0x4c/0xa0 [ 314.280313][ T4635] ? clear_bhb_loop+0x50/0xa0 [ 314.284970][ T4635] ? clear_bhb_loop+0x50/0xa0 [ 314.289621][ T4635] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.295490][ T4635] RIP: 0033:0x7fe1e8f12e59 [ 314.299884][ T4635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.319466][ T4635] RSP: 002b:00007fe1e796cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 314.327854][ T4635] RAX: ffffffffffffffda RBX: 00007fe1e918bfa0 RCX: 00007fe1e8f12e59 [ 314.335810][ T4635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041122000 [ 314.343757][ T4635] RBP: 00007fe1e796d090 R08: 0000000000000000 R09: 0000000000000000 [ 314.351702][ T4635] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 314.359649][ T4635] R13: 00007fe1e918c038 R14: 00007fe1e918bfa0 R15: 00007fff14360048 [ 314.367601][ T4635] [ 315.111714][ T4644] FAULT_INJECTION: forcing a failure. [ 315.111714][ T4644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.150161][ T4644] CPU: 0 PID: 4644 Comm: syz.2.1119 Tainted: G W syzkaller #0 [ 315.158952][ T4644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.169008][ T4644] Call Trace: [ 315.172289][ T4644] [ 315.175214][ T4644] __dump_stack+0x21/0x30 [ 315.179548][ T4644] dump_stack_lvl+0x110/0x170 [ 315.184218][ T4644] ? show_regs_print_info+0x20/0x20 [ 315.189412][ T4644] ? format_decode+0x1bb/0x1520 [ 315.194258][ T4644] dump_stack+0x15/0x20 [ 315.198410][ T4644] should_fail+0x3c1/0x510 [ 315.202827][ T4644] should_fail_usercopy+0x1a/0x20 [ 315.207849][ T4644] _copy_from_user+0x20/0xd0 [ 315.212435][ T4644] kstrtouint_from_user+0xd3/0x220 [ 315.217541][ T4644] ? kstrtol_from_user+0x2a0/0x2a0 [ 315.222648][ T4644] ? 0xffffffff81000000 [ 315.226793][ T4644] ? _copy_to_user+0x78/0x90 [ 315.231376][ T4644] ? simple_read_from_buffer+0x10f/0x160 [ 315.237005][ T4644] proc_fail_nth_write+0x8b/0x200 [ 315.242030][ T4644] ? proc_fail_nth_read+0x220/0x220 [ 315.247225][ T4644] ? security_file_permission+0x79/0xa0 [ 315.252764][ T4644] ? security_file_permission+0x83/0xa0 [ 315.258304][ T4644] ? proc_fail_nth_read+0x220/0x220 [ 315.263497][ T4644] vfs_write+0x3f9/0xfd0 [ 315.267734][ T4644] ? file_end_write+0x1b0/0x1b0 [ 315.272577][ T4644] ? __kasan_check_write+0x14/0x20 [ 315.277687][ T4644] ? mutex_lock+0x9b/0x1c0 [ 315.282101][ T4644] ? wait_for_completion_killable_timeout+0x10/0x10 [ 315.288688][ T4644] ? __fget_files+0x2c4/0x320 [ 315.293367][ T4644] ? __fdget_pos+0x2d2/0x380 [ 315.297949][ T4644] ? ksys_write+0x71/0x250 [ 315.302360][ T4644] ksys_write+0x149/0x250 [ 315.306680][ T4644] ? __ia32_sys_read+0x90/0x90 [ 315.311439][ T4644] ? debug_smp_processor_id+0x17/0x20 [ 315.316808][ T4644] __x64_sys_write+0x7b/0x90 [ 315.321393][ T4644] x64_sys_call+0x8ef/0x9a0 [ 315.325893][ T4644] do_syscall_64+0x4c/0xa0 [ 315.330312][ T4644] ? clear_bhb_loop+0x50/0xa0 [ 315.334986][ T4644] ? clear_bhb_loop+0x50/0xa0 [ 315.339661][ T4644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.345547][ T4644] RIP: 0033:0x7fe1e8ed368e [ 315.349956][ T4644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 315.369555][ T4644] RSP: 002b:00007fe1e796cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.377965][ T4644] RAX: ffffffffffffffda RBX: 00007fe1e796d6c0 RCX: 00007fe1e8ed368e [ 315.385930][ T4644] RDX: 0000000000000001 RSI: 00007fe1e796d0a0 RDI: 0000000000000003 [ 315.393894][ T4644] RBP: 00007fe1e796d090 R08: 0000000000000000 R09: 0000000000000000 [ 315.401860][ T4644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.409825][ T4644] R13: 00007fe1e918c038 R14: 00007fe1e918bfa0 R15: 00007fff14360048 [ 315.417792][ T4644] [ 316.213626][ T4651] FAULT_INJECTION: forcing a failure. [ 316.213626][ T4651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.218852][ T4655] device vti0 entered promiscuous mode [ 316.227436][ T4651] CPU: 0 PID: 4651 Comm: syz.2.1121 Tainted: G W syzkaller #0 [ 316.240901][ T4651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.250949][ T4651] Call Trace: [ 316.254207][ T4651] [ 316.257113][ T4651] __dump_stack+0x21/0x30 [ 316.261422][ T4651] dump_stack_lvl+0x110/0x170 [ 316.266075][ T4651] ? show_regs_print_info+0x20/0x20 [ 316.271247][ T4651] dump_stack+0x15/0x20 [ 316.275379][ T4651] should_fail+0x3c1/0x510 [ 316.279773][ T4651] should_fail_usercopy+0x1a/0x20 [ 316.284775][ T4651] _copy_to_user+0x20/0x90 [ 316.289165][ T4651] simple_read_from_buffer+0xe9/0x160 [ 316.294519][ T4651] proc_fail_nth_read+0x1a6/0x220 [ 316.299540][ T4651] ? proc_fault_inject_write+0x310/0x310 [ 316.305150][ T4651] ? security_file_permission+0x83/0xa0 [ 316.310671][ T4651] ? proc_fault_inject_write+0x310/0x310 [ 316.316276][ T4651] vfs_read+0x28d/0xc40 [ 316.320405][ T4651] ? kernel_read+0x1f0/0x1f0 [ 316.324968][ T4651] ? __kasan_check_write+0x14/0x20 [ 316.330053][ T4651] ? mutex_lock+0x9b/0x1c0 [ 316.334442][ T4651] ? wait_for_completion_killable_timeout+0x10/0x10 [ 316.341002][ T4651] ? __fget_files+0x2c4/0x320 [ 316.345664][ T4651] ? __fdget_pos+0x2d2/0x380 [ 316.350227][ T4651] ? ksys_read+0x71/0x250 [ 316.354534][ T4651] ksys_read+0x149/0x250 [ 316.358748][ T4651] ? vfs_write+0xfd0/0xfd0 [ 316.363137][ T4651] ? debug_smp_processor_id+0x17/0x20 [ 316.368482][ T4651] __x64_sys_read+0x7b/0x90 [ 316.372955][ T4651] x64_sys_call+0x96d/0x9a0 [ 316.377430][ T4651] do_syscall_64+0x4c/0xa0 [ 316.381819][ T4651] ? clear_bhb_loop+0x50/0xa0 [ 316.386472][ T4651] ? clear_bhb_loop+0x50/0xa0 [ 316.391132][ T4651] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 316.396995][ T4651] RIP: 0033:0x7fe1e8ed368e [ 316.401384][ T4651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.420967][ T4651] RSP: 002b:00007fe1e796cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.429370][ T4651] RAX: ffffffffffffffda RBX: 00007fe1e796d6c0 RCX: 00007fe1e8ed368e [ 316.437318][ T4651] RDX: 000000000000000f RSI: 00007fe1e796d0a0 RDI: 0000000000000004 [ 316.445262][ T4651] RBP: 00007fe1e796d090 R08: 0000000000000000 R09: 0000000000000000 [ 316.453211][ T4651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.461161][ T4651] R13: 00007fe1e918c038 R14: 00007fe1e918bfa0 R15: 00007fff14360048 [ 316.469112][ T4651] [ 317.417127][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 317.417140][ T30] audit: type=1400 audit(1779889821.873:573): avc: denied { execmem } for pid=4658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 317.444862][ T4667] FAULT_INJECTION: forcing a failure. [ 317.444862][ T4667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.446381][ T30] audit: type=1400 audit(1779889821.873:574): avc: denied { module_request } for pid=4659 comm="syz.3.1125" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 317.464320][ T4667] CPU: 0 PID: 4667 Comm: syz.6.1126 Tainted: G W syzkaller #0 [ 317.480405][ T30] audit: type=1400 audit(1779889821.873:575): avc: denied { sys_module } for pid=4659 comm="syz.3.1125" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 317.488756][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.509889][ T30] audit: type=1400 audit(1779889821.883:576): avc: denied { prog_load } for pid=4659 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 317.519664][ T4667] Call Trace: [ 317.519670][ T4667] [ 317.519676][ T4667] __dump_stack+0x21/0x30 [ 317.538807][ T30] audit: type=1400 audit(1779889821.883:577): avc: denied { read write } for pid=4659 comm="syz.3.1125" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 317.541828][ T4667] dump_stack_lvl+0x110/0x170 [ 317.541851][ T4667] ? show_regs_print_info+0x20/0x20 [ 317.544918][ T30] audit: type=1400 audit(1779889821.883:578): avc: denied { create } for pid=4662 comm="syz.2.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 317.549059][ T4667] dump_stack+0x15/0x20 [ 317.573695][ T30] audit: type=1400 audit(1779889821.883:579): avc: denied { create } for pid=4662 comm="syz.2.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 317.577131][ T4667] should_fail+0x3c1/0x510 [ 317.582562][ T30] audit: type=1400 audit(1779889821.883:580): avc: denied { create } for pid=4662 comm="syz.2.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 317.601733][ T4667] should_fail_usercopy+0x1a/0x20 [ 317.601758][ T4667] _copy_to_user+0x20/0x90 [ 317.601772][ T4667] simple_read_from_buffer+0xe9/0x160 [ 317.606179][ T30] audit: type=1400 audit(1779889821.883:581): avc: denied { read write } for pid=4662 comm="syz.2.1124" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 317.626185][ T4667] proc_fail_nth_read+0x1a6/0x220 [ 317.626208][ T4667] ? proc_fault_inject_write+0x310/0x310 [ 317.630811][ T30] audit: type=1400 audit(1779889821.883:582): avc: denied { mounton } for pid=4662 comm="syz.2.1124" path="/234/file0" dev="tmpfs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 317.650876][ T4667] ? security_file_permission+0x83/0xa0 [ 317.650898][ T4667] ? proc_fault_inject_write+0x310/0x310 [ 317.650915][ T4667] vfs_read+0x28d/0xc40 [ 317.650930][ T4667] ? kernel_read+0x1f0/0x1f0 [ 317.741690][ T4667] ? __kasan_check_write+0x14/0x20 [ 317.746789][ T4667] ? mutex_lock+0x9b/0x1c0 [ 317.751182][ T4667] ? wait_for_completion_killable_timeout+0x10/0x10 [ 317.757744][ T4667] ? __fget_files+0x2c4/0x320 [ 317.762396][ T4667] ? __fdget_pos+0x2d2/0x380 [ 317.766956][ T4667] ? ksys_read+0x71/0x250 [ 317.771259][ T4667] ksys_read+0x149/0x250 [ 317.775472][ T4667] ? vfs_write+0xfd0/0xfd0 [ 317.779858][ T4667] ? debug_smp_processor_id+0x17/0x20 [ 317.785202][ T4667] __x64_sys_read+0x7b/0x90 [ 317.789679][ T4667] x64_sys_call+0x96d/0x9a0 [ 317.794159][ T4667] do_syscall_64+0x4c/0xa0 [ 317.798562][ T4667] ? clear_bhb_loop+0x50/0xa0 [ 317.803212][ T4667] ? clear_bhb_loop+0x50/0xa0 [ 317.807861][ T4667] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.813726][ T4667] RIP: 0033:0x7fa85f09d68e [ 317.818114][ T4667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 317.837695][ T4667] RSP: 002b:00007fa85db36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.846091][ T4667] RAX: ffffffffffffffda RBX: 00007fa85db376c0 RCX: 00007fa85f09d68e [ 317.854040][ T4667] RDX: 000000000000000f RSI: 00007fa85db370a0 RDI: 0000000000000005 [ 317.861984][ T4667] RBP: 00007fa85db37090 R08: 0000000000000000 R09: 0000000000000000 [ 317.869928][ T4667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.877876][ T4667] R13: 00007fa85f356038 R14: 00007fa85f355fa0 R15: 00007ffe4fe619a8 [ 317.885822][ T4667] [ 321.001225][ T4681] FAULT_INJECTION: forcing a failure. [ 321.001225][ T4681] name fail_futex, interval 1, probability 0, space 0, times 1 [ 321.014194][ T4681] CPU: 1 PID: 4681 Comm: syz.3.1134 Tainted: G W syzkaller #0 [ 321.022952][ T4681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.032983][ T4681] Call Trace: [ 321.036238][ T4681] [ 321.039146][ T4681] __dump_stack+0x21/0x30 [ 321.043456][ T4681] dump_stack_lvl+0x110/0x170 [ 321.048107][ T4681] ? show_regs_print_info+0x20/0x20 [ 321.053279][ T4681] ? 0xffffffffa002a000 [ 321.057404][ T4681] dump_stack+0x15/0x20 [ 321.061539][ T4681] should_fail+0x3c1/0x510 [ 321.065938][ T4681] get_futex_key+0x143/0xb60 [ 321.070502][ T4681] ? arch_stack_walk+0xee/0x140 [ 321.075331][ T4681] ? futex_wait_restart+0x220/0x220 [ 321.080506][ T4681] futex_wake+0x133/0x8f0 [ 321.084812][ T4681] ? futex_wait+0x8f0/0x8f0 [ 321.089304][ T4681] do_futex+0xda2/0x2800 [ 321.093523][ T4681] ? stack_trace_save+0xf0/0xf0 [ 321.098350][ T4681] ? arch_stack_walk+0xee/0x140 [ 321.103177][ T4681] ? futex_exit_release+0x1d0/0x1d0 [ 321.108349][ T4681] ? stack_trace_save+0xa6/0xf0 [ 321.113175][ T4681] ? __stack_depot_save+0x34/0x480 [ 321.118264][ T4681] ? kasan_save_stack+0x49/0x60 [ 321.123173][ T4681] ? kasan_save_stack+0x3a/0x60 [ 321.127995][ T4681] ? __kasan_record_aux_stack+0xd2/0x100 [ 321.133600][ T4681] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 321.139555][ T4681] ? call_rcu+0x10b/0xf80 [ 321.143858][ T4681] ? __fput+0x63f/0x8b0 [ 321.147989][ T4681] ? __kasan_check_write+0x14/0x20 [ 321.153072][ T4681] ? perf_lock_task_context+0x401/0x4b0 [ 321.158592][ T4681] ? perf_event_exit_event+0x520/0x520 [ 321.164022][ T4681] ? mutex_unlock+0x8f/0x230 [ 321.168583][ T4681] ? __kasan_check_write+0x14/0x20 [ 321.173665][ T4681] ? __kasan_check_read+0x11/0x20 [ 321.178667][ T4681] ? perf_event_exit_task+0x87e/0x890 [ 321.184020][ T4681] ? _raw_spin_unlock+0x4d/0x70 [ 321.188856][ T4681] ? uprobe_free_utask+0x83/0x160 [ 321.193856][ T4681] mm_release+0x206/0x360 [ 321.198164][ T4681] ? exit_mm_release+0x30/0x30 [ 321.202908][ T4681] ? futex_exit_release+0x119/0x1d0 [ 321.208083][ T4681] exit_mm_release+0x25/0x30 [ 321.212650][ T4681] do_exit+0x618/0x2890 [ 321.216784][ T4681] ? put_task_struct+0x90/0x90 [ 321.221524][ T4681] ? __fput+0x63f/0x8b0 [ 321.225656][ T4681] ? __kasan_check_write+0x14/0x20 [ 321.230744][ T4681] ? _raw_spin_lock_irq+0x95/0xf0 [ 321.235749][ T4681] do_group_exit+0x141/0x310 [ 321.240314][ T4681] ? __kasan_check_write+0x14/0x20 [ 321.245402][ T4681] get_signal+0x66a/0x1480 [ 321.249795][ T4681] arch_do_signal_or_restart+0xdf/0x11c0 [ 321.255404][ T4681] ? __sys_recvmmsg+0x290/0x290 [ 321.260229][ T4681] ? get_sigframe_size+0x10/0x10 [ 321.265141][ T4681] ? fput_many+0x15a/0x1a0 [ 321.269532][ T4681] ? __x64_sys_recvmmsg+0x195/0x250 [ 321.274708][ T4681] ? do_recvmmsg+0x830/0x830 [ 321.279271][ T4681] exit_to_user_mode_loop+0xa7/0xe0 [ 321.284448][ T4681] exit_to_user_mode_prepare+0x87/0xd0 [ 321.289879][ T4681] syscall_exit_to_user_mode+0x1a/0x30 [ 321.295314][ T4681] do_syscall_64+0x58/0xa0 [ 321.299710][ T4681] ? clear_bhb_loop+0x50/0xa0 [ 321.304360][ T4681] ? clear_bhb_loop+0x50/0xa0 [ 321.309008][ T4681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.314877][ T4681] RIP: 0033:0x7f7637c72e59 [ 321.319266][ T4681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.338843][ T4681] RSP: 002b:00007f76366cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 321.347229][ T4681] RAX: fffffffffffffe00 RBX: 00007f7637eebfa0 RCX: 00007f7637c72e59 [ 321.355178][ T4681] RDX: 0000000000000001 RSI: 0000200000004700 RDI: 0000000000000003 [ 321.363121][ T4681] RBP: 00007f76366cd090 R08: 0000000000000000 R09: 0000000000000000 [ 321.371064][ T4681] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 321.379009][ T4681] R13: 00007f7637eec038 R14: 00007f7637eebfa0 R15: 00007fffc48503e8 [ 321.386955][ T4681] [ 321.674951][ T4690] xt_hashlimit: size too large, truncated to 1048576 [ 323.294388][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 323.294401][ T30] audit: type=1400 audit(1779889827.753:638): avc: denied { read write } for pid=4704 comm="syz.6.1142" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 323.303717][ T4706] device veth0_vlan left promiscuous mode [ 323.335261][ T30] audit: type=1400 audit(1779889827.753:639): avc: denied { create } for pid=4702 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 323.354989][ T30] audit: type=1400 audit(1779889827.793:640): avc: denied { map_create } for pid=4708 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 323.358547][ T4706] device veth0_vlan entered promiscuous mode [ 323.374119][ T30] audit: type=1400 audit(1779889827.793:641): avc: denied { execmem } for pid=4701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 323.386638][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 323.401337][ T30] audit: type=1400 audit(1779889827.813:642): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 323.407845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.439268][ T30] audit: type=1400 audit(1779889827.863:643): avc: denied { read write } for pid=4281 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 323.441559][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 323.471432][ T30] audit: type=1400 audit(1779889827.863:644): avc: denied { map_create } for pid=4708 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 323.472674][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.494342][ T30] audit: type=1400 audit(1779889827.893:645): avc: denied { prog_load } for pid=4708 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 323.501243][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.517327][ T30] audit: type=1400 audit(1779889827.953:646): avc: denied { read write } for pid=3379 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 323.525919][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 323.557452][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.565546][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.573900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.582189][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.589589][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.696113][ T30] audit: type=1400 audit(1779889829.153:647): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 328.782164][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 328.782177][ T30] audit: type=1400 audit(1779889833.243:678): avc: denied { execmem } for pid=4733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 328.810242][ T30] audit: type=1400 audit(1779889833.243:679): avc: denied { read write } for pid=4734 comm="syz.3.1153" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 328.833825][ T30] audit: type=1400 audit(1779889833.243:680): avc: denied { mounton } for pid=4734 comm="syz.3.1153" path="/207/file0" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 328.859350][ T30] audit: type=1400 audit(1779889833.243:681): avc: denied { prog_load } for pid=4734 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 328.878938][ T30] audit: type=1400 audit(1779889833.243:682): avc: denied { map_create } for pid=4734 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 328.879130][ T4743] FAULT_INJECTION: forcing a failure. [ 328.879130][ T4743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.911930][ T30] audit: type=1400 audit(1779889833.243:683): avc: denied { create } for pid=4734 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 328.920104][ T4743] CPU: 1 PID: 4743 Comm: syz.2.1152 Tainted: G W syzkaller #0 [ 328.931959][ T30] audit: type=1400 audit(1779889833.243:684): avc: denied { read write } for pid=4734 comm="syz.3.1153" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 328.940185][ T4743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.940196][ T4743] Call Trace: [ 328.940202][ T4743] [ 328.940207][ T4743] __dump_stack+0x21/0x30 [ 328.963560][ T30] audit: type=1400 audit(1779889833.243:685): avc: denied { create } for pid=4734 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 328.973212][ T4743] dump_stack_lvl+0x110/0x170 [ 328.973237][ T4743] ? show_regs_print_info+0x20/0x20 [ 328.973255][ T4743] ? format_decode+0x1bb/0x1520 [ 328.973270][ T4743] dump_stack+0x15/0x20 [ 328.973285][ T4743] should_fail+0x3c1/0x510 [ 328.973298][ T4743] should_fail_usercopy+0x1a/0x20 [ 328.973312][ T4743] _copy_from_user+0x20/0xd0 [ 328.973324][ T4743] kstrtouint_from_user+0xd3/0x220 [ 328.973338][ T4743] ? kstrtol_from_user+0x2a0/0x2a0 [ 328.973352][ T4743] ? 0xffffffff81000000 [ 328.973363][ T4743] ? _copy_to_user+0x78/0x90 [ 328.977228][ T30] audit: type=1400 audit(1779889833.243:686): avc: denied { create } for pid=4734 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 328.979538][ T4743] ? simple_read_from_buffer+0x10f/0x160 [ 328.984019][ T30] audit: type=1400 audit(1779889833.253:687): avc: denied { read } for pid=4734 comm="syz.3.1153" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 329.003330][ T4743] proc_fail_nth_write+0x8b/0x200 [ 329.003355][ T4743] ? proc_fail_nth_read+0x220/0x220 [ 329.003371][ T4743] ? security_file_permission+0x79/0xa0 [ 329.003388][ T4743] ? security_file_permission+0x83/0xa0 [ 329.003403][ T4743] ? proc_fail_nth_read+0x220/0x220 [ 329.129547][ T4743] vfs_write+0x3f9/0xfd0 [ 329.133791][ T4743] ? file_end_write+0x1b0/0x1b0 [ 329.138636][ T4743] ? __kasan_check_write+0x14/0x20 [ 329.143741][ T4743] ? mutex_lock+0x9b/0x1c0 [ 329.148152][ T4743] ? wait_for_completion_killable_timeout+0x10/0x10 [ 329.154734][ T4743] ? __fget_files+0x2c4/0x320 [ 329.159408][ T4743] ? __fdget_pos+0x2d2/0x380 [ 329.163991][ T4743] ? ksys_write+0x71/0x250 [ 329.168406][ T4743] ksys_write+0x149/0x250 [ 329.172736][ T4743] ? __ia32_sys_read+0x90/0x90 [ 329.177559][ T4743] ? debug_smp_processor_id+0x17/0x20 [ 329.182932][ T4743] __x64_sys_write+0x7b/0x90 [ 329.187523][ T4743] x64_sys_call+0x8ef/0x9a0 [ 329.192033][ T4743] do_syscall_64+0x4c/0xa0 [ 329.196447][ T4743] ? clear_bhb_loop+0x50/0xa0 [ 329.201118][ T4743] ? clear_bhb_loop+0x50/0xa0 [ 329.205790][ T4743] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.211682][ T4743] RIP: 0033:0x7fe1e8ed368e [ 329.216097][ T4743] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 329.235695][ T4743] RSP: 002b:00007fe1e796cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.244083][ T4743] RAX: ffffffffffffffda RBX: 00007fe1e796d6c0 RCX: 00007fe1e8ed368e [ 329.252032][ T4743] RDX: 0000000000000001 RSI: 00007fe1e796d0a0 RDI: 0000000000000003 [ 329.259976][ T4743] RBP: 00007fe1e796d090 R08: 0000000000000000 R09: 0000000000000000 [ 329.267933][ T4743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.275876][ T4743] R13: 00007fe1e918c038 R14: 00007fe1e918bfa0 R15: 00007fff14360048 [ 329.283825][ T4743] [ 330.873684][ T45] tipc: Disabling bearer [ 330.883150][ T45] tipc: Left network mode [ 330.921037][ T4755] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1156'. [ 331.540620][ T45] device bridge_slave_1 left promiscuous mode [ 331.546734][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.554124][ T45] device bridge_slave_0 left promiscuous mode [ 331.560234][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.567814][ T45] device veth1_macvtap left promiscuous mode [ 331.573823][ T45] device veth0_vlan left promiscuous mode [ 332.011421][ T45] tipc: Left network mode [ 332.650892][ T45] device bridge_slave_1 left promiscuous mode [ 332.657001][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.664475][ T45] device bridge_slave_0 left promiscuous mode [ 332.670618][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.678430][ T45] device bridge_slave_1 left promiscuous mode [ 332.684632][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.692178][ T45] device bridge_slave_0 left promiscuous mode [ 332.698278][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.706140][ T45] device bridge_slave_1 left promiscuous mode [ 332.712244][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.719614][ T45] device bridge_slave_0 left promiscuous mode [ 332.725807][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.733699][ T45] device veth1_macvtap left promiscuous mode [ 332.739676][ T45] device veth0_vlan left promiscuous mode [ 332.745701][ T45] device veth1_macvtap left promiscuous mode [ 332.751685][ T45] device veth0_vlan left promiscuous mode