last executing test programs: 38.373558818s ago: executing program 2 (id=231): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x193040, 0x131) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x4, 0x1, 0x7}}, 0x14) (async, rerun: 64) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x2040400) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000c00)={[{@auto_da_alloc}, {@noblock_validity}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0xe, 0x5fc, &(0x7f0000000600)="$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") 38.369769128s ago: executing program 2 (id=232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e6c6300850000000f000000953c45a990f81a08ea09f865f262193cb27354361f6f106f026ec0b42e51d4a229e08f921ececa648cb79cd17d0f4b6eee777a1c6ec064c51906958a662c37da8906e431ae2d2467d0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800480, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x2) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x39, '\x00', {0x9, 0x6, "868e17", 0x4, 0x32, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, [], "f1b5d73775326820"}}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_io_uring_complete(0x0) 36.921509415s ago: executing program 2 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0x1, 0x70bd29, 0x3, {0x0, 0x0, 0x0, r5, {0xf, 0x3}, {0xfff1}, {0x0, 0xf}}}, 0x24}}, 0x44) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") socket$inet_udplite(0x2, 0x2, 0x88) truncate(&(0x7f0000000900)='./file1\x00', 0x100) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0600000000000000000230000000"], 0x14}}, 0x4009000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x44}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x44, r9, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24005004}, 0xc000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r11, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 35.574256172s ago: executing program 2 (id=249): ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000180)=0x400) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x23, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0xdc3f, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r3, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r10, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r11, @ANYRESHEX, @ANYRES32=r9, @ANYRESOCT=r11], 0x81, 0x14f5, &(0x7f0000001580)="$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") write$FUSE_CREATE_OPEN(r2, &(0x7f0000000600)={0xa0, 0xfffffffffffffff5, r7, {{0x2, 0x1, 0x7fff, 0x6, 0xfffffff9, 0x85e, {0x1, 0x2, 0x1, 0x0, 0xa0a, 0x1, 0xc, 0x89b, 0xff80000, 0xa000, 0xc, 0xffffffffffffffff, r11, 0x51a5, 0x6}}, {0x0, 0x1a}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='user./']) 34.477676261s ago: executing program 2 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='mm_page_alloc\x00', r3}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20e10000) 34.36540822s ago: executing program 2 (id=253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x3, 0x4c4, &(0x7f0000000780)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) fcntl$setlease(r3, 0x400, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r5, 0x9) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 34.292399615s ago: executing program 32 (id=253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x3, 0x4c4, &(0x7f0000000780)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) fcntl$setlease(r3, 0x400, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r5, 0x9) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 8.172399674s ago: executing program 3 (id=373): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 8.084851651s ago: executing program 3 (id=374): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850003005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) setreuid(0xee01, 0xee01) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) futex(0x0, 0x5, 0x8, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="03000000000000000000210000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x20, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc07e}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1004c041}, 0x4010) fcntl$dupfd(r1, 0x0, r2) setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0x7cea2d5a}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[], 0x108}, 0x1, 0x7}, 0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) 8.084174291s ago: executing program 3 (id=375): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) mmap(&(0x7f0000570000/0x3000)=nil, 0x3000, 0x2, 0x6031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x24a5c07, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000007d40)="$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") r5 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000000c0)=""/254, 0xfe}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000540)=""/175, 0xaf}], 0x7}, 0x40002061) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 8.023694155s ago: executing program 5 (id=376): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 7.769980906s ago: executing program 0 (id=378): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf2501000000000000000141000000180017000000150000000869623a76657468310000000075466738fcc91d39ee339e8be88603403e60ab6e2581cedd92cd9cdb66b7524c219b44c8568390c1c501e35fc13d043e5a28da2331d7aaa7cbdce8a12e9a11d8fe5f8ec019e87c3d2c2952832fde56d7d59bbba0034052b168b568587c239b6d2da3c7d2abdcd5ee7adce8cae75935e8ab929481888c92ab8c26c31dfbc14398f0d39a51eaf22af612d258a17e1c9e429004"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32=r10], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000f7020ed2446696fb05d142cc1af1bdedfd51de7f33d148f2e47c3000310370ebcf65146aa81254abdd217020fe2fd1d57f5a1f41749a7d2b12c39402d153f9", @ANYRES32, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x48) 7.769371396s ago: executing program 5 (id=379): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x5f00, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 7.153491935s ago: executing program 5 (id=380): madvise(&(0x7f0000452000/0x2000)=nil, 0x2000, 0xa) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000780)=""/106, 0x6a}, {&(0x7f0000000a00)=""/70, 0x46}, {&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000880)=""/198, 0x114}], 0x6, &(0x7f0000000280)=[{&(0x7f0000217f28)=""/231, 0xe7}, {&(0x7f00000005c0)=""/178, 0xb2}], 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@raw=[@generic={0x2, 0xb, 0xa, 0x1, 0x1}, @jmp={0x5, 0x1, 0xa, 0x3, 0x2, 0x50, 0xfffffffffffffffc}, @generic={0x9, 0x0, 0x2, 0x3, 0x9}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000002fa97e358fd7bb84d668e9383c74d7649c6f5f397bbf540ebd051e50d910437c75", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008000"/25], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000380)=0xeb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) 7.082371661s ago: executing program 0 (id=381): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) (async) pipe2$9p(0x0, 0x0) (async) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0xfe, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x0, @empty, @local}}}}}}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff11"], 0x30}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42673d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a51220c41b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41bcde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f392a38052f859ab5600000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffdb, 0x0, 0x0, 0x10, 0x1}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r8}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r11 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000100)="010120000a00140017007ef52f555f2a0c9f280000000000000019143baa111f1f858ce632f47042195ecf3d77ccc1b6d78839980700f37f", 0x38, 0x24000014, &(0x7f00000000c0)={0x11, 0x0, r12, 0x1, 0x6a}, 0x14) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 6.736683739s ago: executing program 0 (id=382): mkdir(&(0x7f0000000280)='./bus\x00', 0x100) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_file_set_fowner\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRESHEX=0x0, @ANYBLOB="d1ff70a28cf5ff5f0c113888e02aa46bb3fdf0dd556f0c08032cda136e54d7f2987f15ec5d2ea1a4033ea71fb7563a6891e5ad2f0c8a2a44237607d660f6f4f81beae8ee771ffd54b44b601241b87cb1651b8d9fc0a4fad7522422112e381be36607ff04c4d59d08e7ae7b1e73e1dfd855c0edbaabcd0104e88a1fbe88ca5574c202b43c8c517e303a004c7e55fbd4eed742170545d4652be30f575d961544ddc92b6afd6bcd8b8a23c1e4697745e4e73d0a4392abcc31d3cc19adef38c25449e2c2ab9baceb6b44c2e7df5df4d68bd0498dd270e26eaed6ba4c710e3325c8d38f996df7ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = gettid() remap_file_pages(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x3000000, 0x40, 0x800) timer_create(0x5, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r6}, &(0x7f0000044000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x5}]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1062200) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) getpid() 6.624690308s ago: executing program 3 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x800000000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f00000010c0)={[{@abort}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}], [{@obj_role={'obj_role', 0x3d, '*{'}}]}, 0x1, 0x56d, &(0x7f0000000b40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r2, 0x6000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000001180)={[], [{@appraise_type}, {@subj_type}, {@euid_gt}, {@appraise_type}, {@fsname}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x30, 0x66, 0xb69e77506aab28e3, 0x30, 0x65, 0x33, 0x33], 0x2d, [0x63, 0x32, 0x37, 0x37], 0x2d, [0x37, 0x63, 0x65, 0x38], 0x2d, [0x31, 0x37, 0x63, 0x32], 0x2d, [0x34, 0x34, 0x32, 0x36, 0x62, 0xd, 0x66, 0x62]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'commit'}}, {@seclabel}, {@appraise_type}, {@fowner_gt}]}, 0x1, 0x599, &(0x7f0000000540)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80, 0x110) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r11, &(0x7f00000000c0), 0x14) 6.264483026s ago: executing program 5 (id=385): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) pwritev(r1, &(0x7f0000000680)=[{&(0x7f0000001900)='b', 0x1}], 0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff090500000600395032303030"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(0xffffffffffffffff, 0x0, 0x0) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1101) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x4, 0x1, 0xa0, 0x400, 0x13, "50fb22ce64a4a869532327081c66505512e415"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000007e498cb4d54d7dee07e62a389f00"/41], 0x48) close(r8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRESHEX=0x0], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x8040) 4.60140463s ago: executing program 4 (id=387): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r4, 0x0, 0xfdef) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$eJzs281vFOUfAPDvzG7L249fKyIKgjSisfGlpQWVgxeNJh40MdEDHmtbCLJQQ2sihGg1Bo+GxLvxaOJf4MmTUU8mXvVuSIgSE9CYsGZmZ9ruslsK3bKE/XySaZ9n59mZ57vzPDPPzLMbQN8ayf4kEf+LiF8jYqiRbS4w0vh37cr56b+vnJ9Ool5/84/BvNzVK+eny6Ll+7YVmdE0Iv00KXbSbP7suZNTtdrsmSI/vnDqvfH5s+eeOXFq6vjs8dnTk0eOHD408fxzk892Jc4svqt7Ppzbu/vVty++Pn304js/fpPVd9e+xvqVcXTLSBb4n/Vc67rHu72zHrteX44zqfa6NqxVJSKywzWQ9/+hqMTywRuKVz7paeWADZWdsze1ebn4v1gH7mFJ9LoGQG+UF/zs/rdc7uDwo+cuv9i4AcrivlYsjTXVSIsyAxu4/5GIOLr4z5fZEi3PIZaOz+AGVgAA6DvfZeOfp9uN/9LYtaLc/4u5oeGIuC8idkTE/RGxMyIeiMjLPhgRD93i/lunhm4cf6aXbiuwNcrGfy8Uc1vN479y9BfDlSK3PY9/IDl2ojZ7sPhMRmNgU5afaLfxchMv//J5p/2vHP9lS7b/cixYbORSteUB3czUwlS3BqWXP47YU20Xf7I0E5BExO6I2LPmrS5G8fHkTjz59d5OJW8e/yq6MM9U/yriicbxX4yW+EvJ6vOT45ujNntwvGwVN/rp5wtvdNp/2/ivb19/YGuUHf+tze1/aV0l/zv0V7JyvnY+bvmG5MJvn3W8p6zeZvsfTN7K53TLmnwwtbBwZiJiMHktovX1yeX3lvmyfBb/6IH2/X9H8Z4s/ocjImvE+yLikYjYHxH/FvfQj0bEgVXi/+Glx97ttG5d7T9iyxrLdZTFP9P2/LfU/oebj/+tJyonv//29uPPjv/hPDVavJKf/26ic3U2FyWWWzMAAADc69L8u/FJOraUTtOxscZ3+HfG1rQ2N7/w1LG590/PNL5DPxwDafmka2jF89CJZLHYYiM/WTwrLtcfKp4bf1HZkufHpudqMz2OHfrdtub+v7/s/5nfK72uHbDh/F4L+ldr/097VA/gznP9h/6l/0P/0v+hf7Xr/x+15M0FwL3J9R/6l/4P/Uv/h/6l/0NfWs/v+jcqUV3l1/sSd0si0ruiGhItiUgaF/RN6+zdvT4zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMd/AQAA///gq/is") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x40042) write$cgroup_int(r0, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) 4.409523675s ago: executing program 5 (id=388): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000010000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x8, 0x3}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x49}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 4.302832244s ago: executing program 1 (id=389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988ca58e8001d75d38e0d369bd7c50580", 0x1c}, {&(0x7f0000000380)="9c74dfbf7757d9c4135f04770d56", 0xe}], 0x2) 4.267007047s ago: executing program 0 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) syz_pidfd_open(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nouid32}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) 3.344453101s ago: executing program 5 (id=391): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403450f60495812fe7da1d04000352104958369eeb670122050009068102ff1d9300"/54], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x3030804, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d77696e39352c636f6465706167653d3836392c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d6d697865642c757466383d312c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c696f636861727365743d6d61636761656c69632c009fe7a64148646d78b2352fb82c3564f8d2296b6f8512835d329176768472a65dd4d0804d842d71bb377c"], 0x25, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fchmod(r7, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'X*^;'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="180a17694741d322aabd299617a2a2a77b67bd06c0d215a6fd90172fd6cc3ed0b3fa82e15363b6a227e281033ad5cb556f5bdb754cc44f321f6c6426af832e6361b59cf3ff80ec221d4a220e07b6f9904c1dd8dee0d1bd21a025aa60fb193d2cd28af16b810900e217a6c3b628fd48472116de4056906e49b03d511558777c98b555ebcbb74558ad6f504268637748d025c70b7b863d92dc608f46640200e88e3e31d700cbe2f645207c9c812541cb6186208bd0a120eaee725508c6c5bf", @ANYRES16=r8, @ANYBLOB="000425bd7000fcdbdf2544000000c8005a806400018014000500001000020800090078000400010007000e0001000106120505e10b04003600000500060000000000140003000607fcff0200850038000f00ff010900050006000100000005000400020000000500060001000000050004000200000060000080150001006c4805096012411b0b090936360509e81800000014000500a400070005000800000108001cabb00a190001001248030060020b1b6c181b2403016c161b30040924000000140003002fcb3f710900040001000010050001000a00180003030303030300000400bf00"], 0xec}, 0x1, 0x0, 0x0, 0x20004084}, 0x800) 2.557450694s ago: executing program 4 (id=392): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030303630ff070000000000005f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x200, 0x1, 0x9}, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES8=r1, @ANYBLOB=',gr\x00\x00p_id=', @ANYRES16=r4]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x5, 0xffffffffffffffda, r6, {0x200}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x26, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2000}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x401}}], [{@hash}]}}, 0x1, 0x0, &(0x7f0000000680)="596b97f2d3af3b38d1e0b9429e4053d49f80a1528bd0173de8845fda9a8f21d9f8c0ea89e7444344bf903c7c28d9c2955498f8cf9eb0e1bbba0f4440283d9e82cdab4aeea85c93104e405e3d4a7c80b383264ab1edaca55c3f0ff4d5d61270fb73f9b30d69b56b8d0a518f5a18c2a8054fad61d89b0ee5ae8524654362f660e99990561e") ioctl$TIOCL_SETSEL(r12, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0x8000, 0x5850, 0x1, 0x0, 0xf}}) 2.517764357s ago: executing program 1 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x9) 2.36499313s ago: executing program 0 (id=394): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) mmap(&(0x7f0000570000/0x3000)=nil, 0x3000, 0x2, 0x6031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x24a5c07, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000007d40)="$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") r5 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000000c0)=""/254, 0xfe}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000540)=""/175, 0xaf}], 0x7}, 0x40002061) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1.884921228s ago: executing program 4 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) prlimit64(r0, 0x7, &(0x7f0000000000)={0x9, 0xfffffffffffffffd}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) pwrite64(r3, 0x0, 0x0, 0x7) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES16=r2], 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe(&(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000580)={[{@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpid}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0xf62}}, {@max_batch_time={'max_batch_time', 0x3d, 0x200000}}, {@dax_always}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0xffffffffffffffff) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x800, 0x7ff) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.559647815s ago: executing program 1 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB="080004"], 0x4c}}, 0x0) 822.770224ms ago: executing program 0 (id=397): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000058fd4e5ac15847ab0ffb8f8d8937b23fc56265788150ac2c289988dde4b982e2d87d", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) io_setup(0x8, &(0x7f00000001c0)=0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r7, &(0x7f0000000040)="c292dfb4929a5e25909ded", 0xb, 0x7, 0x0, 0x2}]) setreuid(0xee01, 0x0) r8 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r8) ioprio_get$uid(0x3, 0xee01) setxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x385, 0x0) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 757.503529ms ago: executing program 4 (id=398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32=r11], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000f7020ed2446696fb05d142cc1af1bdedfd51de7f33d148f2e47c3000310370ebcf65146aa81254abdd217020fe2fd1d57f5a1f41749a7d2b12c39402d153f9", @ANYRES32, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x48) 364.51858ms ago: executing program 3 (id=399): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$eJzsmL+LE0EUx7+zu5kkIqLNFTYKHhjRSy57KNeE8wTBysYTtdLgrceZvYskK5iA4mFjo52FYGPhP2BxxdV2/gOCFioIFqawEEQOVt7O7GbiJpdltfN9iuE7M2/m/ZjNKwKGYf5bPn/68fHJucWVUwD2YxZFvf7VBoRQ2jLsPzy/e/JZ4/yL1+9fvdk8cH/nz/voSBjuhuZCaQ//DoDKso0g8RTGZ3+RmNWTFRQTfRkWTmh9BQJVrW/AKsT3evgZKoDbELim19tkX63eWve96s22v0pinoY6DS4NI/lSfIMtgVU9pxuFsd/t9VtN3/c6hnD03pitXCJx1ppJ1a8AicGyhYaOluKj+K8+frRFK3Ft5mEl9avDQl0nsbCblAmLKMa1USUx8j/sDPO3i4l7etpW0x+brb4V05Is+b5nd3uN7/+kWKY4NJfveIXSOatXHgDQWweRJwwMTy3B6xQw3LLpSx0xPpr55jKADJ9OJBzjdTDeeEm/aI4EL6aymCCeZor570WuLGIxM9h5m976op9SMeZ4KKa7ECPfj9zLuJQ15jik/BUro9+yclZMTv51A++2Vf8IXwocB2TcPxyjf9WCjTu1bq8/t77RXPPWvE3XXTgjgIen3VrUiNSY6nvD/lyO+tM+oz8XJthKS+JeMwg6dTVKIVFGEHTcaO4aP5tL2+1v1/WxABcAHFMTapsyudFO+RBS2ViRLalK2ohhGIZhGIZhGIZhGIZhGCYrI394HoFAOB1XWf8OAAD//5X0aKk=") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRESHEX=r3, @ANYRES32=r3], 0x44}}, 0x40081) 341.432252ms ago: executing program 4 (id=400): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe6}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x11}}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xc2300, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08b228bd096068b71195f147d4a0eaafd5e57000fedbdf250100000000000000c93b0000001800170800001f010600000064703a73797a31000000009263bc459495d3359e52075555a052a460cc"], 0x34}, 0x1, 0x0, 0x0, 0x6000}, 0x4000000) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) fstat(0xffffffffffffffff, 0x0) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x110) 239.510971ms ago: executing program 1 (id=401): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1], 0x44}}, 0x0) 220.283032ms ago: executing program 3 (id=402): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0xc576, 0x400, 0xa, 0xffffff}, &(0x7f0000000040), &(0x7f0000000000)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) tkill(r3, 0x2f) r4 = socket(0xa, 0x3, 0xff) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2b, 0x7, 0x1, 0x9, 0x40, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x8, 0x8000, 0x6, 0x1}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)={0x4b4, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'io_uring_register\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}./})[^\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "c0132d9100e686eb3e03f21662cff3431f1bcf9b3e34ba7c0dc4de990854c3bc0c949ab84be8b42d54d816d3adcdb51631e8f37f3b6cd21fb7d066b9158c34101235ccf933aa348730d6a887f76f2bdce5da0d54ba86ccc35753e1ff3eff70a74e2cf897fa35aa8fbc095f45d55dc77a9c9da84a983056f49291677f05cd575ba56332a34884b1c632744d41e9a660ae867b6b84f21183ec346909626bbce5db6a1d088fbe811d3e1df3e51d55f34e1c8cdbd5"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa9a6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "271a33592ff5cba07d5603a73951d773bda92a1f60076e53f74a2f1869b7f7c7aa8aac2c9cccb3bcf0396249ab9d4a0789bc3f13f994d4a4124c6e97bdb68705cf5f93d441175f5556d9c884c5f45a9948693d9a897dd1e6ec33d37f74b30ad5f9b535110ab8a7d71e92e041f2156a6fcb094a67cc6d004481feaa6db636648ab3eb8b06c7b2204447124cefa4adf3f12e29b84beb6d984d414f3d91"}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "2525c463abcf69fe6ee8fa639b75f8134fe32e8a1f8fc9a2894b46085530861048238fb3a27a8bcfdb4600b46f2487fd1b33564c9efdf2387162743e453ced81a8beffd34191e5f5424693829171eb1df41f0c707a9308d524c6c30d2ab194d26836c710cf44bc0a7bfafe002b08eae870a94cc75aa72fab22974e5e79018f59b38247fb46f2e6c4df8525e435f57c926ad2523cef5255de1cc0487c93e23df7c3ef"}, @ETHTOOL_A_BITSET_VALUE={0xef, 0x4, "5304f95715b9f0737d6b9dcff9e1f183a1b328eb147f9aa81776730f24177aabe2531e0e6413ab7b3395cefde6c352f243fd63cb50fc8fd22a7b637330b05854102ea111700493cd738b18934cc546b6a46de49a44dd73f883e21d7d802b88798e6b8a590a43970a431956faebf5da44f2f5eb6ef10dd8f5a2834c72fc0554591126bd6ec0ddaf7dd6b4c8f4ba7589c1b6f786969b7f282ed07d67d156212d3d03f29548e427d38032bc7d6bb146fcb0998bccc08954d5ece6b7fa26bfa4a1d882b4468dfb3f70b23d50cc0f58b59f4f9e114c9aa0a89ef8ae1c26ed7b71c281eca5374185544e0e1c8f64"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "e10bf5ac6b225fe5cb3376"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x4004040}, 0x804) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = io_uring_setup(0x2e34, &(0x7f0000000180)) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x200000000000000, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) 219.840282ms ago: executing program 1 (id=403): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_getoverrun(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002980)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x3ed, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x3f7, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x3, 0x2, 0x1, 0xa, 0x6, 0x6, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x5, 0x3, 0x0, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x2, &(0x7f0000000080)=""/2, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000140)=[0xffffffffffffffff], &(0x7f0000000180)=[{0x0, 0x4, 0x7, 0x8}, {0x0, 0x2, 0xa, 0xe}, {0x5, 0x2, 0x4, 0x2}, {0x3, 0x4, 0xa, 0x7}, {0x5, 0x1, 0xa, 0x1}, {0x1, 0x5, 0x7, 0x7}], 0x10, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000300)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000f00)=[{&(0x7f0000000cc0)="fe3b71b5cf038926ff4f208f88f41b21637c401f4059bd05cefb1adf0a5e44ce", 0x20}], 0x1, 0x1, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r5}, 0xc6) 17.690248ms ago: executing program 1 (id=404): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x747}], 0x1, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(r2, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 0s ago: executing program 4 (id=405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'batadv_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000180)={'batadv0\x00', 0x400}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r6}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb93f773ccf1a47dc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f00000004c0)={{0xb1b9558d, 0x6}, 0x100, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f00000001c0)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x3) open(&(0x7f0000000340)='./file0\x00', 0x240, 0x12c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000040)={@local, 0x4, 0x2, 0x0, 0x8, 0x4, 0x5}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0x198, 0x2d8, 0x198, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x160, 0x198, 0x0, {}, [@common=@mh={{0x28}, {"05c9"}}, @common=@srh1={{0x90}, {0x2b, 0x9, 0xfb, 0x1, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @mcast1, [0xffffff, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xffffffff], 0x2, 0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6, 0x3}, {0x2, 0x4, 0x6}, {0xffffffffffffffff, 0x1, 0x2}, 0x5, 0x2}}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0x1000, 0x2, 0x1}}, @common=@icmp6={{0x28}, {0xf, "6cde"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfa, 0x28, "282a4d0bef96380fc45d340389be33b99a0a788fc1841c274cfd17ce4781"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xffffffff, 0xff], 'pim6reg0\x00', '\x00', {0xff}, {}, 0x87, 0x4, 0x3, 0x49}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x2, 0x0, [0x8, 0x9, 0x320, 0x2, 0x1000, 0x2, 0x3, 0x7, 0x8, 0x0, 0x9, 0x8, 0x8001, 0x6, 0x9, 0xea6], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010111, @local}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) kernel console output (not intermixed with test programs): T345] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,minixdf,stripe=0x0000000000000000,sb=0x0000000000000007,jqfmt=vfsv0,dioread_nolock,stripe=0x0000000000000374,,errors=continue. Quota mode: writeback. [ 27.290837][ T345] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.388554][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 27.388592][ T30] audit: type=1400 audit(1754813673.155:143): avc: denied { mount } for pid=339 comm="syz.0.6" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.113770][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.125421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.593605][ T30] audit: type=1400 audit(1754813674.135:144): avc: denied { read } for pid=353 comm="syz.3.4" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 29.307838][ T368] loop2: detected capacity change from 0 to 512 [ 29.464827][ T368] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 29.495380][ T369] loop0: detected capacity change from 0 to 512 [ 30.583807][ T368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 30.592481][ T368] System zones: 1-12 [ 30.600178][ T368] EXT4-fs (loop2): orphan cleanup on readonly fs [ 30.608117][ T368] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3: bg 0: block 361: padding at end of block bitmap is not set [ 30.623420][ T368] EXT4-fs (loop2): Remounting filesystem read-only [ 30.630288][ T368] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 30.639892][ T368] EXT4-fs (loop2): Remounting filesystem read-only [ 30.646550][ T368] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3: invalid indirect mapped block 12 (level 1) [ 30.660723][ T368] EXT4-fs (loop2): Remounting filesystem read-only [ 30.667325][ T368] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3: invalid indirect mapped block 2 (level 2) [ 30.681746][ T368] EXT4-fs (loop2): Remounting filesystem read-only [ 30.688920][ T368] EXT4-fs (loop2): 1 truncate cleaned up [ 30.694789][ T368] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000000040,errors=remount-ro,debug_want_extra_isize=0x0000000000000008. Quota mode: none. [ 31.285391][ T369] EXT4-fs: failed to create workqueue [ 31.340893][ T369] EXT4-fs (loop0): mount failed [ 31.364905][ T30] audit: type=1400 audit(1754813674.135:145): avc: denied { open } for pid=353 comm="syz.3.4" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 31.488191][ T364] syz.1.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.526106][ T30] audit: type=1400 audit(1754813674.435:146): avc: denied { ioctl } for pid=353 comm="syz.3.4" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 31.558292][ T30] audit: type=1400 audit(1754813674.435:147): avc: denied { set_context_mgr } for pid=353 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 31.576302][ T382] loop4: detected capacity change from 0 to 512 [ 31.578064][ T30] audit: type=1400 audit(1754813675.105:148): avc: denied { create } for pid=365 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.604399][ T30] audit: type=1400 audit(1754813676.715:149): avc: denied { create } for pid=363 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.632220][ T385] loop2: detected capacity change from 0 to 512 [ 31.637507][ T30] audit: type=1400 audit(1754813676.765:150): avc: denied { write } for pid=363 comm="syz.1.2" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.658758][ T30] audit: type=1400 audit(1754813677.425:151): avc: denied { create } for pid=381 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.686254][ T30] audit: type=1400 audit(1754813677.425:152): avc: denied { create } for pid=381 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.719456][ T382] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.731404][ T382] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.746749][ T392] loop1: detected capacity change from 0 to 4096 [ 31.766987][ T385] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.769994][ T392] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.778359][ T385] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.135960][ T402] Zero length message leads to an empty skb [ 32.149188][ T402] overlayfs: failed to resolve './bus': -2 [ 32.405478][ T404] tipc: Started in network mode [ 32.410487][ T404] tipc: Node identity 6ae4d877878e, cluster identity 4711 [ 32.417845][ T404] tipc: Enabled bearer , priority 0 [ 32.451519][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 32.451556][ T30] audit: type=1400 audit(1754813678.205:165): avc: denied { remount } for pid=391 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.654875][ T30] audit: type=1400 audit(1754813678.225:166): avc: denied { write } for pid=391 comm="syz.1.14" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.691345][ T30] audit: type=1400 audit(1754813678.225:167): avc: denied { add_name } for pid=391 comm="syz.1.14" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.718265][ T30] audit: type=1400 audit(1754813678.225:168): avc: denied { link } for pid=391 comm="syz.1.14" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.813696][ T30] audit: type=1400 audit(1754813678.305:169): avc: denied { read write } for pid=397 comm="syz.4.15" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.837199][ T30] audit: type=1400 audit(1754813678.305:170): avc: denied { open } for pid=397 comm="syz.4.15" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.861059][ T30] audit: type=1400 audit(1754813678.305:171): avc: denied { ioctl } for pid=397 comm="syz.4.15" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.885871][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.311278][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 33.381213][ T30] audit: type=1400 audit(1754813679.245:172): avc: denied { bind } for pid=417 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.417359][ T413] loop2: detected capacity change from 0 to 512 [ 33.446278][ T30] audit: type=1400 audit(1754813679.285:173): avc: denied { write } for pid=417 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.471472][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 33.831910][ T413] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 33.838714][ T26] tipc: Node number set to 3983202423 [ 33.867522][ T413] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 33.875794][ T413] System zones: 1-12 [ 33.880316][ T413] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.888357][ T413] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.16: bg 0: block 361: padding at end of block bitmap is not set [ 33.903049][ T413] EXT4-fs (loop2): Remounting filesystem read-only [ 33.911401][ T39] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 8 [ 33.922784][ T413] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 33.941522][ T39] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1023 [ 33.952047][ T39] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 33.981368][ T413] EXT4-fs (loop2): Remounting filesystem read-only [ 33.988054][ T39] usb 5-1: config 1 interface 0 has no altsetting 0 [ 34.009364][ T413] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.16: invalid indirect mapped block 12 (level 1) [ 34.021276][ T405] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.031084][ T413] EXT4-fs (loop2): Remounting filesystem read-only [ 34.048876][ T413] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.16: invalid indirect mapped block 2 (level 2) [ 34.071473][ T413] EXT4-fs (loop2): Remounting filesystem read-only [ 34.081425][ T413] EXT4-fs (loop2): 1 truncate cleaned up [ 34.087117][ T413] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000000040,errors=remount-ro,debug_want_extra_isize=0x0000000000000008. Quota mode: none. [ 34.125163][ T423] netlink: 'syz.3.21': attribute type 15 has an invalid length. [ 34.401314][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.421897][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.949761][ T433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23'. [ 35.125371][ T431] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 35.134802][ T431] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 35.144620][ T431] syz.1.22 (431) used greatest stack depth: 21928 bytes left [ 35.158940][ T400] tipc: Disabling bearer [ 35.166243][ T39] usb 5-1: Product: syz [ 35.170679][ T39] usb 5-1: Manufacturer: syz [ 35.175489][ T39] usb 5-1: SerialNumber: syz [ 35.249392][ T435] 9pnet: Could not find request transport: fd0x0000000000000005 [ 35.275016][ T437] loop3: detected capacity change from 0 to 256 [ 35.281377][ T39] usb 5-1: can't set config #1, error -71 [ 35.288348][ T39] usb 5-1: USB disconnect, device number 2 [ 35.356805][ T30] audit: type=1400 audit(1754813681.225:174): avc: denied { setopt } for pid=440 comm="syz.1.27" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.382746][ T441] xt_hashlimit: size too large, truncated to 1048576 [ 35.442342][ T405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.461216][ T405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.472014][ T437] FAT-fs (loop3): Directory bread(block 64) failed [ 35.478759][ T437] FAT-fs (loop3): Directory bread(block 65) failed [ 35.546528][ T405] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.574901][ T437] FAT-fs (loop3): Directory bread(block 66) failed [ 35.640116][ T437] FAT-fs (loop3): Directory bread(block 67) failed [ 35.657014][ T405] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.710605][ T437] FAT-fs (loop3): Directory bread(block 68) failed [ 35.747285][ T405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.760069][ T437] FAT-fs (loop3): Directory bread(block 69) failed [ 35.767056][ T437] FAT-fs (loop3): Directory bread(block 70) failed [ 35.774009][ T437] FAT-fs (loop3): Directory bread(block 71) failed [ 35.780975][ T437] FAT-fs (loop3): Directory bread(block 72) failed [ 35.787889][ T437] FAT-fs (loop3): Directory bread(block 73) failed [ 35.808269][ T405] usb 1-1: config 0 descriptor?? [ 35.895913][ T437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 36.273900][ T452] loop4: detected capacity change from 0 to 4096 [ 36.359707][ T405] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 36.452292][ T405] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 36.577732][ T405] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 36.620587][ T452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.871212][ T405] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.058533][ T26] usb 1-1: USB disconnect, device number 2 [ 37.114358][ T463] loop2: detected capacity change from 0 to 512 [ 37.121338][ T405] usb 4-1: Using ep0 maxpacket: 8 [ 37.131592][ T463] EXT4-fs (loop2): Ignoring removed oldalloc option [ 37.138473][ T463] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 37.151539][ T463] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.158637][ T463] EXT4-fs error (device loop2): ext4_acquire_dquot:6198: comm syz.2.31: Failed to acquire dquot type 1 [ 37.170703][ T463] EXT4-fs (loop2): 1 truncate cleaned up [ 37.176753][ T463] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,mblk_io_submit,abort,nodiscard,noinit_itable,,errors=continue. Quota mode: writeback. [ 37.183337][ T462] syz.4.29 (462) used greatest stack depth: 19136 bytes left [ 37.249709][ T463] EXT4-fs (loop2): Ignoring removed orlov option [ 37.256919][ T463] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 37.267383][ T405] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 37.268067][ T463] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 37.276392][ T405] usb 4-1: config 179 has no interface number 0 [ 37.276423][ T405] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 37.276449][ T405] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 37.276477][ T405] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 37.276499][ T405] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 37.276532][ T405] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 37.291765][ T463] EXT4-fs error (device loop2): ext4_remount:6024: comm syz.2.31: Abort forced by user [ 37.292841][ T405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.325228][ T370] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.347794][ T463] EXT4-fs (loop2): Remounting filesystem read-only [ 37.374542][ T437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 37.380240][ T463] EXT4-fs (loop2): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 37.403731][ T463] ext4 filesystem being remounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.531182][ T26] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 37.818702][ T289] usb 4-1: USB disconnect, device number 2 [ 37.873014][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 37.873028][ T30] audit: type=1400 audit(1754813683.745:212): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 37.910711][ T477] loop2: detected capacity change from 0 to 512 [ 37.971224][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.971228][ T26] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 37.983108][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.992156][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.009241][ T370] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 38.011403][ T26] usb 1-1: config 0 descriptor?? [ 38.021514][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.024878][ T477] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.036058][ T370] usb 2-1: config 0 descriptor?? [ 38.043188][ T477] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.685912][ T30] audit: type=1400 audit(1754813684.555:213): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.707968][ T341] attempt to access beyond end of device [ 38.707968][ T341] loop3: rw=1, want=1480, limit=256 [ 38.712457][ T26] ryos 0003:1E7D:3232.0002: unknown main item tag 0x0 [ 38.720663][ T341] attempt to access beyond end of device [ 38.720663][ T341] loop3: rw=1, want=1832, limit=256 [ 38.726637][ T26] ryos 0003:1E7D:3232.0002: item fetching failed at offset 3/4 [ 38.744938][ T26] ryos 0003:1E7D:3232.0002: parse failed [ 38.746873][ T341] attempt to access beyond end of device [ 38.746873][ T341] loop3: rw=1, want=13048, limit=256 [ 38.750613][ T26] ryos: probe of 0003:1E7D:3232.0002 failed with error -22 [ 38.831872][ T30] audit: type=1400 audit(1754813684.695:214): avc: denied { read } for pid=484 comm="syz.4.37" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.858161][ T30] audit: type=1400 audit(1754813684.695:215): avc: denied { open } for pid=484 comm="syz.4.37" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.892768][ T489] netlink: 'syz.4.37': attribute type 3 has an invalid length. [ 38.900629][ T489] netlink: 'syz.4.37': attribute type 3 has an invalid length. [ 39.071351][ T30] audit: type=1400 audit(1754813684.705:216): avc: denied { ioctl } for pid=484 comm="syz.4.37" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.050400][ T491] loop2: detected capacity change from 0 to 128 [ 40.062586][ T493] syz.3.38[493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.062664][ T493] syz.3.38[493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.121192][ T30] audit: type=1400 audit(1754813685.935:217): avc: denied { ioctl } for pid=492 comm="syz.3.38" path="socket:[15784]" dev="sockfs" ino=15784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.165817][ T370] hid-led 0003:1D34:0004.0003: hidraw0: USB HID v0.06 Device [HID 1d34:0004] on usb-dummy_hcd.1-1/input0 [ 40.182322][ T370] hid-led 0003:1D34:0004.0003: Dream Cheeky Webmail Notifier initialized [ 40.192609][ T370] usb 2-1: USB disconnect, device number 2 [ 40.198997][ T348] usb 1-1: USB disconnect, device number 3 [ 40.210674][ T496] 9pnet: Insufficient options for proto=fd [ 40.221001][ T491] EXT4-fs (loop2): Test dummy encryption mode enabled [ 40.229352][ T499] fido_id[499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 40.254427][ T491] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 40.278410][ T30] audit: type=1400 audit(1754813686.145:218): avc: denied { read } for pid=504 comm="syz.0.42" dev="nsfs" ino=4026532289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.310996][ T491] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.344603][ T508] loop4: detected capacity change from 0 to 256 [ 40.352703][ T30] audit: type=1400 audit(1754813686.175:219): avc: denied { open } for pid=504 comm="syz.0.42" path="net:[4026532289]" dev="nsfs" ino=4026532289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.386538][ T491] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 40.398354][ T30] audit: type=1400 audit(1754813686.275:220): avc: denied { mounton } for pid=490 comm="syz.2.39" path="/7/mnt/bus" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.400076][ T491] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 40.430068][ T491] overlayfs: failed to resolve './file0': -2 [ 40.451620][ T30] audit: type=1400 audit(1754813686.325:221): avc: denied { name_bind } for pid=504 comm="syz.0.42" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.957708][ T522] block device autoloading is deprecated and will be removed. [ 40.981535][ T522] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 41.155951][ T528] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 41.216205][ T530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.43'. [ 41.262593][ T532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49'. [ 41.357188][ T405] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.683292][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.871638][ T405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.956494][ T405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.030580][ T536] loop2: detected capacity change from 0 to 1024 [ 42.074787][ T405] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.401134][ C0] sched: RT throttling activated [ 42.483030][ T405] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.511484][ T536] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 42.522541][ T405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.551544][ T405] usb 4-1: config 0 descriptor?? [ 42.632804][ T536] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.653884][ T538] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 42.671223][ T536] SELinux: security_context_str_to_sid(staff_u) failed for (dev loop2, type ext4) errno=-22 [ 42.729758][ T543] loop1: detected capacity change from 0 to 512 [ 42.762602][ T543] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 42.772487][ T543] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 42.818945][ T548] loop4: detected capacity change from 0 to 512 [ 42.834721][ T543] EXT4-fs (loop1): 1 truncate cleaned up [ 42.847401][ T548] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 42.855037][ T548] EXT4-fs (loop4): Test dummy encryption mode enabled [ 42.862396][ T548] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 42.869654][ T548] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.888250][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 42.888264][ T30] audit: type=1400 audit(1754813688.765:231): avc: denied { create } for pid=545 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.914243][ T548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.921559][ T543] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 42.926521][ T30] audit: type=1400 audit(1754813688.795:232): avc: denied { bind } for pid=545 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.964083][ T30] audit: type=1400 audit(1754813688.795:233): avc: denied { listen } for pid=545 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.985263][ T548] EXT4-fs (loop4): 1 truncate cleaned up [ 42.990953][ T548] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,sb=0xffffffffffffffff,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 43.150523][ T405] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 43.172451][ T405] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 43.194342][ T405] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 43.551184][ T370] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.715967][ T563] loop1: detected capacity change from 0 to 512 [ 43.744531][ T563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 43.755710][ T563] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.774302][ T30] audit: type=1326 audit(1754813689.645:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=561 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06fd5cbe9 code=0x7ffc0000 [ 43.799649][ T30] audit: type=1326 audit(1754813689.665:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=561 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06fd5cbe9 code=0x7ffc0000 [ 43.823029][ T370] usb 5-1: Using ep0 maxpacket: 16 [ 43.828313][ T30] audit: type=1326 audit(1754813689.665:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=561 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb06fd5cbe9 code=0x7ffc0000 [ 43.852233][ T30] audit: type=1326 audit(1754813689.665:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=561 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06fd5cbe9 code=0x7ffc0000 [ 43.879134][ T30] audit: type=1326 audit(1754813689.665:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=561 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06fd5cbe9 code=0x7ffc0000 [ 43.908725][ T348] usb 4-1: USB disconnect, device number 3 [ 43.934388][ T571] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 43.945872][ T20] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.961350][ T370] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 43.975789][ T370] usb 5-1: config 0 has no interface number 0 [ 43.982474][ T370] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 44.025620][ T370] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 44.035926][ T370] usb 5-1: config 0 interface 41 has no altsetting 0 [ 44.371494][ T583] loop3: detected capacity change from 0 to 4096 [ 44.421295][ T370] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 44.430426][ T370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.438999][ T370] usb 5-1: Product: syz [ 44.443261][ T370] usb 5-1: Manufacturer: syz [ 44.447888][ T370] usb 5-1: SerialNumber: syz [ 44.455369][ T583] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 44.470012][ T370] usb 5-1: config 0 descriptor?? [ 44.493353][ T548] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 44.500841][ T548] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 44.511541][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.523353][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.533842][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.536181][ T405] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 44.574751][ T20] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.584120][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.593046][ T20] usb 1-1: config 0 descriptor?? [ 45.089256][ T586] overlayfs: failed to resolve './bus': -2 [ 45.323115][ T548] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.335718][ T548] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.611315][ T405] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 45.612452][ T20] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 45.622699][ T405] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 45.631922][ T20] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 45.640366][ T405] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 45.650280][ T20] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 45.658016][ T405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.791204][ T370] Error reading MAC address [ 45.811254][ T548] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.818378][ T548] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.924212][ T30] audit: type=1400 audit(1754813691.795:239): avc: denied { name_bind } for pid=576 comm="syz.2.60" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 46.131161][ T20] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 46.281342][ T370] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 46.294971][ T370] usb 5-1: USB disconnect, device number 3 [ 46.346270][ T289] usb 1-1: USB disconnect, device number 4 [ 46.375398][ T595] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 46.413967][ T30] audit: type=1400 audit(1754813692.275:240): avc: denied { create } for pid=597 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.563760][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.593113][ T604] syz.3.68[604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.593509][ T604] syz.3.68[604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.628840][ T604] loop3: detected capacity change from 0 to 128 [ 46.674601][ T604] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.681929][ T604] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.735997][ T604] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 46.751942][ T604] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.860352][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.875624][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.894900][ T20] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.057160][ T405] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 47.402747][ T405] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input7 [ 47.413951][ T610] loop2: detected capacity change from 0 to 1024 [ 47.432466][ T405] input: failed to attach handler kbd to device input7, error: -5 [ 47.545244][ T405] usb 3-1: USB disconnect, device number 2 [ 47.587712][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.597304][ T20] usb 2-1: config 0 descriptor?? [ 47.662920][ T617] loop0: detected capacity change from 0 to 4096 [ 47.695885][ T617] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.720733][ T622] loop4: detected capacity change from 0 to 1024 [ 47.834138][ T622] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.632574][ T626] overlayfs: failed to resolve './bus': -2 [ 48.978747][ T628] tipc: Enabling of bearer rejected, failed to enable media [ 49.013795][ T20] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 49.022968][ T20] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 49.032923][ T20] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 49.223094][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 49.223110][ T30] audit: type=1400 audit(1754813695.095:268): avc: denied { create } for pid=636 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.317423][ T405] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 49.323235][ T30] audit: type=1400 audit(1754813695.185:269): avc: denied { write } for pid=636 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.691234][ T405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.702228][ T405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.712497][ T405] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.725574][ T405] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.733321][ T348] usb 2-1: USB disconnect, device number 3 [ 49.734867][ T405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.760992][ T405] usb 3-1: config 0 descriptor?? [ 49.811956][ T646] loop1: detected capacity change from 0 to 512 [ 49.879518][ T30] audit: type=1400 audit(1754813695.745:270): avc: denied { getopt } for pid=647 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.893755][ T646] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 50.100761][ T30] audit: type=1400 audit(1754813695.965:271): avc: denied { read } for pid=654 comm="syz.3.85" name="file0" dev="incremental-fs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.140240][ T30] audit: type=1400 audit(1754813695.965:272): avc: denied { open } for pid=654 comm="syz.3.85" path="/19/file0/file0" dev="incremental-fs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.173275][ T657] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 50.195390][ T664] loop1: detected capacity change from 0 to 512 [ 50.215305][ T30] audit: type=1400 audit(1754813696.045:273): avc: denied { read } for pid=663 comm="syz.1.89" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.243198][ T30] audit: type=1400 audit(1754813696.045:274): avc: denied { open } for pid=663 comm="syz.1.89" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.306880][ T664] EXT4-fs (loop1): dax option not supported [ 50.313281][ T30] audit: type=1400 audit(1754813696.055:275): avc: denied { ioctl } for pid=663 comm="syz.1.89" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x744d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.340884][ T30] audit: type=1400 audit(1754813696.055:276): avc: denied { mount } for pid=663 comm="syz.1.89" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.364018][ T30] audit: type=1400 audit(1754813696.055:277): avc: denied { remount } for pid=663 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.382382][ T405] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 50.401561][ T405] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 50.410966][ T405] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 50.545655][ T677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 50.555112][ T677] netlink: 64 bytes leftover after parsing attributes in process `syz.0.93'. [ 50.567551][ T677] loop0: detected capacity change from 0 to 512 [ 50.636750][ T677] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 50.648290][ T677] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.721267][ T405] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 51.146807][ T376] usb 3-1: USB disconnect, device number 3 [ 51.161306][ T405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.179380][ T405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.198961][ T405] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.227094][ T405] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.257269][ T405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.265905][ T700] loop4: detected capacity change from 0 to 4096 [ 51.269881][ T405] usb 2-1: config 0 descriptor?? [ 51.378608][ T700] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.641579][ T708] overlayfs: failed to resolve './bus': -2 [ 51.822056][ T714] device bridge_slave_1 left promiscuous mode [ 51.828507][ T714] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.840967][ T714] device bridge_slave_0 left promiscuous mode [ 51.848018][ T714] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.978642][ T723] syz.2.108[723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.978717][ T723] syz.2.108[723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.998431][ T723] device wireguard0 entered promiscuous mode [ 52.017676][ T405] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 52.027033][ T405] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 52.036166][ T405] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 52.118539][ T725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.107'. [ 52.154390][ T732] xt_hashlimit: size too large, truncated to 1048576 [ 53.497736][ T20] usb 2-1: USB disconnect, device number 4 [ 53.559825][ T760] loop4: detected capacity change from 0 to 4096 [ 53.596247][ T768] loop0: detected capacity change from 0 to 1024 [ 53.604534][ T767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8211 sclass=netlink_route_socket pid=767 comm=syz.1.124 [ 53.657148][ T773] loop1: detected capacity change from 0 to 512 [ 53.689611][ T760] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.721565][ T768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.785237][ T778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 53.830500][ T778] loop2: detected capacity change from 0 to 256 [ 54.105154][ T780] overlayfs: failed to resolve './bus': -2 [ 54.191093][ T778] netlink: 'syz.2.125': attribute type 4 has an invalid length. [ 54.228997][ T768] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.060125][ T791] loop3: detected capacity change from 0 to 512 [ 55.067949][ T773] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 55.080034][ T773] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.095113][ T791] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 55.120517][ T791] EXT4-fs (loop3): Test dummy encryption mode enabled [ 55.127718][ T791] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 55.134940][ T791] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.185985][ T791] EXT4-fs (loop3): 1 truncate cleaned up [ 55.200176][ T791] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 55.764976][ T811] loop1: detected capacity change from 0 to 2048 [ 55.910958][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 55.911030][ T30] audit: type=1400 audit(1754813701.775:367): avc: denied { read } for pid=805 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.978399][ T333] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.149053][ T30] audit: type=1400 audit(1754813702.015:368): avc: denied { read write } for pid=813 comm="syz.2.135" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.279318][ T30] audit: type=1400 audit(1754813702.015:369): avc: denied { open } for pid=813 comm="syz.2.135" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.431508][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.564499][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.574757][ T333] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.588474][ T333] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.597950][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.649607][ T333] usb 5-1: config 0 descriptor?? [ 56.874369][ T821] loop1: detected capacity change from 0 to 4096 [ 56.902918][ T823] loop0: detected capacity change from 0 to 4096 [ 56.918870][ T821] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.980833][ T823] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.787818][ T831] overlayfs: failed to resolve './bus': -2 [ 58.434436][ T833] overlayfs: failed to resolve './bus': -2 [ 58.443625][ T333] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 58.455371][ T333] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 58.466119][ T333] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 58.582268][ T845] loop3: detected capacity change from 0 to 512 [ 58.673090][ T845] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 58.700872][ T845] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 58.725381][ T845] EXT4-fs (loop3): 1 truncate cleaned up [ 58.738020][ T845] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 59.051918][ T860] loop2: detected capacity change from 0 to 128 [ 60.402237][ T784] usb 5-1: USB disconnect, device number 4 [ 60.661975][ T30] audit: type=1400 audit(1754813706.535:370): avc: denied { write } for pid=861 comm="syz.0.148" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.035222][ T875] loop2: detected capacity change from 0 to 4096 [ 61.126015][ T875] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.812044][ T879] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 62.089693][ T882] overlayfs: failed to resolve './bus': -2 [ 62.393930][ T30] audit: type=1400 audit(1754813708.265:371): avc: denied { getopt } for pid=892 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.421490][ T30] audit: type=1400 audit(1754813708.265:372): avc: denied { bind } for pid=892 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.465095][ T30] audit: type=1400 audit(1754813708.265:373): avc: denied { setopt } for pid=892 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.581857][ T30] audit: type=1400 audit(1754813708.455:374): avc: denied { read write } for pid=898 comm="syz.1.157" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.582545][ T903] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.643558][ T30] audit: type=1400 audit(1754813708.455:375): avc: denied { open } for pid=898 comm="syz.1.157" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.679970][ T30] audit: type=1400 audit(1754813708.455:376): avc: denied { ioctl } for pid=898 comm="syz.1.157" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.723407][ T30] audit: type=1326 audit(1754813708.505:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06fd5cbe9 code=0x7ffc0000 [ 62.752659][ T30] audit: type=1326 audit(1754813708.505:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06fd5cbe9 code=0x7ffc0000 [ 62.866258][ T30] audit: type=1326 audit(1754813708.505:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06fd5cbe9 code=0x7ffc0000 [ 62.895735][ T30] audit: type=1326 audit(1754813708.505:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06fd5cbe9 code=0x7ffc0000 [ 63.588421][ T921] xt_hashlimit: size too large, truncated to 1048576 [ 64.173455][ T935] loop1: detected capacity change from 0 to 4096 [ 64.205914][ T935] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.653118][ T942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 65.226374][ T944] overlayfs: failed to resolve './bus': -2 [ 65.288394][ T950] loop0: detected capacity change from 0 to 512 [ 65.602179][ T950] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 65.611158][ T950] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 65.620436][ T950] EXT4-fs (loop0): 1 truncate cleaned up [ 65.626685][ T950] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 65.801802][ T960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.172'. [ 66.151278][ T962] loop4: detected capacity change from 0 to 40427 [ 66.967358][ T971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 66.976330][ T971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 66.992303][ T971] loop4: detected capacity change from 0 to 512 [ 67.034015][ T971] EXT4-fs (loop4): Ignoring removed oldalloc option [ 67.222313][ T971] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nombcache,init_itable=0x0000000000000005,oldalloc,,errors=continue. Quota mode: writeback. [ 67.239118][ T971] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.293393][ T991] capability: warning: `syz.1.181' uses deprecated v2 capabilities in a way that may be insecure [ 67.344384][ T993] loop3: detected capacity change from 0 to 4096 [ 67.364562][ T996] loop0: detected capacity change from 0 to 128 [ 67.413860][ T996] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 67.458361][ T1003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1003 comm=syz.2.187 [ 67.474687][ T1003] loop2: detected capacity change from 0 to 512 [ 67.498154][ T993] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.531573][ T1003] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.614850][ T1003] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.627187][ T1003] process 'syz.2.187' launched '/dev/fd/0/./file0' with NULL argv: empty string added [ 67.865924][ T1013] overlayfs: failed to resolve './bus': -2 [ 68.001189][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 68.050214][ T1019] loop3: detected capacity change from 0 to 512 [ 68.089683][ T1019] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 68.097918][ T1019] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 68.108849][ T1019] EXT4-fs (loop3): 1 truncate cleaned up [ 68.115562][ T1019] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 68.181151][ T338] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 68.238829][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 68.238845][ T30] audit: type=1400 audit(1754813714.105:415): avc: denied { setopt } for pid=1021 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.264825][ T30] audit: type=1400 audit(1754813714.105:416): avc: denied { read } for pid=1021 comm="syz.1.190" path="socket:[18651]" dev="sockfs" ino=18651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.271186][ T6] usb 1-1: device descriptor read/64, error -71 [ 68.339368][ T1026] netlink: 'syz.4.191': attribute type 4 has an invalid length. [ 68.350174][ T1026] netlink: 'syz.4.191': attribute type 4 has an invalid length. [ 68.599077][ T1033] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 68.670746][ T338] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 68.680130][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.689130][ T338] usb 3-1: config 0 descriptor?? [ 68.691179][ T6] usb 1-1: device descriptor read/64, error -71 [ 68.874590][ T1038] loop3: detected capacity change from 0 to 2048 [ 69.023229][ T1038] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 69.652259][ T1016] loop2: detected capacity change from 0 to 256 [ 69.786433][ T30] audit: type=1326 audit(1754813715.655:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 69.792052][ T1016] FAT-fs (loop2): Directory bread(block 64) failed [ 69.839755][ T30] audit: type=1326 audit(1754813715.685:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 69.951303][ T1016] FAT-fs (loop2): Directory bread(block 65) failed [ 69.999764][ T1016] FAT-fs (loop2): Directory bread(block 66) failed [ 70.093820][ T1016] FAT-fs (loop2): Directory bread(block 67) failed [ 70.100654][ T1016] FAT-fs (loop2): Directory bread(block 68) failed [ 70.111154][ T1016] FAT-fs (loop2): Directory bread(block 69) failed [ 70.117787][ T1016] FAT-fs (loop2): Directory bread(block 70) failed [ 70.128149][ T1050] loop3: detected capacity change from 0 to 2048 [ 70.135193][ T1016] FAT-fs (loop2): Directory bread(block 71) failed [ 70.142007][ T1016] FAT-fs (loop2): Directory bread(block 72) failed [ 70.148649][ T1016] FAT-fs (loop2): Directory bread(block 73) failed [ 70.161154][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 70.181251][ T338] usb 3-1: Cannot set autoneg [ 70.186111][ T338] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 70.187162][ T1050] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.198348][ T338] usb 3-1: USB disconnect, device number 4 [ 70.248535][ T1056] loop4: detected capacity change from 0 to 512 [ 70.317375][ T1056] FAT-fs (loop4): Unrecognized mount option "uma" or missing value [ 70.431176][ T6] usb 1-1: device descriptor read/64, error -71 [ 70.455321][ T1060] device bridge_slave_1 left promiscuous mode [ 70.469776][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.485558][ T1060] device bridge_slave_0 left promiscuous mode [ 70.499156][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.999543][ T30] audit: type=1400 audit(1754813716.865:419): avc: denied { read } for pid=1074 comm="syz.4.205" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.045650][ T30] audit: type=1400 audit(1754813716.865:420): avc: denied { open } for pid=1074 comm="syz.4.205" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.079733][ T30] audit: type=1400 audit(1754813716.865:421): avc: denied { create } for pid=1074 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.111256][ T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 71.530949][ T30] audit: type=1400 audit(1754813717.395:422): avc: denied { watch watch_reads } for pid=1047 comm="syz.3.197" path="/38/control/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.555788][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 71.579606][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1288, setting to 1024 [ 71.601495][ T30] audit: type=1400 audit(1754813717.395:423): avc: denied { write } for pid=1047 comm="syz.3.197" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.603338][ T20] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.665067][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.678692][ T20] usb 3-1: config 0 descriptor?? [ 71.701345][ T1071] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.728642][ T1083] sch_fq: defrate 0 ignored. [ 71.760611][ T1087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 71.842780][ T30] audit: type=1400 audit(1754813717.715:424): avc: denied { write } for pid=1094 comm="syz.1.213" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 72.178803][ T1099] device bridge_slave_1 left promiscuous mode [ 72.188806][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.196979][ T1099] device bridge_slave_0 left promiscuous mode [ 72.203914][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.311191][ T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 72.371921][ T20] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 72.383849][ T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input13 [ 72.447862][ T1108] FAULT_INJECTION: forcing a failure. [ 72.447862][ T1108] name failslab, interval 1, probability 0, space 0, times 1 [ 72.460714][ T1108] CPU: 0 PID: 1108 Comm: syz.4.216 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 72.471074][ T1108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.481243][ T1108] Call Trace: [ 72.484529][ T1108] [ 72.487469][ T1108] __dump_stack+0x21/0x30 [ 72.491885][ T1108] dump_stack_lvl+0xee/0x150 [ 72.496610][ T1108] ? show_regs_print_info+0x20/0x20 [ 72.501828][ T1108] ? __find_rr_leaf+0x634/0x900 [ 72.506704][ T1108] dump_stack+0x15/0x20 [ 72.510982][ T1108] should_fail+0x3c1/0x510 [ 72.515562][ T1108] __should_failslab+0xa4/0xe0 [ 72.520428][ T1108] should_failslab+0x9/0x20 [ 72.525025][ T1108] slab_pre_alloc_hook+0x3b/0xe0 [ 72.530173][ T1108] ? xfrm_state_alloc+0x24/0x2c0 [ 72.535152][ T1108] kmem_cache_alloc+0x44/0x260 [ 72.539927][ T1108] xfrm_state_alloc+0x24/0x2c0 [ 72.544966][ T1108] xfrm_state_find+0x1e4e/0x2a70 [ 72.549917][ T1108] ? rt6_probe_deferred+0x1c0/0x1c0 [ 72.555138][ T1108] ? xfrm_sad_getinfo+0x170/0x170 [ 72.560165][ T1108] ? ip6_pol_route+0xccc/0x1110 [ 72.565027][ T1108] ? fib6_table_lookup+0x9f0/0x9f0 [ 72.570260][ T1108] ? stack_trace_save+0x98/0xe0 [ 72.575139][ T1108] xfrm_resolve_and_create_bundle+0x626/0x28d0 [ 72.581765][ T1108] ? 0xffffffffa00289b8 [ 72.586272][ T1108] ? xfrm_sk_policy_lookup+0x470/0x470 [ 72.592043][ T1108] ? __kernel_text_address+0xa0/0x100 [ 72.597640][ T1108] ? xfrm_sk_policy_lookup+0x423/0x470 [ 72.603320][ T1108] ? __stack_depot_save+0x34/0x480 [ 72.608641][ T1108] xfrm_lookup_with_ifid+0xa3e/0x2120 [ 72.614217][ T1108] ? __xfrm_sk_clone_policy+0x680/0x680 [ 72.620032][ T1108] ? x64_sys_call+0x219/0x9a0 [ 72.624722][ T1108] ? do_syscall_64+0x4c/0xa0 [ 72.629427][ T1108] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.635507][ T1108] xfrm_lookup_route+0x3c/0x170 [ 72.640457][ T1108] ip6_dst_lookup_flow+0x9b/0xc0 [ 72.645422][ T1108] rawv6_sendmsg+0xc07/0x16d0 [ 72.650245][ T1108] ? _raw_spin_lock+0xe0/0xe0 [ 72.654935][ T1108] ? avc_has_perm+0x158/0x240 [ 72.659703][ T1108] ? compat_rawv6_ioctl+0x10/0x10 [ 72.664741][ T1108] ? is_bpf_text_address+0x177/0x190 [ 72.670052][ T1108] ? unwind_get_return_address+0x4d/0x90 [ 72.675712][ T1108] ? stack_trace_save+0xe0/0xe0 [ 72.680740][ T1108] ? inet_send_prepare+0x60/0x4c0 [ 72.685769][ T1108] ? arch_stack_walk+0xee/0x140 [ 72.690636][ T1108] inet_sendmsg+0xa5/0xc0 [ 72.694971][ T1108] ? inet_send_prepare+0x4c0/0x4c0 [ 72.700088][ T1108] ____sys_sendmsg+0x5a2/0x8c0 [ 72.704865][ T1108] ? __sys_sendmsg_sock+0x40/0x40 [ 72.709908][ T1108] ? import_iovec+0x7c/0xb0 [ 72.714420][ T1108] ___sys_sendmsg+0x1f0/0x260 [ 72.719243][ T1108] ? _kstrtoull+0x3c0/0x4d0 [ 72.723758][ T1108] ? __sys_sendmsg+0x250/0x250 [ 72.728547][ T1108] ? __fdget+0x1a1/0x230 [ 72.732811][ T1108] __sys_sendmmsg+0x278/0x480 [ 72.737605][ T1108] ? __ia32_sys_sendmsg+0x2a0/0x2a0 [ 72.742830][ T1108] ? htab_map_hash+0x357/0x770 [ 72.747611][ T1108] ? __ia32_sys_read+0x90/0x90 [ 72.752739][ T1108] ? __bpf_trace_sys_enter+0x62/0x70 [ 72.758030][ T1108] __x64_sys_sendmmsg+0xa0/0xb0 [ 72.762892][ T1108] x64_sys_call+0x6c6/0x9a0 [ 72.767395][ T1108] do_syscall_64+0x4c/0xa0 [ 72.771900][ T1108] ? clear_bhb_loop+0x50/0xa0 [ 72.776676][ T1108] ? clear_bhb_loop+0x50/0xa0 [ 72.781386][ T1108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.787340][ T1108] RIP: 0033:0x7ff18570cbe9 [ 72.791852][ T1108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.811639][ T1108] RSP: 002b:00007ff184175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 72.820297][ T1108] RAX: ffffffffffffffda RBX: 00007ff185933fa0 RCX: 00007ff18570cbe9 [ 72.829151][ T1108] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000007 [ 72.837388][ T1108] RBP: 00007ff184175090 R08: 0000000000000000 R09: 0000000000000000 [ 72.845469][ T1108] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000001 [ 72.853541][ T1108] R13: 00007ff185934038 R14: 00007ff185933fa0 R15: 00007ffdabd07968 [ 72.861640][ T1108] [ 72.911006][ T20] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 72.930460][ T20] usb 3-1: USB disconnect, device number 5 [ 72.958710][ T1112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1112 comm=syz.3.218 [ 72.972897][ T1112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1112 comm=syz.3.218 [ 73.081346][ T6] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.101230][ T6] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 73.102274][ T1126] loop3: detected capacity change from 0 to 128 [ 73.131348][ T6] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 73.145403][ T6] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.145442][ T1126] EXT4-fs (loop3): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 73.182486][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.209521][ T1127] fido_id[1127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 73.224110][ T1085] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 73.413732][ T1130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 73.454574][ T1135] xt_hashlimit: size too large, truncated to 1048576 [ 74.057372][ T338] usb 1-1: USB disconnect, device number 7 [ 74.173532][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 74.173548][ T30] audit: type=1400 audit(1754813720.045:428): avc: denied { create } for pid=1139 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.222898][ T30] audit: type=1400 audit(1754813720.075:429): avc: denied { ioctl } for pid=1139 comm="syz.3.226" path="socket:[17767]" dev="sockfs" ino=17767 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.293485][ T1146] loop4: detected capacity change from 0 to 512 [ 74.357792][ T1146] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 74.372020][ T1146] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.922820][ T30] audit: type=1326 audit(1754813720.785:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53262bdbe9 code=0x7ffc0000 [ 74.964459][ T1169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.235'. [ 74.999334][ T30] audit: type=1326 audit(1754813720.785:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53262bdbe9 code=0x7ffc0000 [ 75.083484][ T30] audit: type=1326 audit(1754813720.785:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f53262bdbe9 code=0x7ffc0000 [ 75.168731][ T30] audit: type=1326 audit(1754813720.785:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53262bdbe9 code=0x7ffc0000 [ 75.192700][ T30] audit: type=1326 audit(1754813720.795:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53262bdbe9 code=0x7ffc0000 [ 75.216450][ T30] audit: type=1326 audit(1754813720.795:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f53262bdbe9 code=0x7ffc0000 [ 75.271218][ T30] audit: type=1326 audit(1754813720.795:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53262bdbe9 code=0x7ffc0000 [ 75.315592][ T30] audit: type=1326 audit(1754813720.795:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.0.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53262bdbe9 code=0x7ffc0000 [ 75.402933][ T1162] loop2: detected capacity change from 0 to 40427 [ 75.422417][ T1185] loop4: detected capacity change from 0 to 512 [ 75.461821][ T1185] EXT4-fs (loop4): Unrecognized mount option "appraise" or missing value [ 75.558046][ T1162] F2FS-fs (loop2): invalid crc value [ 75.586280][ T1162] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.698604][ T1162] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.706837][ T338] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 75.882331][ T1197] attempt to access beyond end of device [ 75.882331][ T1197] loop2: rw=2049, want=45104, limit=40427 [ 75.961280][ T338] usb 2-1: Using ep0 maxpacket: 16 [ 75.987454][ T1204] xt_hashlimit: size too large, truncated to 1048576 [ 76.081235][ T338] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.093551][ T338] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.104130][ T338] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.177134][ T1209] loop2: detected capacity change from 0 to 128 [ 77.253644][ T1221] loop0: detected capacity change from 0 to 4096 [ 77.303460][ T1221] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.341301][ T338] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.350842][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.384992][ T1224] loop2: detected capacity change from 0 to 256 [ 77.407458][ T1224] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 77.430370][ T338] usb 2-1: Product: syz [ 77.485178][ T338] usb 2-1: Manufacturer: syz [ 77.612965][ T1230] overlayfs: failed to resolve './bus': -2 [ 78.798457][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.822899][ T338] usb 2-1: SerialNumber: syz [ 78.828543][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.846406][ T1234] device bridge_slave_0 entered promiscuous mode [ 78.856499][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.864084][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.872255][ T1234] device bridge_slave_1 entered promiscuous mode [ 78.951254][ T338] usb 2-1: can't set config #1, error -71 [ 78.963220][ T338] usb 2-1: USB disconnect, device number 5 [ 79.102824][ T347] device veth1_macvtap left promiscuous mode [ 79.110571][ T347] device veth0_vlan left promiscuous mode [ 79.154025][ T1213] loop4: detected capacity change from 0 to 131072 [ 79.172218][ T1213] F2FS-fs (loop4): Test dummy encryption mode enabled [ 79.196669][ T1213] F2FS-fs (loop4): invalid crc value [ 79.234559][ T1213] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.485797][ T1213] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.511415][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 79.511432][ T30] audit: type=1326 audit(1754813725.375:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18570b550 code=0x7ffc0000 [ 79.619093][ T1257] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 79.631748][ T30] audit: type=1326 audit(1754813725.375:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff18570b937 code=0x7ffc0000 [ 79.662601][ T30] audit: type=1326 audit(1754813725.375:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18570b550 code=0x7ffc0000 [ 79.686457][ T30] audit: type=1326 audit(1754813725.375:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff18570c7eb code=0x7ffc0000 [ 79.770087][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.780953][ T30] audit: type=1326 audit(1754813725.375:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff18570b84a code=0x7ffc0000 [ 79.785504][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.812149][ T30] audit: type=1326 audit(1754813725.375:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 79.843806][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.853375][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.863846][ T30] audit: type=1326 audit(1754813725.375:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 80.019880][ T862] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.027102][ T862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.142050][ T1267] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 80.161322][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.211181][ T30] audit: type=1326 audit(1754813725.485:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 80.255972][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.274279][ T862] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.281927][ T862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.310467][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.325143][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.333395][ T30] audit: type=1326 audit(1754813725.505:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 80.361032][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.381508][ T1282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.263'. [ 80.397814][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.406344][ T30] audit: type=1326 audit(1754813725.505:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1212 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 80.432278][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.464133][ T1274] loop1: detected capacity change from 0 to 40427 [ 80.482393][ T1274] F2FS-fs (loop1): invalid crc value [ 80.492663][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.505272][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.542228][ T1234] device veth0_vlan entered promiscuous mode [ 80.557536][ T1274] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.571993][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.580349][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.613096][ T1234] device veth1_macvtap entered promiscuous mode [ 80.630354][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.638862][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.650734][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.660704][ T1274] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.668933][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.698658][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.708493][ T1274] F2FS-fs (loop1): Unexpected flush for atomic writes: ino=10, npages=1 [ 80.722139][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.730877][ T1274] attempt to access beyond end of device [ 80.730877][ T1274] loop1: rw=2049, want=45104, limit=40427 [ 80.743359][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.762497][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.784969][ T862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.794786][ T283] attempt to access beyond end of device [ 80.794786][ T283] loop1: rw=2049, want=45112, limit=40427 [ 80.859105][ T1284] loop3: detected capacity change from 0 to 40427 [ 80.910133][ T1286] loop0: detected capacity change from 0 to 40427 [ 80.948580][ T1284] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 80.956414][ T1295] loop5: detected capacity change from 0 to 8192 [ 80.969628][ T1284] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.037212][ T1304] xt_hashlimit: size too large, truncated to 1048576 [ 81.044291][ T1286] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.052197][ T1284] F2FS-fs (loop3): invalid crc value [ 81.091293][ T1286] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.122120][ T1284] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.138926][ T1286] F2FS-fs (loop0): invalid crc value [ 81.182021][ T1286] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.228622][ T1284] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.242489][ T1284] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.290359][ T1286] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.301185][ T1286] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.312581][ T1320] loop5: detected capacity change from 0 to 512 [ 81.318567][ T1286] FAULT_INJECTION: forcing a failure. [ 81.318567][ T1286] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.367470][ T1286] CPU: 0 PID: 1286 Comm: syz.0.265 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 81.368771][ T1320] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 81.377794][ T1286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.377813][ T1286] Call Trace: [ 81.377820][ T1286] [ 81.377827][ T1286] __dump_stack+0x21/0x30 [ 81.377856][ T1286] dump_stack_lvl+0xee/0x150 [ 81.414517][ T1286] ? show_regs_print_info+0x20/0x20 [ 81.420076][ T1286] dump_stack+0x15/0x20 [ 81.424351][ T1286] should_fail+0x3c1/0x510 [ 81.428793][ T1286] should_fail_usercopy+0x1a/0x20 [ 81.433853][ T1286] _copy_to_user+0x20/0x90 [ 81.438632][ T1286] simple_read_from_buffer+0xe9/0x160 [ 81.444038][ T1286] proc_fail_nth_read+0x19a/0x210 [ 81.449444][ T1286] ? proc_fault_inject_write+0x2f0/0x2f0 [ 81.455120][ T1286] ? security_file_permission+0x83/0xa0 [ 81.460692][ T1286] ? proc_fault_inject_write+0x2f0/0x2f0 [ 81.466380][ T1286] vfs_read+0x282/0xbe0 [ 81.470670][ T1286] ? kernel_read+0x1f0/0x1f0 [ 81.475374][ T1286] ? __kasan_check_write+0x14/0x20 [ 81.480542][ T1286] ? mutex_lock+0x95/0x1a0 [ 81.484980][ T1286] ? wait_for_completion_killable_timeout+0x10/0x10 [ 81.491590][ T1286] ? __fget_files+0x2c4/0x320 [ 81.496296][ T1286] ? __fdget_pos+0x2d2/0x380 [ 81.501039][ T1286] ? ksys_read+0x71/0x240 [ 81.505387][ T1286] ksys_read+0x140/0x240 [ 81.509823][ T1286] ? fillonedir+0x430/0x430 [ 81.514441][ T1286] ? vfs_write+0xf70/0xf70 [ 81.518963][ T1286] ? debug_smp_processor_id+0x17/0x20 [ 81.524701][ T1286] __x64_sys_read+0x7b/0x90 [ 81.529259][ T1286] x64_sys_call+0x96d/0x9a0 [ 81.533791][ T1286] do_syscall_64+0x4c/0xa0 [ 81.538412][ T1286] ? clear_bhb_loop+0x50/0xa0 [ 81.543140][ T1286] ? clear_bhb_loop+0x50/0xa0 [ 81.547850][ T1286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.553763][ T1286] RIP: 0033:0x7f53262bc5fc [ 81.558289][ T1286] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 81.578010][ T1286] RSP: 002b:00007f5324d26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.586765][ T1286] RAX: ffffffffffffffda RBX: 00007f53264e4fa0 RCX: 00007f53262bc5fc [ 81.594854][ T1286] RDX: 000000000000000f RSI: 00007f5324d260a0 RDI: 0000000000000005 [ 81.603039][ T1286] RBP: 00007f5324d26090 R08: 0000000000000000 R09: 0000000000000000 [ 81.611357][ T1286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.619523][ T1286] R13: 00007f53264e5038 R14: 00007f53264e4fa0 R15: 00007ffdd1350128 [ 81.627628][ T1286] [ 81.637133][ T1320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 81.645460][ T1320] System zones: 1-12 [ 81.649978][ T1320] EXT4-fs (loop5): orphan cleanup on readonly fs [ 81.656727][ T1320] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.270: bg 0: block 361: padding at end of block bitmap is not set [ 81.672211][ T1320] EXT4-fs (loop5): Remounting filesystem read-only [ 81.678779][ T1320] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 81.689767][ T1320] EXT4-fs (loop5): Remounting filesystem read-only [ 81.697134][ T1320] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.270: invalid indirect mapped block 12 (level 1) [ 81.710742][ T1320] EXT4-fs (loop5): Remounting filesystem read-only [ 81.717509][ T1320] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.270: invalid indirect mapped block 2 (level 2) [ 81.741730][ T1320] EXT4-fs (loop5): Remounting filesystem read-only [ 81.748551][ T1320] EXT4-fs (loop5): 1 truncate cleaned up [ 81.754483][ T1320] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000000040,errors=remount-ro,debug_want_extra_isize=0x0000000000000008. Quota mode: none. [ 82.088857][ T1330] loop1: detected capacity change from 0 to 512 [ 82.101181][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.155915][ T1335] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 82.280023][ T1344] loop0: detected capacity change from 0 to 256 [ 82.323091][ T1344] exfat: Bad value for 'time_offset' [ 82.481231][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.535534][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.577314][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.633538][ T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.687966][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.731475][ T26] usb 4-1: config 0 descriptor?? [ 82.793492][ T1353] xt_hashlimit: size too large, truncated to 1048576 [ 83.110073][ T1362] loop1: detected capacity change from 0 to 512 [ 83.146199][ T1362] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 83.148365][ T1366] xt_hashlimit: size too large, truncated to 1048576 [ 83.156965][ T1362] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 83.172400][ T1362] EXT4-fs (loop1): 1 truncate cleaned up [ 83.178127][ T1362] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 83.223902][ T1368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 83.272225][ T26] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 83.281039][ T26] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 83.290321][ T26] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 83.537288][ T1373] loop5: detected capacity change from 0 to 512 [ 83.587505][ T1373] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 83.603402][ T1377] loop0: detected capacity change from 0 to 16 [ 83.616752][ T1373] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.636405][ T1373] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.287: iget: bad i_size value: 2533274857506816 [ 83.662104][ T1377] erofs: (device loop0): mounted with root inode @ nid 36. [ 83.682763][ T1377] incfs: ino conflict with backing FS 2 [ 83.691423][ T1377] incfs: ino conflict with backing FS 5 [ 84.050253][ T1379] loop5: detected capacity change from 0 to 40427 [ 84.080306][ T6] usb 4-1: USB disconnect, device number 4 [ 84.111086][ T1399] loop0: detected capacity change from 0 to 1024 [ 84.140718][ T1379] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 84.165091][ T1379] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 84.216661][ T1379] F2FS-fs (loop5): invalid crc value [ 84.229677][ T1404] xt_hashlimit: size too large, truncated to 1048576 [ 84.272948][ T1379] F2FS-fs (loop5): Found nat_bits in checkpoint [ 84.315865][ T1413] loop3: detected capacity change from 0 to 1024 [ 84.354404][ T1413] EXT4-fs (loop3): Ignoring removed orlov option [ 84.382368][ T1413] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 84.407000][ T1379] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 84.414384][ T348] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 84.430850][ T1379] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 84.661181][ T348] usb 1-1: Using ep0 maxpacket: 8 [ 84.685564][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 84.685580][ T30] audit: type=1400 audit(1754813730.555:558): avc: denied { setattr } for pid=1378 comm="syz.5.289" name="#19" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.752239][ T30] audit: type=1400 audit(1754813730.595:559): avc: denied { link } for pid=1378 comm="syz.5.289" name="#19" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.791307][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.810040][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.820470][ T30] audit: type=1400 audit(1754813730.605:560): avc: denied { listen } for pid=1420 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.850265][ T348] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 84.871298][ T30] audit: type=1400 audit(1754813730.605:561): avc: denied { write } for pid=1420 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.890996][ T348] usb 1-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 84.911244][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.929919][ T30] audit: type=1400 audit(1754813730.605:562): avc: denied { accept } for pid=1420 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.931223][ T1234] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 84.951637][ T348] usb 1-1: config 0 descriptor?? [ 84.969191][ T1234] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 84.969213][ T1234] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 84.986077][ T1234] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 85.001242][ T1234] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 85.031237][ T1234] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 85.039239][ T1234] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 85.047492][ T350] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 85.118138][ T1428] FAULT_INJECTION: forcing a failure. [ 85.118138][ T1428] name failslab, interval 1, probability 0, space 0, times 0 [ 85.133322][ T1428] CPU: 1 PID: 1428 Comm: syz.1.305 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 85.143546][ T1428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.153887][ T1428] Call Trace: [ 85.157183][ T1428] [ 85.160131][ T1428] __dump_stack+0x21/0x30 [ 85.164565][ T1428] dump_stack_lvl+0xee/0x150 [ 85.169195][ T1428] ? show_regs_print_info+0x20/0x20 [ 85.174437][ T1428] ? __stack_depot_save+0x34/0x480 [ 85.179723][ T1428] dump_stack+0x15/0x20 [ 85.183896][ T1428] should_fail+0x3c1/0x510 [ 85.188323][ T1428] __should_failslab+0xa4/0xe0 [ 85.193102][ T1428] should_failslab+0x9/0x20 [ 85.197607][ T1428] slab_pre_alloc_hook+0x3b/0xe0 [ 85.202635][ T1428] ? getname_flags+0xb9/0x500 [ 85.207570][ T1428] kmem_cache_alloc+0x44/0x260 [ 85.212424][ T1428] getname_flags+0xb9/0x500 [ 85.216927][ T1428] user_path_at_empty+0x30/0x1c0 [ 85.221877][ T1428] vfs_statx+0xfb/0xa60 [ 85.226049][ T1428] ? __kasan_check_write+0x14/0x20 [ 85.231176][ T1428] ? proc_fail_nth_write+0x17a/0x1f0 [ 85.236470][ T1428] ? security_file_permission+0x79/0xa0 [ 85.242035][ T1428] ? vfs_fstatat+0x40/0x40 [ 85.246560][ T1428] __se_sys_newstat+0xb8/0x320 [ 85.251337][ T1428] ? __x64_sys_newstat+0x70/0x70 [ 85.256279][ T1428] ? file_end_write+0x1b0/0x1b0 [ 85.261130][ T1428] ? __kasan_check_write+0x14/0x20 [ 85.266245][ T1428] ? mutex_unlock+0x89/0x220 [ 85.270940][ T1428] ? __mutex_lock_slowpath+0x10/0x10 [ 85.276352][ T1428] ? __ia32_sys_read+0x90/0x90 [ 85.281131][ T1428] ? debug_smp_processor_id+0x17/0x20 [ 85.286553][ T1428] __x64_sys_newstat+0x5b/0x70 [ 85.291330][ T1428] x64_sys_call+0x377/0x9a0 [ 85.295925][ T1428] do_syscall_64+0x4c/0xa0 [ 85.300382][ T1428] ? clear_bhb_loop+0x50/0xa0 [ 85.305071][ T1428] ? clear_bhb_loop+0x50/0xa0 [ 85.309867][ T1428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.315767][ T1428] RIP: 0033:0x7f85a25b4be9 [ 85.320184][ T1428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.340158][ T1428] RSP: 002b:00007f85a101d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 85.348711][ T1428] RAX: ffffffffffffffda RBX: 00007f85a27dbfa0 RCX: 00007f85a25b4be9 [ 85.356689][ T1428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 85.364660][ T1428] RBP: 00007f85a101d090 R08: 0000000000000000 R09: 0000000000000000 [ 85.372637][ T1428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.380831][ T1428] R13: 00007f85a27dc038 R14: 00007f85a27dbfa0 R15: 00007ffe56394a18 [ 85.389001][ T1428] [ 85.393923][ T30] audit: type=1400 audit(1754813731.265:563): avc: denied { watch } for pid=1398 comm="syz.0.296" path="/64/file0" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.417963][ T30] audit: type=1400 audit(1754813731.265:564): avc: denied { create } for pid=1429 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 85.466197][ T1433] loop4: detected capacity change from 0 to 512 [ 85.480753][ T1433] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 85.499822][ T1433] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 85.509632][ T1433] EXT4-fs (loop4): 1 truncate cleaned up [ 85.510438][ T1436] loop1: detected capacity change from 0 to 256 [ 85.515673][ T1433] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 85.569765][ T1438] loop5: detected capacity change from 0 to 4096 [ 85.602633][ T1436] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.621286][ T1436] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 85.622615][ T348] hid-generic 0003:045E:008E.000C: unbalanced collection at end of report description [ 85.641470][ T1436] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 85.642743][ T1438] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.662033][ T348] hid-generic: probe of 0003:045E:008E.000C failed with error -22 [ 85.676043][ T30] audit: type=1400 audit(1754813731.555:565): avc: denied { write } for pid=1434 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.778466][ T350] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 4 [ 85.789837][ T350] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 85.800886][ T350] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 13368, setting to 1023 [ 85.812206][ T350] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.821278][ T350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.871988][ T350] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 85.956198][ T1445] overlayfs: failed to resolve './bus': -2 [ 86.290230][ T26] usb 4-1: USB disconnect, device number 5 [ 86.604292][ T348] usb 1-1: USB disconnect, device number 8 [ 86.663039][ T30] audit: type=1400 audit(1754813732.535:566): avc: denied { setopt } for pid=1449 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.690733][ T30] audit: type=1400 audit(1754813732.555:567): avc: denied { map } for pid=1449 comm="syz.1.309" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.925500][ T1456] loop1: detected capacity change from 0 to 40427 [ 86.973631][ T1456] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.981682][ T1456] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.995689][ T1456] F2FS-fs (loop1): invalid crc value [ 87.290666][ T1456] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.342590][ T1456] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.350243][ T1456] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.412640][ T1474] xt_hashlimit: size too large, truncated to 1048576 [ 87.645767][ T20] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.361585][ T1482] device pim6reg1 entered promiscuous mode [ 89.385376][ T1494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1398 sclass=netlink_route_socket pid=1494 comm=syz.1.311 [ 89.401265][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.414634][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.430614][ T1496] loop5: detected capacity change from 0 to 512 [ 89.507653][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.524731][ T1500] loop3: detected capacity change from 0 to 512 [ 89.531856][ T1496] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.322: casefold flag without casefold feature [ 89.546300][ T20] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.555786][ T1496] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.322: couldn't read orphan inode 15 (err -117) [ 89.556320][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.576836][ T1496] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.597331][ T20] usb 1-1: config 0 descriptor?? [ 89.610312][ T1500] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 89.618718][ T1500] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 89.628340][ T1500] EXT4-fs (loop3): 1 truncate cleaned up [ 89.634195][ T1500] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 89.782860][ T862] attempt to access beyond end of device [ 89.782860][ T862] loop1: rw=1, want=80248, limit=40427 [ 89.818708][ T862] attempt to access beyond end of device [ 89.818708][ T862] loop1: rw=1, want=81920, limit=40427 [ 89.859724][ T862] attempt to access beyond end of device [ 89.859724][ T862] loop1: rw=1, want=51200, limit=40427 [ 89.888968][ T862] attempt to access beyond end of device [ 89.888968][ T862] loop1: rw=1, want=53248, limit=40427 [ 89.937675][ T862] attempt to access beyond end of device [ 89.937675][ T862] loop1: rw=1, want=66176, limit=40427 [ 89.978254][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 89.978270][ T30] audit: type=1326 audit(1754813735.845:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1513 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 90.041212][ T30] audit: type=1326 audit(1754813735.885:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1513 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 90.065271][ T30] audit: type=1326 audit(1754813735.885:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1513 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 90.131675][ T30] audit: type=1326 audit(1754813735.885:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1513 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 90.210690][ T1516] loop4: detected capacity change from 0 to 1024 [ 90.226139][ T20] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 90.350868][ T1516] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.327: Invalid block bitmap block 0 in block_group 0 [ 90.365719][ T1516] Quota error (device loop4): write_blk: dquota write failed [ 90.373535][ T1516] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 90.383876][ T1516] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.327: Failed to acquire dquot type 0 [ 90.398611][ T1516] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.327: Freeing blocks not in datazone - block = 0, count = 4096 [ 90.413875][ T1516] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.327: Invalid inode bitmap blk 0 in block_group 0 [ 90.427443][ T1516] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 90.437068][ T1516] EXT4-fs (loop4): 1 orphan inode deleted [ 90.442996][ T1516] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue. Quota mode: writeback. [ 90.536220][ T20] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 90.644241][ T8] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 90.677956][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:0: Failed to release dquot type 0 [ 90.728328][ T30] audit: type=1326 audit(1754813735.885:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1513 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 90.765863][ T20] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 90.965505][ T30] audit: type=1326 audit(1754813735.885:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1513 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 91.046223][ T30] audit: type=1326 audit(1754813735.885:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1513 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18570cbe9 code=0x7ffc0000 [ 91.080534][ T20] usb 1-1: USB disconnect, device number 9 [ 91.691156][ T1529] loop4: detected capacity change from 0 to 2048 [ 96.308965][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 96.308980][ T30] audit: type=1400 audit(1754813742.175:636): avc: denied { create } for pid=1541 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 96.358074][ T1549] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 96.545476][ T30] audit: type=1400 audit(1754813742.405:637): avc: denied { create } for pid=1552 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.571838][ T20] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.959930][ T1573] loop5: detected capacity change from 0 to 512 [ 97.981196][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 98.105960][ T1579] loop3: detected capacity change from 0 to 512 [ 98.208566][ T1573] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.220505][ T1573] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.234291][ T20] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 98.244306][ T1579] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 98.357636][ T1579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 98.366239][ T1579] System zones: 1-12 [ 98.375135][ T1579] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.388091][ T20] usb 5-1: config 0 has no interface number 0 [ 98.431672][ T1579] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.342: bg 0: block 361: padding at end of block bitmap is not set [ 98.447072][ T1579] EXT4-fs (loop3): Remounting filesystem read-only [ 98.453703][ T1579] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 98.463641][ T1579] EXT4-fs (loop3): Remounting filesystem read-only [ 98.470233][ T1579] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.342: invalid indirect mapped block 12 (level 1) [ 98.484295][ T1579] EXT4-fs (loop3): Remounting filesystem read-only [ 98.490966][ T1579] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.342: invalid indirect mapped block 2 (level 2) [ 98.505329][ T1579] EXT4-fs (loop3): Remounting filesystem read-only [ 98.512573][ T1579] EXT4-fs (loop3): 1 truncate cleaned up [ 98.518325][ T1579] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000000040,errors=remount-ro,debug_want_extra_isize=0x0000000000000008. Quota mode: none. [ 99.442729][ T1589] loop1: detected capacity change from 0 to 2048 [ 99.561372][ T20] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01a6, bcdDevice=2c.6f [ 99.756261][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.287985][ T1600] device bridge_slave_1 left promiscuous mode [ 100.331277][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.347103][ T30] audit: type=1400 audit(1754813746.215:638): avc: denied { create } for pid=1601 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.372182][ T1600] device bridge_slave_0 left promiscuous mode [ 100.386015][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.397010][ T20] usb 5-1: Product: syz [ 100.405468][ T20] usb 5-1: config 0 descriptor?? [ 100.421252][ T20] usb 5-1: can't set config #0, error -71 [ 100.428236][ T20] usb 5-1: USB disconnect, device number 5 [ 101.018805][ T1613] bridge: RTM_NEWNEIGH with invalid ether address [ 101.101339][ T30] audit: type=1400 audit(1754813746.905:639): avc: denied { ioctl } for pid=1612 comm="syz.1.351" path="socket:[20600]" dev="sockfs" ino=20600 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.200535][ T30] audit: type=1107 audit(1754813746.915:640): pid=1612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 101.555300][ T1620] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 101.672089][ T1615] hub 8-0:1.0: USB hub found [ 101.681368][ T1615] hub 8-0:1.0: 1 port detected [ 101.694509][ T1631] kvm: pic: non byte write [ 101.709391][ T1631] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 101.734495][ T1631] kvm: pic: non byte write [ 101.924013][ T1646] loop3: detected capacity change from 0 to 2048 [ 102.067553][ T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.451779][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.520855][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.707294][ T20] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.793705][ T1653] device bridge_slave_1 left promiscuous mode [ 102.815821][ T1653] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.831405][ T1653] device bridge_slave_0 left promiscuous mode [ 102.928036][ T1653] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.278099][ T1665] netlink: 'syz.3.366': attribute type 4 has an invalid length. [ 103.361441][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 103.370650][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 103.380534][ T20] usb 5-1: Product: syz [ 103.385016][ T20] usb 5-1: Manufacturer: syz [ 103.389671][ T20] usb 5-1: SerialNumber: syz [ 103.792259][ T20] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 103.816621][ T1674] loop0: detected capacity change from 0 to 1024 [ 103.872012][ T1674] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 103.887618][ T1676] loop1: detected capacity change from 0 to 1024 [ 103.904341][ T1674] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 103.930719][ T1674] FAULT_INJECTION: forcing a failure. [ 103.930719][ T1674] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 103.944417][ T1674] CPU: 1 PID: 1674 Comm: syz.0.369 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 103.954697][ T1674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.965005][ T1674] Call Trace: [ 103.966526][ T784] usb 5-1: USB disconnect, device number 6 [ 103.968301][ T1674] [ 103.968310][ T1674] __dump_stack+0x21/0x30 [ 103.977855][ T784] usblp0: removed [ 103.981672][ T1674] dump_stack_lvl+0xee/0x150 [ 103.981702][ T1674] ? show_regs_print_info+0x20/0x20 [ 103.981725][ T1674] dump_stack+0x15/0x20 [ 103.981744][ T1674] should_fail+0x3c1/0x510 [ 103.998057][ T1676] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 103.999795][ T1674] should_fail_alloc_page+0x55/0x80 [ 104.004453][ T1676] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.021095][ T1674] prepare_alloc_pages+0x156/0x600 [ 104.021130][ T1674] ? __alloc_pages_bulk+0xab0/0xab0 [ 104.021152][ T1674] __alloc_pages+0x10a/0x440 [ 104.021171][ T1674] ? prep_new_page+0x110/0x110 [ 104.021192][ T1674] ? filemap_read+0x63a/0x1f70 [ 104.048305][ T30] audit: type=1400 audit(1754813749.915:641): avc: denied { ioctl } for pid=1675 comm="syz.1.370" path="/72/file1/file1" dev="loop1" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.052166][ T1674] __stack_depot_save+0x37e/0x480 [ 104.052199][ T1674] stack_depot_save+0xe/0x10 [ 104.052219][ T1674] save_stack+0x101/0x1e0 [ 104.100723][ T1674] ? __reset_page_owner+0x190/0x190 [ 104.105958][ T1674] ? post_alloc_hook+0x192/0x1b0 [ 104.111292][ T1674] ? prep_new_page+0x1c/0x110 [ 104.116140][ T1674] ? get_page_from_freelist+0x2cc5/0x2d50 [ 104.121886][ T1674] ? __alloc_pages+0x18f/0x440 [ 104.126676][ T1674] ? __stack_depot_save+0x37e/0x480 [ 104.132058][ T1674] ? __kasan_slab_alloc+0xcf/0xf0 [ 104.137295][ T1674] ? slab_post_alloc_hook+0x4f/0x2b0 [ 104.142783][ T1674] ? kmem_cache_alloc+0xf7/0x260 [ 104.147731][ T1674] ? xas_create+0x569/0x1580 [ 104.152679][ T1674] ? xas_store+0x94/0x17b0 [ 104.157283][ T1674] ? __add_to_page_cache_locked+0x446/0x7a0 [ 104.163429][ T1674] ? add_to_page_cache_lru+0xa7/0x210 [ 104.168920][ T1674] ? page_cache_ra_unbounded+0x460/0x980 [ 104.174747][ T1674] ? ondemand_readahead+0x8d3/0xe30 [ 104.180046][ T1674] ? page_cache_sync_ra+0x2c4/0x420 [ 104.185399][ T1674] ? filemap_read+0x63a/0x1f70 [ 104.190189][ T1674] __set_page_owner+0x2b/0x2e0 [ 104.195145][ T1674] ? kernel_init_free_pages+0xdc/0xf0 [ 104.200541][ T1674] post_alloc_hook+0x192/0x1b0 [ 104.205471][ T1674] prep_new_page+0x1c/0x110 [ 104.209985][ T1674] get_page_from_freelist+0x2cc5/0x2d50 [ 104.215725][ T1674] ? __kasan_check_write+0x14/0x20 [ 104.220992][ T1674] ? _raw_spin_lock+0xe0/0xe0 [ 104.225808][ T1674] ? __alloc_pages+0x440/0x440 [ 104.230691][ T1674] ? __alloc_pages_bulk+0xab0/0xab0 [ 104.235906][ T1674] ? 0xffffffffa0028560 [ 104.240090][ T1674] ? is_bpf_text_address+0x177/0x190 [ 104.245632][ T1674] __alloc_pages+0x18f/0x440 [ 104.250428][ T1674] ? stack_trace_save+0xe0/0xe0 [ 104.255407][ T1674] ? prep_new_page+0x110/0x110 [ 104.260179][ T1674] ? stack_trace_save+0x98/0xe0 [ 104.265187][ T1674] __stack_depot_save+0x37e/0x480 [ 104.270267][ T1674] __kasan_slab_alloc+0xcf/0xf0 [ 104.275125][ T1674] ? __kasan_slab_alloc+0xbd/0xf0 [ 104.280151][ T1674] ? slab_post_alloc_hook+0x4f/0x2b0 [ 104.285441][ T1674] ? kmem_cache_alloc+0xf7/0x260 [ 104.290385][ T1674] ? xas_create+0x569/0x1580 [ 104.294987][ T1674] ? xas_store+0x94/0x17b0 [ 104.299523][ T1674] ? __add_to_page_cache_locked+0x446/0x7a0 [ 104.305430][ T1674] ? add_to_page_cache_lru+0xa7/0x210 [ 104.310816][ T1674] ? page_cache_ra_unbounded+0x460/0x980 [ 104.316630][ T1674] ? ondemand_readahead+0x8d3/0xe30 [ 104.322093][ T1674] ? page_cache_sync_ra+0x2c4/0x420 [ 104.327392][ T1674] ? filemap_read+0x63a/0x1f70 [ 104.332251][ T1674] ? generic_file_read_iter+0xac/0x400 [ 104.337741][ T1674] ? ext4_file_read_iter+0x3cc/0x510 [ 104.343146][ T1674] ? generic_file_splice_read+0x39f/0x590 [ 104.348976][ T1674] ? splice_direct_to_actor+0x404/0xb30 [ 104.354529][ T1674] ? do_splice_direct+0x1b3/0x2c0 [ 104.359661][ T1674] ? vfs_copy_file_range+0xbe9/0x1730 [ 104.365045][ T1674] ? __se_sys_copy_file_range+0x313/0x470 [ 104.371023][ T1674] ? __x64_sys_copy_file_range+0xe5/0x100 [ 104.376777][ T1674] ? x64_sys_call+0x2c8/0x9a0 [ 104.381463][ T1674] ? do_syscall_64+0x4c/0xa0 [ 104.386251][ T1674] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.392334][ T1674] slab_post_alloc_hook+0x4f/0x2b0 [ 104.397582][ T1674] ? xas_create+0x569/0x1580 [ 104.402207][ T1674] kmem_cache_alloc+0xf7/0x260 [ 104.407065][ T1674] xas_create+0x569/0x1580 [ 104.411594][ T1674] xas_store+0x94/0x17b0 [ 104.415931][ T1674] ? xas_start+0x2ae/0x3e0 [ 104.420492][ T1674] ? xas_find_conflict+0x767/0x850 [ 104.425659][ T1674] __add_to_page_cache_locked+0x446/0x7a0 [ 104.431522][ T1674] ? put_page+0xb0/0xb0 [ 104.435833][ T1674] ? workingset_activation+0x400/0x400 [ 104.441408][ T1674] ? prep_new_page+0x110/0x110 [ 104.446194][ T1674] add_to_page_cache_lru+0xa7/0x210 [ 104.451527][ T1674] page_cache_ra_unbounded+0x460/0x980 [ 104.457220][ T1674] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 104.463899][ T1674] ondemand_readahead+0x8d3/0xe30 [ 104.468940][ T1674] ? xas_start+0x31e/0x3e0 [ 104.473363][ T1674] ? page_cache_sync_ra+0x420/0x420 [ 104.478593][ T1674] ? filemap_get_read_batch+0x6e5/0x730 [ 104.484154][ T1674] page_cache_sync_ra+0x2c4/0x420 [ 104.489274][ T1674] ? force_page_cache_ra+0x460/0x460 [ 104.494698][ T1674] filemap_read+0x63a/0x1f70 [ 104.499563][ T1674] ? find_get_pages_range_tag+0x2c0/0x2c0 [ 104.505404][ T1674] ? stack_trace_save+0x98/0xe0 [ 104.510458][ T1674] ? __stack_depot_save+0x442/0x480 [ 104.515704][ T1674] ? __se_sys_copy_file_range+0x313/0x470 [ 104.521444][ T1674] ? __x64_sys_copy_file_range+0xe5/0x100 [ 104.527321][ T1674] ? x64_sys_call+0x2c8/0x9a0 [ 104.532013][ T1674] ? do_syscall_64+0x4c/0xa0 [ 104.536622][ T1674] generic_file_read_iter+0xac/0x400 [ 104.541921][ T1674] ext4_file_read_iter+0x3cc/0x510 [ 104.547061][ T1674] ? iov_iter_pipe+0x102/0x270 [ 104.552009][ T1674] generic_file_splice_read+0x39f/0x590 [ 104.557711][ T1674] ? splice_shrink_spd+0xb0/0xb0 [ 104.562671][ T1674] ? __kasan_check_read+0x11/0x20 [ 104.567768][ T1674] ? fsnotify_perm+0x269/0x5b0 [ 104.572670][ T1674] ? security_file_permission+0x83/0xa0 [ 104.578676][ T1674] ? rw_verify_area+0xa7/0x1c0 [ 104.583579][ T1674] splice_direct_to_actor+0x404/0xb30 [ 104.589011][ T1674] ? do_splice_direct+0x2c0/0x2c0 [ 104.594059][ T1674] ? pipe_to_sendpage+0x310/0x310 [ 104.599103][ T1674] ? security_file_permission+0x83/0xa0 [ 104.604781][ T1674] ? rw_verify_area+0xa7/0x1c0 [ 104.609562][ T1674] do_splice_direct+0x1b3/0x2c0 [ 104.614432][ T1674] ? splice_direct_to_actor+0xb30/0xb30 [ 104.620007][ T1674] ? fsnotify_perm+0x67/0x5b0 [ 104.624790][ T1674] ? security_file_permission+0x79/0xa0 [ 104.630439][ T1674] ? security_file_permission+0x83/0xa0 [ 104.636303][ T1674] vfs_copy_file_range+0xbe9/0x1730 [ 104.641717][ T1674] ? generic_copy_file_range+0x110/0x110 [ 104.647635][ T1674] ? __kasan_check_write+0x14/0x20 [ 104.652788][ T1674] ? _copy_from_user+0x95/0xd0 [ 104.657588][ T1674] __se_sys_copy_file_range+0x313/0x470 [ 104.663375][ T1674] ? __kasan_check_write+0x14/0x20 [ 104.668615][ T1674] ? fput_many+0x15a/0x1a0 [ 104.673230][ T1674] ? __x64_sys_copy_file_range+0x100/0x100 [ 104.679083][ T1674] ? ksys_write+0x1eb/0x240 [ 104.683622][ T1674] ? __ia32_sys_read+0x90/0x90 [ 104.688772][ T1674] __x64_sys_copy_file_range+0xe5/0x100 [ 104.695192][ T1674] x64_sys_call+0x2c8/0x9a0 [ 104.699905][ T1674] do_syscall_64+0x4c/0xa0 [ 104.704384][ T1674] ? clear_bhb_loop+0x50/0xa0 [ 104.709284][ T1674] ? clear_bhb_loop+0x50/0xa0 [ 104.714001][ T1674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.720258][ T1674] RIP: 0033:0x7f53262bdbe9 [ 104.724694][ T1674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.744606][ T1674] RSP: 002b:00007f5324d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 104.753209][ T1674] RAX: ffffffffffffffda RBX: 00007f53264e4fa0 RCX: 00007f53262bdbe9 [ 104.761233][ T1674] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000008 [ 104.769249][ T1674] RBP: 00007f5324d26090 R08: 0000000000000009 R09: 0000000000000000 [ 104.777690][ T1674] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 104.785758][ T1674] R13: 00007f53264e5038 R14: 00007f53264e4fa0 R15: 00007ffdd1350128 [ 104.793856][ T1674] [ 104.962441][ T1698] loop3: detected capacity change from 0 to 2048 [ 105.160209][ T1702] tipc: Started in network mode [ 105.189510][ T1702] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 105.312406][ T1702] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 105.436091][ T1702] tipc: Enabled bearer , priority 10 [ 106.293875][ T1721] loop3: detected capacity change from 0 to 1024 [ 106.395480][ T1725] loop1: detected capacity change from 0 to 512 [ 106.416061][ T1721] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 106.433784][ T1725] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 106.525405][ T1721] EXT4-fs (loop3): Unrecognized mount option "obj_role=*{" or missing value [ 106.585658][ T784] tipc: Node number set to 1 [ 106.658000][ T1725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 106.666648][ T1725] System zones: 1-12 [ 106.673162][ T1725] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.682217][ T1725] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.383: bg 0: block 361: padding at end of block bitmap is not set [ 106.697894][ T1725] EXT4-fs (loop1): Remounting filesystem read-only [ 106.704792][ T1725] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 106.714473][ T1725] EXT4-fs (loop1): Remounting filesystem read-only [ 106.721272][ T1725] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.383: invalid indirect mapped block 12 (level 1) [ 106.735245][ T1725] EXT4-fs (loop1): Remounting filesystem read-only [ 106.741949][ T1725] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.383: invalid indirect mapped block 2 (level 2) [ 106.755924][ T1725] EXT4-fs (loop1): Remounting filesystem read-only [ 106.763044][ T1725] EXT4-fs (loop1): 1 truncate cleaned up [ 106.768776][ T1725] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000000040,errors=remount-ro,debug_want_extra_isize=0x0000000000000008. Quota mode: none. [ 107.033396][ T1729] device wireguard0 entered promiscuous mode [ 108.339184][ T1736] loop4: detected capacity change from 0 to 512 [ 108.416730][ T1736] EXT4-fs (loop4): Test dummy encryption mode enabled [ 108.457004][ T1736] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 108.479727][ T1736] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 108.507248][ T1739] loop5: detected capacity change from 0 to 4096 [ 108.513881][ T1736] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 108.544915][ T1728] mmap: syz.0.382 (1728) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 108.558284][ T30] audit: type=1326 audit(1754813754.425:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.0.382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53262bdbe9 code=0x0 [ 108.646190][ T1739] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.646456][ T1744] tipc: Started in network mode [ 108.662523][ T1744] tipc: Node identity 8a9c2b43b6fd, cluster identity 4711 [ 108.671569][ T1744] tipc: Enabled bearer , priority 0 [ 108.738538][ T1747] loop0: detected capacity change from 0 to 512 [ 108.764432][ T1747] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 108.875320][ T1750] overlayfs: failed to resolve './bus': -2 [ 109.593453][ T1747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 109.601905][ T1747] System zones: 1-12 [ 109.608987][ T1747] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.616741][ T1747] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.390: bg 0: block 361: padding at end of block bitmap is not set [ 109.631905][ T1747] EXT4-fs (loop0): Remounting filesystem read-only [ 109.638530][ T1747] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 109.648259][ T1747] EXT4-fs (loop0): Remounting filesystem read-only [ 109.654972][ T1747] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.390: invalid indirect mapped block 12 (level 1) [ 109.668977][ T1747] EXT4-fs (loop0): Remounting filesystem read-only [ 109.675568][ T1747] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.390: invalid indirect mapped block 2 (level 2) [ 109.689495][ T1747] EXT4-fs (loop0): Remounting filesystem read-only [ 109.697629][ T1747] EXT4-fs (loop0): 1 truncate cleaned up [ 109.703736][ T1747] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000000040,errors=remount-ro,debug_want_extra_isize=0x0000000000000008. Quota mode: none. [ 109.794822][ T20] tipc: Node number set to 1013001027 [ 110.301956][ T1743] tipc: Disabling bearer [ 110.319266][ T1754] fuse: Bad value for 'fd' [ 110.340299][ T1754] fuse: Bad value for 'user_id' [ 110.531615][ T1752] loop3: detected capacity change from 0 to 1024 [ 110.549610][ T1752] EXT4-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 110.586283][ T30] audit: type=1400 audit(1754813756.455:643): avc: denied { remount } for pid=1753 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.721039][ T1764] loop0: detected capacity change from 0 to 2048 [ 110.814166][ T784] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.904601][ T30] audit: type=1400 audit(1754813756.775:644): avc: denied { execute } for pid=1720 comm="syz.3.384" path="/76/file1" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.211426][ T784] usb 6-1: too many configurations: 29, using maximum allowed: 8 [ 111.230093][ T1767] loop4: detected capacity change from 0 to 1024 [ 111.301543][ T1767] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 111.311281][ T1767] EXT4-fs (loop4): Ignoring removed oldalloc option [ 111.318066][ T1767] EXT4-fs (loop4): dax option not supported [ 112.406868][ T1777] loop0: detected capacity change from 0 to 1024 [ 112.515202][ T1777] EXT4-fs (loop0): Ignoring removed nobh option [ 112.538227][ T1779] loop3: detected capacity change from 0 to 16 [ 112.585120][ T1779] erofs: (device loop3): mounted with root inode @ nid 36. [ 112.600438][ T1783] loop4: detected capacity change from 0 to 512 [ 112.607033][ T1777] EXT4-fs (loop0): Ignoring removed bh option [ 112.631236][ T1777] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.642043][ T784] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 112.651232][ T784] usb 6-1: can't read configurations, error -61 [ 112.667122][ T1783] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 112.675133][ T1783] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.699913][ T1777] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 112.726854][ T1783] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.750813][ T30] audit: type=1400 audit(1754813758.615:645): avc: denied { nlmsg_write } for pid=1789 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 112.750996][ T1783] EXT4-fs (loop4): 1 truncate cleaned up [ 112.777453][ T1783] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue. Quota mode: writeback. [ 112.801149][ T784] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 112.806912][ T1782] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 112.820309][ T1777] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.397: Allocating blocks 497-513 which overlap fs metadata [ 112.840207][ T30] audit: type=1400 audit(1754813758.705:646): avc: denied { relabelto } for pid=1780 comm="syz.4.400" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 112.866983][ T1777] EXT4-fs (loop0): pa ffff888111927000: logic 128, phys. 385, len 8 [ 112.875099][ T1777] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 112.899835][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x1 [ 112.907945][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 112.915595][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 112.923526][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 112.930970][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 112.938640][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 112.946717][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 112.956320][ T1800] x_tables: duplicate underflow at hook 2 [ 112.960254][ T30] audit: type=1400 audit(1754813758.835:647): avc: denied { getopt } for pid=1797 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.984426][ T1796] ================================================================== [ 112.992694][ T1796] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 113.000614][ T1796] Read of size 4 at addr ffff88813014252c by task syz.0.397/1796 [ 113.008348][ T1796] [ 113.010779][ T1796] CPU: 0 PID: 1796 Comm: syz.0.397 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 113.020934][ T1796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.031168][ T1796] Call Trace: [ 113.034640][ T1796] [ 113.037672][ T1796] __dump_stack+0x21/0x30 [ 113.042101][ T1796] dump_stack_lvl+0xee/0x150 [ 113.047012][ T1796] ? show_regs_print_info+0x20/0x20 [ 113.052355][ T1796] ? load_image+0x3a0/0x3a0 [ 113.056894][ T1796] print_address_description+0x7f/0x2c0 [ 113.062543][ T1796] ? ext4_find_extent+0xbeb/0xe20 [ 113.067591][ T1796] kasan_report+0xf1/0x140 [ 113.072033][ T1796] ? __read_extent_tree_block+0x1e8/0x790 [ 113.077781][ T1796] ? ext4_find_extent+0xbeb/0xe20 [ 113.082922][ T1796] __asan_report_load4_noabort+0x14/0x20 [ 113.088569][ T1796] ext4_find_extent+0xbeb/0xe20 [ 113.093529][ T1796] ext4_ext_map_blocks+0x1de/0x6280 [ 113.098852][ T1796] ? 0xffffffffa002e000 [ 113.103018][ T1796] ? is_bpf_text_address+0x177/0x190 [ 113.108452][ T1796] ? __kernel_text_address+0xa0/0x100 [ 113.113866][ T1796] ? __kasan_check_write+0x14/0x20 [ 113.118988][ T1796] ? rwsem_read_trylock+0x29a/0x620 [ 113.124208][ T1796] ? ext4_ext_release+0x10/0x10 [ 113.129155][ T1796] ? downgrade_write+0x410/0x410 [ 113.134122][ T1796] ? ext4_es_lookup_extent+0x32d/0x8c0 [ 113.139682][ T1796] ext4_map_blocks+0x3a7/0x1b20 [ 113.144643][ T1796] ? kmem_cache_alloc+0xf7/0x260 [ 113.149610][ T1796] ? alloc_buffer_head+0x26/0x120 [ 113.154741][ T1796] ? generic_perform_write+0x2ad/0x670 [ 113.160218][ T1796] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.166481][ T1796] ? ext4_issue_zeroout+0x250/0x250 [ 113.171690][ T1796] _ext4_get_block+0x1da/0x4e0 [ 113.176610][ T1796] ? ext4_get_block+0x50/0x50 [ 113.181300][ T1796] ? should_failslab+0x9/0x20 [ 113.185985][ T1796] ext4_get_block_unwritten+0x2a/0x40 [ 113.191365][ T1796] ext4_block_write_begin+0x556/0x1150 [ 113.196988][ T1796] ? _ext4_get_block+0x4e0/0x4e0 [ 113.202034][ T1796] ? ext4_print_free_blocks+0x390/0x390 [ 113.207688][ T1796] ? ext4_write_begin+0x42a/0x1220 [ 113.213077][ T1796] ? ext4_inode_journal_mode+0x19a/0x480 [ 113.218813][ T1796] ext4_write_begin+0x638/0x1220 [ 113.224058][ T1796] ? ext4_readahead+0x110/0x110 [ 113.229001][ T1796] ? ext4_get_inode_loc+0x130/0x130 [ 113.234206][ T1796] ? _raw_spin_unlock+0x4d/0x70 [ 113.239183][ T1796] ? finish_task_switch+0x16b/0x780 [ 113.244509][ T1796] ? __xattr_check_inode+0x39b/0x440 [ 113.249805][ T1796] ? __kasan_check_write+0x14/0x20 [ 113.254920][ T1796] ? __brelse+0x5d/0x90 [ 113.259081][ T1796] ? ext4_xattr_ibody_get+0x269/0x6e0 [ 113.264730][ T1796] ? release_firmware_map_entry+0x190/0x190 [ 113.270902][ T1796] ext4_da_write_begin+0x2fa/0xb60 [ 113.276112][ T1796] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 113.281499][ T1796] ? ext4_xattr_security_get+0x32/0x40 [ 113.286980][ T1796] ? ext4_initxattrs+0x110/0x110 [ 113.291930][ T1796] ? __vfs_getxattr+0x3a3/0x3d0 [ 113.296789][ T1796] ? __kasan_check_write+0x14/0x20 [ 113.301996][ T1796] ? _raw_spin_lock+0x8e/0xe0 [ 113.306790][ T1796] ? _raw_spin_trylock_bh+0x130/0x130 [ 113.312175][ T1796] ? fault_in_readable+0x130/0x160 [ 113.317293][ T1796] ? fault_in_iov_iter_readable+0x23e/0x280 [ 113.323207][ T1796] generic_perform_write+0x2ad/0x670 [ 113.328669][ T1796] ? generic_update_time+0x1da/0x1f0 [ 113.333985][ T1796] ? file_remove_privs+0x590/0x590 [ 113.339113][ T1796] ? grab_cache_page_write_begin+0xb0/0xb0 [ 113.345028][ T1796] ? do_futex+0xc91/0x2620 [ 113.349468][ T1796] ? generic_write_checks+0x3b3/0x480 [ 113.355144][ T1796] ext4_buffered_write_iter+0x4ed/0x670 [ 113.360714][ T1796] ext4_file_write_iter+0x18c/0x14c0 [ 113.366136][ T1796] ? __kasan_slab_free+0x11/0x20 [ 113.371371][ T1796] ? kvfree+0x35/0x40 [ 113.375380][ T1796] ? kfree+0xc4/0x270 [ 113.379373][ T1796] ? kvfree+0x35/0x40 [ 113.383360][ T1796] ? avc_policy_seqno+0x1b/0x70 [ 113.388368][ T1796] ? ext4_file_read_iter+0x510/0x510 [ 113.393814][ T1796] ? memset+0x35/0x40 [ 113.397831][ T1796] ? iov_iter_init+0xbc/0x180 [ 113.402523][ T1796] vfs_write+0x802/0xf70 [ 113.406868][ T1796] ? file_end_write+0x1b0/0x1b0 [ 113.411905][ T1796] ? __fget_files+0x2c4/0x320 [ 113.416849][ T1796] ? __fdget+0x1a1/0x230 [ 113.421097][ T1796] ? __x64_sys_pwrite64+0xec/0x220 [ 113.426351][ T1796] __x64_sys_pwrite64+0x191/0x220 [ 113.431382][ T1796] ? ksys_pwrite64+0x1b0/0x1b0 [ 113.436161][ T1796] ? __kasan_check_write+0x14/0x20 [ 113.441275][ T1796] ? switch_fpu_return+0x15d/0x2c0 [ 113.446395][ T1796] x64_sys_call+0xa6/0x9a0 [ 113.450907][ T1796] do_syscall_64+0x4c/0xa0 [ 113.455332][ T1796] ? clear_bhb_loop+0x50/0xa0 [ 113.460204][ T1796] ? clear_bhb_loop+0x50/0xa0 [ 113.464901][ T1796] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.470900][ T1796] RIP: 0033:0x7f53262bdbe9 [ 113.475328][ T1796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.495217][ T1796] RSP: 002b:00007f5324d05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 113.503730][ T1796] RAX: ffffffffffffffda RBX: 00007f53264e5090 RCX: 00007f53262bdbe9 [ 113.511710][ T1796] RDX: 00000000ffffff07 RSI: 0000200000000140 RDI: 0000000000000004 [ 113.519777][ T1796] RBP: 00007f5326340e19 R08: 0000000000000000 R09: 0000000000000000 [ 113.528395][ T1796] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000000 [ 113.536377][ T1796] R13: 00007f53264e5128 R14: 00007f53264e5090 R15: 00007ffdd1350128 [ 113.544596][ T1796] [ 113.547913][ T1796] [ 113.550330][ T1796] The buggy address belongs to the page: [ 113.555968][ T1796] page:ffffea0004c05080 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x100 pfn:0x130142 [ 113.566736][ T1796] flags: 0x4000000000000000(zone=1) [ 113.571959][ T1796] raw: 4000000000000000 ffffea0004aada48 ffffea0004c25848 0000000000000000 [ 113.580564][ T1796] raw: 0000000000000100 0000000000000000 00000000ffffff7f 0000000000000000 [ 113.589163][ T1796] page dumped because: kasan: bad access detected [ 113.595785][ T1796] page_owner tracks the page as freed [ 113.601172][ T1796] page last allocated via order 0, migratetype Movable, gfp_mask 0x100cca(GFP_HIGHUSER_MOVABLE), pid 1624, ts 101261078366, free_ts 101728494184 [ 113.615949][ T1796] post_alloc_hook+0x192/0x1b0 [ 113.620725][ T1796] prep_new_page+0x1c/0x110 [ 113.625336][ T1796] get_page_from_freelist+0x2cc5/0x2d50 [ 113.630889][ T1796] __alloc_pages+0x18f/0x440 [ 113.635493][ T1796] shmem_alloc_and_acct_page+0x42b/0x870 [ 113.641129][ T1796] shmem_getpage_gfp+0xfe5/0x2310 [ 113.646160][ T1796] shmem_fault+0x19d/0x510 [ 113.650589][ T1796] __do_fault+0x264/0x2f0 [ 113.654922][ T1796] handle_pte_fault+0x1a57/0x2680 [ 113.659950][ T1796] do_handle_mm_fault+0x1a6d/0x1d50 [ 113.665441][ T1796] __get_user_pages+0x7ee/0x10a0 [ 113.670401][ T1796] __mm_populate+0x319/0x460 [ 113.674997][ T1796] vm_mmap_pgoff+0x247/0x410 [ 113.679618][ T1796] ksys_mmap_pgoff+0xf6/0x1d0 [ 113.684404][ T1796] __x64_sys_mmap+0xfa/0x110 [ 113.688997][ T1796] x64_sys_call+0x83/0x9a0 [ 113.693507][ T1796] page last free stack trace: [ 113.698174][ T1796] free_unref_page_prepare+0x542/0x550 [ 113.703646][ T1796] free_unref_page_list+0x134/0x9d0 [ 113.708965][ T1796] release_pages+0xfda/0x1030 [ 113.713647][ T1796] __pagevec_release+0x71/0xe0 [ 113.718414][ T1796] shmem_undo_range+0x53f/0x13d0 [ 113.723490][ T1796] shmem_evict_inode+0x1fd/0x9c0 [ 113.728524][ T1796] evict+0x485/0x870 [ 113.732608][ T1796] iput+0x635/0x7c0 [ 113.736518][ T1796] dentry_unlink_inode+0x32f/0x3e0 [ 113.741742][ T1796] __dentry_kill+0x44f/0x650 [ 113.746499][ T1796] dentry_kill+0xc0/0x2a0 [ 113.750838][ T1796] dput+0x47/0x90 [ 113.754556][ T1796] __fput+0x580/0x8b0 [ 113.758553][ T1796] ____fput+0x15/0x20 [ 113.762537][ T1796] task_work_run+0x127/0x190 [ 113.767154][ T1796] do_exit+0xa7e/0x27a0 [ 113.771313][ T1796] [ 113.773634][ T1796] Memory state around the buggy address: [ 113.779261][ T1796] ffff888130142400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 113.787674][ T1796] ffff888130142480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 113.795745][ T1796] >ffff888130142500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 113.803901][ T1796] ^ [ 113.809635][ T1796] ffff888130142580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 113.817729][ T1796] ffff888130142600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 113.825987][ T1796] ================================================================== [ 113.834135][ T1796] Disabling lock debugging due to kernel taint [ 113.841240][ T1210] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.842480][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 113.856826][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 113.864499][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 113.872204][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 113.876979][ T30] audit: type=1400 audit(1754813759.745:648): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 113.881955][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 113.903866][ T30] audit: type=1400 audit(1754813759.745:649): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.912308][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 113.930938][ T30] audit: type=1400 audit(1754813759.745:650): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.938659][ T1593] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 113.963375][ T1799] BUG: unable to handle page fault for address: ffff888110d760f8 [ 113.975336][ T1799] #PF: supervisor read access in kernel mode [ 113.981648][ T1799] #PF: error_code(0x0000) - not-present page [ 113.987860][ T1799] PGD 7201067 P4D 7201067 PUD 1087e3063 PMD 12f477063 PTE 0 [ 113.995653][ T1799] Oops: 0000 [#1] PREEMPT SMP KASAN [ 114.000898][ T1799] CPU: 1 PID: 1799 Comm: syz.4.405 Tainted: G B 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 114.012629][ T1799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.023185][ T1799] RIP: 0010:__stack_depot_save+0x177/0x480 [ 114.029458][ T1799] Code: 29 cd 48 8b 3d f2 55 a9 04 45 89 e9 41 81 e1 ff 0f 00 00 4e 8b 24 cf 4d 85 e4 74 5c 44 89 f1 eb 09 4d 8b 24 24 4d 85 e4 74 4e <45> 39 6c 24 08 75 f0 45 39 74 24 0c 75 e9 31 d2 48 8b 34 d3 49 3b [ 114.049249][ T1799] RSP: 0018:ffffc90000ce7748 EFLAGS: 00010286 [ 114.055329][ T1799] RAX: 0000000000000000 RBX: ffffc90000ce7800 RCX: 0000000000000010 [ 114.063983][ T1799] RDX: 000000001428c886 RSI: 000000001c326cca RDI: ffff88823fec0000 [ 114.072402][ T1799] RBP: ffffc90000ce77a0 R08: 0000000000000001 R09: 00000000000000ba [ 114.080576][ T1799] R10: 0000000090f67811 R11: 1ffff9200019ced1 R12: ffff888110d760f0 [ 114.088746][ T1799] R13: 00000000ce61e0ba R14: 0000000000000010 R15: 0000000000002800 [ 114.096936][ T1799] FS: 000055557b205500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 114.106379][ T1799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.112983][ T1799] CR2: ffff888110d760f8 CR3: 000000010efe7000 CR4: 00000000003506a0 [ 114.120963][ T1799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.129106][ T1799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.137210][ T1799] Call Trace: [ 114.140568][ T1799] [ 114.143717][ T1799] ? __stack_depot_save+0x34/0x480 [ 114.148838][ T1799] stack_depot_save+0xe/0x10 [ 114.153504][ T1799] save_stack+0x101/0x1e0 [ 114.157893][ T1799] ? __reset_page_owner+0x190/0x190 [ 114.163263][ T1799] ? free_unref_page_prepare+0x542/0x550 [ 114.168981][ T1799] ? free_unref_page+0xa2/0x550 [ 114.173929][ T1799] ? __free_pages+0x6c/0x100 [ 114.178549][ T1799] ? free_nonslab_page+0x86/0xc0 [ 114.183524][ T1799] ? kfree+0x19a/0x270 [ 114.187853][ T1799] ? kvfree+0x35/0x40 [ 114.191944][ T1799] ? netdev_freemem+0x3f/0x60 [ 114.196797][ T1799] ? netdev_release+0x7f/0xb0 [ 114.201587][ T1799] ? device_release+0x96/0x1c0 [ 114.206522][ T1799] ? kobject_put+0x18a/0x270 [ 114.211222][ T1799] ? netdev_run_todo+0x812/0x990 [ 114.216251][ T1799] ? rtnl_unlock+0xe/0x10 [ 114.220670][ T1799] ? tun_chr_close+0xc4/0x140 [ 114.225352][ T1799] ? __fput+0x20b/0x8b0 [ 114.229502][ T1799] ? ____fput+0x15/0x20 [ 114.233739][ T1799] ? task_work_run+0x127/0x190 [ 114.238498][ T1799] ? kvm_sched_clock_read+0x18/0x40 [ 114.243901][ T1799] ? sched_clock+0x9/0x10 [ 114.248250][ T1799] __reset_page_owner+0x35/0x190 [ 114.253212][ T1799] ? __kasan_check_read+0x11/0x20 [ 114.258399][ T1799] free_unref_page_prepare+0x542/0x550 [ 114.264030][ T1799] free_unref_page+0xa2/0x550 [ 114.268711][ T1799] ? mark_free_pages+0x660/0x660 [ 114.273733][ T1799] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 114.279626][ T1799] ? __this_cpu_preempt_check+0x13/0x20 [ 114.285192][ T1799] ? __mod_node_page_state+0x9e/0xd0 [ 114.290601][ T1799] __free_pages+0x6c/0x100 [ 114.295173][ T1799] free_nonslab_page+0x86/0xc0 [ 114.299944][ T1799] ? kvfree+0x35/0x40 [ 114.303934][ T1799] kfree+0x19a/0x270 [ 114.307843][ T1799] ? devres_release_all+0x15a/0x1b0 [ 114.313170][ T1799] ? __wake_up+0x116/0x180 [ 114.317718][ T1799] kvfree+0x35/0x40 [ 114.321528][ T1799] netdev_freemem+0x3f/0x60 [ 114.326139][ T1799] netdev_release+0x7f/0xb0 [ 114.330646][ T1799] ? netdev_uevent+0xa0/0xa0 [ 114.335318][ T1799] device_release+0x96/0x1c0 [ 114.339905][ T1799] ? waiting_for_supplier_show+0xa0/0xa0 [ 114.345849][ T1799] kobject_put+0x18a/0x270 [ 114.350418][ T1799] netdev_run_todo+0x812/0x990 [ 114.355302][ T1799] ? netdev_state_change+0xa7/0x210 [ 114.360527][ T1799] ? netdev_refcnt_read+0x60/0x60 [ 114.365759][ T1799] rtnl_unlock+0xe/0x10 [ 114.369929][ T1799] tun_chr_close+0xc4/0x140 [ 114.374451][ T1799] ? tun_chr_open+0x540/0x540 [ 114.379229][ T1799] __fput+0x20b/0x8b0 [ 114.383442][ T1799] ____fput+0x15/0x20 [ 114.387423][ T1799] task_work_run+0x127/0x190 [ 114.392325][ T1799] exit_to_user_mode_loop+0xd0/0xe0 [ 114.397531][ T1799] exit_to_user_mode_prepare+0x5a/0xa0 [ 114.403009][ T1799] syscall_exit_to_user_mode+0x1a/0x30 [ 114.408682][ T1799] do_syscall_64+0x58/0xa0 [ 114.413124][ T1799] ? clear_bhb_loop+0x50/0xa0 [ 114.418006][ T1799] ? clear_bhb_loop+0x50/0xa0 [ 114.422863][ T1799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.428774][ T1799] RIP: 0033:0x7ff18570cbe9 [ 114.433656][ T1799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.453566][ T1799] RSP: 002b:00007ffdabd07ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 114.462218][ T1799] RAX: 0000000000000000 RBX: 000000000001b8f4 RCX: 00007ff18570cbe9 [ 114.470228][ T1799] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 114.478351][ T1799] RBP: 00007ff185935da0 R08: 0000000000000001 R09: 0000001aabd07dbf [ 114.486345][ T1799] R10: 0000001b2d820000 R11: 0000000000000246 R12: 00007ff185933fac [ 114.507964][ T1799] R13: 00007ff185933fa0 R14: ffffffffffffffff R15: 00007ffdabd07be0 [ 114.516055][ T1799] [ 114.519079][ T1799] Modules linked in: [ 114.523064][ T1799] CR2: ffff888110d760f8 [ 114.527257][ T1799] ---[ end trace 3cdc36574adce6bc ]--- [ 114.527310][ C0] BUG: unable to handle page fault for address: ffff888110d768d8 [ 114.532851][ T1799] RIP: 0010:__stack_depot_save+0x177/0x480 [ 114.540575][ C0] #PF: supervisor read access in kernel mode [ 114.546383][ T1799] Code: 29 cd 48 8b 3d f2 55 a9 04 45 89 e9 41 81 e1 ff 0f 00 00 4e 8b 24 cf 4d 85 e4 74 5c 44 89 f1 eb 09 4d 8b 24 24 4d 85 e4 74 4e <45> 39 6c 24 08 75 f0 45 39 74 24 0c 75 e9 31 d2 48 8b 34 d3 49 3b [ 114.552449][ C0] #PF: error_code(0x0000) - not-present page [ 114.572326][ T1799] RSP: 0018:ffffc90000ce7748 EFLAGS: 00010286 [ 114.578318][ C0] PGD 7201067 P4D 7201067 PUD 1087e3063 [ 114.584626][ T1799] RAX: 0000000000000000 RBX: ffffc90000ce7800 RCX: 0000000000000010 [ 114.584643][ T1799] RDX: 000000001428c886 RSI: 000000001c326cca RDI: ffff88823fec0000 [ 114.590273][ C0] PMD 12f477063 [ 114.598435][ T1799] RBP: ffffc90000ce77a0 R08: 0000000000000001 R09: 00000000000000ba [ 114.606795][ C0] PTE 0 [ 114.610376][ T1799] R10: 0000000090f67811 R11: 1ffff9200019ced1 R12: ffff888110d760f0 [ 114.618777][ C0] [ 114.618786][ C0] Oops: 0000 [#2] PREEMPT SMP KASAN [ 114.621535][ T1799] R13: 00000000ce61e0ba R14: 0000000000000010 R15: 0000000000002800 [ 114.629632][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G B D 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 114.631962][ T1799] FS: 000055557b205500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 114.637291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.645539][ T1799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.657161][ C0] RIP: 0010:__stack_depot_save+0x177/0x480 [ 114.666302][ T1799] CR2: ffff888110d760f8 CR3: 000000010efe7000 CR4: 00000000003506a0 [ 114.677137][ C0] Code: 29 cd 48 8b 3d f2 55 a9 04 45 89 e9 41 81 e1 ff 0f 00 00 4e 8b 24 cf 4d 85 e4 74 5c 44 89 f1 eb 09 4d 8b 24 24 4d 85 e4 74 4e <45> 39 6c 24 08 75 f0 45 39 74 24 0c 75 e9 31 d2 48 8b 34 d3 49 3b [ 114.684511][ T1799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.690526][ C0] RSP: 0018:ffffc900000d7708 EFLAGS: 00010282 [ 114.698855][ T1799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.718810][ C0] [ 114.718818][ C0] RAX: 0000000000000000 RBX: ffffc900000d7770 RCX: 000000000000000f [ 114.726898][ T1799] Kernel panic - not syncing: Fatal exception [ 114.733317][ C0] RDX: 00000000618b77d3 RSI: 00000000d6c1888e RDI: ffff88823fec0000 [ 114.766184][ C0] RBP: ffffc900000d7760 R08: 0000000000000001 R09: 0000000000000849 [ 114.774457][ C0] R10: 0000000059f27077 R11: 1ffff9200001aec5 R12: ffff888110d768d0 [ 114.782524][ C0] R13: 00000000586ce849 R14: 000000000000000f R15: 0000000000000800 [ 114.790592][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 114.799531][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.806367][ C0] CR2: ffff888110d768d8 CR3: 00000001280d6000 CR4: 00000000003506b0 [ 114.814551][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.822715][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.830783][ C0] Call Trace: [ 114.834164][ C0] [ 114.837109][ C0] ? __stack_depot_save+0x34/0x480 [ 114.842433][ C0] kasan_set_track+0x5b/0x70 [ 114.847118][ C0] ? kasan_set_track+0x4a/0x70 [ 114.851972][ C0] ? kasan_set_free_info+0x23/0x40 [ 114.857192][ C0] ? ____kasan_slab_free+0x125/0x160 [ 114.862478][ C0] ? __kasan_slab_free+0x11/0x20 [ 114.867418][ C0] ? slab_free_freelist_hook+0xc2/0x190 [ 114.872972][ C0] ? kmem_cache_free+0x100/0x320 [ 114.878102][ C0] ? file_free_rcu+0x93/0xa0 [ 114.882816][ C0] ? rcu_do_batch+0x51d/0xba0 [ 114.887515][ C0] ? rcu_core+0x5e4/0xf80 [ 114.891850][ C0] ? rcu_core_si+0x9/0x10 [ 114.896264][ C0] ? handle_softirqs+0x250/0x560 [ 114.901218][ C0] ? run_ksoftirqd+0x28/0x40 [ 114.905828][ C0] ? smpboot_thread_fn+0x45a/0x8c0 [ 114.910958][ C0] ? kthread+0x411/0x500 [ 114.915211][ C0] ? ret_from_fork+0x1f/0x30 [ 114.919825][ C0] ? debug_smp_processor_id+0x17/0x20 [ 114.925221][ C0] ? kmem_cache_free+0x100/0x320 [ 114.930282][ C0] kasan_set_free_info+0x23/0x40 [ 114.935317][ C0] ____kasan_slab_free+0x125/0x160 [ 114.940535][ C0] __kasan_slab_free+0x11/0x20 [ 114.945438][ C0] slab_free_freelist_hook+0xc2/0x190 [ 114.950848][ C0] ? file_free_rcu+0x93/0xa0 [ 114.955623][ C0] kmem_cache_free+0x100/0x320 [ 114.960395][ C0] ? kmem_cache_free+0x100/0x320 [ 114.965458][ C0] file_free_rcu+0x93/0xa0 [ 114.970091][ C0] rcu_do_batch+0x51d/0xba0 [ 114.974614][ C0] ? local_bh_enable+0x20/0x20 [ 114.979396][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 114.985303][ C0] ? rcu_report_qs_rnp+0x387/0x3a0 [ 114.990626][ C0] rcu_core+0x5e4/0xf80 [ 114.994796][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 115.000092][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 115.005840][ C0] ? rcu_softirq_qs+0xd7/0x2f0 [ 115.010700][ C0] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 115.016360][ C0] ? irqtime_account_irq+0x76/0x390 [ 115.021569][ C0] rcu_core_si+0x9/0x10 [ 115.025868][ C0] handle_softirqs+0x250/0x560 [ 115.030730][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 115.036024][ C0] run_ksoftirqd+0x28/0x40 [ 115.040450][ C0] smpboot_thread_fn+0x45a/0x8c0 [ 115.045490][ C0] kthread+0x411/0x500 [ 115.049575][ C0] ? cpu_report_death+0x190/0x190 [ 115.054701][ C0] ? kthread_blkcg+0xd0/0xd0 [ 115.059301][ C0] ret_from_fork+0x1f/0x30 [ 115.064024][ C0] [ 115.067247][ C0] Modules linked in: [ 115.071240][ C0] CR2: ffff888110d768d8 [ 115.075490][ C0] ---[ end trace 3cdc36574adce6bd ]--- [ 115.080952][ C0] RIP: 0010:__stack_depot_save+0x177/0x480 [ 115.087077][ C0] Code: 29 cd 48 8b 3d f2 55 a9 04 45 89 e9 41 81 e1 ff 0f 00 00 4e 8b 24 cf 4d 85 e4 74 5c 44 89 f1 eb 09 4d 8b 24 24 4d 85 e4 74 4e <45> 39 6c 24 08 75 f0 45 39 74 24 0c 75 e9 31 d2 48 8b 34 d3 49 3b [ 115.106885][ C0] RSP: 0018:ffffc90000ce7748 EFLAGS: 00010286 [ 115.112955][ C0] RAX: 0000000000000000 RBX: ffffc90000ce7800 RCX: 0000000000000010 [ 115.120931][ C0] RDX: 000000001428c886 RSI: 000000001c326cca RDI: ffff88823fec0000 [ 115.129173][ C0] RBP: ffffc90000ce77a0 R08: 0000000000000001 R09: 00000000000000ba [ 115.137497][ C0] R10: 0000000090f67811 R11: 1ffff9200019ced1 R12: ffff888110d760f0 [ 115.145583][ C0] R13: 00000000ce61e0ba R14: 0000000000000010 R15: 0000000000002800 [ 115.153785][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 115.162984][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.169658][ C0] CR2: ffff888110d768d8 CR3: 00000001280d6000 CR4: 00000000003506b0 [ 115.177642][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.185978][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.944272][ T1799] Shutting down cpus with NMI [ 115.949210][ T1799] Kernel Offset: disabled [ 115.953538][ T1799] Rebooting in 86400 seconds..