last executing test programs: 2m14.067525239s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100), 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) read$FUSE(r1, &(0x7f0000020940)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ftruncate(r0, 0x81ff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1080, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) timer_create(0x3, 0x0, &(0x7f0000000100)) add_key(&(0x7f0000000040)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xb0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r0, &(0x7f0000000400)="a84c33e0718f7ea44d2a20422ff08a28cf697877fbff756dd23bf9a71be5e74c6f77cb908727", &(0x7f0000000dc0)=""/172}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000080)=[{r5, 0x280}], 0x1, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000200)={0x9}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x80, 0x700, 0x7, 0x6, {{0x2f, 0x4, 0x2, 0x1, 0xbc, 0x65, 0x0, 0xae, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x1b, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x1ae5}]}, @timestamp={0x44, 0x8, 0xbf, 0x0, 0x4, [0x90000000]}, @timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x7, [{@broadcast, 0x6}, {@remote, 0x151}]}, @noop, @timestamp_addr={0x44, 0x4c, 0x5a, 0x1, 0x8, [{@broadcast}, {@broadcast, 0x6}, {@rand_addr=0x64010101, 0x10001}, {@remote, 0x7f5f}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x9}, {@multicast1, 0x8000}, {@loopback, 0x9}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @noop, @lsrr={0x83, 0x13, 0x4c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102, @multicast1]}, @timestamp={0x44, 0x14, 0xcb, 0x0, 0xb, [0x24, 0x3, 0x10001, 0x5]}]}}}}}) 2m13.980047529s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x46c5, 0x110008c}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xc0000484) ioctl$int_in(r4, 0x5421, &(0x7f0000000680)=0x3) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x0, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be815debc957b5831b89b59d703e748c7c", 0x1c}, 0x48, 0xfffffffffffffffd) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x43c, 0x3f4, 0x8, 0x70bd27, 0x25dfdbfb, {0x10, 0x3, 0x27, [0x2, 0xf1, 0xe, 0x7, 0xd, 0x6, 0x4, 0xfff, 0x200, 0x4c8e022b, 0x5, 0x5, 0x1, 0xc612, 0x100, 0x3, 0x10001, 0x5, 0x40000, 0x59, 0x0, 0x10001, 0x5, 0x9, 0x800, 0x3, 0xfffffffb, 0xa4, 0x56bd9558, 0x7ff, 0x1, 0x8, 0x5, 0x9, 0xd, 0xfffffc00, 0x9, 0x24, 0x6, 0x0, 0xe, 0x4, 0x9, 0x3ea, 0xff, 0x6, 0x1, 0x1, 0x6, 0x2b, 0x8, 0x7, 0x957d, 0x80000000, 0x8, 0xc92, 0x7, 0xfffffff0, 0x1, 0x5, 0x1, 0xe, 0x9db, 0x1000], [0x5, 0x81, 0x100, 0x3, 0x100, 0x9, 0x8, 0x1000, 0x2, 0x6, 0x1ff, 0x1ff, 0x6, 0x200, 0x5, 0x400, 0x56, 0x3, 0x2, 0x4, 0x3, 0x9, 0x9, 0x4, 0xffffffff, 0x200, 0x0, 0x7, 0x7, 0x7fff, 0x7, 0x3, 0x1000, 0x6, 0x7, 0x8, 0x4, 0x2, 0x0, 0x4, 0xd10, 0x7, 0x2, 0x3, 0x6, 0x1ff, 0xadf, 0x2, 0x800, 0x2, 0x121, 0x1, 0x2, 0x100, 0xffffc511, 0x4, 0xffd, 0x4, 0x2, 0x325, 0x873, 0xff, 0x10000, 0x1], [0xc, 0x7f, 0x7, 0x4, 0x3, 0x9, 0x400, 0x6, 0x0, 0x3, 0x4, 0x6, 0x2, 0x4, 0x400, 0x8000, 0x0, 0x9, 0xe112, 0x3, 0x2, 0x1, 0x1, 0x10001, 0x4, 0x7, 0x10000000, 0x0, 0x400, 0x7, 0x8a, 0xfffffffd, 0x81, 0x0, 0x4, 0x4676, 0x10001, 0x4732, 0xde2, 0x5, 0xe, 0x0, 0x7, 0x7, 0x1, 0x2, 0x1, 0x358, 0x7fff, 0x3, 0x8000, 0x2, 0x9, 0x4, 0x130, 0x9, 0xe752, 0x7, 0x2, 0x1b7d, 0x4, 0x4, 0x1ff, 0x4], [0x1ff, 0x6, 0x8, 0x9, 0x5, 0x9, 0x8291, 0xe, 0x7, 0x0, 0x0, 0x0, 0x5, 0x7fff, 0x200, 0xc, 0x0, 0x7, 0xccc, 0x1000, 0x5, 0x4, 0x7, 0xfffffffd, 0x0, 0x138, 0x5, 0x8, 0x4, 0x2b, 0xb, 0xfffffffa, 0x4, 0xfffffffa, 0x96c3, 0x8, 0x6, 0x5, 0xfc, 0x22, 0x81, 0x4be, 0x3, 0x9, 0x2, 0x61, 0x200, 0x100, 0x6, 0x5, 0x7, 0xfff, 0x3, 0x6, 0x9, 0x9, 0x0, 0x1, 0x3, 0x3, 0x1, 0x473, 0x0, 0x10001], 0x1b, ['\x00', '.{\\\x00', '\\*\x00', ':\'*&\x00', '\x00', '*}*!', ']\\@\x00', '\xd6)]*\x00']}, ["", "", "", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8440, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r4, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000240)=""/12, 0xc}], 0x2) chdir(&(0x7f0000000380)='./file1\x00') pipe(0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010c41090ea4000000000010902"], 0x0) 2m13.139107982s ago: executing program 4 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 2m11.953654077s ago: executing program 4 (id=18): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x3000840, &(0x7f0000000900)=ANY=[@ANYBLOB='shortname=win95,nonumtail=0,nonumtail=0,iocharset=cp737,shortname=mixed,uni_xlate=0,rodir,codepage=949,uni_xlate=1,rodir,shortname=winnt,utf8=0,\x00b'], 0x3, 0x36e, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (fail_nth: 4) 2m11.953538337s ago: executing program 32 (id=18): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x3000840, &(0x7f0000000900)=ANY=[@ANYBLOB='shortname=win95,nonumtail=0,nonumtail=0,iocharset=cp737,shortname=mixed,uni_xlate=0,rodir,codepage=949,uni_xlate=1,rodir,shortname=winnt,utf8=0,\x00b'], 0x3, 0x36e, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (fail_nth: 4) 2m10.94370144s ago: executing program 0 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) r2 = getgid() setgroups(0x1, &(0x7f0000000080)=[r2]) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x4) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4111, 0x100f}], 0x1, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m10.188190863s ago: executing program 0 (id=28): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x3a) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r4, 0x49, 0x0, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) 2m10.164064593s ago: executing program 0 (id=29): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073012c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4c5, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x185102, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r2}, {r2}], 0x2, 0x5e5b) recvmmsg$unix(r2, &(0x7f00000072c0)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000340)=""/180, 0xb4}], 0x3}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000cc0)=""/25, 0x19}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/241, 0xf1}], 0x4, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000e00), 0x0, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000f00), 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/71, 0x47}, {&(0x7f0000001000)=""/180, 0xb4}, {&(0x7f00000010c0)}, {&(0x7f0000001100)=""/139, 0x8b}], 0x4, &(0x7f0000001200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001300)=""/111, 0x6f}], 0x1, &(0x7f00000013c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/127, 0x7f}, {&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/152, 0x98}], 0x5, &(0x7f00000027c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f00000028c0)=@abs, 0x6e, &(0x7f0000006e00)=[{&(0x7f0000002940)=""/206, 0xce}, {&(0x7f0000002a40)=""/179, 0xb3}, {&(0x7f0000002b00)=""/95, 0x5f}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/145, 0x91}, {&(0x7f0000005c40)=""/247, 0xf7}, {&(0x7f0000005d40)=""/161, 0xa1}, {&(0x7f0000005e00)=""/4096, 0x1000}], 0xa, &(0x7f0000006ec0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000006fc0), 0x6e, &(0x7f0000007180)=[{&(0x7f0000007040)=""/134, 0x86}, {&(0x7f0000007100)=""/115, 0x73}], 0x2, &(0x7f00000071c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}], 0x8, 0x10003, &(0x7f00000074c0)={0x0, 0x989680}) shutdown(r2, 0x0) 2m9.273534926s ago: executing program 0 (id=36): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000345000/0x4000)=nil, 0x4000, 0xb635773f04ebbeef, 0x12, 0xffffffffffffffff, 0x6a46f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='(', @ANYBLOB="010300000000000000"], 0x28}}, 0x8094) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x70, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x58}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x64d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x86c}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf62}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x102d}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004010}, 0x1) close(r4) syz_open_dev$mouse(0x0, 0x8000000000000000, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 2m9.175010817s ago: executing program 0 (id=38): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x4807}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010100}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x1ff}]]}}}]}, 0x40}}, 0x4040800) (fail_nth: 4) 2m9.155151227s ago: executing program 33 (id=38): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x4807}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010100}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x1ff}]]}}}]}, 0x40}}, 0x4040800) (fail_nth: 4) 21.135938752s ago: executing program 2 (id=1447): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") (fail_nth: 64) 20.880914643s ago: executing program 2 (id=1449): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='timer_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2}, 0x4) 20.856690663s ago: executing program 2 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c000880000000ffffffea000000000000bbff02000000000000000000000000000132"], 0x0) 20.801517693s ago: executing program 2 (id=1451): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f00000001c0)='./bus/file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") (async) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) mkdirat(r3, &(0x7f0000000280)='./bus/file0\x00', 0x0) (async) renameat2(r3, &(0x7f00000001c0)='./bus/file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x4) (async) 20.801225133s ago: executing program 2 (id=1452): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x48, 0x0, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, 0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000800000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RLERROR(r2, &(0x7f0000000000)={0xc, 0x7, 0x2, {0x3, '9p\x00'}}, 0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 20.765922294s ago: executing program 2 (id=1453): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000780), 0x1, 0x523, &(0x7f0000000180)="$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") r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x4, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000a80), 0x80040, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000b80)={0x14, r2, 0x200, 0x0, 0x0, {0x2}}, 0x14}}, 0x5bf2b55f7a1891a4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40400100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048844}, 0x20010000) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x45}, {&(0x7f0000000280)=""/148, 0x94}], 0x2}, 0x6}], 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000f0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006007d"], 0x48}}, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000900)) getsockopt$inet_udp_int(r3, 0x11, 0xa, 0x0, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) fallocate(r6, 0x8, 0x0, 0x10000) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0x9) 20.735274853s ago: executing program 34 (id=1453): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000780), 0x1, 0x523, &(0x7f0000000180)="$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") r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x4, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000a80), 0x80040, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000b80)={0x14, r2, 0x200, 0x0, 0x0, {0x2}}, 0x14}}, 0x5bf2b55f7a1891a4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40400100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048844}, 0x20010000) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x45}, {&(0x7f0000000280)=""/148, 0x94}], 0x2}, 0x6}], 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000f0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006007d"], 0x48}}, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000900)) getsockopt$inet_udp_int(r3, 0x11, 0xa, 0x0, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) fallocate(r6, 0x8, 0x0, 0x10000) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0x9) 10.609685382s ago: executing program 3 (id=1486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000a0e8572badee23b5174c5d452933e51767c7d7887b87b4b7608c7302c338a2f925c9b4760a8b2cfb06f97e4f488dd246c48f6375306373f9de394a61acf53219e7536d7a819c0b133e166e65b0c4225eadf9b56854ebde965342ad388d5dec03efe3b9e841377d4a152cbc000000000000000000000000000000000000003b04d0728be58e792de8231cc126bf984e409522461ba1ab07e924de2b2bd90a908b4c094b126c512333f644246f9436bdea87e1b3b3c7fc0f953dabbc6a3eb99c91821c903b1255fa0dee31c9f875bc3fb6122a830fa122b677ba34473ee8c30bffa8527a62cc0e30eabb4bf6b6ec73f35a38d8"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000540)={0x0, 0x3, 0xc, @string={0xc, 0x3, "e954b512577f65582193"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x23, {0x23, 0xd, "43ca07936a9ce312308a700b051380a4dcb4783d7dd7996da04909f85692d8fd2e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000200)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x2, 0x0, 0x5, [0x30, 0xf, 0xffc060, 0xc0c0]}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0xb, 0x40, "fecd9d40", "f3a96b19"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x10, 0x89, 0x5, 0x5, 0x2}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0x12, 0x15, "d74ec97079840082c545e53726617a6bdb3e695939"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0xaba84e403a40e29a}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x160, 0x10}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000600)={0x40, 0xb, 0x2, "e186"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="902ca62d3915"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "27ce"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xf7}}) 9.102256627s ago: executing program 6 (id=1488): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) getpeername$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00<'], 0x48) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r8, &(0x7f0000001840)=""/4090, 0xffa) 9.101703017s ago: executing program 3 (id=1490): mknod(0x0, 0x8, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0xff, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)='4', 0x1}], 0x1) munlock(&(0x7f0000438000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f000020f000/0x4000)=nil) mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_clone(0x840000, 0x0, 0x7, 0x0, 0x0, 0x0) ptrace(0x10, r8) waitid(0x0, 0x0, 0x0, 0x4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x1000000, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 9.101403297s ago: executing program 5 (id=1492): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) getsockname$packet(r3, &(0x7f0000000180), &(0x7f00000001c0)=0x14) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="6d9310000000000000000100000008000300", @ANYRES32=r2, @ANYBLOB="c7d58cb9cccd24e7ff46cb96a3e1ee0a2dbad7c52319f21b394379c4496f10f80de5b5d8ca15270101d996b1c56702ce4ea29c9edb027ffb243ad521f00166fcaac015c976c893662eea352e9937bd293d9a873d4d18b7663aa379c73591b18d822b863b4b3282b0e36b27659996e1f2ebe6f340592100090027faf3f6087f5af594f60dee81b19c0cd92446f1e8645f31043600"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1fc58fb69e17b569000074c5e182a5abfa8232955572459b22cc94b31092bd14886973d8e69c271dc15d54c7ac924888feb4c9cc8e6d738f364c63d33c3b6a76ed400077c8b6291ff173c98fac0eecdc3f48c9a574b0fbbe4744ffe4ea2d00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@nombcache, 0x22}, {@errors_remount}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x457, &(0x7f0000000d80)="$eJzs3MtvG0UYAPDPdpK+SSjl0dBCoCAiHkmTPuiBSxFIHEBCgkMRp5CkVajboCZItIogcAhHVIk74gYSfwEXygUBJySucEdIEcqF0pPR2ruum9hpHDtxW/9+0qYzno1mvt2d9NtZ2wF0raHkRy5ib0T8ERH9leqtOwxV/rm+sjD538rCZC5Kpbf+yZX3+3dlYTLbNfu9PZVKqbROv0vvRkwUi9OX0vro/IUPRucuX3lh5sLEuelz0xfHT506fuxw38nxE22Jc18y1sGPZw8dfO2dq29Mnrn63i/fJePdm7bXxtEuQ5WjW9fT7e6sw/bVlHM9HRwITSlERHK6esvzvz8Ksava1h+vftbRwQFbqlTKl3bUa8iXfy6WgHtYkqgD3Sj77z65/822bUw/Om75dFTXMa6nW6WlJ02BKvdGW3VLOxQRZxZvfJVssUXrEAAAta6djojn6+V/+XioZr/70mdDAxFxf0Tsj4gHIuJARDwYUd734Yh4pMn+Vz8hWZv/lPo3FdgGJfnfS+mzrVvzvyz7i4FCWttXjr83d3amOH00PSbD0bsjqY+t08ePr/z+RaO22vwv2ZL+s1wwHcffPasW6KYm5idaibnW8qcRgz314s9Vc94kPz4YEYOb7GPm2W8PNWq7ffzraENSXvo64pnK+V+MVfFncg2fT469eHL8xOjOKE4fHc2uirV+/W3pzUb9txR/GyxfK8Xuutd/Nf6B3M6IuctXzpef184138fSn583vKfZ7PXfl3u7XO5LX/toYn7+0lhEX+71ta+P3/zdrJ7tn1z/w0fqz//9cfNIPBoRyUV8OCIei4jH07E/ERFPRsSRdeL/+eWn3m8+/rqr8m2XxD91u/Mftee/+ULh/E/fNx9/Jjn/x8ul4fSVjfz92+gAWzl2AAAAcLfIl98Dn8uPVMv5/MhI5T38B2J3vjg7N//c2dkPL05V3is/EL35bKWrv2Y9dCxdG87q46vqx9J14y8Lu8r1kcnZ4lSng4cut6fB/E/8Vej06IAt5/Na0L3Mf+he5j90L/Mfupf5D92r3vz/pAPjALZfdf7fqNu8azvHAmwv+T90L/Mfupf5D12p4Wfj8y195P+uLHxzZwyjpcIPfa19V8PGC5G/Q0K+Zwq9UbepZ8NfZrHJwo66TZ3+ywQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAe/wcAAP//h97kUg==") socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x8000000000080001, 0x0) (async) r9 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, 0x0, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 7.488034573s ago: executing program 6 (id=1493): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000020000fe8000000000000000000000000000aa87000000000000003b02040100000000fe8000000000000000000000000000aa00000000000890788092c6a9b961b270294b0b"], 0x0) 7.487723613s ago: executing program 1 (id=1494): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff0000000000000000f0ff0000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 7.486883393s ago: executing program 3 (id=1495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x4, 0x4002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x2000000, 0x3, 0x6}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 7.486340303s ago: executing program 5 (id=1496): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)=@deltfilter={0x8b0, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff7}, {0x0, 0xa}, {0x0, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x884, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}, @TCA_FW_POLICE={0x820, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x5, 0x3, 0xc99b, 0x8, 0x6, 0x100, 0x4069, 0x80000001, 0x4, 0x2, 0x5, 0x1, 0x5, 0x9, 0xda, 0x0, 0x10, 0x3, 0x40, 0x5, 0x2, 0x7fffffff, 0x2, 0xf2ce, 0x92, 0x9, 0x42d, 0xb3c, 0x8, 0x7, 0x4, 0x7, 0x4, 0x8, 0x0, 0xfff00000, 0x81, 0xd, 0x8, 0x3000, 0x661, 0x9, 0x5, 0x1, 0x1, 0x5, 0x56344f44, 0x5, 0x6, 0xfff, 0x1a2, 0xfffffffc, 0x8, 0x3, 0x56, 0x0, 0x5, 0x4, 0x4, 0x1, 0xff, 0xb2ee, 0xc716, 0x0, 0x0, 0xfa, 0x3, 0x6, 0x7c, 0x6, 0xd, 0xf, 0xcd1, 0x4, 0x0, 0x6, 0x6, 0x3, 0xfffffffa, 0x9, 0xf, 0x6, 0x8, 0xf, 0x90, 0x3, 0x9, 0x7, 0x7fffffff, 0x81, 0x1, 0x0, 0x1ff, 0x9, 0xfffff001, 0x4, 0x7, 0xfffffffb, 0x759, 0x8, 0x3, 0x10, 0x8, 0x9, 0x1, 0x0, 0x2ac, 0x401, 0xc, 0xe28a, 0x2, 0x7, 0x8, 0xfffffff9, 0xc, 0x401, 0x1185, 0x8001, 0x81, 0x6242, 0x3, 0xff, 0x7, 0x8, 0x40, 0x6, 0x8, 0x1, 0x6, 0x1, 0x9, 0x3, 0x5, 0x9, 0x674b, 0xb61, 0x4, 0x0, 0x9, 0x3, 0x62c, 0x8, 0x6, 0x5d9, 0x6, 0x2, 0x3, 0x390, 0x0, 0x7, 0x8, 0x1, 0x1, 0x80000000, 0x5, 0xfff, 0xff, 0x6, 0x6, 0x200, 0x1ff, 0x3, 0x0, 0x3, 0xc83c, 0xfffffffd, 0x10000, 0xc9, 0x6, 0x2, 0x8, 0x7, 0x3, 0x4, 0x2, 0x9, 0x1ff, 0xa, 0x9, 0x9, 0x0, 0x202, 0x8, 0x6, 0x5, 0x4, 0x4000, 0xf94e, 0x6, 0x1000, 0x10, 0x6d, 0x9, 0x1, 0x9, 0x7, 0x4, 0xfffffff9, 0x2, 0x2, 0x1, 0x0, 0x38ad, 0x200040, 0x40, 0x81, 0x7, 0xd15, 0x8, 0x8, 0x0, 0x7fffffff, 0x9, 0x1000, 0x8, 0x7, 0x8, 0x0, 0x6, 0x2, 0x8, 0xf, 0x100, 0x8, 0x0, 0x14, 0x947, 0x10, 0xd915, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x0, 0x80000000, 0x5, 0xe6, 0x1, 0x7, 0x0, 0xc2, 0x2, 0x48f, 0xf83, 0xf640, 0x5, 0x1, 0xfffffffa, 0x4, 0x27, 0x8000, 0xc, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0x9, 0xfff, 0x101, 0x8, 0x8d, 0x544, 0x0, 0x7, 0x2, 0x4, 0xd, 0x3ff, 0x4, 0xfffffff0, 0x5, 0x10001, 0x3, 0x9, 0xf8, 0x4, 0x9, 0x7, 0x0, 0x1, 0xbe77, 0x9, 0x0, 0x2, 0x9, 0x8, 0x4ec4ee9c, 0xfff, 0x783, 0x2, 0x6, 0x6, 0x9723, 0x2, 0x1, 0x1, 0x51, 0x66, 0x1, 0xfffffffd, 0x3, 0xc5a, 0x80000001, 0x2, 0x3, 0xfff, 0x6, 0x3, 0x8, 0x9, 0x10, 0x1, 0x3, 0x0, 0x4, 0x0, 0x4, 0x1ff, 0x6, 0x100, 0x10001, 0x400, 0x1ff, 0xcc, 0x9, 0x3662224b, 0x0, 0x8, 0x1d4, 0x2, 0x264, 0x6, 0x5cf, 0x1, 0x800, 0x73, 0x3, 0x36, 0x1, 0x6, 0x200, 0x6, 0xe, 0x7, 0x81, 0x531, 0x54, 0x101, 0x8, 0xa, 0x1, 0x4f4e, 0x9a, 0x6, 0x1, 0x3ff, 0x6, 0x4, 0xc5, 0x3, 0x400, 0x1520, 0x9, 0x9, 0x40, 0x8, 0x3b9c, 0x83, 0x8, 0x8, 0xffff, 0x9, 0x40, 0x3, 0xc11a, 0x10, 0xc738, 0x6, 0x80, 0x9, 0x60000, 0x7, 0x9, 0x4, 0x54b, 0x3, 0x200, 0x3, 0x2, 0x40, 0x4, 0x3, 0x9, 0x8, 0xf64f, 0x0, 0x0, 0x7ff, 0x400, 0xa, 0x2, 0x2, 0x7, 0x6, 0x4, 0x9, 0xffff, 0x40, 0x4, 0xf39, 0x5, 0xc11, 0x5, 0x3, 0x80000001, 0x8, 0x3, 0xb, 0x1, 0x800, 0x101, 0x3, 0xfffffff9, 0x8, 0xbce, 0x7ed33b49, 0x3ff, 0x3, 0x40, 0xdb, 0xff, 0xa00000, 0x4, 0x2, 0x6, 0x78d4, 0x2, 0x9, 0xfffffffe, 0xfffffff8, 0x1400000, 0xc, 0x40, 0xffff, 0xe, 0xfffffffe, 0x1, 0x6, 0x3, 0x5, 0x0, 0xfffffffa, 0x10000, 0x1, 0x800, 0x7ff, 0xd12, 0x8001, 0x90, 0x401, 0x6, 0x4f0c000, 0x8, 0x10001, 0x2, 0x1, 0x1, 0x401, 0x3, 0x1ff, 0x2796, 0x0, 0x6, 0x9b2e, 0x4, 0x872, 0xa9, 0x6, 0x400, 0x9, 0x6, 0xbb13, 0x3, 0x7, 0x3, 0x0, 0x7, 0x62000, 0xffffffff, 0x1, 0x5, 0x2, 0x3, 0x0, 0x1, 0xffffff81, 0x39, 0x40, 0x0, 0x1, 0x2, 0x8, 0x4, 0x2, 0xf0000000, 0x7fff, 0xf9, 0x400, 0x3, 0x1000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb3}]}, @TCA_FW_INDEV={0x14, 0x3, 'macsec0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}, @TCA_FW_INDEV={0x14, 0x3, 'dummy0\x00'}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x20008885}, 0x80088d0) symlink(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xfc, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xb6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2375}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@deltclass={0x3c, 0x29, 0x8, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xa}, {0xe, 0xe}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0xff}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x21}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x8000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000d00)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000d40)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r3, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x3c}, 0x1, 0x0, 0x0, 0x448d9}, 0x4040000) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f00), 0x414000, 0x0) read$FUSE(r5, &(0x7f0000000f40)={0x2020}, 0x2020) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000002fc0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000030c0)=0xe8) getresgid(&(0x7f0000003100), &(0x7f0000003140)=0x0, &(0x7f0000003180)) fchownat(r6, &(0x7f0000002f80)='./file0\x00', r7, r8, 0x800) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f00000031c0)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003280)={r5, 0x58, &(0x7f0000003200)}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003300)={'team_slave_0\x00', &(0x7f00000032c0)=@ethtool_rxfh_indir={0x38, 0x2, [0x3, 0x3]}}) clock_gettime(0x7, &(0x7f0000003340)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r9, &(0x7f00000034c0)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003480)={&(0x7f00000033c0)={0x90, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x836d}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x5a64a8425c836fcd) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003540), r6) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000036c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003580)={0xe4, r10, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xccd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4ad89b21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008840}, 0x40000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000003700)) sendmsg$tipc(r5, &(0x7f0000003900)={&(0x7f0000003740)=@name={0x1e, 0x2, 0x1, {{0x0, 0x3}}}, 0x10, &(0x7f00000038c0)=[{&(0x7f0000003780)="f1bac3335534d88feb9942adcf07ce5bc00de5c33798ebe4f2930dba1502ea8b143bb1ff49dcc5153b21035fe8a94d07d0170afcace612b7849e52deb1d09e5c722ec8a8111dba9f599fed0cb87307f475a6f38ad4998353ee0b3138a0538f5af73addc90b89563ae0506554d84d93fc58543ca9bf7684c3fc8999329bfb7f4c77f3621329eecabee72f5e52657b", 0x8e}, {&(0x7f0000003840)="3fd703533e3c4730e06580d2fdda6f5cc1576a96a3265d109c6411328356d01a20c3fa92806ce779504cd7c89e25073c4b90a2e8b2d3311f673d3057c0e2f4f5d667d238101b55922cbab371c6e2127017b6c6e727eb2ae4", 0x58}], 0x2, 0x0, 0x0, 0x8000}, 0xc004) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000003940)={0x7, 0x5, 0x2, 0x9, 0x1, [0xa2d, 0xf4, 0x5, 0x10]}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000003980)=0x4003, 0x4) 5.765427279s ago: executing program 6 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) dup3(r2, r0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.764903319s ago: executing program 1 (id=1498): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x44003, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000007fc0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0x2, 0xfff1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0xfffffffffffffff0}, 0x0) 5.764524939s ago: executing program 3 (id=1499): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 5.763930269s ago: executing program 5 (id=1500): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000020100102505a1a4400000000001090244000101000000090400001602020000052406000005240000000d240f01060000000000000000090581032000000000090582020800000000090503020002"], 0x0) 3.950802886s ago: executing program 6 (id=1501): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) (async) io_submit(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f00000008c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x10010) (async) write$binfmt_script(r3, &(0x7f0000000080), 0x10010) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="b0", @ANYRES16=r1, @ANYRES8=r0], 0xb0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) (async) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0xfffd}}, 0x50) (async) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0xfffd}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) utime(&(0x7f0000000200)='./file0\x00', 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) fcntl$setownex(r10, 0xf, &(0x7f0000000100)={0x2, r8}) 3.950417176s ago: executing program 1 (id=1502): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000280)=0x1784, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000000d00000008000500", @ANYRES64=r5], 0x50}}, 0x0) 3.950107366s ago: executing program 3 (id=1503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="8500000061000000350000000000002085000000070000009500000000000000f4670880271e3503200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b1b2d2747c45b0c52087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbf975d9c07d8d3c76e65760ff000000b78863e629b3b200000000000000000000000000008b0000000a449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106055e22f30a85f5681ca3000000002300000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1855f77138e438bdc037865f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e4000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c496a8d2dab79d4242a353917ebdf2dc7926d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c71a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032e485cc664921b7f9133bdbc2ba3cd845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e4577055528aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed873a76b0dda0a4b4c5f87eef3164a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5174e7ea5dd7f1caa699e4a241291c2f43e9edbf44c0ffb8ee32a18b6e8f0b61836146e2eab9a767800c2c91190c96cf88466adf775b4cf517dc5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01d9a9ec4d5ef793096dab53d3224f245fd5d87984d58dc09d11ba0094ba8c39942be41f362e29bba1cdcf8068a4d8d67d2d6d79aa2d089bc4d475097d7523860ec41dab4fa4b0cfe674c163ad419753bd73882336d42036a179bb33162b31f2a58436ea88fba598fad987a60b1847cc63a77c2bb30477ecbeaaa590cde56be4102d0365987eed64bdf01bbd9aaeb77dde491845e612557f05474c0a8e0d4e662c6f2a8c06babc2aa7b28f96c2231cf93190b8a178a677fe4e63f526fc2b95fc6b770c8b812b9559de44184e6a4c3f7e78e6caf5577a21ac1ed3ec63a5568c087eb64aeea03419252f4522d3d840a040e29a5b31f7ba5b1a3c63ad76f517af4083b5198992e5b775295e3d870be7db928409fb476f66b703cd75f738fe7da9125b03d804bc78c681cf5bdaa4600442bf8e1127da6e06cf4ed9b7531b90a143d1ac4e325344bc88f232b1dabf95b7e732d870955333c299b903cc919ce7"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xce0, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.946857716s ago: executing program 5 (id=1504): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000006911b600000000001600000000000000956816ab401a5375491c5d8ad1245800740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x6, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000000000000038500000036000000850000009e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'some', 0x20, 0x2a3, 0x20, 0x6}, 0x2f) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x3}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 2.035516622s ago: executing program 6 (id=1505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000340)) r2 = syz_open_dev$usbfs(&(0x7f0000000440), 0xfffffffffffffff9, 0x120c0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000580)={0x1e, 0xb, 0x8, 0xfc01, 0xee, 0x4, &(0x7f0000000480)="7c436f0a1b082649fa636c7ab420561ac5dd437c86170c0e28a672e83dc829f7d7ce4d432c1504ec77bce14d622d0eae92782babb999c150341eb294bff1b867e74b7068f1767d5c2dd49df1653a0a528819a59249480f110c62c9ebded2e5fa6fb8fcd6000c5d1c4b543e13d951a01b21149988f4e6ccad166c5bd2298fb8944812aa9552d403d9b6f52ac890b2d5fecd56f93d5528ade8ab524246c47fcba8ba72a05e56b1851d359a57888d396189de4972cd741982c871a82285a2f03d33bd9716ae91e24a96ea665dd4a6d0d0d710fa5a161466bf4b9978482621e92a990dee09958842fa70ddca7c2e4f04"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0xee00) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000002020102000000000180140003002001000000000000000000000000000214000400200100"/68], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x40, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xce0, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.035010613s ago: executing program 1 (id=1506): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@grpjquota}]}, 0x3, 0x4ce, &(0x7f0000000b80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x700000000000000) 2.034697612s ago: executing program 3 (id=1507): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x46c5, 0x110008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB], 0x48) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xc0000484) ioctl$int_in(r4, 0x5421, &(0x7f0000000680)=0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8440, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000240)=""/12, 0xc}], 0x2) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010c41090ea4000000000010902"], 0x0) chroot(&(0x7f0000000280)='./file1\x00') 2.034396182s ago: executing program 5 (id=1508): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}}, 0x0) (fail_nth: 5) 11.658559ms ago: executing program 6 (id=1509): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf9, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x60000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) io_setup(0x6, &(0x7f0000000240)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r3, 0x1, &(0x7f0000001000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 10.999399ms ago: executing program 1 (id=1510): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f000000cd40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0xfffffff6, 0x1c02661, 0x2000, 0x0, 0x400}}, 0x50) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002280)={0x90, 0x0, 0x0, {0x2, 0x3, 0x5, 0x7, 0x4, 0xffff, {0x2, 0xc, 0x30000000000000, 0x3, 0x4, 0xffffffffffff436b, 0x1, 0x2, 0x9, 0x1000, 0x7, 0x0, 0x0, 0x47, 0x21}}}, 0x90) syz_fuse_handle_req(r0, &(0x7f0000006d00)="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", 0x2000, &(0x7f00000018c0)={&(0x7f0000000140)={0x50, 0x0, 0x9b2, {0x7, 0x29, 0x0, 0x412, 0x2000, 0x2, 0x6, 0x18}}, &(0x7f00000001c0)={0x18, 0xfffffffffffffff5, 0x0, {0x2008}}, &(0x7f0000000200)={0x18, 0x0, 0x1, {0x1}}, &(0x7f0000000240)={0x18, 0x0, 0x1, {0x7}}, &(0x7f0000000280)={0x18, 0x0, 0x6, {0x3eb}}, &(0x7f00000002c0)={0x28, 0x0, 0x1, {{0xc, 0x6b, 0x1, r3}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0x0, 0x0, 0x571, 0x96ac, 0x200000, 0x6d1, 0x400, 0x1}}}, &(0x7f00000003c0)={0x18, 0x0, 0x12000, {0xffffffff}}, &(0x7f0000000400)={0x12, 0xfffffffffffffffe, 0xaf, {'-\x00'}}, &(0x7f0000000440)={0x20, 0xfffffffffffffffe, 0x2}, &(0x7f0000001480)={0x78, 0x0, 0xfffffffffffffffe, {0x1, 0x5, 0x0, {0x5, 0x5, 0xfffffffffffffff4, 0xb000000000000000, 0x9, 0x9, 0x2, 0xe97e, 0xffffffb9, 0x1000, 0x0, r1, r2, 0x6, 0x44300000}}}, &(0x7f0000001500)={0x90, 0x0, 0x7fff, {0x5, 0x0, 0x7, 0x400, 0x7, 0x5, {0x5, 0x1, 0xb, 0x8, 0x6, 0x80, 0x3, 0x5, 0x1, 0x2000, 0x7, r1, r2, 0x81, 0x7}}}, &(0x7f00000015c0)={0x120, 0xb, 0x6afa, [{0x6, 0x7, 0x1, 0x10001, '\x00'}, {0x6, 0x32e, 0x1, 0x8, '*'}, {0x0, 0xffffffffffffffff, 0x0, 0x58}, {0x3, 0x7, 0x1, 0x5, '\x00'}, {0x1, 0x0, 0x0, 0x3}, {0x4, 0x44, 0x1, 0x10001, '\x00'}, {0x1, 0xffff, 0x4, 0x8, 'GPL\x00'}, {0x5, 0x8, 0x10, 0x8, 'kmem_cache_free\x00'}, {0x5, 0x4, 0x0, 0x3}]}, &(0x7f0000001700)=ANY=[@ANYBLOB="b000000000000000090000000000000002000000000000000000000000000000ff010000000000000000000000000080a557de3845b51f300200000000000000010000000000000080000000000000600304000000000000c700000000000000410900000000000002000000ff0300000600180000800000faffffff", @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="0500000003000000000000000600000000000000dc0600000000000001000000030000002f00000000000000"], &(0x7f00000017c0)={0xa0, 0x0, 0x4, {{0x1, 0x3, 0x7, 0x5, 0x1, 0x717eff98, {0x3, 0xcaa, 0x5, 0x5e, 0x6, 0x6, 0x1, 0x3, 0xd, 0x6000, 0x8, r4, 0x0, 0x8, 0xfff}}, {0x0, 0x6}}}, &(0x7f0000001880)={0x20, 0x0, 0x101, {0xf10, 0x4, 0xbf, 0x8}}}) 10.778809ms ago: executing program 5 (id=1511): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) write$tcp_mem(r1, &(0x7f0000000140), 0x48) read$FUSE(r1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = getpid() ptrace(0x10, r6) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x100000000, 0x0, 0x100}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 0s ago: executing program 1 (id=1512): socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000580)='\x00', &(0x7f00000005c0)='./file0\x00', r0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x300, 0x1b8, 0x0, 0x0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4982, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(r6, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x61, 0x0}) mremap(&(0x7f000024b000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00007d5000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000500)={{}, {0x1}, 0x30, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)="3671684fa77b506e15823c437b4773be8ffb7e0f3ddad6b83585bd52ee574f0558f1c0e63ddfcc19909b8b28", 0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1e2}) pipe(&(0x7f0000000000)) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) kernel console output (not intermixed with test programs): 0005 [ 119.820551][ T3461] RBP: 00007fdb76ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.820562][ T3461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.820573][ T3461] R13: 0000000000000000 R14: 00007fdb78026058 R15: 00007ffe3a693c98 [ 119.820588][ T3461] [ 119.820720][ T30] audit: type=1400 audit(1731210912.620:18115): avc: denied { prog_load } for pid=3453 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.820748][ T30] audit: type=1400 audit(1731210912.620:18116): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 119.820776][ T30] audit: type=1400 audit(1731210912.630:18117): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 119.820804][ T30] audit: type=1400 audit(1731210912.660:18118): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 119.820831][ T30] audit: type=1400 audit(1731210912.670:18119): avc: denied { map_create } for pid=3455 comm="syz.3.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.820852][ T30] audit: type=1400 audit(1731210912.670:18120): avc: denied { prog_load } for pid=3455 comm="syz.3.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.820936][ T3461] audit: audit_lost=88 audit_rate_limit=0 audit_backlog_limit=64 [ 119.820952][ T3461] audit: out of memory in audit_log_start [ 119.829270][ T3462] CPU: 0 PID: 3462 Comm: syz.3.1180 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 120.282235][ T3462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.292134][ T3462] Call Trace: [ 120.295251][ T3462] [ 120.298035][ T3462] dump_stack_lvl+0x151/0x1c0 [ 120.302545][ T3462] ? io_uring_drop_tctx_refs+0x190/0x190 [ 120.308174][ T3462] dump_stack+0x15/0x20 [ 120.312230][ T3462] should_fail+0x3c6/0x510 [ 120.316487][ T3462] __should_failslab+0xa4/0xe0 [ 120.321081][ T3462] should_failslab+0x9/0x20 [ 120.325419][ T3462] slab_pre_alloc_hook+0x37/0xd0 [ 120.330191][ T3462] ? audit_log_start+0x456/0xa80 [ 120.334973][ T3462] __kmalloc_track_caller+0x6c/0x260 [ 120.340114][ T3462] ? audit_log_start+0x456/0xa80 [ 120.344883][ T3462] ? audit_log_start+0x456/0xa80 [ 120.349650][ T3462] __alloc_skb+0x10c/0x550 [ 120.353893][ T3462] audit_log_start+0x456/0xa80 [ 120.358847][ T3462] ? audit_serial+0x30/0x30 [ 120.363322][ T3462] ? stack_trace_save+0x113/0x1c0 [ 120.368212][ T3462] ? stack_trace_snprint+0xf0/0xf0 [ 120.373290][ T3462] ? __stack_depot_save+0x34/0x470 [ 120.378247][ T3462] ? kmem_cache_free+0x116/0x2e0 [ 120.382991][ T3462] ? slow_avc_audit+0x3c0/0x3c0 [ 120.388100][ T3462] common_lsm_audit+0xd8/0x18b0 [ 120.393026][ T3462] ? kasan_set_track+0x4b/0x70 [ 120.397706][ T3462] ? kasan_set_free_info+0x23/0x40 [ 120.402773][ T3462] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 120.408145][ T3462] ? __kasan_slab_free+0x11/0x20 [ 120.413011][ T3462] ? kmem_cache_free+0x116/0x2e0 [ 120.417777][ T3462] ? putname+0xfa/0x150 [ 120.421899][ T3462] ? do_sys_openat2+0x1fc/0x820 [ 120.426547][ T3462] ? ipv6_skb_to_auditdata+0xd90/0xd90 [ 120.431842][ T3462] ? _kstrtoull+0x3a0/0x4a0 [ 120.436181][ T3462] ? kstrtouint_from_user+0x20a/0x2a0 [ 120.441387][ T3462] slow_avc_audit+0x26c/0x3c0 [ 120.445901][ T3462] ? avc_get_hash_stats+0x180/0x180 [ 120.450935][ T3462] ? avc_has_perm_noaudit+0x2dd/0x430 [ 120.456141][ T3462] ? fsnotify_perm+0x6a/0x5b0 [ 120.460666][ T3462] avc_has_perm+0x1f5/0x260 [ 120.464997][ T3462] ? avc_has_perm_noaudit+0x430/0x430 [ 120.470203][ T3462] ? file_end_write+0x1c0/0x1c0 [ 120.474892][ T3462] selinux_bpf+0xcb/0x100 [ 120.479058][ T3462] security_bpf+0x72/0xb0 [ 120.483310][ T3462] __sys_bpf+0x254/0x760 [ 120.487387][ T3462] ? fput_many+0x160/0x1b0 [ 120.491640][ T3462] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 120.496851][ T3462] ? debug_smp_processor_id+0x17/0x20 [ 120.502058][ T3462] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 120.507956][ T3462] __x64_sys_bpf+0x7c/0x90 [ 120.512209][ T3462] x64_sys_call+0x87f/0x9a0 [ 120.516547][ T3462] do_syscall_64+0x3b/0xb0 [ 120.520887][ T3462] ? clear_bhb_loop+0x35/0x90 [ 120.525401][ T3462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.531128][ T3462] RIP: 0033:0x7f2e3f938719 [ 120.535386][ T3462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.554998][ T3462] RSP: 002b:00007f2e3e590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.563243][ T3462] RAX: ffffffffffffffda RBX: 00007f2e3faf0058 RCX: 00007f2e3f938719 [ 120.571140][ T3462] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 120.578958][ T3462] RBP: 00007f2e3e590090 R08: 0000000000000000 R09: 0000000000000000 [ 120.586851][ T3462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.594661][ T3462] R13: 0000000000000000 R14: 00007f2e3faf0058 R15: 00007fff2f0ecb98 [ 120.602481][ T3462] [ 120.820743][ T3473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3473 comm=syz.3.1184 [ 121.023362][ T3494] device pim6reg1 entered promiscuous mode [ 121.034541][ T3495] capability: warning: `syz.1.1189' uses 32-bit capabilities (legacy support in use) [ 121.393358][ T3502] FAULT_INJECTION: forcing a failure. [ 121.393358][ T3502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.406965][ T3502] CPU: 0 PID: 3502 Comm: syz.5.1197 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 121.417038][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.426935][ T3502] Call Trace: [ 121.430062][ T3502] [ 121.432839][ T3502] dump_stack_lvl+0x151/0x1c0 [ 121.437347][ T3502] ? io_uring_drop_tctx_refs+0x190/0x190 [ 121.442813][ T3502] ? __kernel_text_address+0x9b/0x110 [ 121.448020][ T3502] dump_stack+0x15/0x20 [ 121.452011][ T3502] should_fail+0x3c6/0x510 [ 121.456268][ T3502] should_fail_alloc_page+0x5a/0x80 [ 121.461303][ T3502] prepare_alloc_pages+0x15c/0x700 [ 121.466248][ T3502] ? __alloc_pages_bulk+0xe40/0xe40 [ 121.471285][ T3502] __alloc_pages+0x18c/0x8f0 [ 121.475712][ T3502] ? prep_new_page+0x110/0x110 [ 121.480401][ T3502] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 121.485866][ T3502] ? __kernel_text_address+0x9b/0x110 [ 121.491071][ T3502] ? shmem_swapin_page+0x1680/0x1680 [ 121.496281][ T3502] ? xas_start+0x2bd/0x3f0 [ 121.500529][ T3502] ? xas_load+0x2a9/0x2d0 [ 121.504700][ T3502] ? pagecache_get_page+0xdc2/0xeb0 [ 121.509732][ T3502] ? page_cache_prev_miss+0x410/0x410 [ 121.514997][ T3502] ? _raw_spin_lock_irqsave+0x210/0x210 [ 121.520320][ T3502] ? lru_cache_add+0x279/0x540 [ 121.525008][ T3502] shmem_getpage_gfp+0x1388/0x23c0 [ 121.530108][ T3502] ? shmem_getpage+0xa0/0xa0 [ 121.534481][ T3502] shmem_file_read_iter+0x39c/0xa00 [ 121.539557][ T3502] ? __x64_sys_copy_file_range+0xe5/0x100 [ 121.545234][ T3502] ? shmem_file_llseek+0x190/0x190 [ 121.550180][ T3502] generic_file_splice_read+0x4aa/0x780 [ 121.555648][ T3502] ? splice_shrink_spd+0xb0/0xb0 [ 121.560420][ T3502] ? __kasan_check_read+0x11/0x20 [ 121.565279][ T3502] ? fsnotify_perm+0x269/0x5b0 [ 121.569897][ T3502] ? security_file_permission+0x86/0xb0 [ 121.575260][ T3502] ? rw_verify_area+0xa7/0x1c0 [ 121.580041][ T3502] splice_direct_to_actor+0x439/0xbe0 [ 121.585246][ T3502] ? do_splice_direct+0x3c0/0x3c0 [ 121.590107][ T3502] ? pipe_to_sendpage+0x340/0x340 [ 121.594966][ T3502] ? rw_verify_area+0xa7/0x1c0 [ 121.599746][ T3502] do_splice_direct+0x27f/0x3c0 [ 121.604420][ T3502] ? splice_direct_to_actor+0xbe0/0xbe0 [ 121.609804][ T3502] ? fsnotify_perm+0x6a/0x5b0 [ 121.614316][ T3502] ? security_file_permission+0x86/0xb0 [ 121.619787][ T3502] vfs_copy_file_range+0xc4c/0x17b0 [ 121.624819][ T3502] ? generic_copy_file_range+0x150/0x150 [ 121.630313][ T3502] ? __fdget+0x1bc/0x240 [ 121.634450][ T3502] __se_sys_copy_file_range+0x3e4/0x5c0 [ 121.639838][ T3502] ? __x64_sys_copy_file_range+0x100/0x100 [ 121.645474][ T3502] ? __ia32_sys_read+0x90/0x90 [ 121.650076][ T3502] ? debug_smp_processor_id+0x17/0x20 [ 121.655281][ T3502] __x64_sys_copy_file_range+0xe5/0x100 [ 121.660664][ T3502] x64_sys_call+0x8a2/0x9a0 [ 121.665088][ T3502] do_syscall_64+0x3b/0xb0 [ 121.669429][ T3502] ? clear_bhb_loop+0x35/0x90 [ 121.673944][ T3502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.679673][ T3502] RIP: 0033:0x7f7daeb58719 [ 121.683930][ T3502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.703529][ T3502] RSP: 002b:00007f7dad7d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 121.711902][ T3502] RAX: ffffffffffffffda RBX: 00007f7daed0ff80 RCX: 00007f7daeb58719 [ 121.719721][ T3502] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 121.727691][ T3502] RBP: 00007f7dad7d1090 R08: ffffffffa003e459 R09: 0700000000000000 [ 121.735506][ T3502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.743313][ T3502] R13: 0000000000000000 R14: 00007f7daed0ff80 R15: 00007ffd8cfdce48 [ 121.751348][ T3502] [ 121.843990][ T395] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.857611][ T3515] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 121.910722][ T3520] FAULT_INJECTION: forcing a failure. [ 121.910722][ T3520] name failslab, interval 1, probability 0, space 0, times 0 [ 121.923208][ T3520] CPU: 0 PID: 3520 Comm: syz.6.1205 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 121.933129][ T3520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.943126][ T3520] Call Trace: [ 121.946248][ T3520] [ 121.949029][ T3520] dump_stack_lvl+0x151/0x1c0 [ 121.953543][ T3520] ? io_uring_drop_tctx_refs+0x190/0x190 [ 121.959230][ T3520] dump_stack+0x15/0x20 [ 121.963219][ T3520] should_fail+0x3c6/0x510 [ 121.967468][ T3520] __should_failslab+0xa4/0xe0 [ 121.972073][ T3520] ? __alloc_skb+0xbe/0x550 [ 121.976624][ T3520] should_failslab+0x9/0x20 [ 121.980959][ T3520] slab_pre_alloc_hook+0x37/0xd0 [ 121.985735][ T3520] ? __alloc_skb+0xbe/0x550 [ 121.990070][ T3520] kmem_cache_alloc+0x44/0x200 [ 121.994674][ T3520] __alloc_skb+0xbe/0x550 [ 121.998926][ T3520] tcp_v6_send_response+0x1c8/0x14d0 [ 122.004050][ T3520] ? fib6_table_lookup+0x371/0xaf0 [ 122.008994][ T3520] ? fib6_table_lookup+0x983/0xaf0 [ 122.013947][ T3520] ? inet6_lhash2_lookup+0x486/0x4b0 [ 122.019061][ T3520] ? ipv6_portaddr_hash+0x202/0x3a0 [ 122.024182][ T3520] ? tcpv6_exit+0x40/0x40 [ 122.028368][ T3520] ? inet6_lookup_reuseport+0xc0/0xc0 [ 122.033675][ T3520] tcp_v6_send_reset+0x541/0x8e0 [ 122.038515][ T3520] tcp_v6_rcv+0x1f88/0x2690 [ 122.043025][ T3520] ? tcp_checksum_complete+0x180/0x180 [ 122.048416][ T3520] ? ip6t_alloc_initial_table+0x630/0x630 [ 122.053965][ T3520] ip6_protocol_deliver_rcu+0xa85/0x13c0 [ 122.059437][ T3520] ip6_input+0xd9/0x260 [ 122.063426][ T3520] ? ip6_protocol_deliver_rcu+0x13c0/0x13c0 [ 122.069152][ T3520] ? ip6_input+0x260/0x260 [ 122.073406][ T3520] ? tcp_v6_early_demux+0x2ab/0x760 [ 122.078441][ T3520] ip6_rcv_finish+0x186/0x350 [ 122.082955][ T3520] ipv6_rcv+0xeb/0x270 [ 122.086946][ T3520] ? ip6_rcv_finish+0x350/0x350 [ 122.091633][ T3520] ? refcount_add+0x80/0x80 [ 122.095968][ T3520] ? ip6_rcv_finish+0x350/0x350 [ 122.100795][ T3520] __netif_receive_skb+0x1c6/0x530 [ 122.105728][ T3520] ? tun_chr_write_iter+0x1e1/0x2e0 [ 122.110762][ T3520] ? vfs_write+0xd5d/0x1110 [ 122.115207][ T3520] ? ksys_write+0x199/0x2c0 [ 122.119580][ T3520] ? x64_sys_call+0x2f/0x9a0 [ 122.124040][ T3520] ? do_syscall_64+0x3b/0xb0 [ 122.128560][ T3520] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.134553][ T3520] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 122.139940][ T3520] netif_receive_skb+0xb0/0x480 [ 122.144629][ T3520] ? netif_receive_skb_core+0x210/0x210 [ 122.150093][ T3520] tun_rx_batched+0x6d9/0x870 [ 122.154690][ T3520] ? eth_type_trans+0x2e4/0x620 [ 122.159477][ T3520] ? local_bh_enable+0x30/0x30 [ 122.164085][ T3520] tun_get_user+0x2cb7/0x3aa0 [ 122.168590][ T3520] ? __x64_sys_openat+0x200/0x290 [ 122.173448][ T3520] ? tun_do_read+0x2010/0x2010 [ 122.178041][ T3520] ? kstrtouint_from_user+0x20a/0x2a0 [ 122.183341][ T3520] ? kstrtol_from_user+0x310/0x310 [ 122.188395][ T3520] ? avc_policy_seqno+0x1b/0x70 [ 122.193075][ T3520] ? selinux_file_permission+0x2c4/0x570 [ 122.198547][ T3520] tun_chr_write_iter+0x1e1/0x2e0 [ 122.203448][ T3520] vfs_write+0xd5d/0x1110 [ 122.207589][ T3520] ? putname+0xfa/0x150 [ 122.212264][ T3520] ? file_end_write+0x1c0/0x1c0 [ 122.216982][ T3520] ? __fdget_pos+0x209/0x3a0 [ 122.221480][ T3520] ? ksys_write+0x77/0x2c0 [ 122.225749][ T3520] ksys_write+0x199/0x2c0 [ 122.229900][ T3520] ? __ia32_sys_read+0x90/0x90 [ 122.234583][ T3520] ? debug_smp_processor_id+0x17/0x20 [ 122.239792][ T3520] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 122.245707][ T3520] __x64_sys_write+0x7b/0x90 [ 122.250122][ T3520] x64_sys_call+0x2f/0x9a0 [ 122.254375][ T3520] do_syscall_64+0x3b/0xb0 [ 122.258624][ T3520] ? clear_bhb_loop+0x35/0x90 [ 122.263138][ T3520] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.268866][ T3520] RIP: 0033:0x7f959452b1ff [ 122.273123][ T3520] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 122.293259][ T3520] RSP: 002b:00007f95931a5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.301589][ T3520] RAX: ffffffffffffffda RBX: 00007f95946e3f80 RCX: 00007f959452b1ff [ 122.309408][ T3520] RDX: 000000000000004a RSI: 0000000020000440 RDI: 00000000000000c8 [ 122.317255][ T3520] RBP: 00007f95931a5090 R08: 0000000000000000 R09: 0000000000000000 [ 122.325022][ T3520] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 122.333158][ T3520] R13: 0000000000000000 R14: 00007f95946e3f80 R15: 00007fff34558be8 [ 122.341096][ T3520] [ 122.360766][ T3522] FAULT_INJECTION: forcing a failure. [ 122.360766][ T3522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.395787][ T3522] CPU: 1 PID: 3522 Comm: syz.6.1207 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 122.405866][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.416116][ T3522] Call Trace: [ 122.419239][ T3522] [ 122.422012][ T3522] dump_stack_lvl+0x151/0x1c0 [ 122.426522][ T3522] ? io_uring_drop_tctx_refs+0x190/0x190 [ 122.431988][ T3522] dump_stack+0x15/0x20 [ 122.435982][ T3522] should_fail+0x3c6/0x510 [ 122.440325][ T3522] should_fail_usercopy+0x1a/0x20 [ 122.445181][ T3522] strncpy_from_user+0x24/0x2d0 [ 122.449870][ T3522] ? kmem_cache_alloc+0xf5/0x200 [ 122.454644][ T3522] getname_flags+0xf2/0x520 [ 122.458995][ T3522] __x64_sys_renameat2+0xc8/0xf0 [ 122.463807][ T3522] x64_sys_call+0x85c/0x9a0 [ 122.468268][ T3522] do_syscall_64+0x3b/0xb0 [ 122.472609][ T3522] ? clear_bhb_loop+0x35/0x90 [ 122.477216][ T3522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.482940][ T3522] RIP: 0033:0x7f959452c719 [ 122.487199][ T3522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.506630][ T3522] RSP: 002b:00007f95931a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 122.514879][ T3522] RAX: ffffffffffffffda RBX: 00007f95946e3f80 RCX: 00007f959452c719 [ 122.522776][ T3522] RDX: 0000000000000005 RSI: 00000000200001c0 RDI: 0000000000000005 [ 122.522799][ T3522] RBP: 00007f95931a5090 R08: 0000000000000000 R09: 0000000000000000 [ 122.538493][ T3522] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 122.546498][ T3522] R13: 0000000000000000 R14: 00007f95946e3f80 R15: 00007fff34558be8 [ 122.554318][ T3522] [ 122.800975][ T3542] FAULT_INJECTION: forcing a failure. [ 122.800975][ T3542] name failslab, interval 1, probability 0, space 0, times 0 [ 122.824113][ T3542] CPU: 0 PID: 3542 Comm: syz.1.1214 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 122.834109][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.844189][ T3542] Call Trace: [ 122.847308][ T3542] [ 122.850230][ T3542] dump_stack_lvl+0x151/0x1c0 [ 122.854994][ T3542] ? io_uring_drop_tctx_refs+0x190/0x190 [ 122.860463][ T3542] dump_stack+0x15/0x20 [ 122.864545][ T3542] should_fail+0x3c6/0x510 [ 122.869064][ T3542] __should_failslab+0xa4/0xe0 [ 122.873761][ T3542] ? shmem_alloc_inode+0x1a/0x30 [ 122.878619][ T3542] should_failslab+0x9/0x20 [ 122.883132][ T3542] slab_pre_alloc_hook+0x37/0xd0 [ 122.887908][ T3542] ? shmem_alloc_inode+0x1a/0x30 [ 122.892731][ T3542] kmem_cache_alloc+0x44/0x200 [ 122.897419][ T3542] ? shmem_match+0x180/0x180 [ 122.901920][ T3542] shmem_alloc_inode+0x1a/0x30 [ 122.906688][ T3542] new_inode_pseudo+0x64/0x220 [ 122.911396][ T3542] new_inode+0x28/0x1c0 [ 122.915377][ T3542] shmem_get_inode+0x328/0x9e0 [ 122.919976][ T3542] shmem_mknod+0x5c/0x1c0 [ 122.924136][ T3542] ? selinux_inode_mkdir+0x22/0x30 [ 122.929085][ T3542] shmem_mkdir+0x2c/0x60 [ 122.933162][ T3542] vfs_mkdir+0x3f6/0x610 [ 122.937242][ T3542] do_mkdirat+0x1eb/0x450 [ 122.941405][ T3542] ? vfs_mkdir+0x610/0x610 [ 122.945659][ T3542] ? getname_flags+0x1fd/0x520 [ 122.950258][ T3542] __x64_sys_mkdir+0x6e/0x80 [ 122.954687][ T3542] x64_sys_call+0x26d/0x9a0 [ 122.959025][ T3542] do_syscall_64+0x3b/0xb0 [ 122.963290][ T3542] ? clear_bhb_loop+0x35/0x90 [ 122.967792][ T3542] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.973524][ T3542] RIP: 0033:0x7f9c41cac719 [ 122.977774][ T3542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.997488][ T3542] RSP: 002b:00007f9c40925038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 123.005733][ T3542] RAX: ffffffffffffffda RBX: 00007f9c41e63f80 RCX: 00007f9c41cac719 [ 123.013539][ T3542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 123.021351][ T3542] RBP: 00007f9c40925090 R08: 0000000000000000 R09: 0000000000000000 [ 123.029605][ T3542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.037945][ T3542] R13: 0000000000000000 R14: 00007f9c41e63f80 R15: 00007ffc1927fa48 [ 123.045852][ T3542] [ 123.175098][ T3551] FAULT_INJECTION: forcing a failure. [ 123.175098][ T3551] name failslab, interval 1, probability 0, space 0, times 0 [ 123.192626][ T3551] CPU: 0 PID: 3551 Comm: syz.6.1218 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 123.202614][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.212509][ T3551] Call Trace: [ 123.215719][ T3551] [ 123.218501][ T3551] dump_stack_lvl+0x151/0x1c0 [ 123.223199][ T3551] ? io_uring_drop_tctx_refs+0x190/0x190 [ 123.228800][ T3551] dump_stack+0x15/0x20 [ 123.232845][ T3551] should_fail+0x3c6/0x510 [ 123.237083][ T3551] __should_failslab+0xa4/0xe0 [ 123.241694][ T3551] ? __alloc_skb+0xbe/0x550 [ 123.246019][ T3551] should_failslab+0x9/0x20 [ 123.250378][ T3551] slab_pre_alloc_hook+0x37/0xd0 [ 123.255140][ T3551] ? __alloc_skb+0xbe/0x550 [ 123.259481][ T3551] kmem_cache_alloc+0x44/0x200 [ 123.264083][ T3551] __alloc_skb+0xbe/0x550 [ 123.268246][ T3551] alloc_skb_with_frags+0xa6/0x680 [ 123.273435][ T3551] ? stack_trace_save+0x113/0x1c0 [ 123.278287][ T3551] sock_alloc_send_pskb+0x915/0xa50 [ 123.283311][ T3551] ? ip_route_output_flow+0x144/0x310 [ 123.288692][ T3551] ? sock_kzfree_s+0x60/0x60 [ 123.293108][ T3551] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 123.297967][ T3551] ? x64_sys_call+0x81d/0x9a0 [ 123.302487][ T3551] ? do_syscall_64+0x3b/0xb0 [ 123.306911][ T3551] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.312817][ T3551] sock_alloc_send_skb+0x32/0x40 [ 123.317583][ T3551] __ip_append_data+0x2390/0x3730 [ 123.322452][ T3551] ? ip_skb_dst_mtu+0x630/0x630 [ 123.327249][ T3551] ? __xfrm_sk_clone_policy+0x930/0x930 [ 123.332601][ T3551] ? ip_setup_cork+0x8d0/0x8d0 [ 123.337215][ T3551] ? ip_setup_cork+0x567/0x8d0 [ 123.342109][ T3551] ip_make_skb+0x1a2/0x420 [ 123.346604][ T3551] ? ip_skb_dst_mtu+0x630/0x630 [ 123.351279][ T3551] ? ip_flush_pending_frames+0x250/0x250 [ 123.356852][ T3551] ? avc_has_perm_noaudit+0x348/0x430 [ 123.362471][ T3551] udp_sendmsg+0x1ccb/0x2aa0 [ 123.367192][ T3551] ? ip_skb_dst_mtu+0x630/0x630 [ 123.372004][ T3551] ? udp_cmsg_send+0x3a0/0x3a0 [ 123.376597][ T3551] ? inet_send_prepare+0x5e/0x4a0 [ 123.381457][ T3551] inet_sendmsg+0xa1/0xc0 [ 123.385611][ T3551] ? inet_send_prepare+0x4a0/0x4a0 [ 123.390568][ T3551] ____sys_sendmsg+0x59e/0x8f0 [ 123.395157][ T3551] ? __sys_sendmsg_sock+0x40/0x40 [ 123.400025][ T3551] ? kmem_cache_free+0x116/0x2e0 [ 123.404793][ T3551] ? import_iovec+0xe5/0x120 [ 123.409227][ T3551] ___sys_sendmsg+0x252/0x2e0 [ 123.413906][ T3551] ? __sys_sendmsg+0x260/0x260 [ 123.418508][ T3551] ? __kasan_check_write+0x14/0x20 [ 123.423537][ T3551] ? proc_fail_nth_write+0x20b/0x290 [ 123.428670][ T3551] ? __fdget+0x1bc/0x240 [ 123.432737][ T3551] __sys_sendmmsg+0x2bf/0x530 [ 123.437256][ T3551] ? __ia32_sys_sendmsg+0x90/0x90 [ 123.442108][ T3551] ? mutex_unlock+0xb2/0x260 [ 123.446547][ T3551] ? __kasan_check_write+0x14/0x20 [ 123.451489][ T3551] ? __ia32_sys_read+0x90/0x90 [ 123.456084][ T3551] ? debug_smp_processor_id+0x17/0x20 [ 123.461293][ T3551] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 123.467284][ T3551] __x64_sys_sendmmsg+0xa0/0xb0 [ 123.472082][ T3551] x64_sys_call+0x81d/0x9a0 [ 123.476396][ T3551] do_syscall_64+0x3b/0xb0 [ 123.480654][ T3551] ? clear_bhb_loop+0x35/0x90 [ 123.485163][ T3551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.491196][ T3551] RIP: 0033:0x7f959452c719 [ 123.495639][ T3551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.515078][ T3551] RSP: 002b:00007f95931a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.523410][ T3551] RAX: ffffffffffffffda RBX: 00007f95946e3f80 RCX: 00007f959452c719 [ 123.531228][ T3551] RDX: 0000000000000003 RSI: 0000000020004540 RDI: 0000000000000003 [ 123.539034][ T3551] RBP: 00007f95931a5090 R08: 0000000000000000 R09: 0000000000000000 [ 123.546843][ T3551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.554654][ T3551] R13: 0000000000000000 R14: 00007f95946e3f80 R15: 00007fff34558be8 [ 123.562474][ T3551] [ 123.624836][ T3560] FAULT_INJECTION: forcing a failure. [ 123.624836][ T3560] name failslab, interval 1, probability 0, space 0, times 0 [ 123.637756][ T3560] CPU: 0 PID: 3560 Comm: syz.6.1222 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 123.647782][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.657656][ T3560] Call Trace: [ 123.657669][ T3560] [ 123.657677][ T3560] dump_stack_lvl+0x151/0x1c0 [ 123.668188][ T3560] ? io_uring_drop_tctx_refs+0x190/0x190 [ 123.673644][ T3560] dump_stack+0x15/0x20 [ 123.677727][ T3560] should_fail+0x3c6/0x510 [ 123.682356][ T3560] __should_failslab+0xa4/0xe0 [ 123.687068][ T3560] ? security_file_alloc+0x29/0x120 [ 123.692189][ T3560] should_failslab+0x9/0x20 [ 123.696620][ T3560] slab_pre_alloc_hook+0x37/0xd0 [ 123.701496][ T3560] ? security_file_alloc+0x29/0x120 [ 123.706514][ T3560] kmem_cache_alloc+0x44/0x200 [ 123.711411][ T3560] security_file_alloc+0x29/0x120 [ 123.716344][ T3560] __alloc_file+0xb2/0x2a0 [ 123.720840][ T3560] alloc_empty_file+0x95/0x180 [ 123.725643][ T3560] path_openat+0xfe/0x2f40 [ 123.729882][ T3560] ? stack_trace_snprint+0xf0/0xf0 [ 123.734833][ T3560] ? kasan_set_track+0x5d/0x70 [ 123.739430][ T3560] ? __kasan_slab_alloc+0xc3/0xe0 [ 123.739458][ T3560] ? __kasan_slab_alloc+0xb1/0xe0 [ 123.739477][ T3560] ? slab_post_alloc_hook+0x53/0x2c0 [ 123.739508][ T3560] ? kmem_cache_alloc+0xf5/0x200 [ 123.739530][ T3560] ? getname_flags+0xba/0x520 [ 123.739551][ T3560] ? getname+0x19/0x20 [ 123.739570][ T3560] ? do_sys_openat2+0xd7/0x820 [ 123.739588][ T3560] ? __x64_sys_creat+0x11f/0x160 [ 123.777068][ T3560] ? x64_sys_call+0x27b/0x9a0 [ 123.781585][ T3560] ? do_syscall_64+0x3b/0xb0 [ 123.786005][ T3560] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.792003][ T3560] ? do_filp_open+0x460/0x460 [ 123.796529][ T3560] do_filp_open+0x21c/0x460 [ 123.800968][ T3560] ? vfs_tmpfile+0x2c0/0x2c0 [ 123.801011][ T3560] do_sys_openat2+0x13f/0x820 [ 123.801032][ T3560] ? __mutex_lock_slowpath+0x10/0x10 [ 123.801058][ T3560] ? do_sys_open+0x220/0x220 [ 123.801076][ T3560] ? __kasan_check_write+0x14/0x20 [ 123.801100][ T3560] ? fput_many+0x160/0x1b0 [ 123.801121][ T3560] ? fput+0x1a/0x20 [ 123.801141][ T3560] ? ksys_write+0x260/0x2c0 [ 123.801161][ T3560] __x64_sys_creat+0x11f/0x160 [ 123.801180][ T3560] ? __x64_compat_sys_openat+0x290/0x290 [ 123.801201][ T3560] ? debug_smp_processor_id+0x17/0x20 [ 123.801222][ T3560] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 123.801247][ T3560] ? exit_to_user_mode_prepare+0x39/0xa0 [ 123.801270][ T3560] x64_sys_call+0x27b/0x9a0 [ 123.801290][ T3560] do_syscall_64+0x3b/0xb0 [ 123.801309][ T3560] ? clear_bhb_loop+0x35/0x90 [ 123.801330][ T3560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.801352][ T3560] RIP: 0033:0x7f959452c719 [ 123.801371][ T3560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.801391][ T3560] RSP: 002b:00007f95931a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 123.801416][ T3560] RAX: ffffffffffffffda RBX: 00007f95946e3f80 RCX: 00007f959452c719 [ 123.801432][ T3560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200 [ 123.801446][ T3560] RBP: 00007f95931a5090 R08: 0000000000000000 R09: 0000000000000000 [ 123.801461][ T3560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.801475][ T3560] R13: 0000000000000000 R14: 00007f95946e3f80 R15: 00007fff34558be8 [ 123.801495][ T3560] [ 123.903373][ T594] Bluetooth: hci0: command 0x1003 tx timeout [ 123.903623][ T1203] Bluetooth: hci0: sending frame failed (-49) [ 124.416188][ T3573] FAULT_INJECTION: forcing a failure. [ 124.416188][ T3573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.430088][ T3573] CPU: 1 PID: 3573 Comm: syz.1.1227 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 124.440072][ T3573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.450062][ T3573] Call Trace: [ 124.453176][ T3573] [ 124.455951][ T3573] dump_stack_lvl+0x151/0x1c0 [ 124.460465][ T3573] ? io_uring_drop_tctx_refs+0x190/0x190 [ 124.465934][ T3573] dump_stack+0x15/0x20 [ 124.469923][ T3573] should_fail+0x3c6/0x510 [ 124.474373][ T3573] should_fail_usercopy+0x1a/0x20 [ 124.479299][ T3573] _copy_from_user+0x20/0xd0 [ 124.483726][ T3573] __se_sys_mount+0x179/0x3b0 [ 124.488250][ T3573] ? __x64_sys_mount+0xd0/0xd0 [ 124.492841][ T3573] ? debug_smp_processor_id+0x17/0x20 [ 124.498160][ T3573] __x64_sys_mount+0xbf/0xd0 [ 124.502587][ T3573] x64_sys_call+0x49d/0x9a0 [ 124.506928][ T3573] do_syscall_64+0x3b/0xb0 [ 124.511176][ T3573] ? clear_bhb_loop+0x35/0x90 [ 124.515692][ T3573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.521417][ T3573] RIP: 0033:0x7f9c41cac719 [ 124.525781][ T3573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.545594][ T3573] RSP: 002b:00007f9c40925038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.546732][ T3577] FAULT_INJECTION: forcing a failure. [ 124.546732][ T3577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.553833][ T3573] RAX: ffffffffffffffda RBX: 00007f9c41e63f80 RCX: 00007f9c41cac719 [ 124.553852][ T3573] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 124.553867][ T3573] RBP: 00007f9c40925090 R08: 0000000020000400 R09: 0000000000000000 [ 124.553882][ T3573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.598120][ T3573] R13: 0000000000000000 R14: 00007f9c41e63f80 R15: 00007ffc1927fa48 [ 124.605937][ T3573] [ 124.659276][ T3577] CPU: 1 PID: 3577 Comm: syz.2.1228 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 124.669390][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.679287][ T3577] Call Trace: [ 124.682408][ T3577] [ 124.685186][ T3577] dump_stack_lvl+0x151/0x1c0 [ 124.689785][ T3577] ? io_uring_drop_tctx_refs+0x190/0x190 [ 124.695264][ T3577] dump_stack+0x15/0x20 [ 124.699264][ T3577] should_fail+0x3c6/0x510 [ 124.703500][ T3577] should_fail_usercopy+0x1a/0x20 [ 124.708530][ T3577] _copy_from_user+0x20/0xd0 [ 124.712943][ T3577] __se_sys_mount+0x179/0x3b0 [ 124.717466][ T3577] ? __x64_sys_mount+0xd0/0xd0 [ 124.722084][ T3577] ? debug_smp_processor_id+0x17/0x20 [ 124.727348][ T3577] __x64_sys_mount+0xbf/0xd0 [ 124.731892][ T3577] x64_sys_call+0x49d/0x9a0 [ 124.736286][ T3577] do_syscall_64+0x3b/0xb0 [ 124.740543][ T3577] ? clear_bhb_loop+0x35/0x90 [ 124.745127][ T3577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.751023][ T3577] RIP: 0033:0x7fdb77e6e719 [ 124.755456][ T3577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.775071][ T3577] RSP: 002b:00007fdb76aa5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.783501][ T3577] RAX: ffffffffffffffda RBX: 00007fdb78026130 RCX: 00007fdb77e6e719 [ 124.791305][ T3577] RDX: 00000000200001c0 RSI: 00000000200004c0 RDI: 0000000000000000 [ 124.799118][ T3577] RBP: 00007fdb76aa5090 R08: 0000000020000700 R09: 0000000000000000 [ 124.806929][ T3577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.814823][ T3577] R13: 0000000000000000 R14: 00007fdb78026130 R15: 00007ffe3a693c98 [ 124.822637][ T3577] [ 124.825805][ T30] kauditd_printk_skb: 8104 callbacks suppressed [ 124.825821][ T30] audit: type=1326 audit(1731210917.520:26185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daeb58719 code=0x50000 [ 124.856182][ T83] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.857497][ T30] audit: type=1326 audit(1731210917.540:26188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daeb58719 code=0x50000 [ 124.867760][ T83] audit: audit_lost=102 audit_rate_limit=0 audit_backlog_limit=64 [ 124.886069][ T30] audit: type=1326 audit(1731210917.540:26189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daeb58719 code=0x50000 [ 124.928210][ T3589] FAULT_INJECTION: forcing a failure. [ 124.928210][ T3589] name failslab, interval 1, probability 0, space 0, times 0 [ 124.938230][ T83] audit: backlog limit exceeded [ 124.940781][ T30] audit: type=1326 audit(1731210917.540:26190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.5.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7daeb58719 code=0x50000 [ 124.968499][ T3589] CPU: 1 PID: 3589 Comm: syz.1.1232 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 124.978577][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.988564][ T3589] Call Trace: [ 124.991677][ T3589] [ 124.994463][ T3589] dump_stack_lvl+0x151/0x1c0 [ 124.999134][ T3589] ? io_uring_drop_tctx_refs+0x190/0x190 [ 125.004538][ T3589] dump_stack+0x15/0x20 [ 125.008857][ T3589] should_fail+0x3c6/0x510 [ 125.013468][ T3589] __should_failslab+0xa4/0xe0 [ 125.013597][ T83] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.018160][ T3589] should_failslab+0x9/0x20 [ 125.018191][ T3589] slab_pre_alloc_hook+0x37/0xd0 [ 125.034405][ T3589] ? netlink_sendmsg+0x797/0xd20 [ 125.034800][ T83] audit: audit_lost=103 audit_rate_limit=0 audit_backlog_limit=64 [ 125.039292][ T3589] __kmalloc_track_caller+0x6c/0x260 [ 125.039329][ T3589] ? netlink_sendmsg+0x797/0xd20 [ 125.057283][ T3589] ? netlink_sendmsg+0x797/0xd20 [ 125.062043][ T3589] __alloc_skb+0x10c/0x550 [ 125.066303][ T3589] netlink_sendmsg+0x797/0xd20 [ 125.070978][ T83] audit: backlog limit exceeded [ 125.071045][ T3589] ? netlink_getsockopt+0x560/0x560 [ 125.080734][ T3589] ? kmem_cache_free+0x116/0x2e0 [ 125.085532][ T3589] ? security_socket_sendmsg+0x82/0xb0 [ 125.085563][ T3589] ? netlink_getsockopt+0x560/0x560 [ 125.085587][ T3589] ____sys_sendmsg+0x59e/0x8f0 [ 125.085613][ T3589] ? __sys_sendmsg_sock+0x40/0x40 [ 125.085638][ T3589] ? import_iovec+0xe5/0x120 [ 125.085663][ T3589] ___sys_sendmsg+0x252/0x2e0 [ 125.085687][ T3589] ? __sys_sendmsg+0x260/0x260 [ 125.085719][ T3589] ? __fdget+0x1bc/0x240 [ 125.085740][ T3589] __se_sys_sendmsg+0x19a/0x260 [ 125.085764][ T3589] ? __x64_sys_sendmsg+0x90/0x90 [ 125.085786][ T3589] ? ksys_write+0x260/0x2c0 [ 125.085809][ T3589] ? debug_smp_processor_id+0x17/0x20 [ 125.085831][ T3589] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 125.085857][ T3589] __x64_sys_sendmsg+0x7b/0x90 [ 125.085880][ T3589] x64_sys_call+0x16a/0x9a0 [ 125.085901][ T3589] do_syscall_64+0x3b/0xb0 [ 125.085920][ T3589] ? clear_bhb_loop+0x35/0x90 [ 125.085941][ T3589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.085963][ T3589] RIP: 0033:0x7f9c41cac719 [ 125.085982][ T3589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.086001][ T3589] RSP: 002b:00007f9c40925038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.086026][ T3589] RAX: ffffffffffffffda RBX: 00007f9c41e63f80 RCX: 00007f9c41cac719 [ 125.086043][ T3589] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 125.086057][ T3589] RBP: 00007f9c40925090 R08: 0000000000000000 R09: 0000000000000000 [ 125.086072][ T3589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.086086][ T3589] R13: 0000000000000000 R14: 00007f9c41e63f80 R15: 00007ffc1927fa48 [ 125.086105][ T3589] [ 125.131085][ T3595] FAULT_INJECTION: forcing a failure. [ 125.131085][ T3595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.296979][ T3595] CPU: 1 PID: 3595 Comm: syz.1.1236 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 125.307104][ T3595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.317085][ T3595] Call Trace: [ 125.320217][ T3595] [ 125.322982][ T3595] dump_stack_lvl+0x151/0x1c0 [ 125.327507][ T3595] ? io_uring_drop_tctx_refs+0x190/0x190 [ 125.332972][ T3595] dump_stack+0x15/0x20 [ 125.336955][ T3595] should_fail+0x3c6/0x510 [ 125.341208][ T3595] should_fail_usercopy+0x1a/0x20 [ 125.346075][ T3595] _copy_from_user+0x20/0xd0 [ 125.350588][ T3595] __se_sys_mount+0x179/0x3b0 [ 125.355194][ T3595] ? __x64_sys_mount+0xd0/0xd0 [ 125.359787][ T3595] ? debug_smp_processor_id+0x17/0x20 [ 125.364995][ T3595] __x64_sys_mount+0xbf/0xd0 [ 125.369422][ T3595] x64_sys_call+0x49d/0x9a0 [ 125.373939][ T3595] do_syscall_64+0x3b/0xb0 [ 125.378191][ T3595] ? clear_bhb_loop+0x35/0x90 [ 125.382712][ T3595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.388428][ T3595] RIP: 0033:0x7f9c41cac719 [ 125.392688][ T3595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.412347][ T3595] RSP: 002b:00007f9c40925038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.420780][ T3595] RAX: ffffffffffffffda RBX: 00007f9c41e63f80 RCX: 00007f9c41cac719 [ 125.428599][ T3595] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 125.436502][ T3595] RBP: 00007f9c40925090 R08: 0000000020000400 R09: 0000000000000000 [ 125.444425][ T3595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.452329][ T3595] R13: 0000000000000000 R14: 00007f9c41e63f80 R15: 00007ffc1927fa48 [ 125.460173][ T3595] [ 125.632839][ T3605] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 125.989241][ T594] Bluetooth: hci0: command 0x1001 tx timeout [ 125.995228][ T1203] Bluetooth: hci0: sending frame failed (-49) [ 126.284573][ T3637] FAULT_INJECTION: forcing a failure. [ 126.284573][ T3637] name failslab, interval 1, probability 0, space 0, times 0 [ 126.297533][ T3637] CPU: 1 PID: 3637 Comm: syz.2.1251 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 126.307698][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.317710][ T3637] Call Trace: [ 126.320827][ T3637] [ 126.323604][ T3637] dump_stack_lvl+0x151/0x1c0 [ 126.328204][ T3637] ? io_uring_drop_tctx_refs+0x190/0x190 [ 126.333762][ T3637] dump_stack+0x15/0x20 [ 126.337762][ T3637] should_fail+0x3c6/0x510 [ 126.342096][ T3637] __should_failslab+0xa4/0xe0 [ 126.346738][ T3637] should_failslab+0x9/0x20 [ 126.351149][ T3637] slab_pre_alloc_hook+0x37/0xd0 [ 126.355909][ T3637] ? __se_sys_mount+0xde/0x3b0 [ 126.360548][ T3637] __kmalloc_track_caller+0x6c/0x260 [ 126.365746][ T3637] ? __se_sys_mount+0xde/0x3b0 [ 126.370352][ T3637] strndup_user+0x76/0x150 [ 126.374603][ T3637] __se_sys_mount+0xde/0x3b0 [ 126.379017][ T3637] ? __x64_sys_mount+0xd0/0xd0 [ 126.383617][ T3637] ? debug_smp_processor_id+0x17/0x20 [ 126.388833][ T3637] __x64_sys_mount+0xbf/0xd0 [ 126.393262][ T3637] x64_sys_call+0x49d/0x9a0 [ 126.397603][ T3637] do_syscall_64+0x3b/0xb0 [ 126.401866][ T3637] ? clear_bhb_loop+0x35/0x90 [ 126.406469][ T3637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.412193][ T3637] RIP: 0033:0x7fdb77e6e719 [ 126.416444][ T3637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.436229][ T3637] RSP: 002b:00007fdb76ae7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.444500][ T3637] RAX: ffffffffffffffda RBX: 00007fdb78025f80 RCX: 00007fdb77e6e719 [ 126.452369][ T3637] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 126.460178][ T3637] RBP: 00007fdb76ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 126.467994][ T3637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.475899][ T3637] R13: 0000000000000000 R14: 00007fdb78025f80 R15: 00007ffe3a693c98 [ 126.483715][ T3637] [ 126.561874][ T3652] device pim6reg1 entered promiscuous mode [ 126.599903][ T3657] FAULT_INJECTION: forcing a failure. [ 126.599903][ T3657] name failslab, interval 1, probability 0, space 0, times 0 [ 126.612566][ T3657] CPU: 0 PID: 3657 Comm: syz.1.1255 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 126.622546][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.632438][ T3657] Call Trace: [ 126.635566][ T3657] [ 126.638475][ T3657] dump_stack_lvl+0x151/0x1c0 [ 126.643043][ T3657] ? io_uring_drop_tctx_refs+0x190/0x190 [ 126.648497][ T3657] dump_stack+0x15/0x20 [ 126.652489][ T3657] should_fail+0x3c6/0x510 [ 126.656742][ T3657] __should_failslab+0xa4/0xe0 [ 126.661341][ T3657] should_failslab+0x9/0x20 [ 126.665766][ T3657] slab_pre_alloc_hook+0x37/0xd0 [ 126.670541][ T3657] ? netlink_sendmsg+0x797/0xd20 [ 126.675433][ T3657] __kmalloc_track_caller+0x6c/0x260 [ 126.680554][ T3657] ? netlink_sendmsg+0x797/0xd20 [ 126.685324][ T3657] ? netlink_sendmsg+0x797/0xd20 [ 126.690096][ T3657] __alloc_skb+0x10c/0x550 [ 126.694716][ T3657] netlink_sendmsg+0x797/0xd20 [ 126.699307][ T3657] ? netlink_getsockopt+0x560/0x560 [ 126.704482][ T3657] ? kmem_cache_free+0x116/0x2e0 [ 126.709196][ T3657] ? security_socket_sendmsg+0x82/0xb0 [ 126.714571][ T3657] ? netlink_getsockopt+0x560/0x560 [ 126.719608][ T3657] ____sys_sendmsg+0x59e/0x8f0 [ 126.724210][ T3657] ? __sys_sendmsg_sock+0x40/0x40 [ 126.729456][ T3657] ? import_iovec+0xe5/0x120 [ 126.733840][ T3657] ___sys_sendmsg+0x252/0x2e0 [ 126.738357][ T3657] ? __sys_sendmsg+0x260/0x260 [ 126.742961][ T3657] ? __fdget+0x1bc/0x240 [ 126.747245][ T3657] __se_sys_sendmsg+0x19a/0x260 [ 126.751937][ T3657] ? __x64_sys_sendmsg+0x90/0x90 [ 126.756727][ T3657] ? ksys_write+0x260/0x2c0 [ 126.761154][ T3657] ? debug_smp_processor_id+0x17/0x20 [ 126.766911][ T3657] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 126.772943][ T3657] __x64_sys_sendmsg+0x7b/0x90 [ 126.777620][ T3657] x64_sys_call+0x16a/0x9a0 [ 126.781956][ T3657] do_syscall_64+0x3b/0xb0 [ 126.786210][ T3657] ? clear_bhb_loop+0x35/0x90 [ 126.790727][ T3657] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.796451][ T3657] RIP: 0033:0x7f9c41cac719 [ 126.800709][ T3657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.820167][ T3657] RSP: 002b:00007f9c40904038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.828391][ T3657] RAX: ffffffffffffffda RBX: 00007f9c41e64058 RCX: 00007f9c41cac719 [ 126.836206][ T3657] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 126.844026][ T3657] RBP: 00007f9c40904090 R08: 0000000000000000 R09: 0000000000000000 [ 126.851824][ T3657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.859723][ T3657] R13: 0000000000000000 R14: 00007f9c41e64058 R15: 00007ffc1927fa48 [ 126.867738][ T3657] [ 127.024590][ T3672] FAULT_INJECTION: forcing a failure. [ 127.024590][ T3672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.037607][ T3672] CPU: 0 PID: 3672 Comm: syz.2.1264 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 127.047586][ T3672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.057486][ T3672] Call Trace: [ 127.060727][ T3672] [ 127.063511][ T3672] dump_stack_lvl+0x151/0x1c0 [ 127.068019][ T3672] ? io_uring_drop_tctx_refs+0x190/0x190 [ 127.073487][ T3672] dump_stack+0x15/0x20 [ 127.077480][ T3672] should_fail+0x3c6/0x510 [ 127.081734][ T3672] should_fail_usercopy+0x1a/0x20 [ 127.086597][ T3672] _copy_to_user+0x20/0x90 [ 127.090849][ T3672] simple_read_from_buffer+0xc7/0x150 [ 127.096059][ T3672] proc_fail_nth_read+0x1a3/0x210 [ 127.101615][ T3672] ? proc_fault_inject_write+0x390/0x390 [ 127.107150][ T3672] ? fsnotify_perm+0x269/0x5b0 [ 127.111745][ T3672] ? security_file_permission+0x86/0xb0 [ 127.117213][ T3672] ? proc_fault_inject_write+0x390/0x390 [ 127.122697][ T3672] vfs_read+0x27d/0xd40 [ 127.126687][ T3672] ? kernel_read+0x1f0/0x1f0 [ 127.131107][ T3672] ? __kasan_check_write+0x14/0x20 [ 127.136135][ T3672] ? mutex_lock+0xb6/0x1e0 [ 127.140564][ T3672] ? wait_for_completion_killable_timeout+0x10/0x10 [ 127.147071][ T3672] ? __fdget_pos+0x2e7/0x3a0 [ 127.151494][ T3672] ? ksys_read+0x77/0x2c0 [ 127.155749][ T3672] ksys_read+0x199/0x2c0 [ 127.159830][ T3672] ? vfs_write+0x1110/0x1110 [ 127.164254][ T3672] ? __kasan_check_write+0x14/0x20 [ 127.169204][ T3672] ? switch_fpu_return+0x15f/0x2e0 [ 127.174150][ T3672] __x64_sys_read+0x7b/0x90 [ 127.178491][ T3672] x64_sys_call+0x28/0x9a0 [ 127.182745][ T3672] do_syscall_64+0x3b/0xb0 [ 127.187083][ T3672] ? clear_bhb_loop+0x35/0x90 [ 127.191600][ T3672] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.197321][ T3672] RIP: 0033:0x7fdb77e6d15c [ 127.201585][ T3672] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 127.221018][ T3672] RSP: 002b:00007fdb76ac6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.229266][ T3672] RAX: ffffffffffffffda RBX: 00007fdb78026058 RCX: 00007fdb77e6d15c [ 127.237071][ T3672] RDX: 000000000000000f RSI: 00007fdb76ac60a0 RDI: 0000000000000006 [ 127.244884][ T3672] RBP: 00007fdb76ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.252699][ T3672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.260624][ T3672] R13: 0000000000000000 R14: 00007fdb78026058 R15: 00007ffe3a693c98 [ 127.268465][ T3672] [ 127.341322][ T3676] FAULT_INJECTION: forcing a failure. [ 127.341322][ T3676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.356277][ T3676] CPU: 0 PID: 3676 Comm: syz.5.1265 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 127.366279][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.376249][ T3676] Call Trace: [ 127.379368][ T3676] [ 127.382151][ T3676] dump_stack_lvl+0x151/0x1c0 [ 127.386744][ T3676] ? io_uring_drop_tctx_refs+0x190/0x190 [ 127.392303][ T3676] dump_stack+0x15/0x20 [ 127.396315][ T3676] should_fail+0x3c6/0x510 [ 127.400674][ T3676] should_fail_usercopy+0x1a/0x20 [ 127.405539][ T3676] _copy_to_iter+0x22f/0xde0 [ 127.409963][ T3676] ? ____kasan_slab_free+0x131/0x160 [ 127.415083][ T3676] ? iov_iter_init+0x190/0x190 [ 127.419765][ T3676] ? disk_seqf_stop+0x54/0x80 [ 127.424385][ T3676] ? kfree+0xc8/0x220 [ 127.428302][ T3676] ? __check_object_size+0x2ec/0x3d0 [ 127.433419][ T3676] seq_read_iter+0xb1a/0xd00 [ 127.437948][ T3676] proc_reg_read_iter+0x1ba/0x290 [ 127.442805][ T3676] vfs_read+0xa81/0xd40 [ 127.446799][ T3676] ? kernel_read+0x1f0/0x1f0 [ 127.451221][ T3676] ? mutex_lock+0xb6/0x1e0 [ 127.455478][ T3676] ? wait_for_completion_killable_timeout+0x10/0x10 [ 127.461901][ T3676] ? __fdget_pos+0x2e7/0x3a0 [ 127.466325][ T3676] ? ksys_read+0x77/0x2c0 [ 127.470493][ T3676] ksys_read+0x199/0x2c0 [ 127.474573][ T3676] ? vfs_write+0x1110/0x1110 [ 127.479091][ T3676] ? debug_smp_processor_id+0x17/0x20 [ 127.484305][ T3676] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 127.490282][ T3676] __x64_sys_read+0x7b/0x90 [ 127.494619][ T3676] x64_sys_call+0x28/0x9a0 [ 127.498873][ T3676] do_syscall_64+0x3b/0xb0 [ 127.503177][ T3676] ? clear_bhb_loop+0x35/0x90 [ 127.507641][ T3676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.513741][ T3676] RIP: 0033:0x7f7daeb58719 [ 127.517996][ T3676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.537439][ T3676] RSP: 002b:00007f7dad7b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.545682][ T3676] RAX: ffffffffffffffda RBX: 00007f7daed10058 RCX: 00007f7daeb58719 [ 127.553950][ T3676] RDX: 0000000000000ffa RSI: 0000000020001840 RDI: 0000000000000005 [ 127.561924][ T3676] RBP: 00007f7dad7b0090 R08: 0000000000000000 R09: 0000000000000000 [ 127.569743][ T3676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.577650][ T3676] R13: 0000000000000000 R14: 00007f7daed10058 R15: 00007ffd8cfdce48 [ 127.585465][ T3676] [ 127.927610][ T3689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=3689 comm=syz.1.1271 [ 128.001808][ T3700] device syzkaller0 entered promiscuous mode [ 128.059228][ T594] Bluetooth: hci0: command 0x1009 tx timeout [ 128.176575][ T3709] FAULT_INJECTION: forcing a failure. [ 128.176575][ T3709] name failslab, interval 1, probability 0, space 0, times 0 [ 128.189379][ T3709] CPU: 1 PID: 3709 Comm: syz.2.1278 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 128.199345][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.209235][ T3709] Call Trace: [ 128.212365][ T3709] [ 128.215228][ T3709] dump_stack_lvl+0x151/0x1c0 [ 128.219739][ T3709] ? io_uring_drop_tctx_refs+0x190/0x190 [ 128.225217][ T3709] ? __alloc_pages+0x27e/0x8f0 [ 128.230078][ T3709] dump_stack+0x15/0x20 [ 128.234160][ T3709] should_fail+0x3c6/0x510 [ 128.239580][ T3709] __should_failslab+0xa4/0xe0 [ 128.244203][ T3709] ? xas_create+0x5ce/0x15d0 [ 128.248935][ T3709] should_failslab+0x9/0x20 [ 128.253273][ T3709] slab_pre_alloc_hook+0x37/0xd0 [ 128.258045][ T3709] ? xas_create+0x5ce/0x15d0 [ 128.262471][ T3709] kmem_cache_alloc+0x44/0x200 [ 128.267081][ T3709] xas_create+0x5ce/0x15d0 [ 128.271355][ T3709] xas_create_range+0x1fc/0x720 [ 128.276271][ T3709] ? xas_start+0x2bd/0x3f0 [ 128.280695][ T3709] shmem_add_to_page_cache+0x7fc/0xe90 [ 128.286083][ T3709] ? put_page+0xc0/0xc0 [ 128.290173][ T3709] shmem_getpage_gfp+0x1559/0x23c0 [ 128.295128][ T3709] ? shmem_getpage+0xa0/0xa0 [ 128.299544][ T3709] ? fault_in_safe_writeable+0x240/0x240 [ 128.305130][ T3709] shmem_write_begin+0xca/0x1b0 [ 128.309805][ T3709] generic_perform_write+0x2bc/0x5a0 [ 128.314934][ T3709] ? grab_cache_page_write_begin+0xa0/0xa0 [ 128.320563][ T3709] ? file_remove_privs+0x610/0x610 [ 128.325517][ T3709] ? rwsem_write_trylock+0x153/0x340 [ 128.330638][ T3709] ? rwsem_mark_wake+0x770/0x770 [ 128.335495][ T3709] __generic_file_write_iter+0x25b/0x4b0 [ 128.340979][ T3709] generic_file_write_iter+0xaf/0x1c0 [ 128.346271][ T3709] vfs_write+0xd5d/0x1110 [ 128.350429][ T3709] ? putname+0xfa/0x150 [ 128.354607][ T3709] ? file_end_write+0x1c0/0x1c0 [ 128.359313][ T3709] ? mutex_lock+0xb6/0x1e0 [ 128.363752][ T3709] ? wait_for_completion_killable_timeout+0x10/0x10 [ 128.370244][ T3709] ? __fdget_pos+0x2e7/0x3a0 [ 128.374750][ T3709] ? ksys_write+0x77/0x2c0 [ 128.379009][ T3709] ksys_write+0x199/0x2c0 [ 128.383188][ T3709] ? __ia32_sys_read+0x90/0x90 [ 128.387781][ T3709] ? debug_smp_processor_id+0x17/0x20 [ 128.392977][ T3709] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 128.398882][ T3709] __x64_sys_write+0x7b/0x90 [ 128.403333][ T3709] x64_sys_call+0x2f/0x9a0 [ 128.407562][ T3709] do_syscall_64+0x3b/0xb0 [ 128.411808][ T3709] ? clear_bhb_loop+0x35/0x90 [ 128.416321][ T3709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.422050][ T3709] RIP: 0033:0x7fdb77e6e719 [ 128.426312][ T3709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.445746][ T3709] RSP: 002b:00007fdb76ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.453997][ T3709] RAX: ffffffffffffffda RBX: 00007fdb78025f80 RCX: 00007fdb77e6e719 [ 128.461800][ T3709] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000004 [ 128.469607][ T3709] RBP: 00007fdb76ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.477530][ T3709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.485320][ T3709] R13: 0000000000000000 R14: 00007fdb78025f80 R15: 00007ffe3a693c98 [ 128.493133][ T3709] [ 128.901133][ T3731] FAULT_INJECTION: forcing a failure. [ 128.901133][ T3731] name failslab, interval 1, probability 0, space 0, times 0 [ 128.929409][ T3731] CPU: 1 PID: 3731 Comm: syz.6.1286 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 128.939406][ T3731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.949302][ T3731] Call Trace: [ 128.952424][ T3731] [ 128.955203][ T3731] dump_stack_lvl+0x151/0x1c0 [ 128.959712][ T3731] ? io_uring_drop_tctx_refs+0x190/0x190 [ 128.965177][ T3731] dump_stack+0x15/0x20 [ 128.969173][ T3731] should_fail+0x3c6/0x510 [ 128.973422][ T3731] __should_failslab+0xa4/0xe0 [ 128.978022][ T3731] should_failslab+0x9/0x20 [ 128.982451][ T3731] slab_pre_alloc_hook+0x37/0xd0 [ 128.987225][ T3731] __kmalloc+0x6d/0x270 [ 128.991218][ T3731] ? kvmalloc_node+0x1f0/0x4d0 [ 128.995815][ T3731] kvmalloc_node+0x1f0/0x4d0 [ 129.000334][ T3731] ? vm_mmap+0xb0/0xb0 [ 129.004233][ T3731] ? __kasan_check_write+0x14/0x20 [ 129.009184][ T3731] pfifo_fast_init+0x25e/0x7a0 [ 129.013787][ T3731] qdisc_create_dflt+0x144/0x3e0 [ 129.018556][ T3731] ? _raw_spin_lock+0xa4/0x1b0 [ 129.023154][ T3731] dev_activate+0x2e0/0x1140 [ 129.027589][ T3731] __dev_open+0x3bf/0x4e0 [ 129.031747][ T3731] ? dev_open+0x260/0x260 [ 129.035928][ T3731] ? _raw_spin_unlock_bh+0x51/0x60 [ 129.040892][ T3731] ? dev_set_rx_mode+0x245/0x2e0 [ 129.045636][ T3731] ? __kasan_check_read+0x11/0x20 [ 129.050584][ T3731] __dev_change_flags+0x1db/0x6e0 [ 129.055567][ T3731] ? avc_denied+0x1b0/0x1b0 [ 129.059892][ T3731] ? dev_get_flags+0x1e0/0x1e0 [ 129.064514][ T3731] ? _kstrtoull+0x3a0/0x4a0 [ 129.068841][ T3731] dev_change_flags+0x8c/0x1a0 [ 129.073434][ T3731] dev_ifsioc+0x147/0x10c0 [ 129.077685][ T3731] ? dev_ioctl+0xe70/0xe70 [ 129.081946][ T3731] ? mutex_lock+0xb6/0x1e0 [ 129.086284][ T3731] ? wait_for_completion_killable_timeout+0x10/0x10 [ 129.092706][ T3731] dev_ioctl+0x54d/0xe70 [ 129.096777][ T3731] sock_do_ioctl+0x34f/0x5a0 [ 129.101228][ T3731] ? sock_show_fdinfo+0xa0/0xa0 [ 129.105909][ T3731] ? selinux_file_ioctl+0x3cc/0x540 [ 129.111220][ T3731] sock_ioctl+0x455/0x740 [ 129.115511][ T3731] ? sock_poll+0x400/0x400 [ 129.119757][ T3731] ? __fget_files+0x31e/0x380 [ 129.124273][ T3731] ? security_file_ioctl+0x84/0xb0 [ 129.129322][ T3731] ? sock_poll+0x400/0x400 [ 129.133579][ T3731] __se_sys_ioctl+0x114/0x190 [ 129.138088][ T3731] __x64_sys_ioctl+0x7b/0x90 [ 129.142516][ T3731] x64_sys_call+0x98/0x9a0 [ 129.146795][ T3731] do_syscall_64+0x3b/0xb0 [ 129.151108][ T3731] ? clear_bhb_loop+0x35/0x90 [ 129.155629][ T3731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.161348][ T3731] RIP: 0033:0x7f959452c719 [ 129.165601][ T3731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.185044][ T3731] RSP: 002b:00007f95931a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.193373][ T3731] RAX: ffffffffffffffda RBX: 00007f95946e3f80 RCX: 00007f959452c719 [ 129.201296][ T3731] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 0000000000000005 [ 129.209083][ T3731] RBP: 00007f95931a5090 R08: 0000000000000000 R09: 0000000000000000 [ 129.217145][ T3731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.225021][ T3731] R13: 0000000000000000 R14: 00007f95946e3f80 R15: 00007fff34558be8 [ 129.232850][ T3731] [ 129.269308][ T3731] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 129.277293][ T3731] device pim6reg1 entered promiscuous mode [ 129.455671][ T3747] FAULT_INJECTION: forcing a failure. [ 129.455671][ T3747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.468775][ T3747] CPU: 1 PID: 3747 Comm: syz.2.1293 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 129.479231][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.489693][ T3747] Call Trace: [ 129.492909][ T3747] [ 129.495696][ T3747] dump_stack_lvl+0x151/0x1c0 [ 129.500316][ T3747] ? io_uring_drop_tctx_refs+0x190/0x190 [ 129.505840][ T3747] ? search_extable+0xaf/0xf0 [ 129.510438][ T3747] dump_stack+0x15/0x20 [ 129.514426][ T3747] should_fail+0x3c6/0x510 [ 129.518773][ T3747] should_fail_usercopy+0x1a/0x20 [ 129.523630][ T3747] _copy_to_user+0x20/0x90 [ 129.527881][ T3747] simple_read_from_buffer+0xc7/0x150 [ 129.533094][ T3747] proc_fail_nth_read+0x1a3/0x210 [ 129.537945][ T3747] ? proc_fault_inject_write+0x390/0x390 [ 129.543411][ T3747] ? fsnotify_perm+0x269/0x5b0 [ 129.548014][ T3747] ? security_file_permission+0x86/0xb0 [ 129.553398][ T3747] ? proc_fault_inject_write+0x390/0x390 [ 129.558864][ T3747] vfs_read+0x27d/0xd40 [ 129.562881][ T3747] ? kernel_read+0x1f0/0x1f0 [ 129.567288][ T3747] ? __kasan_check_write+0x14/0x20 [ 129.572489][ T3747] ? mutex_lock+0xb6/0x1e0 [ 129.576742][ T3747] ? wait_for_completion_killable_timeout+0x10/0x10 [ 129.583170][ T3747] ? __fdget_pos+0x2e7/0x3a0 [ 129.587697][ T3747] ? ksys_read+0x77/0x2c0 [ 129.591867][ T3747] ksys_read+0x199/0x2c0 [ 129.595940][ T3747] ? vfs_write+0x1110/0x1110 [ 129.600369][ T3747] ? debug_smp_processor_id+0x17/0x20 [ 129.605576][ T3747] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 129.611476][ T3747] __x64_sys_read+0x7b/0x90 [ 129.615939][ T3747] x64_sys_call+0x28/0x9a0 [ 129.620186][ T3747] do_syscall_64+0x3b/0xb0 [ 129.624543][ T3747] ? clear_bhb_loop+0x35/0x90 [ 129.629160][ T3747] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.634864][ T3747] RIP: 0033:0x7fdb77e6d15c [ 129.639118][ T3747] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 129.658677][ T3747] RSP: 002b:00007fdb76ae7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.666926][ T3747] RAX: ffffffffffffffda RBX: 00007fdb78025f80 RCX: 00007fdb77e6d15c [ 129.675260][ T3747] RDX: 000000000000000f RSI: 00007fdb76ae70a0 RDI: 0000000000000003 [ 129.683087][ T3747] RBP: 00007fdb76ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.690987][ T3747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.699092][ T3747] R13: 0000000000000000 R14: 00007fdb78025f80 R15: 00007ffe3a693c98 [ 129.706911][ T3747] [ 129.730948][ T3749] vlan1: mtu less than device minimum [ 129.854607][ T30] kauditd_printk_skb: 2350 callbacks suppressed [ 129.854625][ T30] audit: type=1400 audit(1731210922.722:28541): avc: denied { map_create } for pid=3763 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.890092][ T30] audit: type=1400 audit(1731210922.732:28542): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 129.912332][ T30] audit: type=1400 audit(1731210922.752:28543): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 129.934248][ T30] audit: type=1400 audit(1731210922.752:28544): avc: denied { prog_load } for pid=3763 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.959254][ T30] audit: type=1400 audit(1731210922.752:28545): avc: denied { prog_load } for pid=3763 comm="syz.1.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 129.978821][ T30] audit: type=1400 audit(1731210922.782:28546): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 130.000987][ T30] audit: type=1400 audit(1731210922.822:28547): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 130.022949][ T30] audit: type=1400 audit(1731210922.822:28548): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 130.045467][ T30] audit: type=1400 audit(1731210922.832:28549): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.070046][ T30] audit: type=1400 audit(1731210922.832:28550): avc: denied { prog_load } for pid=3766 comm="syz.1.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 130.128810][ T3772] FAULT_INJECTION: forcing a failure. [ 130.128810][ T3772] name failslab, interval 1, probability 0, space 0, times 0 [ 130.141433][ T3772] CPU: 0 PID: 3772 Comm: syz.5.1304 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 130.151497][ T3772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.161486][ T3772] Call Trace: [ 130.164600][ T3772] [ 130.167380][ T3772] dump_stack_lvl+0x151/0x1c0 [ 130.171895][ T3772] ? io_uring_drop_tctx_refs+0x190/0x190 [ 130.177371][ T3772] dump_stack+0x15/0x20 [ 130.181357][ T3772] should_fail+0x3c6/0x510 [ 130.185612][ T3772] __should_failslab+0xa4/0xe0 [ 130.190213][ T3772] should_failslab+0x9/0x20 [ 130.194551][ T3772] slab_pre_alloc_hook+0x37/0xd0 [ 130.199329][ T3772] ? audit_log_start+0x456/0xa80 [ 130.204097][ T3772] __kmalloc_track_caller+0x6c/0x260 [ 130.209217][ T3772] ? audit_log_start+0x456/0xa80 [ 130.213998][ T3772] ? audit_log_start+0x456/0xa80 [ 130.218763][ T3772] __alloc_skb+0x10c/0x550 [ 130.223023][ T3772] audit_log_start+0x456/0xa80 [ 130.227622][ T3772] ? audit_serial+0x30/0x30 [ 130.231957][ T3772] ? stack_trace_save+0x113/0x1c0 [ 130.236934][ T3772] ? stack_trace_snprint+0xf0/0xf0 [ 130.241873][ T3772] ? __stack_depot_save+0x34/0x470 [ 130.246847][ T3772] ? kmem_cache_free+0x116/0x2e0 [ 130.251606][ T3772] ? slow_avc_audit+0x3c0/0x3c0 [ 130.256369][ T3772] common_lsm_audit+0xd8/0x18b0 [ 130.261058][ T3772] ? kasan_set_track+0x4b/0x70 [ 130.265652][ T3772] ? kasan_set_free_info+0x23/0x40 [ 130.270599][ T3772] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 130.276335][ T3772] ? __kasan_slab_free+0x11/0x20 [ 130.281107][ T3772] ? kmem_cache_free+0x116/0x2e0 [ 130.285963][ T3772] ? putname+0xfa/0x150 [ 130.289955][ T3772] ? do_sys_openat2+0x1fc/0x820 [ 130.294729][ T3772] ? ipv6_skb_to_auditdata+0xd90/0xd90 [ 130.300025][ T3772] ? _kstrtoull+0x3a0/0x4a0 [ 130.304363][ T3772] ? kstrtouint_from_user+0x20a/0x2a0 [ 130.309584][ T3772] slow_avc_audit+0x26c/0x3c0 [ 130.314096][ T3772] ? avc_get_hash_stats+0x180/0x180 [ 130.319116][ T3772] ? avc_has_perm_noaudit+0x2dd/0x430 [ 130.324338][ T3772] ? fsnotify_perm+0x6a/0x5b0 [ 130.328859][ T3772] avc_has_perm+0x1f5/0x260 [ 130.333195][ T3772] ? avc_has_perm_noaudit+0x430/0x430 [ 130.338534][ T3772] ? file_end_write+0x1c0/0x1c0 [ 130.343256][ T3772] selinux_bpf+0xcb/0x100 [ 130.347380][ T3772] security_bpf+0x72/0xb0 [ 130.351541][ T3772] __sys_bpf+0x254/0x760 [ 130.355622][ T3772] ? fput_many+0x160/0x1b0 [ 130.359905][ T3772] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 130.365261][ T3772] ? debug_smp_processor_id+0x17/0x20 [ 130.370635][ T3772] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 130.376536][ T3772] __x64_sys_bpf+0x7c/0x90 [ 130.380793][ T3772] x64_sys_call+0x87f/0x9a0 [ 130.385139][ T3772] do_syscall_64+0x3b/0xb0 [ 130.389382][ T3772] ? clear_bhb_loop+0x35/0x90 [ 130.393913][ T3772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.399624][ T3772] RIP: 0033:0x7f7daeb58719 [ 130.403879][ T3772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.423411][ T3772] RSP: 002b:00007f7dad7d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.431653][ T3772] RAX: ffffffffffffffda RBX: 00007f7daed0ff80 RCX: 00007f7daeb58719 [ 130.439550][ T3772] RDX: 0000000000000048 RSI: 00000000200009c0 RDI: 0000000000000000 [ 130.447361][ T3772] RBP: 00007f7dad7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 130.455183][ T3772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.462987][ T3772] R13: 0000000000000000 R14: 00007f7daed0ff80 R15: 00007ffd8cfdce48 [ 130.470807][ T3772] [ 130.707545][ T3791] FAULT_INJECTION: forcing a failure. [ 130.707545][ T3791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.720714][ T3791] CPU: 0 PID: 3791 Comm: syz.2.1312 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 130.730706][ T3791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.740603][ T3791] Call Trace: [ 130.743729][ T3791] [ 130.746498][ T3791] dump_stack_lvl+0x151/0x1c0 [ 130.751038][ T3791] ? io_uring_drop_tctx_refs+0x190/0x190 [ 130.756483][ T3791] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 130.761954][ T3791] dump_stack+0x15/0x20 [ 130.765943][ T3791] should_fail+0x3c6/0x510 [ 130.770196][ T3791] should_fail_usercopy+0x1a/0x20 [ 130.775240][ T3791] _copy_from_user+0x20/0xd0 [ 130.779745][ T3791] iovec_from_user+0xc7/0x330 [ 130.784269][ T3791] __import_iovec+0x6d/0x420 [ 130.788682][ T3791] import_iovec+0xe5/0x120 [ 130.792934][ T3791] vfs_writev+0x114/0x560 [ 130.797097][ T3791] ? _copy_from_user+0x96/0xd0 [ 130.801816][ T3791] ? do_writev+0x340/0x340 [ 130.806052][ T3791] ? __fget_files+0x31e/0x380 [ 130.810561][ T3791] ? __fdget_pos+0x209/0x3a0 [ 130.814977][ T3791] ? do_writev+0x7b/0x340 [ 130.819151][ T3791] do_writev+0x1aa/0x340 [ 130.823236][ T3791] ? do_readv+0x460/0x460 [ 130.827519][ T3791] ? debug_smp_processor_id+0x17/0x20 [ 130.832815][ T3791] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 130.838804][ T3791] __x64_sys_writev+0x7d/0x90 [ 130.843494][ T3791] x64_sys_call+0xb4/0x9a0 [ 130.847732][ T3791] do_syscall_64+0x3b/0xb0 [ 130.852113][ T3791] ? clear_bhb_loop+0x35/0x90 [ 130.856704][ T3791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.862536][ T3791] RIP: 0033:0x7fdb77e6e719 [ 130.866786][ T3791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.886491][ T3791] RSP: 002b:00007fdb76ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 130.894730][ T3791] RAX: ffffffffffffffda RBX: 00007fdb78025f80 RCX: 00007fdb77e6e719 [ 130.902738][ T3791] RDX: 0000000000000001 RSI: 00000000200014c0 RDI: 0000000000000004 [ 130.910552][ T3791] RBP: 00007fdb76ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.918352][ T3791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.926249][ T3791] R13: 0000000000000000 R14: 00007fdb78025f80 R15: 00007ffe3a693c98 [ 130.934257][ T3791] [ 130.963181][ T3797] FAULT_INJECTION: forcing a failure. [ 130.963181][ T3797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.978716][ T3797] CPU: 0 PID: 3797 Comm: syz.1.1315 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 130.988708][ T3797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.998610][ T3797] Call Trace: [ 131.001918][ T3797] [ 131.004769][ T3797] dump_stack_lvl+0x151/0x1c0 [ 131.009286][ T3797] ? io_uring_drop_tctx_refs+0x190/0x190 [ 131.014864][ T3797] ? vsnprintf+0x1dd/0x1c70 [ 131.019185][ T3797] dump_stack+0x15/0x20 [ 131.023300][ T3797] should_fail+0x3c6/0x510 [ 131.027673][ T3797] should_fail_usercopy+0x1a/0x20 [ 131.032913][ T3797] _copy_from_user+0x20/0xd0 [ 131.037442][ T3797] kstrtouint_from_user+0xca/0x2a0 [ 131.042391][ T3797] ? kstrtol_from_user+0x310/0x310 [ 131.047447][ T3797] ? snprintf+0xd6/0x120 [ 131.051512][ T3797] ? check_stack_object+0x114/0x130 [ 131.056639][ T3797] ? __kasan_check_read+0x11/0x20 [ 131.061497][ T3797] ? _copy_to_user+0x78/0x90 [ 131.062941][ T3803] binfmt_misc: register: failed to install interpreter file ./file0 [ 131.066009][ T3797] proc_fail_nth_write+0xa6/0x290 [ 131.066045][ T3797] ? selinux_file_permission+0x2c4/0x570 [ 131.084274][ T3797] ? proc_fail_nth_read+0x210/0x210 [ 131.089405][ T3797] ? fsnotify_perm+0x6a/0x5b0 [ 131.093924][ T3797] ? security_file_permission+0x86/0xb0 [ 131.099303][ T3797] ? proc_fail_nth_read+0x210/0x210 [ 131.104347][ T3797] vfs_write+0x406/0x1110 [ 131.104381][ T3797] ? file_end_write+0x1c0/0x1c0 [ 131.104401][ T3797] ? __kasan_check_write+0x14/0x20 [ 131.104425][ T3797] ? mutex_lock+0xb6/0x1e0 [ 131.122976][ T3797] ? wait_for_completion_killable_timeout+0x10/0x10 [ 131.129402][ T3797] ? __fdget_pos+0x2e7/0x3a0 [ 131.133822][ T3797] ? ksys_write+0x77/0x2c0 [ 131.138062][ T3797] ksys_write+0x199/0x2c0 [ 131.142235][ T3797] ? __ia32_sys_read+0x90/0x90 [ 131.146838][ T3797] ? debug_smp_processor_id+0x17/0x20 [ 131.152098][ T3797] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 131.157943][ T3797] __x64_sys_write+0x7b/0x90 [ 131.162373][ T3797] x64_sys_call+0x2f/0x9a0 [ 131.166820][ T3797] do_syscall_64+0x3b/0xb0 [ 131.171089][ T3797] ? clear_bhb_loop+0x35/0x90 [ 131.175582][ T3797] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.181398][ T3797] RIP: 0033:0x7f9c41cab1ff [ 131.185773][ T3797] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 131.205717][ T3797] RSP: 002b:00007f9c40925030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.214072][ T3797] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9c41cab1ff [ 131.214099][ T3797] RDX: 0000000000000001 RSI: 00007f9c409250a0 RDI: 0000000000000003 [ 131.214114][ T3797] RBP: 00007f9c40925090 R08: 0000000000000000 R09: 0000000000000000 [ 131.237682][ T3797] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 131.245720][ T3797] R13: 0000000000000000 R14: 00007f9c41e63f80 R15: 00007ffc1927fa48 [ 131.245753][ T3797] [ 131.415850][ T3827] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 131.445060][ T3831] FAULT_INJECTION: forcing a failure. [ 131.445060][ T3831] name failslab, interval 1, probability 0, space 0, times 0 [ 131.457966][ T3831] CPU: 1 PID: 3831 Comm: syz.1.1330 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 131.467941][ T3831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.477941][ T3831] Call Trace: [ 131.481048][ T3831] [ 131.483827][ T3831] dump_stack_lvl+0x151/0x1c0 [ 131.488352][ T3831] ? io_uring_drop_tctx_refs+0x190/0x190 [ 131.493925][ T3831] dump_stack+0x15/0x20 [ 131.497900][ T3831] should_fail+0x3c6/0x510 [ 131.502239][ T3831] __should_failslab+0xa4/0xe0 [ 131.506837][ T3831] ? anon_vma_fork+0xf7/0x4e0 [ 131.511355][ T3831] should_failslab+0x9/0x20 [ 131.515778][ T3831] slab_pre_alloc_hook+0x37/0xd0 [ 131.520562][ T3831] ? anon_vma_fork+0xf7/0x4e0 [ 131.525059][ T3831] kmem_cache_alloc+0x44/0x200 [ 131.529663][ T3831] anon_vma_fork+0xf7/0x4e0 [ 131.533992][ T3831] ? anon_vma_name+0x43/0x70 [ 131.538415][ T3831] ? vm_area_dup+0x17a/0x230 [ 131.542843][ T3831] copy_mm+0xa3a/0x13e0 [ 131.546843][ T3831] ? copy_signal+0x610/0x610 [ 131.551263][ T3831] ? __init_rwsem+0xfe/0x1d0 [ 131.555692][ T3831] ? copy_signal+0x4e3/0x610 [ 131.560115][ T3831] copy_process+0x1149/0x3290 [ 131.564628][ T3831] ? __kasan_check_write+0x14/0x20 [ 131.569576][ T3831] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 131.574538][ T3831] ? vfs_write+0x94d/0x1110 [ 131.579082][ T3831] kernel_clone+0x21e/0x9e0 [ 131.583462][ T3831] ? __kasan_check_write+0x14/0x20 [ 131.588423][ T3831] ? create_io_thread+0x1e0/0x1e0 [ 131.593272][ T3831] __x64_sys_clone+0x23f/0x290 [ 131.597964][ T3831] ? __do_sys_vfork+0x130/0x130 [ 131.602644][ T3831] ? debug_smp_processor_id+0x17/0x20 [ 131.607857][ T3831] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 131.613839][ T3831] ? exit_to_user_mode_prepare+0x39/0xa0 [ 131.619308][ T3831] x64_sys_call+0x1b0/0x9a0 [ 131.623648][ T3831] do_syscall_64+0x3b/0xb0 [ 131.627985][ T3831] ? clear_bhb_loop+0x35/0x90 [ 131.632500][ T3831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.638230][ T3831] RIP: 0033:0x7f9c41cac719 [ 131.642481][ T3831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.661924][ T3831] RSP: 002b:00007f9c40924fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 131.670181][ T3831] RAX: ffffffffffffffda RBX: 00007f9c41e63f80 RCX: 00007f9c41cac719 [ 131.678438][ T3831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008020440 [ 131.686286][ T3831] RBP: 00007f9c40925090 R08: 0000000000000000 R09: 0000000000000000 [ 131.694185][ T3831] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 131.702114][ T3831] R13: 0000000000000000 R14: 00007f9c41e63f80 R15: 00007ffc1927fa48 [ 131.710019][ T3831] [ 131.792506][ T3843] xt_bpf: check failed: parse error [ 132.608843][ T3910] FAULT_INJECTION: forcing a failure. [ 132.608843][ T3910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.622402][ T3910] CPU: 0 PID: 3910 Comm: syz.6.1362 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 132.632491][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.642376][ T3910] Call Trace: [ 132.645498][ T3910] [ 132.648711][ T3910] dump_stack_lvl+0x151/0x1c0 [ 132.653225][ T3910] ? io_uring_drop_tctx_refs+0x190/0x190 [ 132.658796][ T3910] ? generic_perform_write+0x4fc/0x5a0 [ 132.664192][ T3910] dump_stack+0x15/0x20 [ 132.668348][ T3910] should_fail+0x3c6/0x510 [ 132.672717][ T3910] should_fail_usercopy+0x1a/0x20 [ 132.677661][ T3910] _copy_to_user+0x20/0x90 [ 132.681925][ T3910] simple_read_from_buffer+0xc7/0x150 [ 132.687120][ T3910] proc_fail_nth_read+0x1a3/0x210 [ 132.691992][ T3910] ? proc_fault_inject_write+0x390/0x390 [ 132.697643][ T3910] ? fsnotify_perm+0x269/0x5b0 [ 132.702458][ T3910] ? security_file_permission+0x86/0xb0 [ 132.708016][ T3910] ? proc_fault_inject_write+0x390/0x390 [ 132.713467][ T3910] vfs_read+0x27d/0xd40 [ 132.717574][ T3910] ? kernel_read+0x1f0/0x1f0 [ 132.721985][ T3910] ? __kasan_check_write+0x14/0x20 [ 132.726931][ T3910] ? mutex_lock+0xb6/0x1e0 [ 132.731189][ T3910] ? wait_for_completion_killable_timeout+0x10/0x10 [ 132.737804][ T3910] ? __fdget_pos+0x2e7/0x3a0 [ 132.742222][ T3910] ? ksys_read+0x77/0x2c0 [ 132.746390][ T3910] ksys_read+0x199/0x2c0 [ 132.750474][ T3910] ? vfs_write+0x1110/0x1110 [ 132.754899][ T3910] ? debug_smp_processor_id+0x17/0x20 [ 132.760225][ T3910] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 132.766127][ T3910] __x64_sys_read+0x7b/0x90 [ 132.770488][ T3910] x64_sys_call+0x28/0x9a0 [ 132.774720][ T3910] do_syscall_64+0x3b/0xb0 [ 132.778975][ T3910] ? clear_bhb_loop+0x35/0x90 [ 132.783608][ T3910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.789520][ T3910] RIP: 0033:0x7f959452b15c [ 132.793777][ T3910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 132.813425][ T3910] RSP: 002b:00007f95931a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.821720][ T3910] RAX: ffffffffffffffda RBX: 00007f95946e3f80 RCX: 00007f959452b15c [ 132.829619][ T3910] RDX: 000000000000000f RSI: 00007f95931a50a0 RDI: 0000000000000006 [ 132.837519][ T3910] RBP: 00007f95931a5090 R08: 0000000000000000 R09: 0000000000000000 [ 132.845443][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.853256][ T3910] R13: 0000000000000000 R14: 00007f95946e3f80 R15: 00007fff34558be8 [ 132.861252][ T3910] [ 133.037852][ T3922] FAULT_INJECTION: forcing a failure. [ 133.037852][ T3922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.059240][ T3922] CPU: 0 PID: 3922 Comm: syz.3.1365 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 133.069327][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.079308][ T3922] Call Trace: [ 133.082436][ T3922] [ 133.085208][ T3922] dump_stack_lvl+0x151/0x1c0 [ 133.089728][ T3922] ? io_uring_drop_tctx_refs+0x190/0x190 [ 133.095211][ T3922] ? __stack_depot_save+0x34/0x470 [ 133.100159][ T3922] dump_stack+0x15/0x20 [ 133.104124][ T3922] should_fail+0x3c6/0x510 [ 133.108468][ T3922] should_fail_alloc_page+0x5a/0x80 [ 133.113674][ T3922] prepare_alloc_pages+0x15c/0x700 [ 133.118626][ T3922] ? __alloc_pages_bulk+0xe40/0xe40 [ 133.123699][ T3922] ? refill_stock+0xb2/0x2c0 [ 133.128086][ T3922] __alloc_pages+0x18c/0x8f0 [ 133.132857][ T3922] ? prep_new_page+0x110/0x110 [ 133.137455][ T3922] ? __kasan_check_read+0x11/0x20 [ 133.142313][ T3922] ? __vm_enough_memory+0x119/0x2f0 [ 133.147497][ T3922] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 133.153045][ T3922] ? shmem_swapin_page+0x1680/0x1680 [ 133.158168][ T3922] ? xas_start+0x32c/0x3f0 [ 133.162415][ T3922] ? xas_load+0x2b7/0x2d0 [ 133.166582][ T3922] ? pagecache_get_page+0xdc2/0xeb0 [ 133.171624][ T3922] ? page_cache_prev_miss+0x410/0x410 [ 133.176935][ T3922] ? _raw_spin_lock_irqsave+0x210/0x210 [ 133.182293][ T3922] ? lru_cache_add+0x279/0x540 [ 133.186891][ T3922] shmem_getpage_gfp+0x1388/0x23c0 [ 133.191846][ T3922] ? shmem_getpage+0xa0/0xa0 [ 133.196270][ T3922] ? fault_in_safe_writeable+0x240/0x240 [ 133.201736][ T3922] shmem_write_begin+0xca/0x1b0 [ 133.206457][ T3922] generic_perform_write+0x2bc/0x5a0 [ 133.211548][ T3922] ? grab_cache_page_write_begin+0xa0/0xa0 [ 133.217183][ T3922] ? file_remove_privs+0x610/0x610 [ 133.222217][ T3922] ? rwsem_write_trylock+0x153/0x340 [ 133.227338][ T3922] ? rwsem_mark_wake+0x770/0x770 [ 133.232113][ T3922] __generic_file_write_iter+0x25b/0x4b0 [ 133.237580][ T3922] generic_file_write_iter+0xaf/0x1c0 [ 133.242790][ T3922] vfs_write+0xd5d/0x1110 [ 133.247065][ T3922] ? file_end_write+0x1c0/0x1c0 [ 133.251733][ T3922] ? __fdget_pos+0x209/0x3a0 [ 133.256462][ T3922] ? ksys_write+0x77/0x2c0 [ 133.260715][ T3922] ksys_write+0x199/0x2c0 [ 133.265053][ T3922] ? exc_page_fault+0x47a/0x7f0 [ 133.269744][ T3922] ? __ia32_sys_read+0x90/0x90 [ 133.274367][ T3922] __x64_sys_write+0x7b/0x90 [ 133.278981][ T3922] x64_sys_call+0x2f/0x9a0 [ 133.283229][ T3922] do_syscall_64+0x3b/0xb0 [ 133.287608][ T3922] ? clear_bhb_loop+0x35/0x90 [ 133.292121][ T3922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.297852][ T3922] RIP: 0033:0x7f2e3f9371ff [ 133.302104][ T3922] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 133.321630][ T3922] RSP: 002b:00007f2e3e58fdf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 133.329873][ T3922] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f2e3f9371ff [ 133.337682][ T3922] RDX: 0000000000040000 RSI: 00007f2e36170000 RDI: 0000000000000004 [ 133.345583][ T3922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000504 [ 133.353395][ T3922] R10: 0000000020000202 R11: 0000000000000293 R12: 0000000000000004 [ 133.361207][ T3922] R13: 00007f2e3e58fef0 R14: 00007f2e3e58feb0 R15: 00007f2e36170000 [ 133.369022][ T3922] [ 133.516071][ T3935] FAULT_INJECTION: forcing a failure. [ 133.516071][ T3935] name failslab, interval 1, probability 0, space 0, times 0 [ 133.549288][ T3935] CPU: 1 PID: 3935 Comm: syz.1.1372 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 133.559546][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.569481][ T3935] Call Trace: [ 133.572647][ T3935] [ 133.575439][ T3935] dump_stack_lvl+0x151/0x1c0 [ 133.579954][ T3935] ? io_uring_drop_tctx_refs+0x190/0x190 [ 133.585425][ T3935] dump_stack+0x15/0x20 [ 133.589587][ T3935] should_fail+0x3c6/0x510 [ 133.593843][ T3935] __should_failslab+0xa4/0xe0 [ 133.598440][ T3935] should_failslab+0x9/0x20 [ 133.602789][ T3935] slab_pre_alloc_hook+0x37/0xd0 [ 133.607567][ T3935] __kmalloc+0x6d/0x270 [ 133.611717][ T3935] ? kvmalloc_node+0x1f0/0x4d0 [ 133.616320][ T3935] kvmalloc_node+0x1f0/0x4d0 [ 133.620745][ T3935] ? vm_mmap+0xb0/0xb0 [ 133.624697][ T3935] ? __kasan_check_write+0x14/0x20 [ 133.629683][ T3935] pfifo_fast_init+0x3aa/0x7a0 [ 133.634375][ T3935] qdisc_create_dflt+0x144/0x3e0 [ 133.639159][ T3935] mq_init+0x2c8/0x6b0 [ 133.643057][ T3935] ? local_bh_enable+0x30/0x30 [ 133.647824][ T3935] ? __kasan_check_write+0x14/0x20 [ 133.652769][ T3935] ? qdisc_alloc+0x5a1/0x770 [ 133.657200][ T3935] qdisc_create_dflt+0x144/0x3e0 [ 133.661978][ T3935] ? _raw_spin_lock+0xa4/0x1b0 [ 133.666573][ T3935] dev_activate+0x127/0x1140 [ 133.671098][ T3935] ? dev_set_rx_mode+0x245/0x2e0 [ 133.675960][ T3935] __dev_open+0x3bf/0x4e0 [ 133.680122][ T3935] ? dev_open+0x260/0x260 [ 133.684286][ T3935] ? _raw_spin_unlock_bh+0x51/0x60 [ 133.689234][ T3935] ? dev_set_rx_mode+0x245/0x2e0 [ 133.694110][ T3935] ? __kasan_check_read+0x11/0x20 [ 133.698959][ T3935] __dev_change_flags+0x1db/0x6e0 [ 133.703832][ T3935] ? dev_get_flags+0x1e0/0x1e0 [ 133.708418][ T3935] ? _kstrtoull+0x3a0/0x4a0 [ 133.712769][ T3935] dev_change_flags+0x8c/0x1a0 [ 133.717383][ T3935] dev_ifsioc+0x147/0x10c0 [ 133.721708][ T3935] ? dev_ioctl+0xe70/0xe70 [ 133.725956][ T3935] ? mutex_lock+0xb6/0x1e0 [ 133.730214][ T3935] ? wait_for_completion_killable_timeout+0x10/0x10 [ 133.736733][ T3935] dev_ioctl+0x54d/0xe70 [ 133.740886][ T3935] sock_do_ioctl+0x34f/0x5a0 [ 133.745408][ T3935] ? sock_show_fdinfo+0xa0/0xa0 [ 133.750089][ T3935] ? selinux_file_ioctl+0x3cc/0x540 [ 133.755212][ T3935] sock_ioctl+0x455/0x740 [ 133.759377][ T3935] ? sock_poll+0x400/0x400 [ 133.763623][ T3935] ? __fget_files+0x31e/0x380 [ 133.768142][ T3935] ? security_file_ioctl+0x84/0xb0 [ 133.773175][ T3935] ? sock_poll+0x400/0x400 [ 133.777425][ T3935] __se_sys_ioctl+0x114/0x190 [ 133.781947][ T3935] __x64_sys_ioctl+0x7b/0x90 [ 133.786364][ T3935] x64_sys_call+0x98/0x9a0 [ 133.790613][ T3935] do_syscall_64+0x3b/0xb0 [ 133.794868][ T3935] ? clear_bhb_loop+0x35/0x90 [ 133.799384][ T3935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.805111][ T3935] RIP: 0033:0x7f9c41cac719 [ 133.809369][ T3935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.828897][ T3935] RSP: 002b:00007f9c40925038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.837396][ T3935] RAX: ffffffffffffffda RBX: 00007f9c41e63f80 RCX: 00007f9c41cac719 [ 133.845646][ T3935] RDX: 0000000020002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 133.853526][ T3935] RBP: 00007f9c40925090 R08: 0000000000000000 R09: 0000000000000000 [ 133.861438][ T3935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.869238][ T3935] R13: 0000000000000000 R14: 00007f9c41e63f80 R15: 00007ffc1927fa48 [ 133.877228][ T3935] [ 134.925294][ T30] kauditd_printk_skb: 1150 callbacks suppressed [ 134.925313][ T30] audit: type=1400 audit(1731210927.792:29699): avc: denied { prog_load } for pid=3968 comm="syz.1.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 134.978501][ T30] audit: type=1400 audit(1731210927.802:29700): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 135.018334][ T30] audit: type=1400 audit(1731210927.822:29701): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 135.040998][ T30] audit: type=1400 audit(1731210927.822:29702): avc: denied { mounton } for pid=3968 comm="syz.1.1386" path="/291/bus" dev="tmpfs" ino=1635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 135.064166][ T30] audit: type=1400 audit(1731210927.832:29703): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.090021][ T30] audit: type=1400 audit(1731210927.842:29704): avc: denied { read write } for pid=3984 comm="syz.1.1391" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.114133][ T30] audit: type=1400 audit(1731210927.872:29705): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 135.153430][ T30] audit: type=1400 audit(1731210927.872:29706): avc: denied { prog_load } for pid=3984 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.177301][ T30] audit: type=1400 audit(1731210927.882:29707): avc: denied { map_create } for pid=3984 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.196811][ T30] audit: type=1400 audit(1731210927.882:29708): avc: denied { prog_load } for pid=3984 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.427017][ T3998] device syzkaller0 entered promiscuous mode [ 136.811234][ T4038] FAULT_INJECTION: forcing a failure. [ 136.811234][ T4038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.859241][ T4038] CPU: 1 PID: 4038 Comm: syz.6.1414 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 136.869233][ T4038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.879124][ T4038] Call Trace: [ 136.882509][ T4038] [ 136.885285][ T4038] dump_stack_lvl+0x151/0x1c0 [ 136.889883][ T4038] ? io_uring_drop_tctx_refs+0x190/0x190 [ 136.895364][ T4038] dump_stack+0x15/0x20 [ 136.899340][ T4038] should_fail+0x3c6/0x510 [ 136.903683][ T4038] should_fail_usercopy+0x1a/0x20 [ 136.908539][ T4038] _copy_to_user+0x20/0x90 [ 136.912795][ T4038] simple_read_from_buffer+0xc7/0x150 [ 136.918015][ T4038] proc_fail_nth_read+0x1a3/0x210 [ 136.922867][ T4038] ? proc_fault_inject_write+0x390/0x390 [ 136.928507][ T4038] ? fsnotify_perm+0x269/0x5b0 [ 136.933105][ T4038] ? security_file_permission+0x86/0xb0 [ 136.938484][ T4038] ? proc_fault_inject_write+0x390/0x390 [ 136.943955][ T4038] vfs_read+0x27d/0xd40 [ 136.947945][ T4038] ? kernel_read+0x1f0/0x1f0 [ 136.952375][ T4038] ? __kasan_check_write+0x14/0x20 [ 136.957329][ T4038] ? mutex_lock+0xb6/0x1e0 [ 136.961572][ T4038] ? wait_for_completion_killable_timeout+0x10/0x10 [ 136.968084][ T4038] ? __fdget_pos+0x2e7/0x3a0 [ 136.972629][ T4038] ? ksys_read+0x77/0x2c0 [ 136.976797][ T4038] ksys_read+0x199/0x2c0 [ 136.980881][ T4038] ? vfs_write+0x1110/0x1110 [ 136.985303][ T4038] ? debug_smp_processor_id+0x17/0x20 [ 136.990511][ T4038] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 136.996686][ T4038] __x64_sys_read+0x7b/0x90 [ 137.001039][ T4038] x64_sys_call+0x28/0x9a0 [ 137.005455][ T4038] do_syscall_64+0x3b/0xb0 [ 137.009712][ T4038] ? clear_bhb_loop+0x35/0x90 [ 137.014310][ T4038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.020120][ T4038] RIP: 0033:0x7f959452b15c [ 137.024524][ T4038] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 137.044296][ T4038] RSP: 002b:00007f95931a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.052759][ T4038] RAX: ffffffffffffffda RBX: 00007f95946e3f80 RCX: 00007f959452b15c [ 137.060723][ T4038] RDX: 000000000000000f RSI: 00007f95931a50a0 RDI: 0000000000000004 [ 137.068531][ T4038] RBP: 00007f95931a5090 R08: 0000000000000000 R09: 0000000000000000 [ 137.076345][ T4038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.084252][ T4038] R13: 0000000000000000 R14: 00007f95946e3f80 R15: 00007fff34558be8 [ 137.092054][ T4038] [ 137.647563][ T4053] FAULT_INJECTION: forcing a failure. [ 137.647563][ T4053] name failslab, interval 1, probability 0, space 0, times 0 [ 137.687705][ T4053] CPU: 1 PID: 4053 Comm: syz.5.1420 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 137.698092][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.708168][ T4053] Call Trace: [ 137.711280][ T4053] [ 137.714073][ T4053] dump_stack_lvl+0x151/0x1c0 [ 137.718569][ T4053] ? io_uring_drop_tctx_refs+0x190/0x190 [ 137.724040][ T4053] dump_stack+0x15/0x20 [ 137.728033][ T4053] should_fail+0x3c6/0x510 [ 137.732283][ T4053] __should_failslab+0xa4/0xe0 [ 137.736883][ T4053] ? hashtab_duplicate+0x180/0x540 [ 137.741828][ T4053] should_failslab+0x9/0x20 [ 137.746168][ T4053] slab_pre_alloc_hook+0x37/0xd0 [ 137.750941][ T4053] ? hashtab_duplicate+0x180/0x540 [ 137.755890][ T4053] kmem_cache_alloc+0x44/0x200 [ 137.760621][ T4053] hashtab_duplicate+0x180/0x540 [ 137.765467][ T4053] ? cond_policydb_destroy_dup+0x40/0x40 [ 137.770928][ T4053] ? cond_insertf+0x340/0x340 [ 137.775454][ T4053] cond_policydb_dup+0x13a/0xdb0 [ 137.780221][ T4053] ? __kasan_kmalloc+0x9/0x10 [ 137.784737][ T4053] security_set_bools+0xf2/0x5f0 [ 137.789593][ T4053] ? skip_atoi+0xd0/0xd0 [ 137.793674][ T4053] sel_commit_bools_write+0x38a/0x4f0 [ 137.798880][ T4053] ? sel_read_policyvers+0xf0/0xf0 [ 137.803829][ T4053] ? security_file_permission+0x86/0xb0 [ 137.809209][ T4053] do_iter_write+0x3c0/0x760 [ 137.813636][ T4053] vfs_writev+0x2ac/0x560 [ 137.817887][ T4053] ? do_writev+0x340/0x340 [ 137.822152][ T4053] ? wait_for_completion_killable_timeout+0x10/0x10 [ 137.828566][ T4053] ? __fdget_pos+0x2e7/0x3a0 [ 137.832992][ T4053] ? do_writev+0x7b/0x340 [ 137.837156][ T4053] do_writev+0x1aa/0x340 [ 137.841263][ T4053] ? do_readv+0x460/0x460 [ 137.845573][ T4053] ? debug_smp_processor_id+0x17/0x20 [ 137.850989][ T4053] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 137.857063][ T4053] __x64_sys_writev+0x7d/0x90 [ 137.861591][ T4053] x64_sys_call+0xb4/0x9a0 [ 137.865910][ T4053] do_syscall_64+0x3b/0xb0 [ 137.870163][ T4053] ? clear_bhb_loop+0x35/0x90 [ 137.874687][ T4053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.880410][ T4053] RIP: 0033:0x7f7daeb58719 [ 137.884885][ T4053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.904404][ T4053] RSP: 002b:00007f7dad7d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 137.912647][ T4053] RAX: ffffffffffffffda RBX: 00007f7daed0ff80 RCX: 00007f7daeb58719 [ 137.920587][ T4053] RDX: 0000000000000001 RSI: 00000000200025c0 RDI: 0000000000000003 [ 137.928514][ T4053] RBP: 00007f7dad7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 137.936471][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.944284][ T4053] R13: 0000000000000000 R14: 00007f7daed0ff80 R15: 00007ffd8cfdce48 [ 137.952636][ T4053] [ 137.972667][ T4061] syz.2.1424 uses obsolete (PF_INET,SOCK_PACKET) [ 138.350586][ T4088] FAULT_INJECTION: forcing a failure. [ 138.350586][ T4088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.364197][ T4088] CPU: 0 PID: 4088 Comm: syz.2.1436 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 138.374267][ T4088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.384489][ T4088] Call Trace: [ 138.387613][ T4088] [ 138.390388][ T4088] dump_stack_lvl+0x151/0x1c0 [ 138.395022][ T4088] ? io_uring_drop_tctx_refs+0x190/0x190 [ 138.400460][ T4088] ? __kasan_check_read+0x11/0x20 [ 138.405405][ T4088] dump_stack+0x15/0x20 [ 138.409395][ T4088] should_fail+0x3c6/0x510 [ 138.413650][ T4088] should_fail_usercopy+0x1a/0x20 [ 138.418682][ T4088] copy_page_from_iter_atomic+0x423/0x10e0 [ 138.424329][ T4088] ? pipe_zero+0x4e0/0x4e0 [ 138.428668][ T4088] generic_perform_write+0x337/0x5a0 [ 138.433790][ T4088] ? grab_cache_page_write_begin+0xa0/0xa0 [ 138.439424][ T4088] ? file_remove_privs+0x610/0x610 [ 138.444374][ T4088] ? rwsem_write_trylock+0x153/0x340 [ 138.449524][ T4088] ? rwsem_mark_wake+0x770/0x770 [ 138.454268][ T4088] __generic_file_write_iter+0x25b/0x4b0 [ 138.459737][ T4088] generic_file_write_iter+0xaf/0x1c0 [ 138.464940][ T4088] vfs_write+0xd5d/0x1110 [ 138.469140][ T4088] ? file_end_write+0x1c0/0x1c0 [ 138.473800][ T4088] ? __fdget_pos+0x209/0x3a0 [ 138.478219][ T4088] ? ksys_write+0x77/0x2c0 [ 138.482484][ T4088] ksys_write+0x199/0x2c0 [ 138.486642][ T4088] ? exc_page_fault+0x47a/0x7f0 [ 138.491330][ T4088] ? __ia32_sys_read+0x90/0x90 [ 138.496195][ T4088] __x64_sys_write+0x7b/0x90 [ 138.500731][ T4088] x64_sys_call+0x2f/0x9a0 [ 138.504985][ T4088] do_syscall_64+0x3b/0xb0 [ 138.509261][ T4088] ? clear_bhb_loop+0x35/0x90 [ 138.513844][ T4088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.519564][ T4088] RIP: 0033:0x7fdb77e6d1ff [ 138.523821][ T4088] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 138.543351][ T4088] RSP: 002b:00007fdb76ae6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 138.543382][ T4088] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fdb77e6d1ff [ 138.543398][ T4088] RDX: 0000000000040000 RSI: 00007fdb6e6c7000 RDI: 0000000000000004 [ 138.567313][ T4088] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000051d [ 138.567337][ T4088] R10: 0000000020000a82 R11: 0000000000000293 R12: 0000000000000004 [ 138.567351][ T4088] R13: 00007fdb76ae6ef0 R14: 00007fdb76ae6eb0 R15: 00007fdb6e6c7000 [ 138.567372][ T4088] [ 138.907060][ T4115] FAULT_INJECTION: forcing a failure. [ 138.907060][ T4115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.920123][ T4115] CPU: 1 PID: 4115 Comm: syz.2.1447 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 138.929999][ T4115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.939989][ T4115] Call Trace: [ 138.943196][ T4115] [ 138.945966][ T4115] dump_stack_lvl+0x151/0x1c0 [ 138.950481][ T4115] ? io_uring_drop_tctx_refs+0x190/0x190 [ 138.955951][ T4115] ? __kasan_check_read+0x11/0x20 [ 138.960906][ T4115] dump_stack+0x15/0x20 [ 138.964911][ T4115] should_fail+0x3c6/0x510 [ 138.969154][ T4115] should_fail_usercopy+0x1a/0x20 [ 138.974032][ T4115] copy_page_from_iter_atomic+0x423/0x10e0 [ 138.979649][ T4115] ? pipe_zero+0x4e0/0x4e0 [ 138.983904][ T4115] generic_perform_write+0x337/0x5a0 [ 138.989034][ T4115] ? grab_cache_page_write_begin+0xa0/0xa0 [ 138.994665][ T4115] ? file_remove_privs+0x610/0x610 [ 138.999623][ T4115] ? rwsem_write_trylock+0x153/0x340 [ 139.004742][ T4115] ? rwsem_mark_wake+0x770/0x770 [ 139.009603][ T4115] __generic_file_write_iter+0x25b/0x4b0 [ 139.015180][ T4115] generic_file_write_iter+0xaf/0x1c0 [ 139.020371][ T4115] vfs_write+0xd5d/0x1110 [ 139.024591][ T4115] ? file_end_write+0x1c0/0x1c0 [ 139.029378][ T4115] ? __fdget_pos+0x209/0x3a0 [ 139.033892][ T4115] ? ksys_write+0x77/0x2c0 [ 139.038143][ T4115] ksys_write+0x199/0x2c0 [ 139.042311][ T4115] ? exc_page_fault+0x47a/0x7f0 [ 139.047002][ T4115] ? __ia32_sys_read+0x90/0x90 [ 139.051594][ T4115] __x64_sys_write+0x7b/0x90 [ 139.056019][ T4115] x64_sys_call+0x2f/0x9a0 [ 139.060274][ T4115] do_syscall_64+0x3b/0xb0 [ 139.064719][ T4115] ? clear_bhb_loop+0x35/0x90 [ 139.069321][ T4115] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.075048][ T4115] RIP: 0033:0x7fdb77e6d1ff [ 139.079301][ T4115] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 139.099092][ T4115] RSP: 002b:00007fdb76ae6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 139.107336][ T4115] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fdb77e6d1ff [ 139.115144][ T4115] RDX: 0000000000040000 RSI: 00007fdb6e6c7000 RDI: 0000000000000004 [ 139.123045][ T4115] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000004ad [ 139.130855][ T4115] R10: 0000000020001b02 R11: 0000000000000293 R12: 0000000000000004 [ 139.138846][ T4115] R13: 00007fdb76ae6ef0 R14: 00007fdb76ae6eb0 R15: 00007fdb6e6c7000 [ 139.146677][ T4115] [ 139.759833][ T395] device bridge_slave_1 left promiscuous mode [ 139.765945][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.775735][ T395] device bridge_slave_0 left promiscuous mode [ 139.781763][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.258384][ T30] kauditd_printk_skb: 664 callbacks suppressed [ 140.258405][ T30] audit: type=1400 audit(1731210933.122:30373): avc: denied { prog_load } for pid=4141 comm="syz.6.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.289846][ T30] audit: type=1400 audit(1731210933.142:30374): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 140.312764][ T30] audit: type=1400 audit(1731210933.152:30375): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 140.335986][ T30] audit: type=1400 audit(1731210933.152:30376): avc: denied { name_bind } for pid=4143 comm="syz.1.1458" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 140.357652][ T30] audit: type=1400 audit(1731210933.152:30377): avc: denied { map_create } for pid=4141 comm="syz.6.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.377113][ T30] audit: type=1400 audit(1731210933.152:30378): avc: denied { prog_load } for pid=4141 comm="syz.6.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.396249][ T30] audit: type=1400 audit(1731210933.152:30379): avc: denied { execmem } for pid=4140 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 140.396287][ T30] audit: type=1400 audit(1731210933.162:30380): avc: denied { module_request } for pid=4143 comm="syz.1.1458" kmod="tcp_bbr" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 140.396313][ T30] audit: type=1400 audit(1731210933.162:30381): avc: denied { prog_load } for pid=4141 comm="syz.6.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.396342][ T30] audit: type=1400 audit(1731210933.162:30382): avc: denied { prog_load } for pid=4141 comm="syz.6.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 141.665876][ T4157] FAULT_INJECTION: forcing a failure. [ 141.665876][ T4157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.682131][ T4157] CPU: 0 PID: 4157 Comm: syz.6.1460 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 141.692201][ T4157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.702224][ T4157] Call Trace: [ 141.705357][ T4157] [ 141.708124][ T4157] dump_stack_lvl+0x151/0x1c0 [ 141.712906][ T4157] ? io_uring_drop_tctx_refs+0x190/0x190 [ 141.718366][ T4157] ? unix_show_fdinfo+0xa0/0xa0 [ 141.723087][ T4157] dump_stack+0x15/0x20 [ 141.727043][ T4157] should_fail+0x3c6/0x510 [ 141.731308][ T4157] should_fail_usercopy+0x1a/0x20 [ 141.736248][ T4157] _copy_from_user+0x20/0xd0 [ 141.740863][ T4157] __copy_msghdr_from_user+0xaf/0x7c0 [ 141.746139][ T4157] ? __ia32_sys_shutdown+0x70/0x70 [ 141.751083][ T4157] ? kmem_cache_free+0x116/0x2e0 [ 141.755880][ T4157] ? import_iovec+0xe5/0x120 [ 141.760299][ T4157] ___sys_sendmsg+0x166/0x2e0 [ 141.764801][ T4157] ? __sys_sendmsg+0x260/0x260 [ 141.769495][ T4157] ? __sys_sendmmsg+0x2ca/0x530 [ 141.774294][ T4157] __sys_sendmmsg+0x2bf/0x530 [ 141.778800][ T4157] ? __ia32_sys_sendmsg+0x90/0x90 [ 141.783752][ T4157] ? mutex_unlock+0xb2/0x260 [ 141.788169][ T4157] ? __kasan_check_write+0x14/0x20 [ 141.793289][ T4157] ? __ia32_sys_read+0x90/0x90 [ 141.797975][ T4157] ? debug_smp_processor_id+0x17/0x20 [ 141.803280][ T4157] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 141.809179][ T4157] __x64_sys_sendmmsg+0xa0/0xb0 [ 141.813873][ T4157] x64_sys_call+0x81d/0x9a0 [ 141.818208][ T4157] do_syscall_64+0x3b/0xb0 [ 141.822457][ T4157] ? clear_bhb_loop+0x35/0x90 [ 141.826970][ T4157] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.832697][ T4157] RIP: 0033:0x7f959452c719 [ 141.836954][ T4157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.856655][ T4157] RSP: 002b:00007f9593184038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.865335][ T4157] RAX: ffffffffffffffda RBX: 00007f95946e4058 RCX: 00007f959452c719 [ 141.873235][ T4157] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000006 [ 141.881046][ T4157] RBP: 00007f9593184090 R08: 0000000000000000 R09: 0000000000000000 [ 141.888863][ T4157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.896668][ T4157] R13: 0000000000000000 R14: 00007f95946e4058 R15: 00007fff34558be8 [ 141.904490][ T4157] [ 145.473853][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 145.473870][ T30] audit: type=1400 audit(1731210938.342:30550): avc: denied { execmem } for pid=4190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 145.507973][ T30] audit: type=1400 audit(1731210938.362:30551): avc: denied { prog_load } for pid=4193 comm="syz.1.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.529686][ T4192] FAULT_INJECTION: forcing a failure. [ 145.529686][ T4192] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.542979][ T4192] CPU: 0 PID: 4192 Comm: syz.6.1473 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 145.549248][ T30] audit: type=1400 audit(1731210938.362:30552): avc: denied { map_create } for pid=4193 comm="syz.1.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.552983][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.572228][ T30] audit: type=1400 audit(1731210938.362:30553): avc: denied { map_create } for pid=4193 comm="syz.1.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.582035][ T4192] Call Trace: [ 145.582044][ T4192] [ 145.582053][ T4192] dump_stack_lvl+0x151/0x1c0 [ 145.601285][ T30] audit: type=1400 audit(1731210938.362:30554): avc: denied { prog_load } for pid=4193 comm="syz.1.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.604337][ T4192] ? io_uring_drop_tctx_refs+0x190/0x190 [ 145.607122][ T30] audit: type=1400 audit(1731210938.362:30555): avc: denied { create } for pid=4193 comm="syz.1.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=0 [ 145.611636][ T4192] ? __stack_depot_save+0x34/0x470 [ 145.611663][ T4192] dump_stack+0x15/0x20 [ 145.630746][ T30] audit: type=1400 audit(1731210938.362:30556): avc: denied { read write } for pid=4193 comm="syz.1.1474" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 145.636104][ T4192] should_fail+0x3c6/0x510 [ 145.656590][ T30] audit: type=1400 audit(1731210938.382:30557): avc: denied { prog_load } for pid=4194 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.661446][ T4192] should_fail_alloc_page+0x5a/0x80 [ 145.665446][ T30] audit: type=1400 audit(1731210938.382:30558): avc: denied { map_create } for pid=4194 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.689491][ T4192] prepare_alloc_pages+0x15c/0x700 [ 145.689520][ T4192] ? __alloc_pages_bulk+0xe40/0xe40 [ 145.693797][ T30] audit: type=1400 audit(1731210938.382:30559): avc: denied { prog_load } for pid=4194 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 145.712667][ T4192] __alloc_pages+0x18c/0x8f0 [ 145.712693][ T4192] ? prep_new_page+0x110/0x110 [ 145.774653][ T4192] ? __kasan_check_read+0x11/0x20 [ 145.780058][ T4192] ? __vm_enough_memory+0x119/0x2f0 [ 145.785083][ T4192] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 145.790552][ T4192] ? shmem_swapin_page+0x1680/0x1680 [ 145.795799][ T4192] ? xas_start+0x32c/0x3f0 [ 145.800102][ T4192] ? xas_load+0x2b7/0x2d0 [ 145.804358][ T4192] ? pagecache_get_page+0xdc2/0xeb0 [ 145.809398][ T4192] ? page_cache_prev_miss+0x410/0x410 [ 145.814690][ T4192] ? _raw_spin_lock_irqsave+0x210/0x210 [ 145.820256][ T4192] ? lru_cache_add+0x279/0x540 [ 145.824870][ T4192] shmem_getpage_gfp+0x1388/0x23c0 [ 145.829840][ T4192] ? shmem_getpage+0xa0/0xa0 [ 145.834249][ T4192] ? fault_in_safe_writeable+0x240/0x240 [ 145.834281][ T4192] shmem_write_begin+0xca/0x1b0 [ 145.844732][ T4192] generic_perform_write+0x2bc/0x5a0 [ 145.844774][ T4192] ? grab_cache_page_write_begin+0xa0/0xa0 [ 145.844798][ T4192] ? file_remove_privs+0x610/0x610 [ 145.860437][ T4192] ? rwsem_write_trylock+0x153/0x340 [ 145.865817][ T4192] ? rwsem_mark_wake+0x770/0x770 [ 145.865850][ T4192] __generic_file_write_iter+0x25b/0x4b0 [ 145.876150][ T4192] generic_file_write_iter+0xaf/0x1c0 [ 145.876187][ T4192] vfs_write+0xd5d/0x1110 [ 145.876212][ T4192] ? file_end_write+0x1c0/0x1c0 [ 145.890323][ T4192] ? __fdget_pos+0x209/0x3a0 [ 145.894733][ T4192] ? ksys_write+0x77/0x2c0 [ 145.894763][ T4192] ksys_write+0x199/0x2c0 [ 145.903252][ T4192] ? exc_page_fault+0x47a/0x7f0 [ 145.903290][ T4192] ? __ia32_sys_read+0x90/0x90 [ 145.903315][ T4192] __x64_sys_write+0x7b/0x90 [ 145.917234][ T4192] x64_sys_call+0x2f/0x9a0 [ 145.917262][ T4192] do_syscall_64+0x3b/0xb0 [ 145.925742][ T4192] ? clear_bhb_loop+0x35/0x90 [ 145.925780][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.925802][ T4192] RIP: 0033:0x7f959452b1ff [ 145.940400][ T4192] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 145.940427][ T4192] RSP: 002b:00007f95931a4df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 145.968096][ T4192] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f959452b1ff [ 145.968125][ T4192] RDX: 0000000000040000 RSI: 00007f958ad85000 RDI: 0000000000000004 [ 145.968141][ T4192] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000002fb [ 145.968155][ T4192] R10: 00000000000003ce R11: 0000000000000293 R12: 0000000000000004 [ 145.999420][ T4192] R13: 00007f95931a4ef0 R14: 00007f95931a4eb0 R15: 00007f958ad85000 [ 145.999444][ T4192] [ 146.728000][ T4202] FAULT_INJECTION: forcing a failure. [ 146.728000][ T4202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.740923][ T4202] CPU: 1 PID: 4202 Comm: syz.6.1477 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 146.751391][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.761393][ T4202] Call Trace: [ 146.764506][ T4202] [ 146.767282][ T4202] dump_stack_lvl+0x151/0x1c0 [ 146.771880][ T4202] ? io_uring_drop_tctx_refs+0x190/0x190 [ 146.777368][ T4202] dump_stack+0x15/0x20 [ 146.781348][ T4202] should_fail+0x3c6/0x510 [ 146.785595][ T4202] should_fail_usercopy+0x1a/0x20 [ 146.790454][ T4202] _copy_from_iter+0x22f/0xdc0 [ 146.795069][ T4202] ? copy_mc_pipe_to_iter+0x760/0x760 [ 146.797803][ T4213] FAULT_INJECTION: forcing a failure. [ 146.797803][ T4213] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.800261][ T4202] ? __kasan_kmalloc+0x9/0x10 [ 146.800286][ T4202] ? __kmalloc_track_caller+0x139/0x260 [ 146.800312][ T4202] ? __check_object_size+0x2ec/0x3d0 [ 146.828479][ T4202] netlink_sendmsg+0x8b9/0xd20 [ 146.833070][ T4202] ? netlink_getsockopt+0x560/0x560 [ 146.838104][ T4202] ? kmem_cache_free+0x116/0x2e0 [ 146.842881][ T4202] ? security_socket_sendmsg+0x82/0xb0 [ 146.848217][ T4202] ? netlink_getsockopt+0x560/0x560 [ 146.853297][ T4202] ____sys_sendmsg+0x59e/0x8f0 [ 146.857898][ T4202] ? __sys_sendmsg_sock+0x40/0x40 [ 146.862759][ T4202] ? import_iovec+0xe5/0x120 [ 146.867180][ T4202] ___sys_sendmsg+0x252/0x2e0 [ 146.871700][ T4202] ? __sys_sendmsg+0x260/0x260 [ 146.876597][ T4202] ? __fdget+0x1bc/0x240 [ 146.880666][ T4202] __se_sys_sendmsg+0x19a/0x260 [ 146.885366][ T4202] ? __x64_sys_sendmsg+0x90/0x90 [ 146.890143][ T4202] ? ksys_write+0x260/0x2c0 [ 146.894598][ T4202] ? debug_smp_processor_id+0x17/0x20 [ 146.899774][ T4202] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 146.905766][ T4202] __x64_sys_sendmsg+0x7b/0x90 [ 146.910361][ T4202] x64_sys_call+0x16a/0x9a0 [ 146.914702][ T4202] do_syscall_64+0x3b/0xb0 [ 146.918949][ T4202] ? clear_bhb_loop+0x35/0x90 [ 146.923464][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.923486][ T4202] RIP: 0033:0x7f959452c719 [ 146.923502][ T4202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.923519][ T4202] RSP: 002b:00007f95931a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.961749][ T4202] RAX: ffffffffffffffda RBX: 00007f95946e3f80 RCX: 00007f959452c719 [ 146.969503][ T4202] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 146.977508][ T4202] RBP: 00007f95931a5090 R08: 0000000000000000 R09: 0000000000000000 [ 146.985305][ T4202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.993107][ T4202] R13: 0000000000000000 R14: 00007f95946e3f80 R15: 00007fff34558be8 [ 147.000938][ T4202] [ 147.012979][ T4213] CPU: 0 PID: 4213 Comm: syz.3.1479 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 147.023251][ T4213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.023274][ T4213] Call Trace: [ 147.023282][ T4213] [ 147.023290][ T4213] dump_stack_lvl+0x151/0x1c0 [ 147.044036][ T4213] ? io_uring_drop_tctx_refs+0x190/0x190 [ 147.049753][ T4213] ? __stack_depot_save+0x34/0x470 [ 147.054954][ T4213] dump_stack+0x15/0x20 [ 147.054994][ T4213] should_fail+0x3c6/0x510 [ 147.055017][ T4213] should_fail_alloc_page+0x5a/0x80 [ 147.068968][ T4213] prepare_alloc_pages+0x15c/0x700 [ 147.069011][ T4213] ? __alloc_pages_bulk+0xe40/0xe40 [ 147.069034][ T4213] ? refill_stock+0xb2/0x2c0 [ 147.084229][ T4213] __alloc_pages+0x18c/0x8f0 [ 147.084271][ T4213] ? prep_new_page+0x110/0x110 [ 147.093758][ T4213] ? __kasan_check_read+0x11/0x20 [ 147.093799][ T4213] ? __vm_enough_memory+0x119/0x2f0 [ 147.093824][ T4213] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 147.110073][ T4213] ? shmem_swapin_page+0x1680/0x1680 [ 147.110111][ T4213] ? xas_start+0x32c/0x3f0 [ 147.110133][ T4213] ? xas_load+0x2b7/0x2d0 [ 147.123839][ T4213] ? pagecache_get_page+0xdc2/0xeb0 [ 147.123881][ T4213] ? page_cache_prev_miss+0x410/0x410 [ 147.123903][ T4213] ? _raw_spin_lock_irqsave+0x210/0x210 [ 147.123929][ T4213] ? lru_cache_add+0x279/0x540 [ 147.144211][ T4213] shmem_getpage_gfp+0x1388/0x23c0 [ 147.144252][ T4213] ? shmem_getpage+0xa0/0xa0 [ 147.144272][ T4213] ? fault_in_safe_writeable+0x240/0x240 [ 147.144295][ T4213] shmem_write_begin+0xca/0x1b0 [ 147.163920][ T4213] generic_perform_write+0x2bc/0x5a0 [ 147.163960][ T4213] ? grab_cache_page_write_begin+0xa0/0xa0 [ 147.174767][ T4213] ? file_remove_privs+0x610/0x610 [ 147.174802][ T4213] ? rwsem_write_trylock+0x153/0x340 [ 147.184822][ T4213] ? rwsem_mark_wake+0x770/0x770 [ 147.184854][ T4213] __generic_file_write_iter+0x25b/0x4b0 [ 147.195067][ T4213] generic_file_write_iter+0xaf/0x1c0 [ 147.195098][ T4213] vfs_write+0xd5d/0x1110 [ 147.204448][ T4213] ? file_end_write+0x1c0/0x1c0 [ 147.209250][ T4213] ? __fdget_pos+0x209/0x3a0 [ 147.213667][ T4213] ? ksys_write+0x77/0x2c0 [ 147.213695][ T4213] ksys_write+0x199/0x2c0 [ 147.213713][ T4213] ? exc_page_fault+0x47a/0x7f0 [ 147.226950][ T4213] ? __ia32_sys_read+0x90/0x90 [ 147.226981][ T4213] __x64_sys_write+0x7b/0x90 [ 147.236094][ T4213] x64_sys_call+0x2f/0x9a0 [ 147.236130][ T4213] do_syscall_64+0x3b/0xb0 [ 147.236151][ T4213] ? clear_bhb_loop+0x35/0x90 [ 147.249187][ T4213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.249217][ T4213] RIP: 0033:0x7f2e3f9371ff [ 147.249236][ T4213] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 147.249254][ T4213] RSP: 002b:00007f2e3e58fdf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 147.249276][ T4213] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f2e3f9371ff [ 147.249292][ T4213] RDX: 0000000000040000 RSI: 00007f2e36170000 RDI: 0000000000000007 [ 147.249306][ T4213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000527 [ 147.249317][ T4213] R10: 00000000000007c2 R11: 0000000000000293 R12: 0000000000000007 [ 147.249329][ T4213] R13: 00007f2e3e58fef0 R14: 00007f2e3e58feb0 R15: 00007f2e36170000 [ 147.249346][ T4213] [ 148.029373][ T4219] FAULT_INJECTION: forcing a failure. [ 148.029373][ T4219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.043297][ T4218] FAULT_INJECTION: forcing a failure. [ 148.043297][ T4218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.056630][ T4218] CPU: 0 PID: 4218 Comm: syz.3.1483 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 148.066632][ T4218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.076528][ T4218] Call Trace: [ 148.079658][ T4218] [ 148.082433][ T4218] dump_stack_lvl+0x151/0x1c0 [ 148.086946][ T4218] ? io_uring_drop_tctx_refs+0x190/0x190 [ 148.093283][ T4218] ? __kasan_check_read+0x11/0x20 [ 148.098137][ T4218] dump_stack+0x15/0x20 [ 148.102133][ T4218] should_fail+0x3c6/0x510 [ 148.106384][ T4218] should_fail_usercopy+0x1a/0x20 [ 148.111347][ T4218] copy_page_from_iter_atomic+0x423/0x10e0 [ 148.117006][ T4218] ? pipe_zero+0x4e0/0x4e0 [ 148.121339][ T4218] generic_perform_write+0x337/0x5a0 [ 148.127060][ T4218] ? grab_cache_page_write_begin+0xa0/0xa0 [ 148.132781][ T4218] ? file_remove_privs+0x610/0x610 [ 148.137739][ T4218] ? rwsem_write_trylock+0x153/0x340 [ 148.143040][ T4218] ? rwsem_mark_wake+0x770/0x770 [ 148.147809][ T4218] __generic_file_write_iter+0x25b/0x4b0 [ 148.153278][ T4218] generic_file_write_iter+0xaf/0x1c0 [ 148.158486][ T4218] vfs_write+0xd5d/0x1110 [ 148.162665][ T4218] ? putname+0xfa/0x150 [ 148.166648][ T4218] ? file_end_write+0x1c0/0x1c0 [ 148.171328][ T4218] ? mutex_lock+0xb6/0x1e0 [ 148.175582][ T4218] ? wait_for_completion_killable_timeout+0x10/0x10 [ 148.182180][ T4218] ? __fdget_pos+0x2e7/0x3a0 [ 148.186613][ T4218] ? ksys_write+0x77/0x2c0 [ 148.190947][ T4218] ksys_write+0x199/0x2c0 [ 148.195199][ T4218] ? __ia32_sys_read+0x90/0x90 [ 148.199795][ T4218] ? debug_smp_processor_id+0x17/0x20 [ 148.205004][ T4218] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 148.210996][ T4218] __x64_sys_write+0x7b/0x90 [ 148.215530][ T4218] x64_sys_call+0x2f/0x9a0 [ 148.219763][ T4218] do_syscall_64+0x3b/0xb0 [ 148.224014][ T4218] ? clear_bhb_loop+0x35/0x90 [ 148.228528][ T4218] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.234350][ T4218] RIP: 0033:0x7f2e3f938719 [ 148.238687][ T4218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.258132][ T4218] RSP: 002b:00007f2e3e5b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.266374][ T4218] RAX: ffffffffffffffda RBX: 00007f2e3faeff80 RCX: 00007f2e3f938719 [ 148.274360][ T4218] RDX: 0000000000043451 RSI: 0000000020000200 RDI: 0000000000000005 [ 148.282171][ T4218] RBP: 00007f2e3e5b1090 R08: 0000000000000000 R09: 0000000000000000 [ 148.289978][ T4218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.297791][ T4218] R13: 0000000000000000 R14: 00007f2e3faeff80 R15: 00007fff2f0ecb98 [ 148.305612][ T4218] [ 148.315774][ T4219] CPU: 1 PID: 4219 Comm: syz.6.1481 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 148.325875][ T4219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.335944][ T4219] Call Trace: [ 148.335958][ T4219] [ 148.335966][ T4219] dump_stack_lvl+0x151/0x1c0 [ 148.346443][ T4219] ? io_uring_drop_tctx_refs+0x190/0x190 [ 148.352218][ T4219] dump_stack+0x15/0x20 [ 148.356205][ T4219] should_fail+0x3c6/0x510 [ 148.360457][ T4219] should_fail_usercopy+0x1a/0x20 [ 148.365452][ T4219] _copy_from_user+0x20/0xd0 [ 148.369986][ T4219] __se_sys_mount+0x179/0x3b0 [ 148.370027][ T4219] ? __x64_sys_mount+0xd0/0xd0 [ 148.379215][ T4219] ? debug_smp_processor_id+0x17/0x20 [ 148.384417][ T4219] __x64_sys_mount+0xbf/0xd0 [ 148.388842][ T4219] x64_sys_call+0x49d/0x9a0 [ 148.388873][ T4219] do_syscall_64+0x3b/0xb0 [ 148.388892][ T4219] ? clear_bhb_loop+0x35/0x90 [ 148.401952][ T4219] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.407677][ T4219] RIP: 0033:0x7f959452c719 [ 148.411933][ T4219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.431459][ T4219] RSP: 002b:00007f95931a5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.439697][ T4219] RAX: ffffffffffffffda RBX: 00007f95946e3f80 RCX: 00007f959452c719 [ 148.447774][ T4219] RDX: 0000000020000400 RSI: 0000000020000040 RDI: 0000000000000000 [ 148.447801][ T4219] RBP: 00007f95931a5090 R08: 00000000200001c0 R09: 0000000000000000 [ 148.463506][ T4219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.471539][ T4219] R13: 0000000000000000 R14: 00007f95946e3f80 R15: 00007fff34558be8 [ 148.479357][ T4219] [ 150.485387][ T30] kauditd_printk_skb: 442 callbacks suppressed [ 150.485405][ T30] audit: type=1400 audit(1731210943.362:31002): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 150.514585][ T30] audit: type=1400 audit(1731210943.382:31003): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 150.536523][ T30] audit: type=1400 audit(1731210943.382:31004): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 150.558802][ T30] audit: type=1400 audit(1731210943.382:31005): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 150.580588][ T30] audit: type=1400 audit(1731210943.432:31006): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 150.603148][ T30] audit: type=1400 audit(1731210943.472:31007): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 150.625473][ T30] audit: type=1400 audit(1731210943.492:31008): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 150.647800][ T30] audit: type=1400 audit(1731210943.522:31009): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 150.670132][ T30] audit: type=1400 audit(1731210943.552:31010): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 150.692593][ T30] audit: type=1400 audit(1731210943.572:31011): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.492838][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 155.492855][ T30] audit: type=1400 audit(1731210948.372:31107): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.521076][ T30] audit: type=1400 audit(1731210948.402:31108): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.543238][ T30] audit: type=1400 audit(1731210948.412:31109): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.565860][ T30] audit: type=1400 audit(1731210948.432:31110): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.588324][ T30] audit: type=1400 audit(1731210948.462:31111): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.610669][ T30] audit: type=1400 audit(1731210948.492:31112): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.633157][ T30] audit: type=1400 audit(1731210948.502:31113): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.655821][ T30] audit: type=1400 audit(1731210948.522:31114): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.677966][ T30] audit: type=1400 audit(1731210948.542:31115): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 155.700148][ T30] audit: type=1400 audit(1731210948.582:31116): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 158.063242][ T4301] FAULT_INJECTION: forcing a failure. [ 158.063242][ T4301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.099224][ T4301] CPU: 0 PID: 4301 Comm: syz.5.1508 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 158.109221][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.119475][ T4301] Call Trace: [ 158.122594][ T4301] [ 158.125464][ T4301] dump_stack_lvl+0x151/0x1c0 [ 158.130059][ T4301] ? io_uring_drop_tctx_refs+0x190/0x190 [ 158.135525][ T4301] dump_stack+0x15/0x20 [ 158.139519][ T4301] should_fail+0x3c6/0x510 [ 158.143987][ T4301] should_fail_usercopy+0x1a/0x20 [ 158.149014][ T4301] _copy_from_iter+0x22f/0xdc0 [ 158.153617][ T4301] ? copy_mc_pipe_to_iter+0x760/0x760 [ 158.158908][ T4301] ? __kasan_kmalloc+0x9/0x10 [ 158.163413][ T4301] ? __kmalloc_track_caller+0x139/0x260 [ 158.169068][ T4301] ? __check_object_size+0x2ec/0x3d0 [ 158.174285][ T4301] netlink_sendmsg+0x8b9/0xd20 [ 158.178887][ T4301] ? netlink_getsockopt+0x560/0x560 [ 158.183916][ T4301] ? kmem_cache_free+0x116/0x2e0 [ 158.188694][ T4301] ? security_socket_sendmsg+0x82/0xb0 [ 158.193987][ T4301] ? netlink_getsockopt+0x560/0x560 [ 158.199024][ T4301] ____sys_sendmsg+0x59e/0x8f0 [ 158.203623][ T4301] ? __sys_sendmsg_sock+0x40/0x40 [ 158.208568][ T4301] ? import_iovec+0xe5/0x120 [ 158.212992][ T4301] ___sys_sendmsg+0x252/0x2e0 [ 158.217507][ T4301] ? __sys_sendmsg+0x260/0x260 [ 158.222202][ T4301] ? __fdget+0x1bc/0x240 [ 158.226276][ T4301] __se_sys_sendmsg+0x19a/0x260 [ 158.230965][ T4301] ? __x64_sys_sendmsg+0x90/0x90 [ 158.235734][ T4301] ? ksys_write+0x260/0x2c0 [ 158.240076][ T4301] ? debug_smp_processor_id+0x17/0x20 [ 158.245282][ T4301] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 158.251272][ T4301] __x64_sys_sendmsg+0x7b/0x90 [ 158.255981][ T4301] x64_sys_call+0x16a/0x9a0 [ 158.260423][ T4301] do_syscall_64+0x3b/0xb0 [ 158.264677][ T4301] ? clear_bhb_loop+0x35/0x90 [ 158.269199][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.274916][ T4301] RIP: 0033:0x7f7daeb58719 [ 158.279249][ T4301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.298701][ T4301] RSP: 002b:00007f7dad7b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.307197][ T4301] RAX: ffffffffffffffda RBX: 00007f7daed10058 RCX: 00007f7daeb58719 [ 158.315099][ T4301] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 158.322993][ T4301] RBP: 00007f7dad7b0090 R08: 0000000000000000 R09: 0000000000000000 [ 158.330803][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.338624][ T4301] R13: 0000000000000001 R14: 00007f7daed10058 R15: 00007ffd8cfdce48 [ 158.346429][ T4301] [ 160.039002][ T4311] syz.5.1511 (4311): /proc/4310/oom_adj is deprecated, please use /proc/4310/oom_score_adj instead. [ 160.083516][ T380] bridge0: port 3(syz_tun) entered disabled state [ 160.130305][ T380] device syz_tun left promiscuous mode [ 160.135665][ T380] bridge0: port 3(syz_tun) entered disabled state [ 160.185614][ T4314] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 160.197410][ T4314] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 160.205655][ T4314] CPU: 1 PID: 4314 Comm: syz.1.1512 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 160.215932][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.225926][ T4314] RIP: 0010:__rb_erase_color+0x10e/0xa60 [ 160.231506][ T4314] Code: 89 ff e8 c5 cf 2a ff 4c 8b 6d d0 4d 89 2f 4c 89 eb 48 83 cb 01 4c 8b 7d c0 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 94 cf 2a ff 49 89 1f 4c 89 eb 48 c1 [ 160.251069][ T4314] RSP: 0018:ffffc90000aaf580 EFLAGS: 00010246 [ 160.256970][ T4314] RAX: 0000000000000000 RBX: ffff88811d546871 RCX: dffffc0000000000 [ 160.264869][ T4314] RDX: ffffffff81a56990 RSI: ffff888109939aa8 RDI: ffff88811d546870 [ 160.272939][ T4314] RBP: ffffc90000aaf5e0 R08: ffffffff81a54a50 R09: ffffed1021327359 [ 160.281243][ T4314] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11023aa8c30 [ 160.289066][ T4314] R13: ffff88811d546870 R14: ffff88811d546180 R15: 0000000000000000 [ 160.297036][ T4314] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 160.305800][ T4314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.312227][ T4314] CR2: 000055e5556150f8 CR3: 000000011d535000 CR4: 00000000003506a0 [ 160.320260][ T4314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.328114][ T4314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.336007][ T4314] Call Trace: [ 160.339132][ T4314] [ 160.341907][ T4314] ? __die_body+0x62/0xb0 [ 160.346450][ T4314] ? die_addr+0x9f/0xd0 [ 160.350391][ T4314] ? exc_general_protection+0x311/0x4b0 [ 160.355918][ T4314] ? asm_exc_general_protection+0x27/0x30 [ 160.361464][ T4314] ? vma_interval_tree_remove+0xae0/0xba0 [ 160.367016][ T4314] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 160.373417][ T4314] ? __rb_erase_color+0x10e/0xa60 [ 160.378658][ T4314] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 160.384887][ T4314] vma_interval_tree_remove+0xb82/0xba0 [ 160.390267][ T4314] unlink_file_vma+0xd9/0xf0 [ 160.394688][ T4314] free_pgtables+0x13f/0x280 [ 160.399115][ T4314] exit_mmap+0x405/0x940 [ 160.403192][ T4314] ? exit_aio+0x25e/0x3c0 [ 160.407357][ T4314] ? vm_brk+0x30/0x30 [ 160.411175][ T4314] ? mutex_unlock+0xb2/0x260 [ 160.415605][ T4314] ? uprobe_clear_state+0x2cd/0x320 [ 160.420641][ T4314] __mmput+0x95/0x310 [ 160.424457][ T4314] mmput+0x5b/0x170 [ 160.428367][ T4314] do_exit+0xb9c/0x2ca0 [ 160.432442][ T4314] ? simple_acl_create+0x2c0/0x2c0 [ 160.437414][ T4314] ? put_task_struct+0x80/0x80 [ 160.441989][ T4314] ? ____kasan_slab_free+0x131/0x160 [ 160.447113][ T4314] do_group_exit+0x141/0x310 [ 160.451536][ T4314] get_signal+0x7a3/0x1630 [ 160.455792][ T4314] arch_do_signal_or_restart+0xbd/0x1680 [ 160.461262][ T4314] ? force_sig_fault+0x127/0x1d0 [ 160.466032][ T4314] ? get_sigframe_size+0x10/0x10 [ 160.470806][ T4314] ? page_fault_oops+0xa90/0xa90 [ 160.475599][ T4314] exit_to_user_mode_loop+0xa0/0xe0 [ 160.480614][ T4314] exit_to_user_mode_prepare+0x5a/0xa0 [ 160.486173][ T4314] irqentry_exit_to_user_mode+0x9/0x10 [ 160.491948][ T4314] irqentry_exit+0x12/0x40 [ 160.496187][ T4314] exc_page_fault+0x47a/0x7f0 [ 160.500704][ T4314] asm_exc_page_fault+0x27/0x30 [ 160.505476][ T4314] RIP: 0033:0x7f9c41cac721 [ 160.509992][ T4314] Code: Unable to access opcode bytes at RIP 0x7f9c41cac6f7. [ 160.517191][ T4314] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 160.523089][ T4314] RAX: 0000000000000000 RBX: 00007f9c41e63f80 RCX: 00007f9c41cac719 [ 160.530901][ T4314] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 160.538720][ T4314] RBP: 00007f9c41d1f39e R08: 0000000000000000 R09: 0000000000000000 [ 160.546532][ T4314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.554703][ T4314] R13: 0000000000000000 R14: 00007f9c41e63f80 R15: 00007ffc1927fa48 [ 160.562514][ T4314] [ 160.565370][ T4314] Modules linked in: [ 160.569862][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 160.569876][ T30] audit: type=1400 audit(1731210953.442:31274): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 160.579319][ T4314] ---[ end trace 1d1cdc461c91a830 ]--- [ 160.604136][ T30] audit: type=1400 audit(1731210953.482:31275): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 160.626000][ T4314] RIP: 0010:__rb_erase_color+0x10e/0xa60 [ 160.626037][ T4314] Code: 89 ff e8 c5 cf 2a ff 4c 8b 6d d0 4d 89 2f 4c 89 eb 48 83 cb 01 4c 8b 7d c0 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 94 cf 2a ff 49 89 1f 4c 89 eb 48 c1 [ 160.626057][ T4314] RSP: 0018:ffffc90000aaf580 EFLAGS: 00010246 [ 160.626077][ T4314] RAX: 0000000000000000 RBX: ffff88811d546871 RCX: dffffc0000000000 [ 160.626094][ T4314] RDX: ffffffff81a56990 RSI: ffff888109939aa8 RDI: ffff88811d546870 [ 160.626124][ T4314] RBP: ffffc90000aaf5e0 R08: ffffffff81a54a50 R09: ffffed1021327359 [ 160.626143][ T4314] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11023aa8c30 [ 160.626169][ T4314] R13: ffff88811d546870 R14: ffff88811d546180 R15: 0000000000000000 [ 160.626186][ T4314] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 160.626207][ T4314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.626235][ T4314] CR2: 00007f9595215d60 CR3: 000000010d3ce000 CR4: 00000000003506b0 [ 160.626255][ T4314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.626279][ T4314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.626307][ T4314] Kernel panic - not syncing: Fatal exception [ 160.626534][ T4314] Kernel Offset: disabled [ 160.745875][ T4314] Rebooting in 86400 seconds..